Authentic Best resources for AZ-120 Test Engine Practice Exam
[2021] AZ-120 PDF Questions - Perfect Prospect To Go With Actual4Exams Practice Exam
Who should take the AZ-120:Planning and Administering Microsoft Azure for SAP Workloads Exam
The AZ-120 Exam certification is an internationally-recognized certification which help to have validation for those professionals who are who are knowledgeable in the SAP Landscape Certification process and industry standards that are specific to the long-term operation of an SAP solution. Candidates for this exam should be familiar azure administrator , architect, LINUX and SAP HANA concepts. Candidates should have extensive experience and knowledge of SAP applications , SAP workloads migration to Azure, SAP performance SLA, ASR for SAP , HANA System replication (HSR), resilient Azure solution to support SAP workloads. It is good for these candidates:
- Azure administrator
- Azure architect
Getting Exam Ready
The kind of expertise that scoring passing grades in the Microsoft AZ-120 exam demands can only be obtained if test-takers are referring to quality study resources. The vendor does a great job at this front by offering free and paid learning resources for all interested applicants. Thus, the free study resources offered by Microsoft for your AZ-120 preparation are SAP Certified Offerings for Azure, Strategizing Azure for SAP Workloads, and Running Azure for SAP Workloads courses. All these are training materials designed for self-paced learning that altogether comprise 10 unique modules that cover all the exam objectives and which will equip you with the relevant expertise to nail the final test with ease. Then, the aspiring candidates can enroll in the instructor-led training option, also endorsed by the vendor, which is Course AZ-120T00-A: Planning & Administering Microsoft Azure for SAP Workloads. Particularly, this is a four-day-long training course explaining every bit of the exam domain, which is of advanced level and is conducted in English. Still, to be eligible for such classes, candidates must be familiar with certain skills like experience with Azure SaaS and PaaS, TCP/IP, DNS, VM, VNet, load balancing, SAP BW, etc. In all, after attending this comprehensive training, you’ll manage to develop the following acumen related to IT:
- Dealing with Azure Portal, CLI, Cloud Shell, and Resource Manager;
- Making use of intersite features for connectivity;
- Working with AAD as well as Azure AD Connect.
- SAP NetWeaver migration to Azure;
So, if you want to develop excellence for the forthcoming AZ-120 test, turn to this 11-module hands-on training that contains labs for you to apply the theoretical knowledge in real-life situations and retain the related information on a higher level.
NEW QUESTION 50
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy SAP HANA on Azure (Large Instances).
You need to back up the SAP HANA database to Azure.
Solution: You create a Recovery Services vault and a backup policy.
Does this meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
Backup architecture
* The backup process begins by creating a Recovery services vault in Azure. This vault will be used to store the backups and recovery points created over time.
* The Azure VM running SAP HANA server is registered with the vault, and the databases to be backed-up are discovered. To enable the Azure Backup service to discover databases, a preregistration script must be run on the HANA server as a root user.
* This script creates AZUREWLBACKUPHANAUSER DB user and a corresponding key with the same name in hdbuserstore. Refer to the setting up permissions section to understand more about what the script does.
* Azure Backup Service now installs the Azure Backup Plugin for HANA on the registered SAP HANA server.
* The AZUREWLBACKUPHANAUSER DB user created by the preregistration script is used by the Azure Backup Plugin for HANA to perform all backup and restore operations. If you attempt to configure backup for SAP HANA DBs without running this script, you might receive the following error: UserErrorHanaScriptNotRun.
* To configure backup on the databases that are discovered, choose the required backup policy and enable backups.
* Once the backup is configured, Azure Backup service sets up the Backint parameters at the DATABASE level on the protected SAP HANA server.
* The Azure Backup Plugin for HANA maintains all the backup schedules and policy details. It triggers the scheduled backups and communicates with the HANA Backup Engine through the Backint APIs.
* The HANA Backup Engine returns a Backint stream with the data to be backed up.
* All the scheduled backups and on-demand backups (triggered from the Azure portal) that are either full or differential are initiated by the Azure Backup Plugin for HANA. However, log backups are managed and triggered by HANA Backup Engineitself.
References:
https://docs.microsoft.com/en-us/azure/backup/sap-hana-db-about
https://docs.microsoft.com/en-us/azure/backup/backup-azure-sap-hana-database#configure-backup
NEW QUESTION 51
You have an SAP environment on Azure that uses multiple subscriptions.
To meet GDPR requirements, you need to ensure that virtual machines are deployed only to the West Europe and North Europe Azure regions.
Which Azure components should you use?
- A. Azure Security Center and Azure Active Directory (Azure AD) groups
- B. Azure management groups and Azure Policy
- C. Azure resource locks and the Compliance admin center
- D. Azure resource groups and role-based access control (RBAC)
Answer: B
Explanation:
Explanation
Azure Policy enables you to set policies to conform to the GDPR. Azure Policy is generally available today at no additional cost to Azure customers. You can use Azure Policy to define and enforce policies that help your cloud environment become compliant with internal policies as well as external regulations.
Azure Policy is deeply integrated into Azure Resource Manager and applies across all resources in Azure.
Individual policies can be grouped into initiatives to quickly implement multiple rules. You can also use Azure Policy in a wide range of compliance scenarios, such as ensuring that your data is encrypted or remains in a specific region as part of GDPR compliance. Microsoft is the only hyperscale cloud provider to offer this level of policy integration built in to the platform for no additional charge.
References:
https://azure.microsoft.com/de-de/blog/new-capabilities-to-enable-robust-gdpr-compliance/
NEW QUESTION 52
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: No
To log in to a Linux VM with Azure AD credentials, install the Azure Active Directory login VM extension.
Note: Azure AD Connect is the Microsoft tool designed to meet and accomplish your hybrid identity goals.
Box 2: NO
Box 3: No
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/deployment-guide
NEW QUESTION 53
You need to provide the Azure administrator with the values to complete the Azure Resource Manager template.
Which values should you provide for diskCount, StorageAccountType, and domainName? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: 4
Scenario: the Azure Resource Manager template that will be used to provision the production application servers.
Ensure that each production application server has four 1-TB data disks.
Box 2: Standard_LRS
Scenario: Minimize costs whenever possible.
Box 3: contoso.onmicrosoft.com
The network contains an on-premises Active Directory domain named ad.contoso.com.
The Initial domain: The default domain (onmicrosoft.com) in the Azure AD Tenant. For example, contoso.onmicrosoft.com.
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-userprincipalname
NEW QUESTION 54
A customer enterprise SAP environment plans to migrate to Azure. The environment uses servers that runs Windows Server 2016 and Microsoft SQL Server.
The environment is critical and requires a comprehensive business continuity and disaster recovery (BCDRJ strategy that minimizes the recovery point objective (RPO) and the recovery time objective (RTO).
The customer wants a resilient environment that has a secondary site that is at least 250 Kilometers away. You need to recommend a solution for the customer.
Which two solutions should you recommend? Each correct answer presents part ot the solution. NOTE; Each correct selection Is worth one point.
- A. Warm standby virtual machine an Azure Availability Set that uses geo-redundant storage (GRS)
- B. warm standby virtual machines in Azure Availability Zones.
- C. an internal load balancer to route Internet traffic
- D. warn standby virtual machines in paired regions
- E. Azure Traffic Manager to route incoming traffic.
Answer: C,D
Explanation:
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-hana-availability-one-region
NEW QUESTION 55
You are deploying SAP Fiori lo an SAP environment on Azure.
You are configuring SAML 2.0 for an SAP Fiori instance named FPP that uses client 100 to authenticate to an Azure Active Directory (Azure AD) tenant.
Which provider name should you use to ensure that the Azure AD tenant recognizes the SAP fiori instance?
- A. https://FPP
- B. ldap://FPP
- C. ldap://FPP-100
- D. https://FPP100
Answer: D
Explanation:
By default, the provider name is in the format <sid><client>. Azure AD expects the name in the format <protocol>://<name>. We recommend that you maintain the provider name as Error! Hyperlink reference not valid. so you can configure multiple SAP Fiori ABAP engines in Azure AD.
Example:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/sap-fiori-tutorial
NEW QUESTION 56
You have an SAP environment that is managed by using VMware vCenter.
You plan to migrate the SAP environment to Azure.
You need to gather information to identify which compute resources are required in Azure.
What should you use to gather the information?
- A. SAP Quick Sizer and SAP HANA system replication
- B. Azure Site Recovery Deployment Planner and SAP HANA Cockpit
- C. Azure Site Recovery and SAP Quick Sizer
- D. Azure Migrate and SAP EarlyWatch Alert reports
Answer: D
Explanation:
Azure Migrate is a Microsoft service that helps an enterprise assess how its on-premises workloads will perform, and how much they will cost to host, in the Azure public cloud.
An enterprise can use Azure Migrate to discover information about the VMware VMs running within its own data center, including CPU and memory usage, as well as performance history.
SAP EarlyWatch Alert (EWA) is a monitoring service for SAP customers, to monitor SAP systems in the solution landscape.
Incorrect Answers:
D: SAP HANA Cockpit is an administrative tool with a web interface for a correspondingly named database engine, a part of SAP ERP software. It allows both offline and cloud operations for managing databases, References:
https://searchcloudcomputing.techtarget.com/definition/Azure-Migrate
NEW QUESTION 57
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
1. No
Oracle Data Guard running in Maximum Availability mode. Currently, Oracle Real Application Clusters (RAC) is not supported in Azure - either for high availability or for scalability
2. Yes
3. No
The following OS versions are supported with the Oracle Database on Microsoft Azure:
Windows Server 2019 (only from Oracle Database 19.5.0 on)
Windows Server 2016 (only from Oracle Database 12.2.0.1 on)
Windows Server 2012 (no support for Oracle Database 19c)
Windows Server 2012 R2
Windows Server 2008 R2 Service Pack 1 (no support for Oracle 12.2.0.1)
Oracle Linux 7
Oracle Linux 8 (only from Oracle Database 19.7.0 on)
https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/windows-2016-is-now-generally-availa
NEW QUESTION 58
You plan to migrate an SAP environment to Azure.
You need to design an Azure network infrastructure to meet the following requirements:
* Prevent end users from accessing the database servers.
* Isolate the application servers from the database servers.
* Ensure that end users can access the SAP systems over the internet
Minimize the costs associated to the communications between the application servers and database servers Which two actions should you include in the solution? Each correct answer presents pan of the solution. NOTE: Each correct selection is worth one point.
- A. Create a site-to-site VPN between the on premises network and Azure.
- B. Configure an infernal Azure Standard Load Balancer for incoming connections.
- C. Configure Azure Traffic Manager to route incoming connections.
- D. Segregate the SAP application servers and database servers by using different Azure virtual networks.
- E. In the same Azure virtual network, segregate the SAP application service and database servers by using different subnets and network security groups.
Answer: C
NEW QUESTION 59
You need direct connectivity from an on-premises network to SAP HANA (Large Instances). The solution must meet the following requirements:
* Minimize administrative effort.
* Provide the highest level of resiliency.
What should you use?
- A. ExpressRoute Global Reach
- B. Linux IPTables
- C. ExpressRoute
- D. NGINX as a reverse proxy
Answer: A
Explanation:
Explanation
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-network-architecture
NEW QUESTION 60
You recently migrated an SAP HANA environment to Azure.
You plan to back up SAP HANA databases to disk on the virtual machines, and then move the backup tiles to Azure Blob storage for retention.
Which command should you run to move the backups to the Blob storage?
- A. scp
- B. backint
- C. azcopy
- D. robocopy
Answer: C
Explanation:
To store directories and files on Azure storage, one could use CLI or PowerShell. There is also a ready-to-use utility, AzCopy, for copying data to Azure storage.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-hana-backup-file-level
NEW QUESTION 61
You are integrating SAP HANA and Azure Active Directory (Azure AD).
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Yes
To configure Azure AD single sign-on with SAP HANA, perform the following steps:
1. In the Azure portal, on the SAP HANA application integration page, select Single sign-on.
2. On the Select a Single sign-on method dialog, select SAML/WS-Fed mode to enable single sign-on.
Box 2: No
Box 3: No
Key security considerations for deploying SAP on Azure
References:
https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/saphana-tutorial
NEW QUESTION 62
HOTSPOT
You have an on-premises SAP environment.
Backups are performed by using tape backups. There are 50 TB of backups.
A Windows file server has BMP images of checks used by SAP Finance. There are 9 TB of images.
You need to recommend a method to migrate the images and the tape backups to Azure. The solution must maintain continuous replication of the images.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Explanation:
Tape backups: Azure DataBox
The Microsoft Azure Data Box cloud solution lets you send terabytes of data into Azure in a quick, inexpensive, and reliable way. The secure data transfer is accelerated by shipping you a proprietary Data Box storage device. Each storage device has a maximum usable storage capacity of 80 TB and is transported to your datacenter through a regional carrier. The device has a rugged casing to protect and secure data during the transit.
File server: Azure Storage Explorer
Azure Storage Explorer is an application which helps you to easily access the Azure storage account through any device on any platform, be it Windows, MacOS, or Linux. You can easily connect to your subscription and manipulate your tables, blobs, queues, and files.
Incorrect Answers:
Not Azure Data Box Edge: Azure Data Box Edge is rebranded as Azure Stack Edge. Azure Stack Edge is a Hardware-as-a-service solution. Microsoft ships you a cloud-managed device with a built-in Field Programmable Gate Array (FPGA) that enables accelerated AI-inferencing and has all the capabilities of a network storage gateway.
Reference:
https://docs.microsoft.com/en-us/azure/databox/data-box-overview
https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/vs-azure-tools-storage-manage-with-storage- explorer.md
NEW QUESTION 63
You have an Azure subscription.
Your company has an SAP environment that runs on SUSE Linux Enterprise Server (SLES) servers and SAP HANA. The environment has a primary site and a disaster recovery site. Disaster recovery is based on SAP HANA system replication. The SAP ERP environment is 4 TB and has a projected growth of 5% per month.
The company has an uptime Service Level Agreement (SLA) of 99.99%, a maximum recovery time objective (RTO) of four hours, and a recovery point objective (RPO) of 10 minutes.
You plan to migrate to Azure.
You need to design an SAP landscape for the company.
Which options meet the company's requirements?
* A. Azure virtual machines and SLES for SAP application servers
* SAP HANA on Azure (Large Instances) that uses SAP HANA system replication for high availability and disaster recovery
* B. ASCS/ERS and SLES clustering that uses the Pacemaker fence agent
* SAP application servers deployed to an Azure Availability Zone
* SAP HANA on Azure (Large Instances) that uses SAP HANA system replication for database high availability and disaster recovery
* C. SAP application instances deployed to an Azure Availability Set
* SAP HANA on Azure (Large Instances) that uses SAP HANA system replication for database high availability and disaster recovery
* D. ASCS/ERS and SLES clustering that uses the Azure fence agent
* SAP application servers deployed to an Azure Availability Set
* SAP HANA on Azure (Large Instances) that uses SAP HANA system replication for database high availability and disaster recovery
Answer:
Explanation:
B
Explanation:
With Availability Zones, Azure offers industry best 99.99% VM uptime SLA.
References:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-faqs
NEW QUESTION 64
This question requires that you evaluate the underlined BOLD text to determine if it is correct.
You have an Azure resource group that contains the virtual machines for an SAP environment.
You must be assigned the Contributor role to grant permissions to the resource group.
Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
- A. Managed Identity Contributor
- B. No change is needed
- C. User Access Administrator
- D. Security Admin
Answer: C
Explanation:
Contributor - Can create and manage all types of Azure resources but can't grant access to others.
User Access Administrator - Lets you manage user access to Azure resources.
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/overview
NEW QUESTION 65
You plan to migrate an SAP environment to Azure.
You need to create a design to facilitate end-user access to SAP applications over the Internet, while restricting user access to the virtual machines of the SAP application servers.
What should you include in the design?
- A. Configure a public IP address for each SAP application server
- B. Use an SAP Web Dispatcher to route all incoming connections
- C. Deploy an internal Azure Standard Load Balancer for incoming connections
- D. Configure point-to-site VPN connections for each user
Answer: B
Explanation:
1. A public internet user can reach the SAP Web-Dispatcher over port 443
2. The SAP Web-Dispatcher can reach the SAP Application server over port 443
3. The App Subnet accepts traffic on port 443 from 10.0.0.0/24
4. The SAP Application server sends traffic on port 30015 to the SAP DB server
5. The DB subnet accepts traffic on port 30015 from 10.0.1.0/24.
6. Public Internet Access is blocked on both App Subnet and DB Subnet.
References:
https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/
NEW QUESTION 66
DRAG DROP
Your on-premises network contains an Active Directory domain.
You have an SAP environment on Azure that runs on SUSE Linux Enterprise Server (SLES) servers.
You configure the SLES servers to use domain controllers as their NTP servers and their DNS servers.
You need to join the SLES servers to the Active Directory domain.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Answer:
Explanation:
Explanation:
Step 1: Install the samba-winbind package
Install samba-winbind
Step 2: Add realm details to /etc/krb5.conf and /etc/samba/smb.conf
Edit files - best way to do this is to use yast on test machine and copy files from it In following examples you need to replace EXAMPLE/EXAMPLE.COM/.example.com with your values/settings
/etc/samba/smb.conf
[global]
workgroup = EXAMPLE
usershare allow guests = NO #disallow guests from sharing
idmap gid = 10000-20000
idmap uid = 10000-20000
kerberos method = secrets and keytab
realm = EXAMPLE.COM
security = ADS
template homedir = /home/%D/%U
template shell = /bin/bash
winbind offline logon = yes
winbind refresh tickets = yes
/etc/krb5.conf
[libdefaults]
default_realm = EXAMPLE.COM
clockskew = 300
[realms]
EXAMPLE.COM = {
kdc = PDC.EXAMPLE.COM
default_domain = EXAMPLE.COM
admin_server = PDC.EXAMPLE.COM
}
..
Step 3: Run net ads join -U administrator
Join the SLES 12 Server to the AD domain
References:
https://www.suse.com/support/kb/doc/?id=7018461
NEW QUESTION 67
You have a n SAP environment on Azure.
Your on-premises network uses a 1-Gbps ExpresRoute circuit to connect to Azure Private peering is enabled on the circuit. The default route (0.0.0.0/0) from the on-premises network is advertised You need to resolve the issue without modifying the ExpresRoute circuit. The solution must minimize administrative effort. What should you do?
- A. Change the backup solution to use a third-party software that can write to the Blob storage.
- B. Create a user-defined route tint redirects traffic to the Blob storage.
- C. Create an application security group.
- D. Enable virtual network service endpoints.
Answer: B
NEW QUESTION 68
For each of the following statements, select yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 69
Before putting the SAP environment on Azure into production, which command should you run to ensure that the virtual machine disks meet the business requirements? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Scenario: Ensure that all the production databases can withstand the failure of an Azure region.
References:
https://docs.microsoft.com/en-us/powershell/module/az.compute/get-azvmimage
NEW QUESTION 70
......
Details of Associated Certification
The Microsoft AZ-120 test is linked with an upper-level role-based certification, named the Microsoft Certified: Azure for SAP Workloads Specialty. Acquiring this designation is the most viable way to earn established acquaintance about service and resources adjusted to accomplish perfect resiliency, performance, and monitoring.
Best updated resource for AZ-120 Online Practice Exam: https://www.actual4exams.com/AZ-120-valid-dump.html