Microsoft Microsoft Certifications AZ-120 Questions & Answers

• Question 151:

  HOTSPOT

  You have an on-premises SAP landscape and an Azure subscription that contains a virtual network named VNET1. VNET1 has the following settings.

  

  You plan to migrate the landscape to Azure.

  You need to configure VNET1 to support the SAP landscape.

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the settings.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: add a virtual network gateway

  Box 2: use remote gateways Each virtual network, regardless of whether peered with another virtual network, can still have its own gateway to connect to an on-premises network. When you peer virtual networks, you can also configure the gateway in the peered virtual network as a transit point to an on-premises network. In this case, the virtual network that uses a remote gateway cannot have its own gateway. A virtual network can have only one gateway that can be either a local or remote gateway (in the peered virtual network).

  Reference: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview

• Question 152:

  HOTSPOT

  You are planning an SAP NetWeaver deployment on Azure. The database her will consist of Two Azure virtual machines that have Microsoft SQL Server 2017 installed. Each virtual machine will be deployed to a separate availability zone.

  You need to perform the following:

  1.

  Minimize network latency between the virtual machines.

  2.

  Measure network latency between the virtual machines.

  What should you do? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  Correct Answer:

  

• Question 153:

  HOTSPOT

  You have an Azure alert rule and action group as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  Hot Area:

  

  Correct Answer:

  

  Box 1: five minutes Window Size is 5 minutes.

  Box 2: admins action group will be emailed The admins1 actiongroup will be executed.

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-metric-overview

• Question 154:

  HOTSPOT

  You deploy an Azure Internal load balancer.

  You deploy a node of an SAP NetWeaver 7.4 ABAP system named SP1.

  You plan to deploy a second node.

  You need to verify that the health probe port is configured for the cluster. The cluster IP address resource name is SAP SP1 IP.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Get-ClusterResource Example: Get-ClusterResource -Name $SAPIPresourceName | Get-ClusterParameter

  Write-Output " "

  Write-Output "Current probe port property of the SAP cluster resource '$SAPIPresourceName' is '$OldProbePort'."

  Write-Output " "

  Write-Output "Setting the new probe port property of the SAP cluster resource '$SAPIPresourceName' to '$ProbePort' ..."

  Write-Output " "

  Box 2: Get-ClusterParameter

  Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-high-availability-installation-wsfc-shared-disk

• Question 155:

  HOTSPOT

  You have an SAP landscape on Azure.

  You plan to deploy a new SAP application server by using an Azure Resource Manager template.

  You need to ensure that all new servers are deployed with Azure Disk Encryption enabled.

  How should you complete the relevant component of the template? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: extensions

  Azure Disk Encryption can be enabled via Azure PowerShell or Azure CLI. That is normally seen in remediation. In a real-world scenario you would like to see a virtual machine during its creation include disk encryption process. This is

  technically possible thanks to Disk Encryption VM extension.

  Box 2: AzureDiskEncryption

  Example:

  ..

  "type": "Microsoft.Compute/virtualMachines/extensions",

  "name": "[concat(parameters('vmName'),'/diskEncryption')]",

  "apiVersion": "2019-03-01",

  "location": "[parameters('location')]",

  "dependsOn": [

  "[resourceId('Microsoft.Compute/virtualMachines/', parameters('vmName'))]"

  ],

  "properties": {

  "publisher": "Microsoft.Azure.Security", "type": "AzureDiskEncryption", ..

  Reference: https://azsec.azurewebsites.net/2019/12/28/azure-disk-encryption-arm-template-for-windows-vm/

• Question 156:

  HOTSPOT

  You have an Azure subscription that contains a resource group named RG1. The role assignments for RG1 are shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: User2

  

  Note:

  Backup Contributor - This role has all permissions to create and manage backup except deleting Recovery Services vault and giving access to others. Imagine this role as admin of backup management who can do every backup management

  operation.

  Box 2: User3

  The User Access Administrator role lets you manage user access to Azure resources.

  Reference:

  https://docs.microsoft.com/en-us/azure/backup/backup-rbac-rs-vault

  https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

• Question 157:

  HOTSPOT

  You have an SAP production landscape that uses SAP HANA databases.

  You configure a metric alert for the primary HANA server as shown in the following exhibit.

  

  You have an action group shown in the following exhibit.

  

  The amy_email is configured as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No The period is 15 minutes. Only alerts or emails will be sent. Box 2: Yes Box 3: Yes

• Question 158:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  Load balancers. Load balancers are used to distribute traffic to virtual machines in the application-tier subnet. For high availability, use the built-in SAP Web Dispatcher, Azure Load Balancer, or network appliances. Your choice depends on

  the traffic type (like HTTP or SAP GUI) or the required network services, like Secure Sockets Layer (SSL) termination.

  Box 2: Yes

  Availability group listener SAP application SQL server load balancer disaster recovery

  Box 3: Yes

  Reference:

  https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/sap/sap-netweaver

  https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/high-availability-guide-suse

  https://blogs.sap.com/2020/10/20/sap-on-azure-sap-netweaver-7.5-on-ms-sql-server-2019-high-availability-and-disaster-recovery-with-4-nodes-alwayson-cluster/

• Question 159:

  HOTSPOT

  You are planning the deployment of a three-tier SAP landscape on Azure that will use SAP HANA. The solution must meet the following requirements:

  1.

  Network latency between SAP NetWeaver and HANA must be minimized.

  2.

  An SAP production landscape on Azure must be supported.

  3.

  Network performance must be validated regularly.

  What should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: A proximity placement group

  Azure offers proximity placement groups. Proximity placement groups can be used to force grouping of different VM types into a single Azure datacenter to optimize the network latency between these different VM types to the best possible. In

  the process of deploying the first VM into such a proximity placement group, the VM gets bound to a specific datacenter.

  Note: SAP applications based on the SAP NetWeaver or SAP S/4HANA architecture are sensitive to network latency between the SAP application tier and the SAP database tier. This sensitivity is the result of most of the business logic

  running in the application layer. Because the SAP application layer runs the business logic, it issues queries to the database tier at a high frequency, at a rate of thousands or tens of thousands per second. In most cases, the nature of these

  queries is simple. They can often be run on the database tier in 500 microseconds or less.

  Box 2: Enable Accelerated Networking

  To further reduce network latency between Azure VMs, we recommend that you choose Azure Accelerated Networking. Use it when you deploy Azure VMs for an SAP workload, especially for the SAP application layer and the SAP DBMS

  layer.

  Incorrect Answers:

  Azure Write Accelerator is a functionality that is available for Azure M-Series VMs exclusively. As the name states, the purpose of the functionality is to improve I/O latency of writes against the Azure premium storage. For SAP HANA, Write

  Accelerator is supposed to be used against the /hana/log volume only. Therefore, the /hana/data and /hana/log are separate volumes with Azure Write Accelerator supporting the /hana/log volume only.

  Box 3: Network Performance Monitor

  Network Performance Monitor (NPM) - a cloud-based network monitoring solution for cloud-only, on-premises, and hybrid networking environments.

  Network Performance Monitor offers three broad capabilities:

  Performance Monitor: You can monitor network connectivity across cloud deployments and on-premises locations, multiple data centers, and branch offices and mission-critical multitier applications or microservices. With Performance

  Monitor, you can detect network issues before users complain.

  Service Connectivity Monitor

  ExpressRoute Monitor

  Note 2: Azure Monitor for SAP Solutions is an Azure-native monitoring product for anyone running their SAP landscapes on Azure. It works with both SAP on Azure Virtual Machines and SAP on Azure Large Instances.

  Incorrect Answers:

  Apache JMeter is a free and open source tool for performance testing of web applications.

  SAP application server to database server latency can be tested with ABAPMeter report /SSA/CAT. Latency between SAP application server and DBMS server can be tested using TCPPing (Ping is not an accurate tool on Azure) or the SAP

  ABAP report /SSA/CAT -> ABAPMeter

• Question 160:

  HOTSPOT

  You have an SAP production landscape on Azure that contains the virtual machines shown in the following table.

  

  You configure HANA system replication as shown in the following table.

  

  You configure two load balancers as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: