Verified AZ-120 dumps Q&As - 2025 Latest AZ-120 Download
Updated 100% Cover Real AZ-120 Exam Questions - 100% Pass Guarantee
Obtaining awareness of world-class SAP and expertise in Microsoft solutions is easy if one has managed to weave success in the Microsoft AZ-120 exam. Associated with one specialty certification, this exam paves the path for an assuring career.
NEW QUESTION # 34
You have an SAP HANA on Azure (Large Instances) deployment.
You need to generate hearth check log files for the Deployment.
What should you do?
- A. From the Azure portal, select New support request.
- B. From a SSH session on the HANA Large instance node.
Run/var/waagent/Microsoft.AzureCAT.AzureEnhancedMonitoring.MonitorX64Linux-1.0.082/AzuredMonitoring -monitoring. - C. From A SSH session on the HANA large instances node, run/opt/sgi/health_check/microsoft_tdi-sh.
- D. From the Azure portal, select Diagnose and solve problems.
Answer: C
NEW QUESTION # 35
You have an Azure subscription.
You plan to deploy a SAP NetWeaver landscape that will use SQL Server on Azure virtual machines. The solution must meet the following requirements:
* The SAP application and database tiers must reside in the same Azure zone.
* The application tier in the Azure virtual machines must belong to the same Availability Set.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
Answer:
Explanation:
Explanation:
Text Description automatically generated with medium confidence
Step 1: Create a proximity placement group
A proximity placement group is a logical grouping of Azure resources within the same Azure data center in order to reduce latency.
Step 2: Create an Availability Set
Create an availability set that references the Azure proximity group.
By adding the availability sets to proximity placement groups, the network latencies are considerably reduced, thereby improving the overall performance.
Step 3: Deploy SQL Server on Azure Virtual machines
Step 4: Deploy the application tier in the Azure virtual machines
Deploy the application layer VMs by referencing the availability set and the proximity placement group.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-proximity-placement-scenarios
NEW QUESTION # 36
You have an Azure subscription. The subscription contains two virtual machines named SQL1 and SQL2 that host a Microsoft SQL Server 2019 Always On availability group named AOG1.
You plan to deploy an SAP NetWeaver system that will have a database tier hosted on AOG1.
You need to encrypt the Azure virtual machine disks and the SQL Server database. The solution must meet the following requirements:
* The operating system disk, data disk, and the temporary disk of the virtual machines must be encrypted.
* SQL Server encryption keys must be stored on-premises.
Which type of encryption should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 37
You have a Recovery Services vault backup policy for SAP HANA on an Azure virtual machine as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Answer selected as in image below.
NEW QUESTION # 38
You have an Azure subscription that contains the resources shown in the following table.
You plan to deploy an SAP production landscape.
You create the following PowerShell Desired State Configuration (DSC) and publish the DSC configuration to corpsoftware.
You need to deploy the DSC configuration to VM1.
How should you compete the command? To answer, select the appropriate options in the answer area NOTE:
Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 39
You have an Azure AD tenant named contoso.com that syncs to an Active Directory domain hosted on an Azure virtual machine.
You plan to deploy an SAP NetWeaver landscape on Azure that will use SUSE Linux Enterprise Server (SLES).
You need to recommend an authentication solution for the following, scenarios. The solution must support Azure Multi-Factor Authentication (MFA);
* Administrators sign in to SLES Azure virtual machines.
* A user signs in to an SAP NetWeaver application.
What should you recommend for each scenario? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 40
You have an Azure AD tenant named contoso.com that syncs to an Active Directory domain hosted on an Azure virtual machine.
You plan to deploy an SAP NetWeaver landscape on Azure that will use SUSE Linux Enterprise Server (SLES).
You need to recommend an authentication solution for the following, scenarios. The solution must support Azure Multi-Factor Authentication (MFA);
* Administrators sign in to SLES Azure virtual machines.
* A user signs in to an SAP NetWeaver application.
What should you recommend for each scenario? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 41
You have an Azure subscription.
You deploy Active Directory domain controllers to Azure virtual machines.
You plan to deploy Azure for SAP workloads.
You plan to segregate the domain controllers from the SAP systems by using different virtual networks.
You need to recommend a solution to connect the virtual networks. The solution must minimize costs.
What should you recommend?
- A. a site-to-site VPN
- B. ExpressRoute
- C. virtual network peering
- D. user-defined routing
Answer: D
Explanation:
You can create custom, or user-defined, routes in Azure to override Azure's default system routes, or to add additional routes to a subnet's route table. In Azure, you create a route table, then associate the route table to zero or more virtual network subnets.
NEW QUESTION # 42
You have a large and complex SAP environment on Azure.
You are designing a training landscape that will be used 10 times a year.
You need to recommend a solution to create the training landscape. The solution must meet the following requirements:
Minimize the effort to build the training landscape.
Minimize costs.
In which order should you recommend the actions be performed for the first training session? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Build
2 - Snapshot
3 - Custom Image
4 - Deliver Training
5 - Shutdown
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/planning-guide
NEW QUESTION # 43
You are implementing a highly available deployment of SAP HANA on Azure virtual machines. You need to ensure that the deployment meets the following requirements:
* Supports host auto-failover
* Minimizes cost
How should you configure the highly available components of the deployment? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 44
This question requires that you evaluate the underlined BOLD text to determine if it is correct.
You have an Azure resource group that contains the virtual machines for an SAP environment.
You must be assigned the Contributor role to grant permissions to the resource group.
Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
- A. Security Admin
- B. No change is needed
- C. Managed Identity Contributor
- D. User Access Administrator
Answer: D
Explanation:
Contributor - Can create and manage all types of Azure resources but can't grant access to others.
User Access Administrator - Lets you manage user access to Azure resources.
Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/overview
NEW QUESTION # 45
You have ah SAP environment on Azure that contains a single-tenant SAP NANA server at instance 03.
You need to monitor the network throughput from an SAP application server to the SAP HANA server.
How should you complete the script? To answer, select the appropriate options in the answer are.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 46
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You plan to migrate an SAP HANA instance to Azure.
You need to gather CPU metrics from the last 24 hours from the instance.
Solution: You use Monitoring from the SAP HANA Cockpit.
Does this meet the goal?
- A. Yes
- B. No
Answer: A
Explanation:
The SAP HANA cockpit provides a single point of access to a range of SAP HANA administration and monitoring tasks. It is used to monitor and ensure the overall health of the system.
The HANA Monitoring dashboard also visualizes key HANA Metrics of SAP HANA system.
Reference:
https://developers.sap.com/tutorials/dt-monitoring-hana-part1.html
https://help.sap.com/viewer/afa922439b204e9caf22c78b6b69e4f2/2.10.0.0/en-US
https://www.hanatutorials.com/p/hana-monitoring-dashboard.html
NEW QUESTION # 47
You deploy an SAP environment on Azure.
Your company has a Service Level Agreement (SLA) of 99.99% for SAP.
You implement Azure Availability Zones that have the following components:
* Redundant SAP application servers
* ASCS/ERS instances that use a failover cluster
* Database high availability that has a primary instance and a secondary instance You need to validate the load distribution to the application servers. What should you use?
- A. Azure Monitor
- B. SAPControl
- C. SAP Web Dispatcher
- D. SAP Solution Manager
Answer: B
Explanation:
Explanation
Load balancers. These are used to distribute traffic to virtual machines in the application-tier subnet. For high availability, use the built-in SAP Web Dispatcher, Azure Load Balancer, or network appliances, depending on the traffic type (such as HTTP or SAPGUI) or the required network services, such as Secure Sockets Layer (SSL) termination.
Reference:
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/sap/sap-netweaver
NEW QUESTION # 48
You have an Azure alert rule and action group as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 49
You plan to deploy a scale-out SAP HANA deployment on Azure virtual machines that will contain a standby node.
You need to recommend a storage solution for the deployment.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point
Answer:
Explanation:
Explanation
NEW QUESTION # 50
You plan to migrate an SAP environment to Azure.
You need to create a design to facilitate end-user access to SAP applications over the Internet, while restricting user access to the virtual machines of the SAP application servers.
What should you include in the design?
- A. Configure point-to-site VPN connections for each user
- B. Configure a public IP address for each SAP application server
- C. Deploy an internal Azure Standard Load Balancer for incoming connections
- D. Use an SAP Web Dispatcher to route all incoming connections
Answer: D
Explanation:
Explanation
* A public internet user can reach the SAP Web-Dispatcher over port 443
* The SAP Web-Dispatcher can reach the SAP Application server over port 443
* The App Subnet accepts traffic on port 443 from 10.0.0.0/24
* The SAP Application server sends traffic on port 30015 to the SAP DB server
* The DB subnet accepts traffic on port 30015 from 10.0.1.0/24.
* Public Internet Access is blocked on both App Subnet and DB Subnet.
References:
https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/
NEW QUESTION # 51
for each of the following statements, select Yes if the statement is true. Otherwise. select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 52
You have an SAP landscape on Azure.
You plan to deploy a new SAP application server by using an Azure Resource Manager template.
You need to ensure that all new servers are deployed with Azure Disk Encryption enabled.
How should you complete the relevant component of the template? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Graphical user interface, text, application, email Description automatically generated
Box 1: extensions
Azure Disk Encryption can be enabled via Azure PowerShell or Azure CLI. That is normally seen in remediation. In a real-world scenario you would like to see a virtual machine during its creation include disk encryption process. This is technically possible thanks to Disk Encryption VM extension.
Box 2: AzureDiskEncryption
Example:
"type": "Microsoft.Compute/virtualMachines/extensions",
"name": "[concat(parameters('vmName'),'/diskEncryption')]",
"apiVersion": "2019-03-01",
"location": "[parameters('location')]",
"dependsOn": [
"[resourceId('Microsoft.Compute/virtualMachines/', parameters('vmName'))]"
],
"properties": {
"publisher": "Microsoft.Azure.Security",
"type": "AzureDiskEncryption",
Reference:
https://azsec.azurewebsites.net/2019/12/28/azure-disk-encryption-arm-template-for-windows-vm/
NEW QUESTION # 53
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: No
To log in to a Linux VM with Azure AD credentials, install the Azure Active Directory login VM extension.
Note: Azure AD Connect is the Microsoft tool designed to meet and accomplish your hybrid identity goals.
Box 2: NO
Box 3: No
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/deployment-guide
NEW QUESTION # 54
You have an Azure virtual machine named VM1 that runs SUSE Linux Enterprise Server (SLE5) and hosts an SAP NetWeaver application server.
You need to install the Azure VM extension for SAP solutions on VM1.
Which three actions should you perform in sequence? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
NEW QUESTION # 55
You have an Azure Active Directory (Azure AD) tenant and an SAP Cloud Platform Identity Authentication Service tenant.
You need to ensure that users can use their Azure AD credentials to authenticate to SAP applications and services that trust the SAP Cloud Platform Identity Authentication Service tenant.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Table Description automatically generated
Step 1: Create and configure an enterprise application in the Azure AD tentant To configure the integration of SAP Cloud Platform Identity Authentication into Azure AD, you need to add SAP Cloud Platform Identity Authentication from the gallery to your list of managed SaaS apps.
* Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
* On the left navigation pane, select the Azure Active Directory service.
* Navigate to Enterprise Applications and then select All Applications.
* To add new application, select New application.
* In the Add from the gallery section, type SAP Cloud Platform Identity Authentication in the search box.
* Select SAP Cloud Platform Identity Authentication from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
Graphical user interface, text, application Description automatically generated
Step 2: Download the single sign-on (SSO) metadata from the Azure AD tenant.
Download single sign-on metadata from Azure Active Directory.
Step 3: Create and configure a corporate identity provider.
Create corporate identity provider.
Step 4: Download the SAP Cloud Platform Identity Authentication Service tenant metadata.
Download Identity Authentication service tenant metadata.
Step 5: Upload the SAP Cloud Platform Identity Authentication Service tenant metadata to Azure AD tenant.
Upload Identity Authentication service tenant metadata to Azure Active Directory.
You have already uploaded the metadata file from Azure Active Directory to Identity Authentication service.
It's time to do it the other way round now and upload the metadata of Identity Authentication service to Azure Active Directory.
Reference:
https://developers.sap.com/tutorials/cp-ias-azure-ad.html
NEW QUESTION # 56
You have an on-premises SAP environment.
Backups are performed by using tape backups. There are 50 TB of backups.
A Windows file server has BMP images of checks used by SAP Finance. There are 9 TB of images.
You need to recommend a method to migrate the images and the tape backups to Azure. The solution must maintain continuous replication of the images.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Tape backups: Azure DataBox
The Microsoft Azure Data Box cloud solution lets you send terabytes of data into Azure in a quick, inexpensive, and reliable way. The secure data transfer is accelerated by shipping you a proprietary Data Box storage device. Each storage device has a maximum usable storage capacity of 80 TB and is transported to your datacenter through a regional carrier. The device has a rugged casing to protect and secure data during the transit.
File server: Azure Storage Explorer
Azure Storage Explorer is an application which helps you to easily access the Azure storage account through any device on any platform, be it Windows, MacOS, or Linux. You can easily connect to your subscription and manipulate your tables, blobs, queues, and files.
NEW QUESTION # 57
Your on-premises network contains SAP and non-SAP applications. ABAP-based SAP systems are integrated with IDAP and use user name/password-based authentication for logon.
You plan to migrate the SAP applications to Azure.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 58
You have an on-premises SAP environment that runs on SUSE Linux Enterprise Server (SLES) servers and Oracle. The version of the SAP ERP system is 6.06 and the version of the portal is SAP NetWeaver 7.3.
You need to recommend a migration strategy to migrate the SAP ERP system and the portal to Azure. The solution must be hosted on SAP HANA.
What should you recommend? To answer, drag the appropriate tools to the correct components. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
1) SUM+DMO+System update.
2) Heterogeneous system copy.
Reference:
https://blogs.sap.com/2017/10/05/your-sap-on-azure-part-2-dmo-with-system-move/
NEW QUESTION # 59
......
Use Real Dumps - 100% Free AZ-120 Exam Dumps: https://www.free4dump.com/AZ-120-braindumps-torrent.html
Realistic AZ-120 Dumps Latest Practice Tests Dumps: https://drive.google.com/open?id=1lL2JgUC8NNPjz-I6lPVmG7MOcVTH5jU4