Microsoft AZ-120 Practice Test - Questions Answers, Page 5

To store directories and files on Azure storage, one could use CLI or PowerShell. There is also a ready-to-use utility, AzCopy, for copying data to Azure storage.

Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-hana-backup-file-level

Step 1: Create a virtual network...

We recommended that for test failover, you choose a network that's isolated from the production recovery site network specific in the Compute and Network settings for each VM. By default, when you create an Azure virtual network, it is isolated from other networks. The test network should mimic your production network:

The test network should have same number of subnets as your production network. Subnets should have the same names. The test network should use the same IP address range.

Step 2: Add a public IP address...

Because Site Recovery does not replicate the cloud witness, we recommend that you deploy the cloud witness in the disaster recovery region.

Step 3: Shut down production virtual machines

Make sure that the primary VM is shut down when you run the test failover. Otherwise there will be two VMs with the same identity, running in the same network at the same time. This can lead to unexpected consequences.

Step 4: Select Test failover from the Recovery Plans blade

Reference:

https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-test-failover-to-azure

Azure site-to-site VPN is cheaper.

Incorrect Answers:

A: ExpressRoute could be quite expensive.

C: Policy-based gateways use static routing, and only work with site-to-site connections.

References: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/vpn

1. A public internet user can reach the SAP Web-Dispatcher over port 443

2. The SAP Web-Dispatcher can reach the SAP Application server over port 443

3. The App Subnet accepts traffic on port 443 from 10.0.0.0/24

4. The SAP Application server sends traffic on port 30015 to the SAP DB server

5. The DB subnet accepts traffic on port 30015 from 10.0.1.0/24.

6. Public Internet Access is blocked on both App Subnet and DB Subnet.

References:

https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/

You can create custom, or user-defined, routes in Azure to override Azure's default system routes, or to add additional routes to a subnet's route table. In Azure, you create a route table, then associate the route table to zero or more virtual network subnets.

Incorrect Answers:

D: ExpressRoute is a costly solution.

Load balancers. These are used to distribute traffic to virtual machines in the application-tier subnet.For high availability, use the built-in SAP Web Dispatcher, Azure Load Balancer, or network appliances, depending on the traffic type (such as HTTP or SAPGUI) or the required network services, such as Secure Sockets Layer (SSL) termination.Reference:https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/sap/sap-netweaver

To create a swap file in the directory that's defined by the ResourceDisk.MountPoint parameter, you can update the /etc/waagent.conf file by setting the following three parameters: ResourceDisk.Format=y ResourceDisk.EnableSwap=y ResourceDisk.SwapSizeMB=xx

Reference: https://support.microsoft.com/en-us/help/4010058/how-to-add-a-swap-file-in-linux-azure-virtual-machines

To reference a credential stored in Azure Key Vault, you need to:

1. Retrieve data factory managed identity

2. Grant the managed identity access to your Azure Key Vault

3. Create a linked service pointing to your Azure Key Vault.

4. Create data store linked service, inside which reference the corresponding secret stored in key vault.

Reference: https://docs.microsoft.com/bs-latn-ba/azure/data-factory/store-credentials-in-key-vault