Microsoft Microsoft Certifications AZ-120 Questions & Answers

• Question 171:

  HOTSPOT

  A company named Contoso, Ltd. has users across the globe. Contoso is evaluating whether to migrate SAP to Azure.

  The SAP environment runs on SUSE Linux Enterprise Server (SLES) servers and SAP HANA databases. The Suite on HANA database is 4 TB.

  You need to recommend a migration solution to migrate SAP application servers and the SAP HANA databases. The solution must minimize downtime.

  Which migration solutions should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Azure Site Recovery Microsoft Azure Site Recovery (ASR) now supports SUSE Linux Enterprise Server 11 SP3/SP4 and SUSE Linux Enterprise Server 12 SP1/SP2/SP3. This is great for customers that are planning to migrate systems to Microsoft Azure or customers who need to have a business continuity strategy for their Azure deployments.

  Azure Site Recovery enables SUSE customers to migrate their non-Azure virtual machines or physical servers to Microsoft Azure virtual machines.

  Box 2: SAP Hana System replication

  Reference: https://www.suse.com/c/asr_supports_suse/ https://www.netapp.com/us/media/tr-4746.pdf

• Question 172:

  HOTSPOT

  For each of the following statements, select yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 173:

  HOTSPOT

  You have an SAP environment that contains the following components:

  1.

  Enhancement Package 6 for SAP ERP Central Component 6.0 (SAP ECC 6.0)

  2.

  Servers that run SUSE Linux Enterprise Server 12 (SLES 12)

  3.

  Databases on IBM DB2 10.5

  4.

  SAP Solution Manager 7.1

  You plan to migrate the SAP environment to Azure.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  Box 2: No

  Upgrade to ECC 7.01 or later.

  Box 3: No

  With Microsoft Azure, you can migrate your existing SAP application running on IBM Db2 for Linux, UNIX, and Windows (LUW) to Azure virtual machines. With SAP on IBM Db2 for LUW, administrators and developers can still use the same

  development and administration tools, which are available on-premises.

  Reference:

  https://docs.microsoft.com/en-us/azure/data-factory/connector-sap-table

  https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_ibm

• Question 174:

  HOTSPOT

  You plan to deploy a highly available ASCS instance to SUSE Linux Enterprise Server (SLES) virtual machines in Azure.

  You are configuring an internal Azure Standard Load Balancer for the ASCS instance.

  How should you configure the internal Standard Load Balancer? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Session persistence: None. Floating IP: Enabled.

  References: https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/high-availability-guide-suse

• Question 175:

  HOTSPOT

  You have an Azure Availability Set that is configured as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: the same fault domain

  Fault domains define the group of virtual machines that share a common power source and network switch. If a storage fault domain fails due to hardware or software failure, only the VM instance with disks on the storage fault domain fails.

  Box 2: managed disks

  Managed disks provide better reliability for Availability Sets by ensuring that the disks of VMs in an Availability Set are sufficiently isolated from each other to avoid single points of failure. It does this by automatically placing the disks in

  different storage fault domains (storage clusters) and aligning them with the VM fault domain.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability

• Question 176:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  Box 2: Yes The minimum SAP HANA certified conditions for the different storage types are: Azure Premium SSD - /hana/log is required to be cached with Azure Write Accelerator. The /hana/data volume could be placed on Premium SSD without Azure Write Accelerator or on Ultra disk Box 3: Yes References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-vm-operations-storage

• Question 177:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  The SAP Azure Enhanced Monitoring Extension builds on top of the Azure Diagnostic extension, which stores its data in an Azure Storage account that you specify.

  Box 2: Yes

  The Set-AzVMAEMExtension cmdlet updates the configuration of a virtual machine to enable or update the support for monitoring for SAP systems that are installed on the virtual machine. The cmdlet installs the Azure Enhanced Monitoring

  (AEM) extension that collects the performance data and makes it discoverable for the SAP system.

  The -OSType specifies the OS. Either Windows or Linux.

  Box 3: Yes

  References:

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostics-extension-overview

  https://docs.microsoft.com/en-us/powershell/module/az.compute/set-azvmaemextension

• Question 178:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  To log in to a Linux VM with Azure AD credentials, install the Azure Active Directory login VM extension.

  Note: Azure AD Connect is the Microsoft tool designed to meet and accomplish your hybrid identity goals.

  Box 2: NO

  Box 3: No

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/deployment-guide

• Question 179:

  HOTSPOT

  You are integrating SAP HANA and Azure Active Directory (Azure AD).

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Explanation:

  Box 1: Yes

  To configure Azure AD single sign-on with SAP HANA, perform the following steps:

  1.

  In the Azure portal, on the SAP HANA application integration page, select Single sign-on.

  2.

  On the Select a Single sign-on method dialog, select SAML/WS-Fed mode to enable single sign-on.

  

  Box 2: No

  Box 3: No Key security considerations for deploying SAP on Azure

  References: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/saphana-tutorial

• Question 180:

  HOTSPOT

  Your on-premises network contains SAP and non-SAP applications.

  You have JAVA-based SAP systems that use SPNEGO for single-sign on (SSO) authentication.

  Your external portal uses multi-factor authentication (MFA) to authenticate users.

  You plan to extend the on-premises authentication features to Azure and to migrate the SAP applications to Azure.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  Box 2: Yes Password hash synchronization is one of the sign-in methods used to accomplish hybrid identity. Azure AD Connect synchronizes a hash, of the hash, of a users password from an on-premises Active Directory instance to a cloud-based Azure AD instance.

  Password hash synchronization is an extension to the directory synchronization feature implemented by Azure AD Connect sync. You can use this feature to sign in to Azure AD services like Office 365. You sign in to the service by using the same password you use to sign in to your on-premises Active Directory instance.

  Box 3: Yes If your organization is federated with Azure AD, you can use Azure Multi-Factor Authentication to secure AD FS resources, both on-premises and in the cloud. Azure MFA enables you to eliminate passwords and provide a more secure way to authenticate.

  References: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta