ExamGecko
Home / Microsoft / AZ-120 / List of questions
Ask Question

Microsoft AZ-120 Practice Test - Questions Answers, Page 7

List of questions

Question 61

Report
Export
Collapse

DRAG DROP

You need to connect SAP HANA on Azure (Large Instances) to an Azure Log Analytics workspace.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Microsoft AZ-120 image Question 61 86003 10022024014722000
Correct answer: Microsoft AZ-120 image answer Question 61 86003 10022024014722000

Explanation:

Step 1: Install the Azure Enhanced Monitoring.

The SAP Azure Enhanced Monitoring Extension allows for collecting diagnostic data including OS and Application performance counters from Azure VMs running SAP workloads.

Step 2: Install the Log Analytics client on the SAP HANA on Azure (Large Instances) instance.

Step 3: Configure a Log Analytics gateway on the virtual network.

Step 4: On the gateway, run.

Reference:

http://www.deployazure.com/compute/virtual-machines/sap-azure-enhanced-monitoring-extension/

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/gateway

asked 02/10/2024
Shirish Astagikar
39 questions

Question 62

Report
Export
Collapse

HOTSPOT

You are planning the Azure network infrastructure for an SAP environment.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Microsoft AZ-120 image Question 62 86004 10022024014722000
Correct answer: Microsoft AZ-120 image answer Question 62 86004 10022024014722000

Explanation:

Box 1: Yes

Box 2: No

A design that's not supported is the segregation of the SAP application layer and the DBMS layer into different Azure virtual networks that aren't peered with each other. We recommend that you segregate the SAP application layer and DBMS layer by using subnets within an Azure virtual network instead of by using different Azure virtual networks.

Box 3: Yes

Be aware that network traffic between two peered Azure virtual networks is subject to transfer costs. Huge data volume that consists of many terabytes is exchanged between the SAP application layer and the DBMS layer. You can accumulate substantial costs if the SAP application layer and DBMS layer are segregated between two peered Azure virtual networks.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_general

asked 02/10/2024
Tsige Tessema
31 questions

Question 63

Report
Export
Collapse

DRAG DROP

You plan to deploy multiple SAP HANA virtual machines to Azure by using an Azure Resource Manager template.

How should you configure Accelerated Networking and Write Accelerator in the template? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Microsoft AZ-120 image Question 63 86005 10022024014722000
Correct answer: Microsoft AZ-120 image answer Question 63 86005 10022024014722000

Explanation:

Box 1: true

enableAcceleratedNetworking: If the network interface is accelerated networking enabled.

To further reduce network latency between Azure VMs, we [Micorosoft] recommend that you choose Azure Accelerated Networking. Use it when you deploy Azure VMs for an SAP workload, especially for the SAP application layer and the SAP DBMS layer.

Box 2: true

Write Accelerator should be used for the volumes that contain the transaction log or redo logs of a DBMS. It is not recommended to use Write Accelerator for the data volumes of a DBMS as the feature has been optimized to be used against log disks.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_general

asked 02/10/2024
Thanh Tran
34 questions

Question 64

Report
Export
Collapse

HOTSPOT

Your on-premises network contains SAP and non-SAP applications.

You have JAVA-based SAP systems that use SPNEGO for single-sign on (SSO) authentication.

Your external portal uses multi-factor authentication (MFA) to authenticate users.

You plan to extend the on-premises authentication features to Azure and to migrate the SAP applications to Azure.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Microsoft AZ-120 image Question 64 86006 10022024014722000
Correct answer: Microsoft AZ-120 image answer Question 64 86006 10022024014722000

Explanation:

Box 1: No

Need AD FS for MFA. See box 3.

Note: Azure Active Directory (Azure AD) Pass-through Authentication allows your users to sign in to both on-premises and cloud-based applications using the same passwords. This feature is an alternative to Azure AD Password Hash Synchronization (see Box 2).

Box 2: Yes

Password hash synchronization is one of the sign-in methods used to accomplish hybrid identity. Azure AD Connect synchronizes a hash, of the hash, of a users password from an on-premises Active Directory instance to a cloud-based Azure AD instance.

Password hash synchronization is an extension to the directory synchronization feature implemented by Azure AD Connect sync. You can use this feature to sign in to Azure AD services like Office 365. You sign in to the service by using the same password you use to sign in to your on-premises Active Directory instance.

Box 3: Yes

If your organization is federated with Azure AD, you can use Azure Multi-Factor Authentication to secure AD FS resources, both on-premises and in the cloud. Azure MFA enables you to eliminate passwords and provide a more secure way to authenticate.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa

asked 02/10/2024
Phillip Roos
49 questions

Question 65

Report
Export
Collapse

HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Microsoft AZ-120 image Question 65 86007 10022024014722000
Correct answer: Microsoft AZ-120 image answer Question 65 86007 10022024014722000

Explanation:

Box 1: No

To log in to a Linux VM with Azure AD credentials, install the Azure Active Directory login VM extension.

Note: Azure AD Connect is the Microsoft tool designed to meet and accomplish your hybrid identity goals.

Box 2: Yes

If you deploy SAP VMs in a cross-premises scenario, where on-premises Active Directory and DNS are extended in Azure, it is expected that the VMs are joining an on-premises domain.

Box 3: No

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/deployment-guide

asked 02/10/2024
Musoke Kamuzze
36 questions

Question 66

Report
Export
Collapse

HOTSPOT

You are integrating SAP HANA and Azure Active Directory (Azure AD).

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Microsoft AZ-120 image Question 66 86008 10022024014722000
Correct answer: Microsoft AZ-120 image answer Question 66 86008 10022024014722000

Explanation:

Box 1: Yes

To configure Azure AD single sign-on with SAP HANA, perform the following steps:

1. In the Azure portal, on the SAP HANA application integration page, select Single sign-on.

2. On the Select a Single sign-on method dialog, select SAML/WS-Fed mode to enable single sign-on.

Microsoft AZ-120 image Question 22 explanation 86008 10022024014722000000

Box 2: No

Box 3: No

Key security considerations for deploying SAP on Azure

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/saphana-tutorial

asked 02/10/2024
Thomas Drilling
43 questions

Question 67

Report
Export
Collapse

HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Microsoft AZ-120 image Question 67 86009 10022024014722000
Correct answer: Microsoft AZ-120 image answer Question 67 86009 10022024014722000

Explanation:

Box 1: Yes

The SAP Azure Enhanced Monitoring Extension builds on top of the Azure Diagnostic extension, which stores its data in an Azure Storage account that you specify.

Box 2: Yes

The Set-AzVMAEMExtension cmdlet updates the configuration of a virtual machine to enable or update the support for monitoring for SAP systems that are installed on the virtual machine. The cmdlet installs the Azure Enhanced Monitoring (AEM) extension that collects the performance data and makes it discoverable for the SAP system. The -OSType specifies the OS. Either Windows or Linux.

Box 3: Yes

Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostics-extension-overview

https://docs.microsoft.com/en-us/powershell/module/az.compute/set-azvmaemextension

asked 02/10/2024
Sergio Pena Ochoa
36 questions

Question 68

Report
Export
Collapse

DRAG DROP

You deploy an SAP environment on Azure.

You need to grant an SAP administrator read-only access to the Azure subscription. The SAP administrator must be prevented from viewing network information.

How should you configure the role-based access control (RBAC) role definition? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Microsoft AZ-120 image Question 68 86010 10022024014722000
Correct answer: Microsoft AZ-120 image answer Question 68 86010 10022024014722000

Explanation:

Box 1: "*/read"

"*/read" allows you to view everything in the subscription.

You need to grant an SAP administrator read-only access to the Azure subscription

Box 2: "Microsoft.Network/*/read"

The SAP administrator must be prevented from viewing network information.

asked 02/10/2024
Marcin Golec
33 questions

Question 69

Report
Export
Collapse

You have an SAP Cloud Platform subscription and an Azure Active Directory (Azure AD) tenant.

You need to ensure that Azure AD users can access SAP Cloud App by using their Azure AD credentials.

What should you configure?

Active Directory Domain Services (AD DS)
Active Directory Domain Services (AD DS)
SAP Cloud Platform Identity Authentication
SAP Cloud Platform Identity Authentication
A conditional access policy
A conditional access policy
SAP Cloud Connector
SAP Cloud Connector
Suggested answer: B

Explanation:

When you integrate SAP Cloud Platform Identity Authentication with Azure AD, you can:

Control in Azure AD who has access to SAP Cloud Platform Identity Authentication.

Enable your users to be automatically signed-in to SAP Cloud Platform Identity Authentication with their Azure AD accounts. Manage your accounts in one central location - the Azure portal.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/sap-hana-cloud-platform-identity-authentication-tutorial

asked 02/10/2024
Arslan Ibragimov
40 questions

Question 70

Report
Export
Collapse

You migrate an SAP environment to Azure.

You need to inspect all the outbound traffic from the SAP application servers to the Internet.

Which two Azure resources should you use? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Azure Traffic Manager
Azure Traffic Manager
Azure Firewall
Azure Firewall
Network Performance Monitor
Network Performance Monitor
Azure user-defined routes
Azure user-defined routes
Azure Load Balancer NAT rules
Azure Load Balancer NAT rules
a Web Application Firewall (WAF) for Azure Application Gateway
a Web Application Firewall (WAF) for Azure Application Gateway
Suggested answer: A, F

Explanation:

asked 02/10/2024
JR Gee
31 questions
Total 187 questions
Go to page: of 19
Search

Related questions