Microsoft AZ-120 Practice Test - Questions Answers, Page 11

Box 1: Yes

The following is a quick checklist of storage configuration best practices for running your SQL Server on Azure VM: Place data, log, and tempdb files on separate drives.

Box 2: Yes

Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, greatly improving its networking performance. This high-performance path bypasses the host from the data path, which reduces latency, jitter, and CPU utilization for the most demanding network workloads on supported VM types.

Box 3: No

Note: The maximum transmission unit (MTU) is the largest size frame (packet), specified in bytes, that can be sent over a network interface. The MTU is a configurable setting. The default MTU used on Azure VMs, and the default setting on most network devices globally, is 1,500 bytes.

Reference: https://docs.microsoft.com/en-us/azure/virtual-network/create-vm-accelerated-networking-powershell https://docs.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/performance-guidelines-best-practices-checklist

Box 1: No

The period is 15 minutes. Only alerts or emails will be sent.

Box 2: Yes

Box 3: Yes

Instead you should create a Recovery Services vault and a backup policy.

Reference: https://docs.microsoft.com/en-us/azure/backup/sap-hana-db-about https://docs.microsoft.com/en-us/azure/backup/backup-azure-sap-hana-database#configure-backup

Box 1: No

Load balancers. Load balancers are used to distribute traffic to virtual machines in the application-tier subnet. For high availability, use the built-in SAP Web Dispatcher, Azure Load Balancer, or network appliances. Your choice depends on the traffic type (like HTTP or SAP GUI) or the required network services, like Secure Sockets Layer (SSL) termination. Box 2: Yes

Availability group listener SAP application SQL server load balancer disaster recovery Box 3: Yes

Reference: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/sap/sap-netweaver https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/high-availability-guide-suse

https://blogs.sap.com/2020/10/20/sap-on-azure-sap-netweaver-7.5-on-ms-sql-server-2019-high-availability-and-disasterrecovery-with-4-nodes-alwayson-cluster/

Step 1: Create and configure an enterprise application in the Azure AD tentant

To configure the integration of SAP Cloud Platform Identity Authentication into Azure AD, you need to add SAP Cloud Platform Identity Authentication from the gallery to your list of managed SaaS apps.

1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.

2. On the left navigation pane, select the Azure Active Directory service.

3. Navigate to Enterprise Applications and then select All Applications.

4. To add new application, select New application.

5. In the Add from the gallery section, type SAP Cloud Platform Identity Authentication in the search box.

6. Select SAP Cloud Platform Identity Authentication from results panel and then add the app. Wait a few seconds while the app is added to your tenant.

Step 2: Download the single sign-on (SSO) metadata from the Azure AD tenant. Download single sign-on metadata from Azure Active Directory.

Step 3: Create and configure a corporate identity provider. Create corporate identity provider.

Step 4: Download the SAP Cloud Platform Identity Authentication Service tenant metadata. Download Identity Authentication service tenant metadata.

Step 5: Upload the SAP Cloud Platform Identity Authentication Service tenant metadata to Azure AD tenant. Upload Identity Authentication service tenant metadata to Azure Active Directory.

You have already uploaded the metadata file from Azure Active Directory to Identity Authentication service. It’s time to do it the other way round now and upload the metadata of Identity Authentication service to Azure Active Directory.

Reference:

https://developers.sap.com/tutorials/cp-ias-azure-ad.html

Box 1: User2

Note:

Backup Contributor - This role has all permissions to create and manage backup except deleting Recovery Services vault and giving access to others. Imagine this role as admin of backup management who can do every backup management operation.

Box 2: User3

The User Access Administrator role lets you manage user access to Azure resources.

Reference: https://docs.microsoft.com/en-us/azure/backup/backup-rbac-rs-vault https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Box 1: extensions

Azure Disk Encryption can be enabled via Azure PowerShell or Azure CLI. That is normally seen in remediation. In a real-world scenario you would like to see a virtual machine during its creation include disk encryption process. This is technically possible thanks to Disk Encryption VM extension.

Box 2: AzureDiskEncryption Example:

..

"type": "Microsoft.Compute/virtualMachines/extensions",

"name": "[concat(parameters('vmName'),'/diskEncryption')]",

"location": "[parameters('location')]",

"dependsOn": [

"[resourceId('Microsoft.Compute/virtualMachines/', parameters('vmName'))]"

],

"properties": {

"publisher": "Microsoft.Azure.Security",

"type": "AzureDiskEncryption",

..

Reference: https://azsec.azurewebsites.net/2019/12/28/azure-disk-encryption-arm-template-for-windows-vm/

Box 1: five minutes Window Size is 5 minutes.

Box 2: admins action group will be emailed The admins1 actiongroup will be executed.

Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-metric-overview

This solution requires the VM Agent to be installed in the Azure Virtual Machines you want to run SAP systems.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/vm-extension-for-sap