Microsoft Microsoft Certifications AZ-120 Questions & Answers

• Question 21:

  You have an SAP production landscape that uses SAP HANA databases on Azure. The HANA database server is a Standard.M32ms Azure virtual machine that has 864 GB of RAM.

  The HANA database is 400 GB. You expect the database to grow by 40 percent during the next 12 months.

  You resize the HANA database server virtual machine to Standard_m64ms and ,024 GB of RAM.

  You need to recommend additional changes to minimize performance degradation caused by database growth

  What should you recommend for the HANA database server?

  A. Increase the number of vCPUs.

  B. Configure additional disks

  C. Add a secondary network interface.

  D. Add a scale out node.

  Correct Answer: A

• Question 22:

  You have an on-premises SAP production landscape.

  You plan to migrate to SAP on Azure.

  You need to generate an SAP Early Watch Alert report.

  What should you use?

  A. Azure Advisor

  B. SAP HANA Cockpit

  C. SAP Software Provisioning Manager

  D. SAP Solution Manager

  Correct Answer: D

• Question 23:

  You plan to deploy an SAP environment on Azure. The SAP environment will have landscapes for production, development and quality assurance.

  You need to minimize the costs associated with running the development and quality assurance landscapes on Azure.

  What should you do?

  A. Configure scaling for Azure App Service

  B. Create a scheduled task that runs the stopsap command

  C. Configure Azure virtual machine scale sets

  D. Create Azure Automation runbooks to stop, deallocate, and start Azure virtual machines

  Correct Answer: D

  You can optimize your Azure Costs by Automating SAP System Start – Stop using runbooks.

  Reference: https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/optimize-your-azure-costs-by-automating-sap-system-start-stop/ba-p/2120675

• Question 24:

  You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs SAP HANA and a user named User1. User1 is assigned the Virtual Machine Contributor role of VM1.

  You need to prevent User1 from placing VM1 in the Stopped (deallocated) state. User1 must be able to restart the operating system on VM1.

  What should you do?

  A. Assign an Azure Policy definition to the resource group that contains VM1.

  B. Create a resource lock on VM1.

  C. Configure the Desired State Configuration (DSC) extension on VM1.

  D. Assign User1 the Virtual Machine User Login rote for VM1.

  Correct Answer: C

• Question 25:

  You have an on-premises SAP NetWeaver deployment that uses Windows Server 2016 and Microsoft SQL Server 2016.

  You need to migrate the deployment to an Azure virtual machine that runs Windows Server 2016 and has Microsoft SQL Server 2019 installed.

  Which migration method should you use?

  A. heterogeneous SAP classical migration

  B. classical SAP Database Migration Option (DMO)

  C. lift-and-shift

  D. Azure Migrate

  Correct Answer: B

• Question 26:

  You deploy an SAP landscape on Azure.

  You plan to use an Azure Automation account to stop the SAP virtual machines outside of business hours.

  You need to ensure that you can use Azure Automation runbook a for the virtual machines.

  What does the Azure Automation account require?

  A. an Azure Storage account

  B. an Azure App Service WebJob

  C. a Recovery Services vault

  D. a Run As account

  Correct Answer: B

• Question 27:

  You deploy an SAP production landscape on Azure virtual machines that run SUSE Linux Enterprise Server (SLES). You need to generate a report that details performance differences between instances of an SAP AS ABAP system. What should you use?

  A. JMeter

  B. ABAPmeter

  C. Micro Focus LoadRunner

  D. SAP UI Speedtest Tool

  Correct Answer: B

  Use ABAPMETER in NetWeaver AS ABAP when you want to test the general performance/health of each instance in a NetWeaver AS ABAP system. Incorrect Answers:

  D: The SAP UI Speedtest Tool is used to network bandwidth and latency.

  The UI5 Speedtest Tool regularly checks your network connection and allows you to review the results via a UI5 web interface.

  Reference:

  https://userapps.support.sap.com/sap/support/knowledge/en/2879613

• Question 28:

  You have an on-premises SAP NetWeaver development landscape that contains the resources shown in the following table.

  

  You have a 500-Mbps ExpressRoute circuit between the on-premises environment and a virtual network.

  You plan to migrate the landscape to Azure.

  What should you include in the solution?

  A. Azure Data Box

  B. Microsoft System Center 2019 - Data Protection Manager (DPM 2019)

  C. Azure Site Recovery

  D. Azure Backup Server

  Correct Answer: C

  Simplify cloud migration by using Site Recovery to migrate your SAP deployment to Azure. Incorrect Answers:

  A: Not necessary with the fast ExpressRoute circuit.

  Data Box devices easily move data to Azure when busy networks aren't an option. Move large amounts of data to Azure when you're limited by time, network availability, or costs, using common copy tools such as Robocopy. All data is AES-

  encrypted, and the devices are wiped clean after upload, in accordance with NIST Special Publication 800-88 revision 1 standards.

  Reference:

  https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-sap

• Question 29:

  You have an SAP environment on Azure.

  Your on-premises network uses a 1-Gbps ExpressRoute circuit to connect to Azure. Private peering is enabled on the circuit. The default route (0.0.0.0/0) from the on-premises network is advertised.

  Whenever backups are copied to Azure Blob storage, the ExpressRoute circuit is saturated.

  You need to resolve the issue without modifying the ExpressRoute circuit. The solution must minimize administrative effort.

  What should you do?

  A. Create a user-defined route that redirects traffic to the Blob storage

  B. Create an application security group

  C. Change the backup solution to use a third-party software that can write to the Blob storage

  D. Enable virtual network private endpoints.

  Correct Answer: D

  Private endpoint enables connectivity between the consumers from the same ExpressRoute.

  Note: Consult with SAP HANA on Microsoft Service Management. If they advise you to increase the bandwidth of the SAP HANA on Azure (Large Instances) ExpressRoute circuit, create an Azure support request. (You can request an increase for a single circuit bandwidth up to a maximum of 10 Gbps.)

  Reference: https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-overview https://docs.microsoft.com/bs-cyrl-ba/azure/virtual-machines/workloads/sap/hana-additional-network-requirements#increase-expressroute-circuit-bandwidth

• Question 30:

  You plan to deploy an SAP landscape that will have virtual machines deployed to multiple Azure regions.

  You need to ensure that the virtual machines can communicate across the regions.

  What should you configure?

  A. virtual network peering in Azure

  B. Azure Bastion hosts

  C. local network gateways

  D. Azure Relay

  Correct Answer: A

  Depending on the rules and restrictions you want to apply between the different virtual networks hosting VMs of different SAP systems, you should peer those virtual network

  Note: Virtual network peering enables you to seamlessly connect two or more Virtual Networks in Azure. The virtual networks appear as one for connectivity purposes. The traffic between virtual machines in peered virtual networks uses the

  Microsoft backbone infrastructure. Like traffic between virtual machines in the same network, traffic is routed through Microsoft's private network only.

  Azure supports the following types of peering:

  Virtual network peering: Connect virtual networks within the same Azure region.

  Global virtual network peering: Connecting virtual networks across Azure regions.

  Incorrect Answers:

  B: Azure Bastion is a fully managed service that provides more secure and seamless Remote Desktop Protocol (RDP) and Secure Shell Protocol (SSH) access to virtual machines (VMs) without any exposure through public IP addresses.

  D: The Azure Relay service enables you to securely expose services that run in your corporate network to the public cloud. You can do so without opening a port on your firewall, or making intrusive changes to your corporate network infrastructure.

  Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-network-architecture https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview