ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 46 - AZ-120 discussion

Report
Export

You plan to migrate an SAP environment to Azure.

You need to create a design to facilitate end-user access to SAP applications over the Internet, while restricting user access to the virtual machines of the SAP application servers. What should you include in the design?

A.
Configure a public IP address for each SAP application server
Answers
A.
Configure a public IP address for each SAP application server
B.
Deploy an internal Azure Standard Load Balancer for incoming connections
Answers
B.
Deploy an internal Azure Standard Load Balancer for incoming connections
C.
Use an SAP Web Dispatcher to route all incoming connections
Answers
C.
Use an SAP Web Dispatcher to route all incoming connections
D.
Configure point-to-site VPN connections for each user
Answers
D.
Configure point-to-site VPN connections for each user
Suggested answer: C

Explanation:

1. A public internet user can reach the SAP Web-Dispatcher over port 443

2. The SAP Web-Dispatcher can reach the SAP Application server over port 443

3. The App Subnet accepts traffic on port 443 from 10.0.0.0/24

4. The SAP Application server sends traffic on port 30015 to the SAP DB server

5. The DB subnet accepts traffic on port 30015 from 10.0.1.0/24.

6. Public Internet Access is blocked on both App Subnet and DB Subnet.

References:

https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/

asked 02/10/2024
Nickolas Abbas
51 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first