Microsoft AZ-120 Practice Test - Questions Answers, Page 2

The SAP Cloud Platform Identity Authentication and Active Directory Federation Services enable you to implement SSO across applications or services that are protected by Azure AD (as an IdP) with SAP applications and services that are protected by SAP Cloud Platform Identity Authentication.

Scenario: Use Active Directory accounts to administer Azure resources.

Incorrect Answers:

Not D: With Windows 10, Azure Active Directory (Azure AD) users gain the ability to securely synchronize their user settings and application settings data to the cloud. Enterprise State Roaming provides users with a unified experience across their Windows devices and reduces the time needed for configuring a new device. Enterprise State Roaming operates similar to the standard consumer settings sync that was first introduced in Windows 8. References: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/sap-hana-cloud-platform-identity-authentication-tutorial

Scenario: Ensure that all the production databases can withstand the failure of an Azure region.

References:

https://docs.microsoft.com/en-us/powershell/module/az.compute/get-azvmimage

Box 1: 4

Scenario: the Azure Resource Manager template that will be used to provision the production application servers. Ensure that each production application server has four 1-TB data disks.

Box 2: Standard_LRS

Scenario: Minimize costs whenever possible.

Box 3: contoso.onmicrosoft.com

The network contains an on-premises Active Directory domain named ad.contoso.com.

The Initial domain: The default domain (onmicrosoft.com) in the Azure AD Tenant. For example, contoso.onmicrosoft.com.

References:

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-userprincipalname

Backup architecture

The backup process begins by creating a Recovery services vault in Azure. This vault will be used to store the backups and recovery points created over time. The Azure VM running SAP HANA server is registered with the vault, and the databases to be backed-up are discovered. To enable the Azure Backup service to discover databases, a preregistration script must be run on the HANA server as a root user.

This script creates AZUREWLBACKUPHANAUSER DB user and a corresponding key with the same name in hdbuserstore. Refer to the setting up permissions section to understand more about what the script does. Azure Backup Service now installs the Azure Backup Plugin for HANA on the registered SAP HANA server. The AZUREWLBACKUPHANAUSER DB user created by the preregistration script is used by the Azure Backup Plugin for HANA to perform all backup and restore operations. If you attempt to configure backup for SAP HANA DBs without running this script, you might receive the following error: UserErrorHanaScriptNotRun.

To configure backup on the databases that are discovered, choose the required backup policy and enable backups. Once the backup is configured, Azure Backup service sets up the Backint parameters at the DATABASE level on the protected SAP HANA server. The Azure Backup Plugin for HANA maintains all the backup schedules and policy details. It triggers the scheduled backups and communicates with the HANA Backup Engine through the Backint APIs. The HANA Backup Engine returns a Backint stream with the data to be backed up.

All the scheduled backups and on-demand backups (triggered from the Azure portal) that are either full or differential are initiated by the Azure Backup Plugin for HANA. However, log backups are managed and triggered by HANA Backup Engineitself.

Reference:

https://docs.microsoft.com/en-us/azure/backup/sap-hana-db-about

https://docs.microsoft.com/en-us/azure/backup/backup-azure-sap-hana-database#configure-backup

Azure Policy enables you to set policies to conform to the GDPR. Azure Policy is generally available today at no additional cost to Azure customers. You can use Azure Policy to define and enforce policies that help your cloud environment become compliant with internal policies as well as external regulations.

Azure Policy is deeply integrated into Azure Resource Manager and applies across all resources in Azure. Individual policies can be grouped into initiatives to quickly implement multiple rules. You can also use Azure Policy in a wide range of compliance scenarios, such as ensuring that your data is encrypted or remains in a specific region as part of GDPR compliance. Microsoft is the only hyperscale cloud provider to offer this level of policy integration built in to the platform for no additional charge.

References: https://azure.microsoft.com/de-de/blog/new-capabilities-to-enable-robust-gdpr-compliance/

A: An Azure Region Pair is a relationship between two Azure Regions within the same geographic region for disaster recovery purposes. If one of the regions were to experience a disaster or failure, then the services in that region will automatically failover to that regions secondary region in the pair.

C: For increased availability, you can deploy two VMs with two HANA instances within an Azure availability set that uses HANA system replication for availability. References: https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-hana-availability-one-region

When you deploy Azure VMs across Availability Zones and establish failover solutions within the same Azure region, some restrictions apply:

You can't use an Azure Basic Load Balancer to create failover cluster solutions based on Windows Server Failover Clustering or Linux Pacemaker. Instead, you need to use the Azure Standard Load Balancer SKU. References: https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-ha-availability-zones

With Availability Zones, Azure offers industry best 99.99% VM uptime SLA.

References: https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-faqs

You need to back up the SAP HANA database to Azure, not to a local disk.

References: https://docs.microsoft.com/en-us/azure/backup/sap-hana-db-about https://docs.microsoft.com/en-us/azure/backup/backup-azure-sap-hana-database#configure-backup