HOTSPOT (Drag and Drop is not supported)You are integrating SAP HANA and Azure Active Directory (Azure AD).For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: YesTo configure Azure AD single sign-on with SAP HANA, perform the following steps:1. In the Azure portal, on the SAP HANA application integration page, select Single sign-on.2. On the Select a Single sign-on method dialog, select SAML/WS-Fed mode to enable single sign-on.Box 2: NoBox 3: NoKey security considerations for deploying SAP on Azure
HOTSPOT (Drag and Drop is not supported)For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: YesThe SAP Azure Enhanced Monitoring Extension builds on top of the Azure Diagnostic extension, which stores its data in an Azure Storage account that you specify.Box 2: YesThe Set-AzVMAEMExtension cmdlet updates the configuration of a virtual machine to enable or update the support for monitoring for SAP systems that are installed on the virtual machine. The cmdlet installs the Azure Enhanced Monitoring (AEM) extension that collects the performance data and makes it discoverable for the SAP system.The -OSType specifies the OS. Either Windows or Linux.Box 3: Yes
DRAG DROP (Drag and Drop is not supported)You deploy an SAP environment on Azure.You need to grant an SAP administrator read-only access to the Azure subscription. The SAP administrator must be prevented from viewing network information.How should you configure the role-based access control (RBAC) role definition? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.Select and Place:
Box 1: "*/read""*/read" allows you to view everything in the subscription.You need to grant an SAP administrator read-only access to the Azure subscriptionBox 2: "Microsoft.Network/*/read"The SAP administrator must be prevented from viewing network information.
You plan to migrate an SAP environment to Azure.You need to design an Azure network infrastructure to meet the following requirements:Prevent end users from accessing the database servers.Isolate the application servers from the database servers.Ensure that end users can access the SAP systems over the Internet.Minimize the costs associated to the communications between the application servers and databaseservers.Which two actions should you include in the solution? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
Answer(s): A,C
You are deploying SAP Fiori to an SAP environment on Azure.You are configuring SAML 2.0 for an SAP Fiori instance named FPP that uses client 100 to authenticate to a Microsoft Entra tenant.Which provider name should you use to ensure that the Microsoft Entra tenant recognizes the SAP Fiori instance?
Answer(s): C
By default, the provider name is in the format <sid><client>. Azure AD expects the name in the format <protocol>://<name>. We recommend that you maintain the provider name as https://<sid><client> so you can configure multiple SAP Fiori ABAP engines in Azure AD.Example:
https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/sap-fiori-tutorial
Post your Comments and Discuss Microsoft AZ-120 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-120 content, but please register or login to continue.