Microsoft AZ-120 Practice Test - Questions Answers, Page 11
List of questions
Question 101

HOTSPOT
You are planning the deployment of a three-tier SAP landscape on Azure that will use SAP HANA. The solution must meet the following requirements:
Network latency between SAP NetWeaver and HANA must be minimized.
An SAP production landscape on Azure must be supported. Network performance must be validated regularly. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Explanation:
Box 1: A proximity placement group
Azure offers proximity placement groups. Proximity placement groups can be used to force grouping of different VM types into a single Azure datacenter to optimize the network latency between these different VM types to the best possible. In the process of deploying the first VM into such a proximity placement group, the VM gets bound to a specific datacenter. Note: SAP applications based on the SAP NetWeaver or SAP S/4HANA architecture are sensitive to network latency between the SAP application tier and the SAP database tier. This sensitivity is the result of most of the business logic running in the application layer. Because the SAP application layer runs the business logic, it issues queries to the database tier at a high frequency, at a rate of thousands or tens of thousands per second. In most cases, the nature of these queries is simple. They can often be run on the database tier in 500 microseconds or less.
Box 2: Enable Accelerated Networking
To further reduce network latency between Azure VMs, we recommend that you choose Azure Accelerated Networking. Use it when you deploy Azure VMs for an SAP workload, especially for the SAP application layer and the SAP DBMS layer. Incorrect Answers:
Azure Write Accelerator is a functionality that is available for Azure M-Series VMs exclusively. As the name states, the purpose of the functionality is to improve I/O latency of writes against the Azure premium storage. For SAP HANA, Write Accelerator is supposed to be used against the /hana/log volume only. Therefore, the /hana/data and /hana/log are separate volumes with Azure Write Accelerator supporting the /hana/log volume only.
Box 3: Network Performance Monitor
Network Performance Monitor (NPM) - a cloud-based network monitoring solution for cloud-only, on-premises, and hybrid networking environments.
Network Performance Monitor offers three broad capabilities:
Performance Monitor: You can monitor network connectivity across cloud deployments and on-premises locations, multiple data centers, and branch offices and mission-critical multitier applications or microservices. With Performance Monitor, you can detect network issues before users complain. Service Connectivity Monitor
ExpressRoute Monitor
Note 2: Azure Monitor for SAP Solutions is an Azure-native monitoring product for anyone running their SAP landscapes on Azure. It works with both SAP on Azure Virtual Machines and SAP on Azure Large Instances.
Incorrect Answers:
Apache JMeter is a free and open source tool for performance testing of web applications.
SAP application server to database server latency can be tested with ABAPMeter report /SSA/CAT. Latency between SAP application server and DBMS server can be tested using TCPPing (Ping is not an accurate tool on Azure) or the SAP ABAP report /SSA/CAT -> ABAPMeter – columns DB Access and
E. DB Access.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-proximity-placement-scenarios https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_general
https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/sap-on-azure-general-update-march-2019/bap/377456
Question 102

HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Explanation:
Box 1: Yes
The following is a quick checklist of storage configuration best practices for running your SQL Server on Azure VM: Place data, log, and tempdb files on separate drives.
Box 2: Yes
Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, greatly improving its networking performance. This high-performance path bypasses the host from the data path, which reduces latency, jitter, and CPU utilization for the most demanding network workloads on supported VM types.
Box 3: No
Note: The maximum transmission unit (MTU) is the largest size frame (packet), specified in bytes, that can be sent over a network interface. The MTU is a configurable setting. The default MTU used on Azure VMs, and the default setting on most network devices globally, is 1,500 bytes.
Reference: https://docs.microsoft.com/en-us/azure/virtual-network/create-vm-accelerated-networking-powershell https://docs.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/performance-guidelines-best-practices-checklist
Question 103

HOTSPOT
You have an SAP production landscape that uses SAP HANA databases.
You configure a metric alert for the primary HANA server as shown in the following exhibit.
You have an action group shown in the following exhibit.
The amy_email is configured as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Explanation:
Box 1: No
The period is 15 minutes. Only alerts or emails will be sent.
Box 2: Yes
Box 3: Yes
Question 104

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy SAP HANA on Azure (Large Instances).
You need to back up the SAP HANA database to Azure.
Solution: Back up directly to disk, copy the backups to an Azure virtual machine, and then copy the backup to an Azure Storage account.
Does this meet the goal?
Explanation:
Instead you should create a Recovery Services vault and a backup policy.
Reference: https://docs.microsoft.com/en-us/azure/backup/sap-hana-db-about https://docs.microsoft.com/en-us/azure/backup/backup-azure-sap-hana-database#configure-backup
Question 105

HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Explanation:
Box 1: No
Load balancers. Load balancers are used to distribute traffic to virtual machines in the application-tier subnet. For high availability, use the built-in SAP Web Dispatcher, Azure Load Balancer, or network appliances. Your choice depends on the traffic type (like HTTP or SAP GUI) or the required network services, like Secure Sockets Layer (SSL) termination. Box 2: Yes
Availability group listener SAP application SQL server load balancer disaster recovery Box 3: Yes
Reference: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/sap/sap-netweaver https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/high-availability-guide-suse
https://blogs.sap.com/2020/10/20/sap-on-azure-sap-netweaver-7.5-on-ms-sql-server-2019-high-availability-and-disasterrecovery-with-4-nodes-alwayson-cluster/
Question 106

DRAG DROP
You have an Azure Active Directory (Azure AD) tenant and an SAP Cloud Platform Identity Authentication Service tenant. You need to ensure that users can use their Azure AD credentials to authenticate to SAP applications and services that trust the SAP Cloud Platform Identity Authentication Service tenant.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Explanation:
Step 1: Create and configure an enterprise application in the Azure AD tentant
To configure the integration of SAP Cloud Platform Identity Authentication into Azure AD, you need to add SAP Cloud Platform Identity Authentication from the gallery to your list of managed SaaS apps.
1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
2. On the left navigation pane, select the Azure Active Directory service.
3. Navigate to Enterprise Applications and then select All Applications.
4. To add new application, select New application.
5. In the Add from the gallery section, type SAP Cloud Platform Identity Authentication in the search box.
6. Select SAP Cloud Platform Identity Authentication from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
Step 2: Download the single sign-on (SSO) metadata from the Azure AD tenant. Download single sign-on metadata from Azure Active Directory.
Step 3: Create and configure a corporate identity provider. Create corporate identity provider.
Step 4: Download the SAP Cloud Platform Identity Authentication Service tenant metadata. Download Identity Authentication service tenant metadata.
Step 5: Upload the SAP Cloud Platform Identity Authentication Service tenant metadata to Azure AD tenant. Upload Identity Authentication service tenant metadata to Azure Active Directory.
You have already uploaded the metadata file from Azure Active Directory to Identity Authentication service. It’s time to do it the other way round now and upload the metadata of Identity Authentication service to Azure Active Directory.
Reference:
https://developers.sap.com/tutorials/cp-ias-azure-ad.html
Question 107

HOTSPOT
You have an Azure subscription that contains a resource group named RG1. The role assignments for RG1 are shown in the following exhibit.
Azure:/
PS Azure:\> Get-AZRoleAssignment -ResourceGroupName | Select DisplayName, RoleDefinitionName DisplayName -Like | Select DisplayName, RoleDefinitionName
DisplayName RoleDefinitionName
----------- -----------------------
User3 User Access Administrator
User2 Backup Contributor
User1 Contributor
User4 Security Admin
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Explanation:
Box 1: User2
Note:
Backup Contributor - This role has all permissions to create and manage backup except deleting Recovery Services vault and giving access to others. Imagine this role as admin of backup management who can do every backup management operation.
Box 2: User3
The User Access Administrator role lets you manage user access to Azure resources.
Reference: https://docs.microsoft.com/en-us/azure/backup/backup-rbac-rs-vault https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
Question 108

HOTSPOT
You have an SAP landscape on Azure.
You plan to deploy a new SAP application server by using an Azure Resource Manager template.
You need to ensure that all new servers are deployed with Azure Disk Encryption enabled.
How should you complete the relevant component of the template? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation:
Box 1: extensions
Azure Disk Encryption can be enabled via Azure PowerShell or Azure CLI. That is normally seen in remediation. In a real-world scenario you would like to see a virtual machine during its creation include disk encryption process. This is technically possible thanks to Disk Encryption VM extension.
Box 2: AzureDiskEncryption Example:
..
"type": "Microsoft.Compute/virtualMachines/extensions",
"name": "[concat(parameters('vmName'),'/diskEncryption')]",
"location": "[parameters('location')]",
"dependsOn": [
"[resourceId('Microsoft.Compute/virtualMachines/', parameters('vmName'))]"
],
"properties": {
"publisher": "Microsoft.Azure.Security",
"type": "AzureDiskEncryption",
..
Reference: https://azsec.azurewebsites.net/2019/12/28/azure-disk-encryption-arm-template-for-windows-vm/
Question 109

HOTSPOT
You have an Azure alert rule and action group as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
Explanation:
Box 1: five minutes Window Size is 5 minutes.
Box 2: admins action group will be emailed The admins1 actiongroup will be executed.
Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-metric-overview
Question 110

You deploy an SAP environment on Azure.
You need to monitor the performance of the SAP NetWeaver environment by using Azure Extension for SAP. What should you do first?
Explanation:
This solution requires the VM Agent to be installed in the Azure Virtual Machines you want to run SAP systems.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/vm-extension-for-sap
Question