Microsoft Microsoft Certifications AZ-120 Questions & Answers

• Question 71:

  You plan to deploy SAP application servers that run Windows Server 2016.

  You need to use PowerShell Desired State Configuration (DSC) to configure the SAP application server once the servers are deployed.

  Which Azure virtual machine extension should you install on the servers?

  A. the Azure DSC VM Extension

  B. the Azure virtual machine extension

  C. the Azure Chef extension

  D. the Azure Enhanced Monitoring Extension for SAP

  Correct Answer: A

  The Azure Desired State Configuration (DSC) VM Extension is updated as-needed to support enhancements and new capabilities delivered by Azure, Windows Server, and the Windows Management Framework (WMF) that includes Windows PowerShell.

  Reference: https://docs.microsoft.com/en-us/powershell/scripting/dsc/getting-started/azuredscexthistory

• Question 72:

  You deploy an SAP environment on Azure by following the SAP workload on Azure planning and deployment checklist.

  You need to verify whether Azure Diagnostics is enabled.

  Which cmdlet should you run?

  A. Get-AzureVMAvailableExtension

  B. Get-AzVmDiagnosticsExtension

  C. Test-AzDeployment

  D. Test-VMConfigForSAP

  Correct Answer: B

  The Get-AzVMDiagnosticsExtension cmdlet gets the settings of the Azure Diagnostics extension on a virtual machine. Incorrect Answers:

  D: You can check the configuration of a virtual machine by calling the Test-VMConfigForSAP_GUI commandlet.

  Reference: https://docs.microsoft.com/en-us/powershell/module/az.compute/get-azvmdiagnosticsextension

• Question 73:

  You plan to deploy an SAP environment on Azure.

  You plan to store all SAP connection strings securely in Azure Key Vault without storing credentials on the Azure virtual machines that host SAP.

  What should you configure to allow the virtual machines to access the key vault?

  A. Azure Active Directory (Azure AD) Privilege Identity Manager (PIM)

  B. role-based access control (RBAC)

  C. a Managed Service Identity (MSI)

  D. the Custom Script Extension

  Correct Answer: C

  To reference a credential stored in Azure Key Vault, you need to:

  1.

  Retrieve data factory managed identity

  2.

  Grant the managed identity access to your Azure Key Vault

  3.

  Create a linked service pointing to your Azure Key Vault.

  4.

  Create data store linked service, inside which reference the corresponding secret stored in key vault.

  Reference: https://docs.microsoft.com/bs-latn-ba/azure/data-factory/store-credentials-in-key-vault

• Question 74:

  You are deploying an SAP environment on Azure that will use an SAP HANA database server.

  You provision an Azure virtual machine for SAP HANA by using the M64s virtual machine SKU.

  You need to set the swap space by using the Microsoft Azure Linux Agent (waagent) configuration file.

  Which two settings should you configure? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. ResourceDisk.EnableSwapEncryption=n

  B. AutoUpdate.Enabled=n

  C. ResourceDisk.SwapSizeMB=229376

  D. ResourceDisk.EnableSwap=y

  Correct Answer: CD

  To create a swap file in the directory that's defined by the ResourceDisk.MountPoint parameter, you can update the /etc/waagent.conf file by setting the following three parameters: ResourceDisk.Format=y ResourceDisk.EnableSwap=y ResourceDisk.SwapSizeMB=xx

  Reference: https://support.microsoft.com/en-us/help/4010058/how-to-add-a-swap-file-in-linux-azure-virtual-machines

• Question 75:

  You have an Azure subscription.

  You deploy Active Directory domain controllers to Azure virtual machines.

  You plan to deploy Azure for SAP workloads.

  You plan to segregate the domain controllers from the SAP systems by using different virtual networks.

  You need to recommend a solution to connect the virtual networks. The solution must minimize costs.

  What should you recommend?

  A. a site-to-site VPN

  B. virtual network peering

  C. user-defined routing

  D. ExpressRoute

  Correct Answer: B

  https://github.com/MicrosoftDocs/azure-docs/issues/32537 https://azure.microsoft.com/en-us/blog/vnet-peering-and-vpn-gateways/

• Question 76:

  You deploy an SAP environment on Azure.

  Your company has a Service Level Agreement (SLA) of 99.99% for SAP.

  You implement Azure Availability Zones that have the following components:

  1.

  Redundant SAP application servers

  2.

  ASCS/ERS instances that use a failover cluster

  3.

  Database high availability that has a primary instance and a secondary instance You need to validate the high availability configuration of the ASCS/ERS cluster. What should you use?

  A. SAP Web Dispatcher

  B. Azure Traffic Manager

  C. SAPControl

  D. SAP Solution Manager

  Correct Answer: B

  https://documentation.suse.com/sbp/all/pdf/SAP_NW740_SLE12_SetupGuide_color_en.pd f

• Question 77:

  You plan to migrate an SAP environment to Azure.

  You need to create a design to facilitate end-user access to SAP applications over the Internet, while restricting user access to the virtual machines of the SAP application servers.

  What should you include in the design?

  A. Configure a public IP address for each SAP application server

  B. Deploy an internal Azure Standard Load Balancer for incoming connections

  C. Use an SAP Web Dispatcher to route all incoming connections

  D. Configure point-to-site VPN connections for each user

  Correct Answer: C

  1.

  A public internet user can reach the SAP Web-Dispatcher over port 443

  2.

  The SAP Web-Dispatcher can reach the SAP Application server over port 443

  3.

  The App Subnet accepts traffic on port 443 from 10.0.0.0/24

  4.

  The SAP Application server sends traffic on port 30015 to the SAP DB server

  5.

  The DB subnet accepts traffic on port 30015 from 10.0.1.0/24.

  6.

  Public Internet Access is blocked on both App Subnet and DB Subnet.

  

  References: https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/

• Question 78:

  You plan to deploy an SAP environment on Azure.

  During a bandwidth assessment, you identify that connectivity between Azure and an on-premises datacenter requires up to 5 Gbps.

  You need to identify which connectivity method you must implement to meet the bandwidth requirement. The solution must minimize costs.

  Which connectivity method should you identify?

  A. an ExpressRoute connection

  B. an Azure site-to-site VPN that is route-based

  C. an Azure site-to-site VPN that is policy-based

  D. Global VNet peering

  Correct Answer: B

  Azure site-to-site VPN is cheaper.

  Incorrect Answers:

  A: ExpressRoute could be quite expensive.

  C: Policy-based gateways use static routing, and only work with site-to-site connections.

  References: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/vpn

• Question 79:

  You plan to migrate an SAP HANA instance to Azure.

  You need to gather CPU metrics from the last 24 hours from the instance.

  Solution: You use Monitoring from the SAP HANA Cockpit.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  The SAP HANA cockpit provides a single point of access to a range of SAP HANA administration and monitoring tasks. It is used to monitor and ensure the overall health of the system.

  The HANA Monitoring dashboard also visualizes key HANA Metrics of SAP HANA system.

  Reference: https://developers.sap.com/tutorials/dt-monitoring-hana-part1.html https://help.sap.com/viewer/afa922439b204e9caf22c78b6b69e4f2/2.10.0.0/en-US https://www.hanatutorials.com/p/hana-monitoring-dashboard.html

• Question 80:

  You deploy an SAP environment on Azure.

  Your company has a Service Level Agreement (SLA) of 99.99% for SAP.

  You implement Azure Availability Zones that have the following components:

  1.

  Redundant SAP application servers

  2.

  ASCS/ERS instances that use a failover cluster

  3.

  Database high availability that has a primary instance and a secondary instance You need to validate the load distribution to the application servers. What should you use?

  A. SAPControl

  B. SAP Solution Manager

  C. Azure Monitor

  D. SAP Web Dispatcher

  Correct Answer: D

  Load balancers. These are used to distribute traffic to virtual machines in the application-tier subnet. For high availability, use the built-in SAP Web Dispatcher, Azure Load Balancer, or network appliances, depending on the traffic type (such as HTTP or SAPGUI) or the required network services, such as Secure Sockets Layer (SSL) termination.

  Reference: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/sap/sap-netweaver