106 free Microsoft AZ-120 practice questions from the CertStash pack of 424, each with the correct answer and a full explanation. The rule is the same for every exam: ten free on the product page, 106 free here, all 424 in the pack, and each step includes the one before it.
Get all 424 questions (US$39) · Download the first 10 as a PDF
Question 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to migrate an SAP HANA instance to Azure. You need to gather CPU metrics from the last 24 hours from the instance. Solution: You run SAP HANA Quick Sizer. Does this meet the goal?
Show answer and explanation
Correct answer: B. No
SAP HANA Quick Sizer is a sizing tool used for capacity planning and recommendation of SAP HANA systems, not a tool for gathering historical CPU metrics from an existing instance. It provides sizing guidance based on input parameters rather than collecting actual performance data from the last 24 hours.
Why the other options are wrong
- A. Quick Sizer is a planning tool, not a monitoring tool for collecting historical metrics.
Question 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to migrate an SAP HANA instance to Azure. You need to gather CPU metrics from the last 24 hours from the instance. Solution: You use DBA Cockpit from SAP GUI. Does this meet the goal?
Show answer and explanation
Correct answer: A. Yes
DBA Cockpit in SAP GUI is a comprehensive database administration tool that provides access to SAP HANA performance metrics, including CPU utilization over historical periods. It can retrieve and display CPU metrics from the last 24 hours or longer timeframes from the SAP HANA instance.
Why the other options are wrong
- B. DBA Cockpit is specifically designed to monitor and collect database metrics including CPU data.
Question 3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a complex SAP environment that has both ABAP- and Java-based systems. The current on-premises landscapes are based on SAP NetWeaver 7.0 (Unicode and Non-Unicode) running on Windows Server and Microsoft SQL Server. You need to migrate the SAP environment to a HANA-certified Azure environment. Solution: You deploy a new environment to Azure that uses SAP NetWeaver 7.4. You export the databases from the on-premises environment, and then you import the databases into the Azure environment. Does this meet the goal?
Show answer and explanation
Correct answer: B. No
Simply exporting and importing databases from SQL Server to a new SAP NetWeaver 7.4 environment does not address the core requirement of migrating to a HANA-certified environment. The solution must include a database platform migration from SQL Server to SAP HANA, which requires specific conversion tools and processes, not just a simple database export/import between environments running different database platforms.
Why the other options are wrong
- A. This approach ignores the requirement to migrate to HANA and only performs a version upgrade with database portability, which is insufficient for HANA certification.
Question 4
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a complex SAP environment that has both ABAP- and Java-based systems. The current on-premises landscapes are based on SAP NetWeaver 7.0 (Unicode and Non-Unicode) running on Windows Server and Microsoft SQL Server. You need to migrate the SAP environment to a HANA-certified Azure environment. Solution: You upgrade to SAP NetWeaver 7.4, and then you migrate SAP to Azure by using Azure Site Recovery. Does this meet the goal?
Show answer and explanation
Correct answer: A. Yes
This solution meets the goal by first upgrading SAP NetWeaver 7.0 to version 7.4, which is HANA-certified, and then using Azure Site Recovery to migrate the entire infrastructure to Azure. Azure Site Recovery can replicate and migrate the on-premises environment to Azure, maintaining the upgraded NetWeaver 7.4 configuration in a HANA-certified state.
Why the other options are wrong
- B. The combination of upgrading to a HANA-certified version and using Azure Site Recovery for infrastructure migration is a valid and supported approach.
Question 5
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a complex SAP environment that has both ABAP- and Java-based systems. The current on-premises landscapes are based on SAP NetWeaver 7.0 (Unicode and Non-Unicode) running on Windows Server and Microsoft SQL Server. You need to migrate the SAP environment to a HANA-certified Azure environment. Solution: You migrate SAP to Azure by using Azure Site Recovery, and then you upgrade to SAP NetWeaver 7.4. Does this meet the goal?
Show answer and explanation
Correct answer: B. No
Migrating the SAP NetWeaver 7.0 environment to Azure using Azure Site Recovery first, and then upgrading to NetWeaver 7.4, does not meet the goal because the environment must be HANA-certified before migration. Azure Site Recovery would migrate the non-HANA certified configuration, and upgrading after migration in Azure does not ensure proper HANA certification and optimization of the migrated infrastructure.
Why the other options are wrong
- A. The incorrect sequence of migrating before upgrading to a HANA-certified version violates SAP migration best practices and certification requirements.
Question 6
You have an on-premises SAP environment hosted on VMware VSphere that uses Microsoft SQL Server as the database platform. You plan to migrate the environment to Azure. The database platform will remain the same. You need gather information to size the target Azure environment for the migration. What should you use?
Show answer and explanation
Correct answer: A. the SAP EarlyWatch Alert report
The SAP EarlyWatch Alert report provides detailed analysis of current SAP system performance, resource utilization, and capacity information from the on-premises environment. This report is specifically designed to gather the metrics and insights needed to properly size a target environment for migration, regardless of database platform.
Why the other options are wrong
- B. Azure Advisor focuses on Azure-specific recommendations and cost optimization, not on analyzing current SAP system performance metrics needed for sizing.
- C. The SAP HANA sizing report is specifically for HANA systems, but this environment uses SQL Server as the database platform.
- D. Azure Stack Edge is an edge computing device for data processing and transfer, not a tool for gathering sizing information for SAP environments.
Question 7
You have an existing SAP production landscape that uses SAP HANA databases. You plan to migrate the landscape to Azure. Which Azure virtual machine series will be Azure supported for the production SAP HANA database deployment?
Show answer and explanation
Correct answer: C. M-Series
The M-Series virtual machines in Azure are specifically certified and supported by Microsoft and SAP for production SAP HANA database deployments. These machines are optimized for in-memory workloads with high memory-to-CPU ratios and are the only series officially supported for production HANA environments on Azure.
Why the other options are wrong
- A. F-Series machines are compute-optimized and not suitable for the demanding in-memory requirements of SAP HANA.
- B. A-Series machines are general-purpose and do not meet the performance and memory requirements for production HANA databases.
- D. N-Series machines are GPU-optimized and not designed for SAP HANA production workloads.
Question 8
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a complex SAP environment that has both ABAP- and Java-based systems. The current on-premises landscapes are based on SAP NetWeaver 7.0 (Unicode and Non-Unicode) running on Windows Server and Microsoft SQL Server. You need to migrate the SAP environment to an Azure environment. Solution: You migrate the SAP environment as is to Azure by using Azure Site Recovery. Does this meet the goal?
Show answer and explanation
Correct answer: B. No
Migrating the SAP NetWeaver 7.0 environment as-is to Azure using Azure Site Recovery does not meet the goal because the environment is not HANA-certified. The requirement explicitly states migration to a HANA-certified Azure environment. Simply replicating the on-premises SQL Server-based SAP NetWeaver 7.0 configuration does not achieve HANA certification, which requires upgrading to at least NetWeaver 7.4 and migrating the database platform to SAP HANA.
Why the other options are wrong
- A. An as-is migration without upgrading to a HANA-certified version fails to meet the stated requirement for HANA-certified environment.
Question 9
You have an on-premises SAP NetWeaver application server and SAP HANA database deployment. You plan to migrate the on-premises deployment to Azure. You provision new Azure virtual machines to host the application server and database roles. You need to initiate SAP Database Migration Option (DMO) with System Move. On which server should you start Software Update Manager (SUM)?
Show answer and explanation
Correct answer: D. the on-premises application server
When performing SAP Database Migration Option (DMO) with System Move, Software Update Manager (SUM) must be started on the on-premises application server. This is the source system from which the migration process is initiated. SUM orchestrates the migration by connecting to both the source application server and preparing the target systems in Azure.
Why the other options are wrong
- A. The target application server VM in Azure should not host SUM; it receives the migrated system.
- B. The database VM is not the appropriate location to initiate SUM for a system move operation.
- C. While the on-premises database exists, SUM is started from the application server tier, not the database server.
Question 10
You have an on-premises SAP NetWeaver deployment. The deployment has a DB2 data store that contains a 5-TB SAP database. You plan to migrate the deployment to SQL Server on an Azure virtual machine. You need to optimize the performance of transaction log write operations during the migration. The solution must NOT affect the I/O quota of the virtual machine. What should you do?
Show answer and explanation
Correct answer: B. Place the transaction logs on a striped volume of Premium SSD disks.
Placing transaction logs on a striped volume of Premium SSD disks optimizes write performance while maintaining predictable I/O characteristics. This approach distributes the I/O load across multiple disks, improving throughput and latency for transaction log writes. Premium SSDs provide consistent performance without affecting the VM's I/O quota since they operate independently of the temporary disk or standard disk I/O limits.
Why the other options are wrong
- A. The temporary disk is not durable and would cause data loss during VM restarts or maintenance events.
- C. While Ultra disks offer high performance, they are more expensive and not necessary for this scenario; Premium SSD striping is sufficient.
- D. Write cache can cause data durability issues and does not optimize I/O quota usage as effectively as disk striping.
What people say about the full AZ-120 pack 5.0 from 3
Was able to pass my exam with a score of 880! Pretty impressive, yes? Well, these AZ-120 dumps from Certstash had a big role to play in my success. The question bank was extensive and the answers were properly explained! Pretty great resource!
These AZ-120 dumps really surprised me because wasn’t expecting such decent quality at such a reasonable price. Left me shook in the best way possible! Totally recommended if you are taking the Planning and Administering Azure for SAP Workloads exam soon.
Question 11
You plan to deploy an SAP environment on Azure that will use Azure Availability Zones. Which load balancing solution supports the deployment?
Show answer and explanation
Correct answer: B. Azure Standard Load Balancer
Azure Standard Load Balancer is the only load balancing solution that fully supports deployment with Azure Availability Zones. It provides zone-redundancy by default and can distribute traffic across multiple zones, making it the appropriate choice for highly available SAP environments using Availability Zones.
Why the other options are wrong
- A. Azure Basic Load Balancer does not support Availability Zones and is not recommended for production SAP environments.
- C. Application Gateway v1 SKU does not support Availability Zones; only Application Gateway v2 SKU has zone support.
Question 12
You are deploying an SAP environment on Azure that will use an SAP HANA database server. You provision an Azure virtual machine for SAP HANA by using the M64s virtual machine SKU. You need to set the swap space by using the Microsoft Azure Linux Agent (waagent) configuration file. Which two settings should you configure? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Show answer and explanation
Correct answer: C, D. ResourceDisk.SwapSizeMB=229376; ResourceDisk.EnableSwap=y
ResourceDisk.EnableSwap=y enables swap space on the temporary resource disk, and ResourceDisk.SwapSizeMB=229376 sets the appropriate swap size in megabytes for the M64s SKU. These two waagent configuration parameters are required to properly allocate and enable swap space for SAP HANA memory management on Azure Linux virtual machines.
Why the other options are wrong
- A. ResourceDisk.EnableSwapEncryption controls swap encryption but is not required as a primary configuration for enabling swap space.
- B. AutoUpdate.Enabled controls automatic agent updates and is unrelated to swap space configuration.
Question 13
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You deploy SAP HANA on Azure (Large Instances). You need to back up the SAP HANA database to Azure. Solution: You configure DB13 to back up directly to a local disk. Does this meet the goal?
Show answer and explanation
Correct answer: B. No
Backing up SAP HANA directly to a local disk does not meet enterprise backup requirements. For SAP HANA on Azure Large Instances, backups must be configured to use Azure Blob Storage or other Azure backup solutions through DB13 to ensure data protection, compliance, and disaster recovery capabilities. Local disk backups are insufficient for production environments.
Why the other options are wrong
- A. Local disk backup is not an appropriate solution for SAP HANA on Large Instances as it does not provide proper data protection or meet enterprise standards.
Question 14
You have an SAP landscape on Azure that contains a virtual machine named VM1. VM1 hosts the central services application. You need to encrypt VM1. The solution must meet the following requirements: • All disks must be encrypted. • The impact on the CPU of VM1 must be minimized. • The manual rotation of encryption keys must be supported. Which type of encryption should you use?
Show answer and explanation
Correct answer: B. Encryption at rest with customer-managed keys
Encryption at rest with customer-managed keys enables manual key rotation while providing full disk encryption with minimal CPU overhead through hardware-accelerated encryption. This satisfies the requirements for encrypting all disks, minimizing CPU impact, and supporting manual key rotation.
Why the other options are wrong
- A. Platform-managed keys do not support manual key rotation as keys are automatically managed by Azure.
- C. Azure Disk Encryption has higher CPU impact compared to server-side encryption at rest and may not be optimal for minimizing CPU usage.
- D. Encryption at host provides encryption but does not support manual key rotation in the same manner and may have different operational characteristics.
Question 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to migrate an SAP HANA instance to Azure. You need to gather CPU metrics from the last 24 hours from the instance. Solution: You query views from SAP HANA Studio. Does this meet the goal?
Show answer and explanation
Correct answer: A. Yes
Querying views from SAP HANA Studio does meet the goal of gathering CPU metrics from the last 24 hours. SAP HANA Studio provides access to system views and monitoring data that includes historical performance metrics, including CPU utilization data for the specified timeframe. The views available in SAP HANA Studio contain the necessary diagnostic and performance information to retrieve recent CPU metrics.
Why the other options are wrong
- B. SAP HANA Studio does provide access to system views containing CPU metrics and performance history data.
Question 16
Your company has an on-premises SAP environment. Recently, the company split into two companies named Litware, Inc. and Contoso, Ltd. Litware retained the SAP environment. Litware plans to export data that is relevant only to Contoso. The export will be 1.5 TB. Contoso builds a new SAP environment on Azure. You need to recommend a solution for Litware to make the data available to Contoso in Azure. The solution must meet the following requirements: • Minimize the impact on the network. • Minimize the administrative effort for Litware. What should you include in the recommendation?
Show answer and explanation
Correct answer: C. Azure Data Box
Azure Data Box is the optimal solution for transferring 1.5 TB of data with minimal network impact and administrative effort. It provides a physical device that can be shipped with data, avoiding large network bandwidth consumption. This approach minimizes network strain on Litware's infrastructure and reduces administrative overhead compared to managing network transfers. Azure Import/Export requires more manual preparation, Azure Migrate is designed for infrastructure migration not data export, and Azure Site Recovery is for disaster recovery replication.
Why the other options are wrong
- A. Azure Import/Export requires preparing disks and more administrative effort than Data Box.
- B. Azure Migrate is designed for migrating entire infrastructure and systems, not exporting specific data subsets.
- D. Azure Site Recovery provides disaster recovery and replication, not bulk data export solutions.
Question 17
You are designing an authentication solution for SAP Business Technology Platform (BTP) software as a service (SaaS) applications. The solution will use trust configurations towards SAP Cloud Identity Services - Identity Authentication Service (IAS) and Microsoft Entra ID. You plan to use Microsoft Entra ID to manage all identities. Which protocol should you recommend to communicate between SAP BTP and Microsoft Entra ID?
Show answer and explanation
Correct answer: C. SAML 2.0
SAML 2.0 is the recommended protocol for establishing trust between SAP Business Technology Platform and Microsoft Entra ID for SaaS applications. SAML 2.0 is the standard protocol for identity federation in enterprise environments and is supported by both SAP BTP's trust configuration capabilities and Microsoft Entra ID for managing identities across cloud platforms.
Why the other options are wrong
- A. WS-Federation is primarily used in on-premises Active Directory Federation Services environments, not cloud-to-cloud SaaS integrations.
- B. WS-Trust is a legacy protocol for token exchange and is not the recommended approach for modern SAP BTP and Microsoft Entra ID integration.
- D. OpenID Connect, while modern, is primarily for consumer-facing applications and is not the standard for enterprise SAP BTP federation scenarios.
Question 18
You have an Azure subscription. You plan to deploy an SAP production landscape on Azure. You need to select a support plan. The solution must meet the following requirements: • Respond to critical impact incidents within one hour. • Minimize costs. What should you choose?
Show answer and explanation
Correct answer: A. Standard
The Standard support plan provides a one-hour response time for critical business impact incidents, meeting the stated requirement. It offers a good balance between cost and response capability for production SAP landscapes. While Premier provides faster response, it is significantly more expensive and unnecessary when Standard meets the SLA requirement of one-hour response.
Why the other options are wrong
- B. Premier support is more expensive than necessary and not required to meet the one-hour response requirement.
- C. Professional Direct support does not meet the one-hour response time for critical incidents.
- D. Basic support does not include any incident response guarantee and is unsuitable for production SAP systems.
Question 19
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs SUSE Linux Enterprise Server (SLES) and was created by using an Azure Marketplace image. You plan to deploy four virtual machines based on VM1 that will have the SAP Web Dispatcher role. You need to create a generalized image of VM1. What should you do first?
Show answer and explanation
Correct answer: D. Run waagent.
Running waagent (the Azure Linux VM agent) with deprovision commands is the first step to create a generalized image of a Linux VM. The waagent tool removes system-specific information and prepares the VM for image capture. This command must be executed before creating a generalized image from which multiple VMs can be deployed.
Why the other options are wrong
- A. The Custom Script Extension is for running scripts on already-deployed VMs, not for image generalization.
- B. Sysprep is a Windows utility and is not applicable to SLES Linux systems.
- C. The Azure Linux VM agent is typically already installed on Marketplace images; waagent commands are what prepare it for generalization.
Question 20
You have an SAP environment on Azure that uses multiple subscriptions. To meet GDPR requirements, you need to ensure that virtual machines are deployed only to the West Europe and North Europe Azure regions. Which Azure components should you use?
Show answer and explanation
Correct answer: C. Azure management groups and Azure Policy
Azure Management Groups allow you to organize multiple subscriptions hierarchically, and Azure Policy can enforce rules across all subscriptions within a management group. Together, they enable centralized enforcement of regional deployment restrictions required for GDPR compliance, ensuring virtual machines are deployed only to West Europe and North Europe across all subscriptions.
Why the other options are wrong
- A. Resource locks prevent accidental deletion but do not enforce regional restrictions, and the Compliance admin center is not an Azure component for deployment policy enforcement.
- B. Resource groups and RBAC operate at the subscription level and cannot efficiently enforce regional policies across multiple subscriptions.
- D. Security Center and Azure AD groups are for security monitoring and identity management, not for enforcing regional deployment constraints.
Question 21
You plan to deploy an SAP environment on Azure. You plan to store all SAP connection strings securely in Azure Key Vault without storing credentials on the Azure virtual machines that host SAP. What should you configure to allow the virtual machines to access the key vault?
Show answer and explanation
Correct answer: C. a Managed Service Identity (MSI)
Managed Service Identity (MSI) enables Azure virtual machines to authenticate to Azure Key Vault without storing credentials locally. MSI provides an identity for VMs that can be granted RBAC permissions to access Key Vault, allowing secure retrieval of SAP connection strings and secrets.
Why the other options are wrong
- A. Azure AD PIM manages privileged access but does not directly enable VM authentication to Key Vault.
- B. While RBAC is used alongside MSI for permissions, MSI itself is the authentication mechanism required.
- D. Custom Script Extension executes scripts but does not provide the identity and authentication mechanism needed for Key Vault access.
Question 22
You are designing an SAP on Azure production landscape. The landscape must ensure service availability in the event of an Azure datacenter failure. What should you include in the design?
Show answer and explanation
Correct answer: A. an availability zone
Availability Zones provide protection against Azure datacenter failures by distributing resources across physically separate datacenters within a region. They ensure service continuity if an entire datacenter becomes unavailable, which is the requirement for production landscape resilience.
Why the other options are wrong
- B. Fusion groups are not an Azure construct and do not provide datacenter failure protection.
- C. Availability Sets protect against hardware failures within a single datacenter but do not protect against entire datacenter failures.
- D. Proximity placement groups reduce latency but do not provide protection against datacenter outages.
Question 23
You are planning a small-scale deployment of an SAP HANA on Azure (Large Instances) landscape. You identify the costs of the virtual machine SKU required to host the HANA Large Instances landscape. Which additional costs will be incurred?
Show answer and explanation
Correct answer: B. an ExpressRoute circuit between the HANA Large Instances stamp and Azure
An ExpressRoute circuit is a mandatory additional cost when deploying SAP HANA on Azure (Large Instances). This dedicated network connection between the on-premises infrastructure and the HANA Large Instances stamp in Azure is required for connectivity and is billed separately from the HANA Large Instances compute resources themselves.
Why the other options are wrong
- A. Linux support contracts are not an additional cost requirement specifically for HANA Large Instances deployment.
- C. Site-to-Site VPN is not required for HANA Large Instances; ExpressRoute is the proper connectivity solution.
- D. Azure Rapid Response support is not a mandatory cost for HANA Large Instances; standard support options are available.
Question 24
You plan to deploy an SAP landscape on Azure. The landscape will use SAP HANA databases that run on Azure virtual machines. The landscape will contain four Azure virtual machines that will have the SAP Web Dispatcher role. You need to minimize network latency between the web dispatcher virtual machines and the HANA virtual machines. What should you do?
Show answer and explanation
Correct answer: A. Enable Accelerated Networking on the virtual machines.
Accelerated Networking reduces latency and jitter in network communication by enabling single-root I/O virtualization (SR-IOV) and hardware offloading on network interface cards. This directly minimizes network latency between Web Dispatcher and HANA virtual machines within Azure.
Why the other options are wrong
- B. Virtual Network Manager provides connectivity and segmentation policies but does not directly reduce latency.
- C. Large send offload improves throughput for bulk data transfers but does not minimize latency as effectively as Accelerated Networking.
- D. ExpressRoute Premium is used for on-premises connectivity and does not address intra-Azure latency between VMs.
Question 25
You have an Azure subscription. You plan to deploy an SAP production landscape in Azure. You need to use Azure NetApp Files as the storage solution for SAP HANA databases. How should you configure an application volume group to reduce latency?
Show answer and explanation
Correct answer: C. Configure a proximity placement group.
A proximity placement group reduces latency by ensuring the application volume group and compute resources are deployed as close as possible in the same datacenter. This physical proximity directly minimizes network latency for HANA database access.
Why the other options are wrong
- A. A dedicated virtual network provides isolation but does not inherently reduce latency compared to proximity placement.
- B. Availability zones provide fault tolerance but do not guarantee proximity and may increase latency if spread across zones.
- D. QoS policies manage bandwidth and performance characteristics but do not reduce latency from distance or network hops.
Question 26
You have an on-premises SAP production landscape. You plan to migrate to SAP on Azure. You need to generate an SAP Early Watch Alert report. What should you use?
Show answer and explanation
Correct answer: D. SAP Solution Manager
SAP Solution Manager is the platform for generating SAP Early Watch Alert reports. These reports provide proactive system health analysis, performance recommendations, and best practice assessments for SAP landscapes. SAP Solution Manager collects system data and generates these standardized reports. Azure Advisor provides Azure-specific recommendations, SAP HANA Cockpit is for HANA operational monitoring, and SAP Software Provisioning Manager is for system deployment and patching.
Why the other options are wrong
- A. Azure Advisor provides Azure infrastructure recommendations, not SAP-specific Early Watch Alert reports.
- B. SAP HANA Cockpit is an operational tool for HANA monitoring, not a reporting platform for Early Watch Alerts.
- C. SAP Software Provisioning Manager handles system deployment and patching, not health analysis reporting.
Question 27
Your on-premises network has a 100-Mbps internet connection and contains an SAP production landscape that has 14 TB of data files. You plan to migrate the on-premises SAP landscape to Azure. You need to migrate the data files to an Azure Files share. The solution must meet the following requirements: • Migrate the files within seven days. • Minimize administrative effort. • Minimize service outages. What should you use?
Show answer and explanation
Correct answer: C. Azure Data Box
Azure Data Box is the optimal solution for migrating 14 TB of data within seven days over a 100-Mbps internet connection. It provides a physical device that can be shipped on-site for offline data transfer, bypassing internet bandwidth limitations entirely. This approach minimizes both the time required (achievable within the seven-day window) and administrative effort compared to network-based methods.
Why the other options are wrong
- A. Azure Migrate is designed for infrastructure and application migration assessment, not optimized for bulk file transfer.
- B. AzCopy over a 100-Mbps connection would require approximately 1,120 hours (47 days) to transfer 14 TB, far exceeding the seven-day requirement.
- D. Azure Site Recovery is designed for disaster recovery and VM replication, not file migration to Azure Files shares.
Question 28
You are deploying an SAP production landscape to Azure. Your company's chief information security officer (CISO) requires that the SAP deployment complies with ISO 27001. You need to generate a compliance report for ISO 27001. What should you use?
Show answer and explanation
Correct answer: D. Azure Security Center
Azure Security Center (now Azure Defender) provides compliance reports and assessments for various standards including ISO 27001. It offers built-in compliance dashboards and detailed compliance reports that align SAP deployments with required security frameworks and generate auditable compliance documentation.
Why the other options are wrong
- A. Azure Log Analytics collects log data but is not the primary tool for generating compliance reports.
- B. Azure Monitor focuses on performance metrics and alerting rather than compliance reporting.
- C. Azure Active Directory manages identity and access but does not generate comprehensive compliance reports.
Question 29
You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant named contoso.com. You have an on-premises deployment of SAP Landscape Management (LaMa). You need to ensure that the on-premises LaMa deployment is authorized to manage the SAP resources provisioned to Sub1. What should you create first?
Show answer and explanation
Correct answer: C. an app registration in contoso.com
On-premises SAP Landscape Management requires authorization to manage Azure resources in Sub1. This authorization is established through an app registration in the Microsoft Entra tenant (contoso.com). The app registration creates a service principal that can be granted appropriate permissions and credentials to access Azure subscription resources. This is the standard Azure authentication pattern for third-party applications.
Why the other options are wrong
- A. User-assigned managed identities are for resources within Azure, not for authorizing external on-premises applications.
- B. System-assigned managed identities are tied to specific Azure resources, not applicable for external LaMa authorization.
- D. External identity providers are for guest access scenarios, not for authorizing applications to manage subscription resources.
Question 30
You have an Azure subscription that contains a virtual network named VNet1. You have an SAP RISE managed workload. You need to configure connectivity from VNet1 to the SAP Business Technology Platform (BTP). What should you include in the solution?
Show answer and explanation
Correct answer: A. SAP Private Link service for Azure
SAP Private Link service for Azure is the dedicated connectivity solution designed to establish secure, private connections from Azure virtual networks to the SAP Business Technology Platform. It provides a managed private endpoint connection that ensures data remains on the Microsoft backbone network, offering security and performance benefits specifically tailored for BTP integration.
Why the other options are wrong
- B. Azure Application Gateway is a web traffic load balancer, not designed for SAP BTP connectivity.
- C. On-premises data gateways are used for hybrid scenarios connecting to on-premises resources, not for cloud-to-cloud SAP BTP connectivity.
- D. SAP Web Dispatcher is a routing component within SAP landscapes, not a connectivity solution for BTP.
Question 31
You have an on-premises SAP HANA database. The database is 20 TB and contains tables up to 100 GB. You need to migrate the database to Azure. The solution must meet the following requirements: • Support table splitting. • Minimize administrative effort. Which migration method should you use?
Show answer and explanation
Correct answer: B. SAP Database Migration Option (DMO)
SAP Database Migration Option (DMO) is specifically designed for SAP HANA migrations and supports table splitting, which allows parallel migration of large tables. It minimizes administrative effort through automated processes and is the recommended tool for migrating large SAP HANA databases like this 20 TB instance to Azure.
Why the other options are wrong
- A. Azure Migrate is a general-purpose migration tool that does not support SAP HANA-specific features like table splitting.
- C. SAP classical migration is an older method that requires more manual effort and does not efficiently handle table splitting for large databases.
- D. Azure Database Migration Service is designed for SQL Server, MySQL, and PostgreSQL migrations, not SAP HANA.
Question 32
You have an Azure subscription that contains an Azure Synapse Analytics workspace named Synapse1. You have an SAP RISE managed workload. You need to implement a connector to copy data into an SAP HANA database by using a data pipeline created in Synapse1. Which connector should you use?
Show answer and explanation
Correct answer: D. ODBC
To copy data into an SAP HANA database from Azure Synapse Analytics, the ODBC connector is the appropriate choice. ODBC (Open Database Connectivity) provides a standard interface for connecting to SAP HANA databases and is widely supported for data pipeline operations in Synapse. This is the industry-standard protocol for database connectivity in this scenario.
Why the other options are wrong
- A. SAP CDC (Change Data Capture) is a replication method, not a connector for data pipelines.
- B. SAP Cloud for Customer is a separate SAP application, not a connector for HANA database access.
- C. SAP ECC is an enterprise application, not a database connectivity mechanism.
Question 33
You have an SAP landscape that is hosted on VMWare. You plan to migrate an existing SAP landscape to Azure by using Azure Migrate. You need to configure firewall rules to allow access to the Azure Migrate appliance management app. To which port should you provide access?
Show answer and explanation
Correct answer: B. 44368
Port 44368 is the port used by the Azure Migrate appliance management application for web access. Firewall rules must allow inbound access to this port to enable communication with the appliance's web-based management interface during the discovery and assessment process.
Why the other options are wrong
- A. Port 3900 is not associated with Azure Migrate appliance management.
- C. Port 44400 is not the correct port for Azure Migrate appliance access.
- D. Port 50014 is not used by the Azure Migrate appliance management application.
Question 34
You have an SAP production landscape in Azure in the West Europe Azure region. The landscape contains an Azure load balancer named LB1. The DNS records for LB1 are stored in an Azure Private DNS zone. You plan to replicate the SAP application server pool, SAP Central Services (SCS), and SAP Web Dispatcher to the North Europe Azure region by using Azure Site Recovery. You need to ensure that the DNS records for LB1 are updated automatically when a failover is initiated. The solution must minimize administrative effort. What should you configure?
Show answer and explanation
Correct answer: D. auto registration for the private DNS zone
Auto registration for the private DNS zone enables VMs in the failover region to automatically register their DNS records when they are created by Azure Site Recovery. This minimizes administrative effort by automatically updating DNS records for LB1 when failover occurs, without requiring manual DNS updates or additional automation scripts. The private DNS zone auto-registration feature handles record creation and updates transparently during failover operations.
Why the other options are wrong
- A. A Hybrid Runbook Worker adds administrative complexity and requires manual scripting to update DNS records during failover.
- B. The frontend listener of LB1 is a load balancing construct, not a DNS configuration mechanism for automated record updates.
- C. An Azure Automation script requires manual creation, maintenance, and execution logic, adding administrative effort compared to auto-registration.
Question 35
You plan to deploy an SAP production landscape in Azure during the next three years. The deployment will use on-demand capacity reservations. You need to minimize the costs of the planned deployment. What should you use?
Show answer and explanation
Correct answer: B. Azure Reserved VM Instances (RIs)
For a three-year production SAP landscape deployment with predictable capacity needs, Azure Reserved VM Instances (RIs) provide the most cost-effective solution, offering substantial discounts (up to 72%) compared to on-demand pricing when purchased for a one, three, or five-year commitment period. Reserved Instances are designed specifically for long-term, consistent capacity requirements typical of production SAP environments.
Why the other options are wrong
- A. Azure Spot Virtual Machines are designed for non-critical, interruptible workloads, unsuitable for production SAP landscapes.
- C. Hibernation-supported virtual machines are a VM capability feature, not a pricing or cost optimization mechanism.
- D. Azure dedicated hosts are used for licensing or compliance requirements, not for cost minimization.
Question 36
You plan to deploy a highly available SAP HANA deployment on Azure that will be hosted on a Pacemaker cluster. You need to configure the security principal of the Azure fence agent for the cluster. The solution must minimize administrative effort. What should you use?
Show answer and explanation
Correct answer: B. a system-assigned managed identity
A system-assigned managed identity minimizes administrative effort by automatically creating and managing the identity lifecycle for the Azure fence agent in Pacemaker. It requires no credential management, secret rotation, or manual provisioning, making it the optimal choice for operational simplicity in a Pacemaker cluster deployment.
Why the other options are wrong
- A. User-assigned managed identities require additional administrative overhead for creation, lifecycle management, and assignment to resources.
- C. Service principals require manual credential management, periodic key rotation, and greater administrative burden than managed identities.
- D. Azure shared disks are storage components unrelated to security principal configuration for fence agents.
Question 37
You have an Azure subscription. You plan to deploy an SAP production landscape in Azure that will use a virtual machine scale set to deploy SAP NetWeaver. You need to recommend a solution to support the scale set. The solution must minimize administrative effort. What should you include in the recommendation?
Show answer and explanation
Correct answer: A. a flexible orchestration
Flexible orchestration mode for virtual machine scale sets minimizes administrative effort by providing automatic management capabilities, simplified scaling policies, and reduced operational overhead compared to uniform orchestration. For SAP NetWeaver deployments requiring scale set flexibility, flexible orchestration offers the best balance of automation and control.
Why the other options are wrong
- B. Proximity placement groups reduce latency between resources but do not address scale set orchestration requirements.
- C. Uniform orchestration requires more administrative effort to manage identical VM configurations and scaling policies.
- D. A scaling profile is a component within orchestration modes, not a standalone solution for supporting scale sets.
Question 38
You are migrating SAP to Azure. The ASCS application servers are in one Azure zone, and the SAP database server in in a different Azure zone. ASCS/ERS is configured for high availability. During performance testing, you discover increased response times in Azure, even though the Azure environment has better computer and memory configurations than the on-premises environment. During the initial analysis, you discover an increased wait time for Enqueue. What are three possible causes of the increased wait time? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Show answer and explanation
Correct answer: C, D, E. misconfigured load balancer rules and health check probes for Enqueue and ASCS; active Enqueue replication; network latency between the database server and the SAP application servers
Increased Enqueue wait times in a zone-distributed SAP setup can be caused by three factors: misconfigured load balancer rules and health check probes fail to properly route Enqueue and ASCS traffic, leading to connection delays; active Enqueue replication between zones introduces network overhead and synchronization delays; and network latency between the database server and application servers in different zones directly impacts Enqueue operations which require frequent database communication. A missing Enqueue profile would cause a complete failure rather than increased wait times, and disk I/O during Enqueue backup is not a typical cause of Enqueue wait time increases in this scenario.
Why the other options are wrong
- A. A missing Enqueue profile would cause system failure, not increased wait times.
- B. Enqueue backup operations do not directly cause Enqueue wait time increases in normal operations.
Question 39
You have an Azure subscription. You plan to use an automated method to deploy single instances of SAP S/4HANA. The solution must minimize complexity and administrative effort. What should you use?
Show answer and explanation
Correct answer: A. Azure Center for SAP solutions
Azure Center for SAP solutions is purpose-built for automated deployment of SAP systems on Azure with minimal complexity. It provides a streamlined, guided experience specifically designed for SAP workloads, handling infrastructure provisioning, configuration, and best practices automatically. This service minimizes administrative effort compared to alternative approaches that require more manual configuration and deeper infrastructure knowledge.
Why the other options are wrong
- B. SAP migration frameworks are general methodologies rather than automated deployment tools and require significant manual effort.
- C. The SAP on Azure Deployment Automation Framework is more complex and requires deeper technical expertise than the Center for SAP solutions.
- D. The landing zone accelerator is foundational infrastructure guidance rather than an automated single-instance deployment solution.
Question 40
You are deploying an SAP production landscape on Azure. You deploy virtual machines that have SAP Digital Boardroom and SAP HANA installed. You need to measure network latency between the virtual machines. What should you use?
Show answer and explanation
Correct answer: C. Connection Monitor in Azure Network Watcher
Connection Monitor in Azure Network Watcher is the Azure-native tool designed to measure network latency between Azure virtual machines and other endpoints. It provides real-time monitoring, historical data, and detailed diagnostics for connectivity issues, making it ideal for measuring and validating network latency between SAP application and database servers.
Why the other options are wrong
- A. Network Performance Monitor is a deprecated solution and has been superseded by Connection Monitor in Network Watcher.
- B. Lometer is not a recognized Azure or standard monitoring tool for this purpose.
- D. SockPerf is a Linux command-line utility for performance testing, not an integrated Azure monitoring solution for managed measurement.
Question 41
You have an on-premises datacenter. You have an Azure subscription that contains a virtual network named VNet1. VNet1 uses forced tunneling to force all outbound traffic to the internet via the datacenter. You deploy an SAP landscape to VNet1. The landscape uses virtual machines that run Red Hat Enterprise Linux (RHEL) and uses the pay-as-you-go rates. You discover that the virtual machines fail to receive operating system updates. You need to ensure that the virtual machines receive operating system updates. What should you do?
Show answer and explanation
Correct answer: A. Add user-defined routes (UDRs) to the route table.
When forced tunneling is enabled, all outbound traffic is routed through the on-premises datacenter. RHEL virtual machines need to access Red Hat update repositories via the internet to receive OS updates. User-defined routes (UDRs) can be configured to create exceptions to the forced tunneling policy, allowing specific traffic (such as updates from Red Hat repositories) to route directly to the internet rather than through the datacenter tunnel. This enables the VMs to receive updates while maintaining the forced tunneling configuration for other traffic.
Why the other options are wrong
- B. Azure Firewall would enforce the forced tunneling but does not solve the problem of accessing update repositories.
- C. Azure DNS Private Resolver handles DNS resolution but does not bypass forced tunneling restrictions on outbound internet traffic.
- D. Azure Update Manager is a management tool for updates but cannot overcome the network restriction imposed by forced tunneling without route exceptions.
Question 42
You have an on-premises SAP NetWeaver landscape that contains an IBM DB2 database. You need to migrate the database to a Microsoft SQL Server instance on an Azure virtual machine. Which tool should you use?
Show answer and explanation
Correct answer: B. SQL Server Migration Assistant (SSMA)
SQL Server Migration Assistant (SSMA) is the specialized tool designed for migrating databases from various sources, including IBM DB2, to Microsoft SQL Server. SSMA handles schema conversion, data migration, and provides assessment capabilities specific to heterogeneous database migrations from DB2 to SQL Server.
Why the other options are wrong
- A. Data Migration Assistant is primarily for SQL Server to SQL Server migrations and SQL Server compatibility assessments.
- C. Azure Migrate is designed for assessing and migrating entire infrastructure and applications, not specifically for database schema and data conversion.
- D. Azure Database Migration Service is used for migrating to Azure SQL Database or SQL Managed Instance, not on-premises SQL Server instances on VMs.
Question 43
You have an on-premises network and an Azure subscription. You plan to migrate on-premises SAP workloads to Azure virtual machines. You will use an NFS account in Azure NetApp Files as the storage platform. You need to ensure that data transferred between the NFS account on the virtual machines and the Azure NetApp Files shares is encrypted. What should you create first?
Show answer and explanation
Correct answer: B. an Active Directory connection for the NFS account
Azure NetApp Files encrypts NFS data in transit by using NFSv4.1 with Kerberos in krb5p mode. Kerberos for NFS volumes requires an Active Directory connection configured on the NetApp account first. After the connection exists, you can create the NFSv4.1 volume with Kerberos encryption enabled.
Why the other options are wrong
- A. A user-assigned managed identity is used for customer-managed keys for encryption at rest, not for encrypting NFS traffic in transit.
- C. An Azure key vault stores customer-managed keys for encryption at rest and does not encrypt NFS data in transit.
- D. A system-assigned managed identity relates to accessing customer-managed keys at rest, not to NFS in-transit encryption.
Question 44
You plan to deploy six Azure virtual machines that will host SAP application servers. The virtual machines will be distributed evenly across three availability zones in a single Azure region. You need to ensure that the pair of virtual machines in each zone are deployed to different physical racks in a datacenter. Which two actions should you perform in each zone? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Show answer and explanation
Correct answer: A, C. Assign a different subnet to the network interface card of each virtual machine; Place each pair of virtual machines in the same availability set.
To ensure virtual machines in each availability zone are distributed across different physical racks, you need both availability sets and subnet separation. Availability sets (option C) ensure that paired VMs are placed on different physical hardware within a datacenter. Assigning different subnets (option A) ensures network-level separation. Different storage accounts and diagnostics configurations do not control physical rack placement. Proximity placement groups would actually work against this goal by keeping VMs close together rather than spreading them across racks.
Why the other options are wrong
- B. Different storage accounts for VM disks do not control physical rack distribution.
- D. Configuring different storage accounts for diagnostics does not affect physical rack placement.
- E. Proximity placement groups are designed to keep VMs physically close, the opposite of what is needed for rack-level distribution.
Question 45
You have an on-premises SAP landscape that is hosted on VMware vSphere and contains 50 virtual machines. You need to perform a lift-and-shift migration to Azure by using Azure Migrate. The solution must minimize administrative effort. What should you deploy first?
Show answer and explanation
Correct answer: C. an Azure Migrate configuration server
The Azure Migrate configuration server must be deployed first as it is the central component that orchestrates the migration process. It discovers on-premises machines, coordinates with process servers, and manages the overall migration workflow. This is the foundational component needed before any other Azure Migrate infrastructure can function.
Why the other options are wrong
- A. Azure Backup server is used for backup and recovery, not for the initial migration orchestration.
- B. Azure VPN gateway may be needed for connectivity but is not the first migration component to deploy.
- D. Process servers are deployed after the configuration server and work under its coordination.
Question 46
You plan to deploy an SAP production landscape in Azure. You need to recommend a solution to automate the deployment. The solution must meet the following requirements: • Follow Microsoft best practices. • Support the use of Ansible customizations. • Include both infrastructure and operating system configurations. What should you include in the recommendation?
Show answer and explanation
Correct answer: B. SAP on Azure Deployment Automation Framework
The SAP on Azure Deployment Automation Framework is the solution that meets all requirements. It follows Microsoft best practices for SAP on Azure deployments, supports Ansible customizations for flexible configuration, and includes both infrastructure-as-code for resource provisioning and operating system configuration capabilities. This framework is specifically designed for automated SAP landscape deployments on Azure.
Why the other options are wrong
- A. SAP Landscape Management (LaMa) is primarily for managing existing SAP systems, not for initial infrastructure automation.
- C. Azure DevOps Starter is a general-purpose CI/CD tool that does not provide SAP-specific automation or meet Microsoft SAP deployment best practices.
- D. Azure Center for SAP solutions is a monitoring and management solution, not a deployment automation framework.
Question 47
You deploy an SAP environment on Azure. You need to validate the load distribution to the application servers. What should you use?
Show answer and explanation
Correct answer: D. SAP Web Dispatcher
SAP Web Dispatcher is the load balancing component that distributes client requests across multiple application servers and provides visibility into load distribution. It directly manages and monitors how requests are being routed and balanced across the SAP application server instances.
Why the other options are wrong
- A. SAPControl manages individual SAP instances but does not provide integrated load distribution validation across multiple servers.
- B. SAP Solution Manager is an enterprise management tool but is not the primary tool for validating real-time load distribution.
- C. Azure Monitor tracks Azure infrastructure metrics but lacks SAP-specific load distribution analytics.
Question 48
You have an Azure subscription that contains 10 virtual machines. You plan to deploy an SAP landscape on Azure that will run SAP HANA. You need to ensure that the virtual machines meet the performance requirements of HANA. What should you use?
Show answer and explanation
Correct answer: B. SAP HANA Hardware and Cloud Measurement Tool (HCMT)
The SAP HANA Hardware and Cloud Measurement Tool (HCMT) is the SAP-provided tool specifically designed to measure and validate that Azure virtual machine configurations meet SAP HANA performance requirements. It performs comprehensive benchmarking and generates reports confirming hardware suitability for HANA deployments.
Why the other options are wrong
- A. ABAP Profiler is for application code performance analysis, not infrastructure validation for HANA.
- C. Azure Advisor provides Azure best practices recommendations but lacks SAP HANA-specific performance measurement capabilities.
- D. SAP Quick Sizer is a sizing and recommendation tool for determining appropriate system configurations, not a performance validation and measurement tool for existing infrastructure.
Question 49
You have an on-premises SAP Enterprise Central Component (ECC) landscape that is hosted on servers that run Windows Server and uses an Oracle database. You need to migrate the landscape to SAP S/4HANA on Azure virtual machines. The solution must minimize downtime. What should you use?
Show answer and explanation
Correct answer: B. Software Update Manager (SUM)
Software Update Manager (SUM) is the SAP-native tool specifically designed for migrating from SAP ECC to SAP S/4HANA. It handles the complex application-level upgrade and data conversion from Oracle database to HANA while minimizing downtime through efficient migration methodologies. SUM is the standard SAP solution for this specific migration scenario.
Why the other options are wrong
- A. Azure Site Recovery is for infrastructure-level failover and disaster recovery, not for SAP application version migrations.
- C. Software Provisioning Manager (SWPM) is used for fresh SAP installations, not for ECC-to-S/4HANA conversions.
- D. Azure Migrate focuses on infrastructure migration and VM replication, not SAP application-level upgrades.
Question 50
You plan to deploy an SAP production landscape on Azure. You need to estimate how many SAP operations will be processed by the landscape per hour. The solution must minimize administrative effort. What should you use?
Show answer and explanation
Correct answer: A. SAP Quick Sizer
SAP Quick Sizer is the dedicated tool for estimating SAP workload capacity including SAPS (SAP Application Performance Standard) and operations processed per hour. It is designed specifically for this purpose and minimizes administrative effort by providing automated sizing recommendations based on system parameters and business requirements.
Why the other options are wrong
- B. SAP HANA hardware and cloud measurement tools focus on HANA-specific performance metrics, not overall system throughput estimation.
- C. SAP S/4HANA Migration Cockpit is used for migration execution and data transfer, not capacity planning.
- D. SAP GUI is an interface tool for system access, not a sizing or estimation tool.
Question 51
You migrate an on-premises instance of SAP HANA that runs SUSE Linux Enterprise Server (SLES) to an Azure virtual machine. You project that in two years, you will replace the virtual machine with a larger virtual machine within the same flexibility group. You need to recommend solutions to minimize HANA deployment costs during the next three years. The solutions must not affect the availability SLAs. Which two solutions should you recommend? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Show answer and explanation
Correct answer: B, D. a three-year reservation that has instance size flexibility; Azure Hybrid Benefit
A three-year reservation with instance size flexibility provides significant cost savings while maintaining the ability to resize within the same flexibility group when replacing the virtual machine in two years. Instance size flexibility allows reservation benefits to apply to larger instance sizes without losing commitment benefits. Azure Hybrid Benefit reduces costs by leveraging existing SUSE licenses. Azure Spot instances cannot be used for production HANA workloads due to SLA requirements and eviction risk. One-year reservations lack sufficient coverage for the three-year period and capacity priority reservations do not address cost optimization.
Why the other options are wrong
- A. Azure Spot instances cannot guarantee availability SLAs required for production SAP HANA systems and risk interruption.
- C. One-year reservations provide insufficient coverage for the three-year cost optimization window.
- E. While one-year reservations could have instance size flexibility, they do not cover the full three-year period and would require multiple purchases reducing optimization.
Question 52
You have an SAP production landscape in Azure and an Azure Firewall instance named FW1. You are migrating the landscape to an SAP RISE managed workload. You need to configure FW1 to allow traffic between the landscape and the managed workload. The solution must minimize the number of open ports on FW1. Which protocols should you allow?
Show answer and explanation
Correct answer: C. HTTPS, RFC, and OBDC only
To communicate between the on-premises SAP landscape and SAP RISE managed workload with minimal open ports, you should allow HTTPS (for secure web communication), RFC (SAP Remote Function Call protocol for SAP system-to-system communication), and ODBC (for database connectivity). These three protocols cover the essential communication patterns between SAP systems and minimize the attack surface by avoiding unnecessary open ports.
Why the other options are wrong
- A. HTTPS alone is insufficient for SAP system communication; RFC and ODBC are required for application-level SAP connectivity.
- B. NFS is primarily for file storage and SSH for administration; neither is necessary for standard SAP application communication between landscape and managed workload.
- D. NFS and RPC are file-level protocols; they do not cover the application-level communication required for SAP systems, which depends on RFC and ODBC.
Question 53
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You deploy SAP HANA on Azure (Large Instances). You need to back up the SAP HANA database to Azure. Solution: You create a Recovery Services vault and a backup policy. Does this meet the goal?
Show answer and explanation
Correct answer: B. No
SAP HANA on Azure Large Instances requires specialized backup solutions. Recovery Services vaults are designed for Azure virtual machines and do not support HANA Large Instances, which are physical hardware in Azure datacenters. HANA Large Instances require backup solutions like Azure Backup for SAP HANA or HANA native backup tools with storage snapshots.
Why the other options are wrong
- A. Creating a Recovery Services vault and backup policy does not meet the goal because Recovery Services vaults are not compatible with HANA Large Instances, which require different backup mechanisms.
Question 54
You plan to migrate an SAP environment to Azure. You need to recommend a solution to migrate the SAP application servers to Azure. The solution must minimize downtime and changes to the environments. What should you include in the recommendation?
Show answer and explanation
Correct answer: D. Azure Site Recovery
Azure Site Recovery is the appropriate solution for migrating SAP application servers to Azure while minimizing downtime and environmental changes. It provides continuous replication of on-premises servers, allows for test failovers, and supports migration with minimal application reconfiguration. Site Recovery maintains the virtual machine state and reduces manual intervention, making it ideal for production system migrations. Azure Storage Explorer, Azure Import/Export, and AzCopy are data transfer tools designed for moving data, not for migrating running application server instances.
Why the other options are wrong
- A. Azure Storage Explorer is a data management tool, not a server migration solution.
- B. Azure Import/Export is for bulk data transfer via physical media, not for application server migration.
- C. AzCopy is a command-line data transfer utility, not designed for application server migration.
Question 55
You have an existing SAP landscape on Azure. All SAP virtual machines are on the same virtual network. The SAP application servers, SAP management servers, and SAP database servers are each on their own subnet. You need to ensure that only the application and management servers can access the subnet to which the database servers connect. What should you configure?
Show answer and explanation
Correct answer: C. network security groups (NSGs)
Network Security Groups (NSGs) are the appropriate Azure networking construct for implementing subnet-level access controls. NSGs allow you to create rules that restrict inbound and outbound traffic between subnets, enabling you to permit only application and management servers to access the database server subnet while denying all other traffic.
Why the other options are wrong
- A. Azure AD service principals are for identity and access management, not network traffic control.
- B. Azure Key Vault secrets are for credential storage, not network access policy enforcement.
- D. Application Gateway and firewall rules are layer 7 solutions designed for application-level routing, not subnet-to-subnet traffic filtering at the network layer.
Question 56
You plan to implement a deployment of SAP NetWeaver on Azure. The deployment will be hosted on virtual machines that run SUSE Linux Enterprise Server (SLES). You need to identify which virtual machine size to use to meet the following requirements: • The size must be based on the SAPS rating of the deployment. • The virtual machines must be certified to run the deployment. What should you use?
Show answer and explanation
Correct answer: A. a designated SAP note
SAP notes are the authoritative documentation from SAP that specify which Azure virtual machine sizes are certified for SAP workloads and provide SAPS (SAP Application Performance Standard) ratings. SAP notes contain the certified VM sizes, performance metrics based on SAPS values, and compatibility matrices for specific SAP applications like NetWeaver on SLES. These notes are the primary reference for matching VM sizes to deployment requirements.
Why the other options are wrong
- B. The Product Availability Matrix (PAM) documents SAP product support on various platforms but does not contain the detailed SAPS ratings and Azure VM certification information needed for sizing decisions.
- C. SAP Cloud Appliance Library (CAL) is used for deploying pre-configured SAP systems in cloud environments but is not the resource for identifying VM sizes based on SAPS ratings and certifications.
Question 57
You have an on-premises SAP AnyDB deployment hosted on an operating system that is NOT supported in Azure. You need to migrate the deployment to Azure by performing a replatform and migration to SAP HANA. The solution must meet the following requirements: • Minimize administrative effort. • Minimize downtime. What should you use?
Show answer and explanation
Correct answer: D. SAP Software Update Manager
SAP Software Update Manager (SUM) is the purpose-built SAP tool for migrating from AnyDB systems to SAP HANA, handling both the database migration and OS platform changes simultaneously. SUM minimizes downtime through optimized migration paths and handles the complete replatform and database conversion with minimal manual intervention, reducing administrative effort.
Why the other options are wrong
- A. Azure Migrate handles infrastructure migration but does not manage SAP application-level database conversions to HANA.
- B. Azure Database Migration Service is not designed for SAP-specific migrations or HANA conversions.
- C. Software Provisioning Manager is for new installations, not for migrating and replatforming existing SAP systems.
Question 58
You have an SAP workload on an Azure virtual machine. You have a built-in role-based access control (RBAC) role definition in the JSON format. You plan to change the built-in role definition to a custom role definition. Which property value in the built-in role definition must you change?
Show answer and explanation
Correct answer: C. roleName
To convert a built-in role definition to a custom role definition, the roleName property must be changed. Built-in roles have reserved names that cannot be modified directly. Creating a custom role requires assigning a new, unique roleName that distinguishes it from the original built-in role. All other properties (assignableScopes, actions, notActions) can remain similar to the built-in role, but the role name must change to differentiate the custom role.
Why the other options are wrong
- A. AssignableScopes can remain the same when converting to a custom role.
- B. NotActions can be copied from the built-in role definition without change.
- D. Actions can be inherited or modified from the built-in role without requiring a change to create a custom role.
Question 59
You have an SAP production landscape in Azure. The landscape is hosted on 50 virtual machines that run SUSE Enterprise Linux (SLES). The virtual machines are billed by using pay-as-you-go rates. You need to minimize operating system costs for the virtual machines. What should you use?
Show answer and explanation
Correct answer: B. Azure Hybrid Benefit
Azure Hybrid Benefit allows you to use existing SUSE subscriptions you already own to significantly reduce the cost of SLES virtual machines in Azure. This provides the most substantial savings for operating system costs compared to pay-as-you-go billing, as you can apply your on-premises SUSE entitlements to cloud resources.
Why the other options are wrong
- A. Capacity reservations provide compute discounts but do not specifically address operating system licensing costs, which are the primary expense for SLES VMs.
- C. Reserved instances reduce compute costs but still charge full SLES licensing fees; they do not minimize OS costs specifically.
- D. Spot pricing is unreliable for production workloads and does not address the SLES licensing cost component.
Question 60
You have an on-premises SAP landscape that contains a 20-TB IBM DB2 database. The database contains large tables that are optimized for read operations via secondary indexes. You plan to migrate the database platform to SQL Server on Azure virtual machines. You need to recommend a database migration approach that minimizes the time of the export stage. What should you recommend?
Show answer and explanation
Correct answer: D. table splitting
Table splitting divides very large tables into several packages that are exported in parallel by multiple R3load processes, which is the standard way to cut the export time of big tables in an SAP heterogeneous migration. The existing secondary indexes help because the split WHERE clauses can use them to read each segment efficiently. This shortens the longest-running export jobs that otherwise dominate the export stage.
Why the other options are wrong
- A. Log shipping is a homogeneous database replication method and cannot move a DB2 database to SQL Server.
- B. Secondary indexes are not exported as data, so deleting them does not shorten the export and only affects index build time on import.
- C. DMO parallel transfer mode is a Software Update Manager option for database migration during an upgrade and is not the tool for shortening the export of a DB2 to SQL Server OS/DB migration.
Question 61
You have an Azure subscription that contains a Windows-based SAP deployment. You plan to register the SAP deployment with Azure Center for SAP solutions. You need to verify that SAP system-level prerequisites are met. Which command should you run?
Show answer and explanation
Correct answer: C. saphostexec
The saphostexec command is used to verify that SAP system-level prerequisites are met on Windows-based SAP deployments before registering with Azure Center for SAP solutions. This command checks the SAP host execution environment and validates that required components are properly configured.
Why the other options are wrong
- A. Saposcol is a performance monitoring tool, not a prerequisite verification command.
- B. Sapacext is used for SAP Adaptive Computing Extension purposes, not for prerequisites validation.
- D. Hostexecstart is not a standard SAP verification command for checking system prerequisites.
Question 62
You plan to deploy an SAP production landscape on Azure. You need to minimize latency between SAP HANA database servers and SAP NetWeaver servers. What should you implement?
Show answer and explanation
Correct answer: C. a proximity placement group
Proximity placement groups ensure that SAP HANA database servers and SAP NetWeaver application servers are physically located close together within an Azure datacenter. This architectural placement minimizes network latency between the database and application tiers, which is critical for SAP performance.
Why the other options are wrong
- A. Azure Private Link provides secure connectivity but does not reduce latency through physical proximity.
- B. Virtual machine scale sets manage instance scaling but do not address inter-tier latency optimization.
- D. Availability Sets distribute resources for fault tolerance but do not minimize latency between specific server tiers.
Question 63
You plan to migrate an SAP ERP Central Component (SAP ECC) production system to Azure. You are reviewing the SAP EarlyWatch Alert report for the system. You need to recommend sizes for the Azure virtual machines that will host the system. Which two sections of the report should you review? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Show answer and explanation
Correct answer: A, C. Hardware Capacity; Hardware Configuration under Landscape
When recommending Azure VM sizes for an SAP ECC system, you should review the Hardware Capacity section, which provides current resource utilization details for CPU, memory, and disk, and the Hardware Configuration section under Landscape, which documents the existing system architecture and component specifications. These two sections together provide the baseline information needed to determine appropriate Azure VM SKU recommendations. Patch Levels and Database/ABAP Load Optimization are configuration and performance tuning topics, while Data Volume Management is for storage planning rather than compute sizing.
Why the other options are wrong
- B. Patch Levels relate to software maintenance, not compute resource sizing.
- D. Database and ABAP Load Optimization addresses performance tuning rather than identifying base compute requirements.
- E. Data Volume Management is relevant for storage sizing, not compute resource recommendations.
Question 64
You have an Azure subscription. You plan to deploy SAP on Azure. You need to recommend a disk encryption solution for virtual machines. The solution must meet the following requirements: • Support the encryption of operating system, data, and temp disks. • Support the encryption of data at rest and data in transit. • Minimize CPU overhead on the virtual machines. What should you include in the recommendation?
Show answer and explanation
Correct answer: D. encryption at host
Encryption at host encrypts all data at rest on the physical host hardware before it reaches the Azure Storage layer, covering operating system, data, and temp disks simultaneously. It also provides encryption in transit between the VM and storage. Crucially, it performs encryption at the host level using dedicated hardware capabilities, minimizing CPU overhead on the virtual machines themselves compared to encryption performed at the guest OS level.
Why the other options are wrong
- A. Azure Disk Encryption operates at the guest OS level and consumes CPU resources on the virtual machine, causing measurable CPU overhead.
- B. Server-side encryption primarily addresses data at rest in storage accounts and does not cover temp disks or provide consistent encryption across all disk types.
- C. Confidential disk encryption is designed for confidential computing scenarios and is not the optimal solution for standard disk encryption with minimal CPU overhead requirements.
Question 65
You have an on-premises SAP landscape that contains an IBM DB2 database. You need to recommend a solution to migrate the landscape to Azure and the database to SAP HANA. The solution must meet the following requirements: • Be supported by SAP. • Minimize downtime. What should you include in the recommendation?
Show answer and explanation
Correct answer: A. SAP Database Migration Option (DMO) with System Move
SAP Database Migration Option (DMO) with System Move is the supported SAP solution for migrating from IBM DB2 to SAP HANA while minimizing downtime. DMO provides an integrated migration path specifically designed for SAP systems and includes optimization for the transition between database platforms. Azure Database Migration Service does not provide SAP-specific optimizations for DB2-to-HANA migration, Azure Import/Export is for general data transfer, and Azure Data Box Gateway is designed for hybrid cloud scenarios but not SAP database migrations.
Why the other options are wrong
- B. Azure Database Migration Service lacks SAP-specific features and optimization for DB2-to-HANA platform transitions.
- C. Azure Import/Export is a general data transfer service not designed for SAP database migrations.
- D. Azure Data Box Gateway is intended for hybrid cloud storage scenarios, not SAP database platform migrations.
Question 66
You are planning an SAP on Azure deployment. You need to recommend a storage access solution that meets the following requirements: • Provides a common file share that will be accessed by virtual machines that run either Red Hat Enterprise Linux (RHEL) or Windows Server 2022. • Ensures that each virtual machine uses its native sharing protocol to access the common file share. Which type of storage should you include in the recommendation?
Show answer and explanation
Correct answer: B. Azure NetApp Files in dual protocol mode
Azure NetApp Files in dual protocol mode supports both NFSv4.1 for Linux-based systems (RHEL) and SMB/CIFS for Windows Server systems simultaneously on the same volume. This allows virtual machines running either operating system to access the common file share using their native sharing protocol, meeting both requirements of platform interoperability and protocol preference.
Why the other options are wrong
- A. Azure NetApp Files in NFSv4.1 mode only supports NFS protocol, which is not the native sharing protocol for Windows Server 2022.
- C. Premium storage account file shares use SMB protocol, which is native to Windows but not to RHEL systems.
- D. Standard storage account file shares also use SMB protocol, which is native to Windows but not to RHEL systems.
Question 67
This question requires that you evaluate the underlined text to determine if it is correct. You have an SAP environment on Azure that uses Microsoft SQL Server as the RDBMS. You plan to migrate to an SAP HANA database. To calculate the amount of memory and disk space required for the database, you can use _SAP_Quick_Sizer_. Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
Show answer and explanation
Correct answer: C. /SDF/HDB_SIZING
The /SDF/HDB_SIZING transaction is the correct SAP tool for calculating HANA database memory and disk space requirements during migration. While SAP Quick Sizer exists, the /SDF/HDB_SIZING transaction is specifically designed for precise HANA sizing calculations based on source database parameters.
Why the other options are wrong
- A. SAP Quick Sizer is not the most accurate tool for detailed HANA-specific sizing calculations.
- B. Azure Migrate is for infrastructure migration planning but does not calculate HANA database sizing requirements.
- D. SQL Server Management Studio is a SQL Server administration tool and cannot calculate HANA sizing requirements.
Question 68
You have an Azure subscription that contains a virtual machine named VM1. You plan to use VM1 as part of an SAP HANA deployment. You need to ensure that VM1 can run HANA. What should you use?
Show answer and explanation
Correct answer: A. HANA hardware and cloud measurement tools
HANA hardware and cloud measurement tools are used to validate whether specific hardware and cloud infrastructure configurations meet the requirements to run SAP HANA. These tools measure system performance, memory bandwidth, and compute capabilities against HANA's stringent certification requirements, ensuring VM1 is suitable for HANA deployment.
Why the other options are wrong
- B. The HANA-based Cloud version of SAP Quick Sizer is for sizing HANA systems based on business requirements, not for validating whether existing hardware can run HANA.
- C. HANA Cockpit is an operational monitoring and management tool for running HANA systems, not a pre-deployment validation tool.
- D. SAP S/4HANA Migration Cockpit is for migration planning and execution, not for validating hardware capabilities for HANA.
Question 69
You have an Azure subscription named Sub1 that contains an Azure logic app named App1. You have an SAP RISE managed workload that is integrated with Sub1. You need to ensure that App1 can access data stored in SAP by using REST API calls. What should you deploy?
Show answer and explanation
Correct answer: A. an on-premises data gateway
An on-premises data gateway enables Azure Logic Apps to access on-premises resources and SAP systems securely. When SAP RISE managed workloads are integrated with an Azure subscription, they typically exist in a separate managed environment. The on-premises data gateway provides the connectivity bridge that allows Logic Apps in Azure to make REST API calls to the SAP system while maintaining secure communication across network boundaries.
Why the other options are wrong
- B. An application gateway is a Layer 7 load balancer for web traffic distribution within Azure, not for connecting Logic Apps to SAP systems.
- C. An integration runtime is used in Azure Data Factory for data movement and transformation, not for Logic Apps to connect to SAP systems.
- D. Azure Data Share is for sharing data between organizations, not for enabling Logic Apps to access SAP data via REST APIs.
Question 70
You have an Azure subscription that contains virtual machines and an Azure Policy named Policy1. Policy1 is configured to automatically install Azure VM extension for SAP solutions to newly deployed virtual machines. You need to modify Policy1 to ensure that the policy also applies to the existing virtual machines. What should you create first?
Show answer and explanation
Correct answer: A. a managed identity
A policy that deploys a VM extension uses the DeployIfNotExists effect, and it affects existing resources only through a remediation task. A remediation task runs under a managed identity assigned to the policy assignment, and that identity needs the roles required to deploy the extension. So the managed identity must be created first, and then a remediation task can be run against the existing VMs.
Why the other options are wrong
- B. Azure Policy remediation uses a managed identity on the assignment, not a service principal that you create.
- C. A logic app is not part of Azure Policy remediation and is not needed to apply a policy to existing resources.
- D. An Automation runbook is not required, because Azure Policy remediation tasks deploy the extension natively.
Question 71
You plan to migrate an on-premises SAP development system to Azure. Before the migration, you need to check the usage of the source system hardware, such as CPU, memory, network, etc. Which transaction should you run from SAP GUI?
Show answer and explanation
Correct answer: D. OS07N
Transaction OS07N in SAP GUI is the correct tool to check detailed hardware usage metrics including CPU, memory, network, and disk I/O of the source system before migration. OS07N provides comprehensive operating system-level performance statistics essential for capacity planning in Azure. SM51 displays application server status, DB01 and DB12 are database administration transactions, but none of these provide the comprehensive hardware utilization metrics needed for migration sizing.
Why the other options are wrong
- A. SM51 shows application server information and status, not detailed hardware utilization metrics.
- B. DB01 is a database administration tool, not for overall hardware usage analysis.
- C. DB12 is a database performance monitoring tool, not for comprehensive hardware usage assessment.
Question 72
You have an Azure subscription named Sub1 that contains a virtual machine named VM1. You have an SAP RISE managed workload that is integrated with Sub1. You plan to use the SAP table connector to ingest data from the managed workload into Azure Data Factory. What should you configure on VM1?
Show answer and explanation
Correct answer: A. a self-hosted integration runtime
A self-hosted integration runtime must be configured on VM1 to enable secure communication between the SAP RISE managed workload and Azure Data Factory. This runtime acts as a bridge, allowing the SAP table connector to authenticate and ingest data from the SAP system into Azure Data Factory.
Why the other options are wrong
- B. Azure Databricks runtime is used for big data processing and machine learning, not for connecting SAP systems to Data Factory.
- C. Azure File Sync agent is used for synchronizing on-premises file servers with Azure file shares, not for SAP data integration.
- D. On-premises data gateway is used for Power BI and Logic Apps connectivity, not for Data Factory's SAP table connector.
Question 73
You are designing an SAP HANA deployment. You estimate that the database will be 1.8 TB in three years. You need to ensure that the deployment supports 60,000 IOPS. The solution must minimize costs and provide the lowest latency possible. Which type of disk should you use?
Show answer and explanation
Correct answer: D. Premium SSD
Premium SSD disks provide the optimal balance for an SAP HANA deployment requiring 60,000 IOPS with 1.8 TB database size. Premium SSDs deliver consistent high performance, support the required IOPS throughput, provide excellent latency characteristics suitable for database workloads, and offer better cost efficiency than Ultra disks while meeting performance requirements.
Why the other options are wrong
- A. Standard HDD cannot provide the 60,000 IOPS requirement and has excessive latency for database operations.
- B. Standard SSD lacks the IOPS capacity and performance consistency required for production HANA workloads.
- C. Ultra disk is more expensive than necessary and provides capabilities beyond what this workload requires.
Question 74
You have an on-premises SAP environment that uses AIX servers and IBM DB2 as the database platform. You plan to migrate SAP to Azure. In Azure, the SAP workloads will use Windows Server and Microsoft SQL Server as the database platform. What should you use to export from DB2 and import the data to SQL Server?
Show answer and explanation
Correct answer: A. R3load
R3load is the standard SAP tool for heterogeneous database migrations, specifically designed to export data from one database platform (DB2) and import it into another (SQL Server). It handles the necessary data type conversions and SAP-specific formatting required for such migrations. R3trans is used for transporting SAP objects but not for bulk data migration between different database platforms. Azure SQL Data Warehouse and SQL Server Management Studio are not designed for this specific SAP-to-SAP database platform migration scenario.
Why the other options are wrong
- B. Azure SQL Data Warehouse is not the appropriate tool for SAP database migrations.
- C. SQL Server Management Studio lacks the SAP-specific functionality and data conversion capabilities needed for DB2 to SQL Server migration.
- D. R3trans handles transport requests and SAP objects, not heterogeneous database data migration.
Question 75
You have an on-premises SAP NetWeaver deployment that uses Windows Server 2016 and Microsoft SQL Server 2016. You need to migrate the deployment to an Azure virtual machine that runs Windows Server 2016 and has Microsoft SQL Server 2019 installed. Which migration method should you use?
Show answer and explanation
Correct answer: A. lift-and-shift
A lift-and-shift migration is appropriate when moving from Windows Server 2016 with SQL Server 2016 to the same Windows Server 2016 platform with an upgraded SQL Server version (2019) in Azure. The homogeneous nature of the operating system and the same SQL Server product family make this a straightforward migration without requiring database conversion tools or complex heterogeneous migration procedures.
Why the other options are wrong
- B. Azure Migrate is more suitable for infrastructure assessment and migration planning rather than being the specific migration method for this scenario.
- C. Classical SAP DMO is used for on-premises to on-premises migrations or database platform changes, not Azure cloud migrations.
- D. Heterogeneous migration is used when changing database platforms (e.g., DB2 to SQL Server), not when upgrading within the same database product.
Question 76
You have an on-premises third-party enterprise resource planning (ERP) system that uses Microsoft SQL Server 2016. You plan to migrate the ERP system to SAP Business Suite on SAP HANA on Azure virtual machines. You need to identify the appropriate sizing for Business Suite on HANA. What should you use?
Show answer and explanation
Correct answer: C. SAP Quick Sizer for HANA
SAP Quick Sizer for HANA is the appropriate tool for determining HANA sizing requirements when migrating SAP Business Suite to SAP HANA. It calculates memory and resource requirements based on source system data and configuration. SAP Quick Sizer for HANA Cloud is designed for cloud-native SAP instances, not on-premises Business Suite on HANA. HANA Cockpit is an operational monitoring tool, not a sizing tool. SAP Cloud Platform Cockpit manages cloud services but is not used for HANA sizing calculations.
Why the other options are wrong
- A. SAP Quick Sizer for HANA Cloud is for SAP cloud instances, not for on-premises Business Suite on HANA sizing.
- B. HANA Cockpit is an operational monitoring and management tool, not a sizing calculator.
- D. SAP Cloud Platform Cockpit manages cloud services and SAP Cloud Platform itself, not HANA infrastructure sizing.
Question 77
You have an Azure subscription that contains an SAP production landscape. The landscape contains virtual machines that run Linux and have the standard version of Azure VM extension for SAP solutions installed. You remove the standard version of the Azure VM extension for SAP solutions from each virtual machine. You need to install the new version of the Azure VM extension for SAP solutions. What should you do first?
Show answer and explanation
Correct answer: A. Assign a managed identity for each virtual machine.
The new version of the Azure VM extension for SAP solutions requires a managed identity for authentication and authorization. Before installing the new extension, each virtual machine must be assigned a managed identity (either user-assigned or system-assigned) to enable secure communication with Azure services. This identity serves as the credential mechanism for the extension to operate.
Why the other options are wrong
- B. Microsoft Entra enterprise applications are not required for the extension installation process.
- C. Application Insights configuration is optional for monitoring but not a prerequisite for installation.
- D. Log Analytics workspace is useful for monitoring but not a mandatory requirement before installing the extension.
Question 78
A customer that has a large enterprise SAP environment plans to migrate to Azure. The environment uses servers that run Windows Server 2016 and Microsoft SQL Server. The environment is critical and requires a comprehensive business continuity and disaster recovery (BCDR) strategy that minimizes the recovery point objective (RPO) and the recovery time objective (RTO). The customer wants a resilient environment that has a secondary site that is at least 250 kilometers away. You need to recommend a solution for the customer. Which two solutions should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Show answer and explanation
Correct answer: A, B. warm standby virtual machines in paired regions; Azure Traffic Manager to route incoming traffic
Warm standby virtual machines in paired regions (which are at least 250 kilometers apart) provide the required secondary site for disaster recovery and minimize RTO and RPO. Azure Traffic Manager is essential to route incoming traffic between the primary and secondary sites, enabling automatic failover and maintaining service availability during a disaster.
Why the other options are wrong
- C. Availability Sets do not provide geographic redundancy; they only distribute VMs within a single region. GRS is for storage replication, not VM placement.
- D. An internal load balancer routes traffic only within a virtual network and cannot handle routing between geographically separated sites.
- E. Availability Zones are within a single region and do not meet the requirement for a secondary site at least 250 kilometers away.
Question 79
You have two Azure subscriptions. You plan to deploy virtual machines to both subscriptions. The virtual machines will host SAP workloads. As part of the deployment the virtual machines will be deployed to an availability zone named Availability Zone 1 in each subscription. You need to ensure that the virtual machines will reside in the same physical datacenter. What should you do first?
Show answer and explanation
Correct answer: A. Use the Check Zone Peers REST API.
The Check Zone Peers REST API identifies which availability zones map to the same physical datacenter infrastructure across different subscriptions. This is the required first step to verify that Availability Zone 1 in both subscriptions refers to the same physical location before deployment.
Why the other options are wrong
- B. Availability sets operate within a single subscription and cannot span multiple subscriptions.
- C. Proximity placement groups cannot span across subscriptions and thus cannot align resources across multiple subscriptions.
- D. The List By Location REST API retrieves available locations but does not verify physical datacenter alignment across subscriptions.
Question 80
Your on-premises network is connected to an SAP HANA deployment in the East US Azure region. The deployment uses the Standard SKU of an ExpressRoute gateway. You need to implement ExpressRoute FastPath. The solution must meet the following requirements: • Hybrid connectivity must be maintained if a single datacentre fails in the East US region. • Hybrid connectivity costs must be minimized. Which ExpressRoute gateway SKU should you use?
Show answer and explanation
Correct answer: B. ErGw3Az
The ErGw3Az SKU is the correct choice because it supports ExpressRoute FastPath, which allows direct datapath communication between on-premises and Azure without gateway processing. The 3Az designation provides zone-redundancy across three availability zones in East US, ensuring hybrid connectivity remains available if a single datacenter fails. This meets both the high-availability and cost-minimization requirements while enabling FastPath functionality.
Why the other options are wrong
- A. High Performance SKU does not support ExpressRoute FastPath.
- C. Ultra Performance SKU supports FastPath but is more expensive than necessary and provides redundancy at a higher cost.
- D. ErGw1AZ provides only single zone redundancy and does not meet the requirement for multi-datacenter failure protection.
Question 81
You have an Azure subscription and an Enterprise Agreement (EA). You plan to deploy an SAP on Azure production landscape that will contain the following virtual machines: • One M-series virtual machine with 128 cores • 15 E-series virtual machines with a total of 300 cores • 10 D-series virtual machines with a total of 160 cores During the deployment of the E-series virtual machines, you receive the following error message. Operation results in exceeding quota limits of Core. You need to ensure you can complete the E-series virtual machine deployment. The solution must meet the following requirements: • Maintain the performance of the SAP landscape. • Minimize administrative effort. • Minimize costs. What should you do?
Show answer and explanation
Correct answer: D. Request a quota increase for the Azure region.
When encountering a quota limit error during VM deployment, the appropriate solution is to request a quota increase for the Azure region. This approach maintains performance by avoiding resizing that would compromise SAP requirements, minimizes administrative effort compared to managing multiple subscriptions, and is cost-effective since no subscription changes or VM downsizing are required. The quota increase is a standard Azure operation for production workloads.
Why the other options are wrong
- A. Converting to Pay-As-You-Go does not increase vCore quotas; quotas are subscription and region-specific regardless of billing model.
- B. Splitting across subscriptions adds administrative complexity and doesn't address the underlying quota limitation without also requesting increases.
- C. Resizing D-series and E-series VMs would degrade SAP landscape performance, violating the stated requirement.
Question 82
You have 100 Azure virtual machines that host SAP workloads and have the SAP Host Agent and the SAP Adaptive Extensions installed. You plan to deallocate the virtual machines during non-business hours. You need to change the managed disk type of the virtual machines when they are deallocated. The solution must minimize administrative effort. What should you use?
Show answer and explanation
Correct answer: D. Azure Automation
Azure Automation is the optimal solution for automating the changing of managed disk types during scheduled deallocations. Using runbooks, you can create scheduled jobs that trigger when virtual machines are deallocated, automatically converting disk types (for example, from Premium SSD to Standard HDD) to minimize costs during non-business hours, minimizing administrative effort across 100 virtual machines.
Why the other options are wrong
- A. SAP Information Lifecycle Management (ILM) is a data management tool, not an Azure infrastructure automation solution.
- B. SAP Landscape Management (LaMa) manages SAP system copies and landscapes but does not directly manage Azure managed disk types.
- C. Azure Functions could theoretically accomplish this but is less suitable than Azure Automation for scheduled, repeating administrative tasks of this complexity.
Question 83
You have an SAP on Azure production landscape that is hosted on Standard M-series virtual machines. You plan to expand the storage on the virtual machines. Which type of disk can be expanded without causing downtime?
Show answer and explanation
Correct answer: C. Premium SSD v2
Premium SSD v2 supports online disk expansion without requiring virtual machine downtime or detachment. This capability allows storage to be increased while the VM and workload remain operational, which is critical for production SAP environments.
Why the other options are wrong
- A. Ultra disks do not support online expansion and require downtime for disk reconfiguration.
- B. Standard SSD does not support online expansion without causing downtime or service interruption.
- D. Premium SSD v1 requires detaching the disk and may necessitate downtime depending on the expansion approach.
Question 84
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to migrate an SAP HANA instance to Azure. You need to gather CPU metrics from the last 24 hours from the instance. Solution: You use Monitoring from the SAP HANA Cockpit. Does this meet the goal?
Show answer and explanation
Correct answer: A. Yes
SAP HANA Cockpit's Monitoring feature provides access to system metrics including CPU usage from the current and historical periods. It can retrieve CPU metrics from the last 24 hours directly from the HANA instance, making it suitable for gathering the required performance data during migration planning.
Why the other options are wrong
- B. Selecting No would be incorrect because SAP HANA Cockpit Monitoring does provide CPU metrics from recent time periods including the last 24 hours.
Question 85
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You deploy SAP HANA on Azure (Large Instances). You need to back up the SAP HANA database to Azure. Solution: Back up directly to disk, copy the backups to an Azure virtual machine, and then copy the backup to an Azure Storage account. Does this meet the goal?
Show answer and explanation
Correct answer: B. No
This multi-step manual backup process is inefficient and not the recommended approach for HANA Large Instances. The proper solution uses storage snapshots provided by Azure backup infrastructure or HANA native backup tools that integrate directly with the Large Instances platform, not manual copying between systems.
Why the other options are wrong
- A. This solution does not meet the goal because it is a workaround that bypasses proper HANA Large Instances backup mechanisms and creates unnecessary complexity and operational overhead.
Question 86
You plan to deploy an SAP landscape on Azure that will use SAP HANA on Azure (Large Instances). You need to ensure that outbound traffic from the application tier can flow only to the database tier. What should you use?
Show answer and explanation
Correct answer: A. application security groups
Application Security Groups (ASGs) are the optimal solution for this scenario because they allow logical grouping of resources and simplification of network security rules. ASGs enable you to define security policies based on application tiers rather than explicit IP addresses, making it easy to restrict outbound traffic from the application tier to only the database tier with minimal configuration overhead.
Why the other options are wrong
- B. While NSGs can accomplish this task, ASGs provide a more elegant and scalable solution for tier-based traffic filtering.
- C. Azure Firewall is a centralized service better suited for perimeter security and complex filtering scenarios, not tier-to-tier communication within a single virtual network.
- D. Network virtual appliances add unnecessary complexity and operational overhead for this straightforward tier-based access control requirement.
Question 87
You have an Azure subscription. You deploy Active Directory domain controllers to Azure virtual machines. You plan to deploy Azure for SAP workloads. You plan to segregate the domain controllers from the SAP systems by using different virtual networks. You need to recommend a solution to connect the virtual networks. The solution must minimize costs. What should you recommend?
Show answer and explanation
Correct answer: B. virtual network peering
Virtual network peering provides direct, low-latency connectivity between virtual networks at minimal cost. For connecting domain controllers to SAP systems in separate virtual networks, peering is the most cost-effective solution with no bandwidth charges for peered traffic within the same region.
Why the other options are wrong
- A. Site-to-site VPN incurs higher costs and is unnecessary for intra-Azure connectivity.
- C. User-defined routing is a traffic management tool, not a solution for connecting separate virtual networks.
- D. ExpressRoute is significantly more expensive and designed for on-premises or multi-region connectivity requiring guaranteed bandwidth.
Question 88
You have an Azure subscription. You plan to deploy an Azure virtual machine that runs SUSE Linux Enterprise Server (SLES) 15 SP5 for SAP Applications. The virtual machine will host an SAP workload. You need to ensure that the virtual machine will use the UEFI-based boot architecture. What should you select from the Azure portal during the deployment?
Show answer and explanation
Correct answer: C. Image
The image selection during virtual machine deployment is where UEFI-based boot architecture is specified. SLES 15 SP5 for SAP Applications is available as a Generation 2 image which supports UEFI boot, and this selection is made when choosing the image in the Azure portal.
Why the other options are wrong
- A. Extensions are add-ons installed after deployment and do not control boot architecture.
- B. Host group selection relates to dedicated host placement and does not determine boot architecture.
- D. VM architecture selection on modern Azure refers to processor architecture (x64 vs ARM) and is not the location for specifying UEFI boot mode.
Question 89
You plan to deploy an SAP production landscape in Azure. You need to recommend an Azure support agreement for the deployment. The solution must meet the following requirements: • Receive support for moderate business impact events within four hours. • Comply with the SAP support agreement. • Minimize costs. Which support level should you recommend?
Show answer and explanation
Correct answer: B. Professional Direct
Professional Direct support is the appropriate level for SAP production landscapes requiring four-hour response times for moderate business impact events. This support plan complies with SAP support agreement requirements and provides the necessary response time commitments while being more cost-effective than premium support levels. It is specifically designed for production workloads and organizations with critical systems.
Why the other options are wrong
- A. Basic support does not provide guaranteed response times or support for production environments.
- C. Developer support is intended for non-production development and testing only, not production SAP systems.
- D. Standard support does not meet the four-hour response time requirement for moderate business impact events.
Question 90
You are planning a deployment of SAP on Azure that will use SAP HANA. You need to ensure that the SAP application servers are in the same datacenter as the HANA nodes. What should you use?
Show answer and explanation
Correct answer: B. a proximity placement group
A proximity placement group ensures that Azure compute resources are physically located close together in the same datacenter. This is critical for SAP HANA deployments where low-latency communication between application servers and HANA database nodes is essential for performance. Proximity placement groups reduce network latency and improve throughput for latency-sensitive SAP workloads.
Why the other options are wrong
- A. Application groups are used for remote desktop session organization, not for physical resource colocation.
- C. Resource groups are logical containers for managing Azure resources, not for ensuring physical proximity.
- D. Virtual machine scale sets are for managing multiple identical VMs at scale, not for ensuring datacenter colocation.
Question 91
You have an Azure subscription that contains two SAP HANA on Azure (Large Instances) deployments named HLI1 and HLI2. HLI1 is deployed to the East US Azure region. HLI2 is deployed to the West US 2 Azure region. You need to minimize network latency for inter-region communication between HLI1 and HLI2. What should you implement?
Show answer and explanation
Correct answer: D. ExpressRoute Global Reach
ExpressRoute Global Reach enables low-latency, direct connectivity between HANA Large Instances deployments across multiple Azure regions. It allows the two HLI stamps in different regions to communicate directly over Microsoft's backbone network, minimizing latency compared to routing through the public internet or standard regional connections.
Why the other options are wrong
- A. A NAT gateway is used for outbound internet connectivity and does not optimize inter-region latency between HANA Large Instances.
- B. IP routing tables manage traffic routing but do not reduce network latency between geographically separated regions.
- C. ExpressRoute FastPath optimizes the data path for virtual machines connected to ExpressRoute, not specifically for HANA Large Instances inter-region communication.
Question 92
You plan to migrate an on-premises SAP development system to Azure. Before the migration, you need to check the usage of the source system hardware, such as CPU, memory, network, etc. Which transaction should you run from SAP GUI?
Show answer and explanation
Correct answer: D. ST06
Transaction ST06 in SAP GUI displays detailed operating system performance metrics including CPU, memory, network, disk I/O, and other hardware usage statistics. This is the standard SAP transaction for monitoring source system hardware utilization before migration planning. SM51 displays active application servers, DB01 shows database alerts, and DB12 displays database backup logs, none provide the comprehensive hardware usage statistics needed for migration sizing.
Why the other options are wrong
- A. SM51 displays active application servers in the system but does not show detailed hardware usage metrics.
- B. DB01 shows database alerts and exceptions, not hardware utilization statistics.
- C. DB12 displays database backup information and logs, not real-time hardware usage data.
Question 93
You have an on-premises deployment of SAP on DB2. You plan to migrate the deployment to Azure and Microsoft SQL Server 2017. What should you use to migrate the deployment?
Show answer and explanation
Correct answer: B. SQL Server Migration Assistant (SSMA)
SQL Server Migration Assistant (SSMA) is the Microsoft tool specifically designed for migrating databases from non-SQL Server platforms including DB2 to SQL Server. It provides automated schema conversion, data migration, and compatibility assessment. db2haicu and DSN1COPY are DB2-specific utilities for different purposes, and Azure SQL Data Sync is for ongoing replication of existing SQL Server databases, not initial migration from DB2.
Why the other options are wrong
- A. db2haicu is a DB2 installation utility, not a migration tool for converting to SQL Server.
- C. DSN1COPY is a DB2 utility for copying database objects but does not provide platform migration capabilities.
- D. Azure SQL Data Sync is for replicating data between existing SQL Server instances, not for migrating from DB2.
Question 94
You deploy an SAP environment on Azure. Your company has a Service Level Agreement (SLA) of 99.99% for SAP. You implement Azure Availability Zones that have the following components: • Redundant SAP application servers • ASCS/ERS instances that use a failover cluster Database high availability that has a primary instance and a secondary instance You need to validate the high availability configuration of the ASCS/ERS cluster. What should you use?
Show answer and explanation
Correct answer: C. SAPControl
SAPControl is the native SAP monitoring and management tool that validates ASCS/ERS cluster configuration, instance status, and failover capability. It directly monitors SAP-level components and provides detailed diagnostics specific to ASCS/ERS cluster health and high availability functionality.
Why the other options are wrong
- A. SAP Web Dispatcher manages HTTP requests and load balancing, not cluster validation.
- B. Azure Traffic Manager is an Azure-level service for DNS-based routing and does not validate SAP-specific cluster configurations.
- D. SAP Solution Manager is an enterprise monitoring tool but is not the primary tool for validating cluster configuration.
Question 95
Your company has an SAP environment that contains the following components: • SAP systems based on SAP HANA and SAP Adaptive Server Enterprise (SAP ASE) that run on SUSE Linux Enterprise Server 12 (SLES 12) • Multiple SAP applications The company plans to migrate all the applications to Azure. You need to get a comprehensive list of all the applications that are part of the SAP environment. What should you use?
Show answer and explanation
Correct answer: B. the SAP Solution Manager
SAP Solution Manager is the comprehensive tool for identifying and maintaining a complete inventory of all SAP applications and components within an SAP environment. It provides visibility into all installed SAP systems, their dependencies, versions, and configurations, making it essential for planning a complete migration. SAP license information only shows licensed modules, not all installed applications. The data volume management report focuses on storage, and network inventory addresses connectivity, neither providing comprehensive application discovery.
Why the other options are wrong
- A. SAP license information only reflects licensed products, not all installed applications in the environment.
- C. The data volume management report addresses storage requirements, not application inventory.
- D. Network inventory and locations provide connectivity information, not a comprehensive list of SAP applications.
Question 96
You have an SAP environment that is managed by using VMware vCenter. You plan to migrate the SAP environment to Azure. You need to gather information to identify which compute resources are required in Azure. What should you use to gather the information?
Show answer and explanation
Correct answer: A. Azure Migrate and SAP EarlyWatch Alert reports
To identify compute resources required for migrating an SAP environment from VMware to Azure, you should use Azure Migrate to assess the current environment and gather detailed resource utilization data, combined with SAP EarlyWatch Alert reports which provide SAP-specific performance metrics and recommendations for sizing. Azure Migrate specifically discovers and assesses on-premises infrastructure, while EarlyWatch Alert reports contain the SAP workload analysis needed for proper Azure VM sizing. Azure Site Recovery is primarily for disaster recovery and replication, not assessment. SAP Quick Sizer is for new implementations, and SAP HANA system replication and Cockpit are operational tools, not assessment tools.
Why the other options are wrong
- B. Azure Site Recovery is designed for disaster recovery, not initial migration assessment, and SAP Quick Sizer is for new SAP implementations, not existing environment migrations.
- C. SAP Quick Sizer is used for sizing new implementations, not for assessing existing systems, and SAP HANA system replication is an operational feature, not an assessment tool.
- D. Azure Site Recovery Deployment Planner is for disaster recovery planning, not SAP migration assessment, and SAP HANA Cockpit is an operational monitoring tool.
Question 97
You have an Azure subscription that contains a virtual network named VNet1. An SAP landscape in Azure is deployed to VNet1. You need to integrate the SAP landscape with SAP RISE. The solution must minimize costs. Which type of connection should you use?
Show answer and explanation
Correct answer: C. virtual network peering
SAP RISE with SAP on Azure runs in an SAP-managed Azure virtual network, and Microsoft and SAP recommend connecting customer Azure virtual networks to it with virtual network peering. Peering is cheap, uses the Azure backbone with low latency, and needs no gateways. This makes it the lowest-cost option for integrating an existing Azure-hosted SAP landscape with RISE.
Why the other options are wrong
- A. ExpressRoute connects on-premises networks to Azure and adds circuit costs that are unnecessary when both environments are already in Azure.
- B. A Point-to-Site VPN connects individual client computers, not an entire virtual network to another network.
- D. A VNet-to-VNet VPN requires VPN gateways on both sides, which costs more and performs worse than peering.
Question 98
You have an Azure subscription that contains an SAP landscape. The landscape uses Azure AD user authentication. You need to configure single sign-on (SSO) authentication for SAP HANA and SAP Cloud Platform. The solution must support conditional access policies. What should you configure?
Show answer and explanation
Correct answer: D. SAP Cloud Platform Identity Authentication
SAP Cloud Platform Identity Authentication is the dedicated identity service that integrates with Azure AD to provide single sign-on for SAP applications including SAP HANA and SAP Cloud Platform. It natively supports conditional access policies through Azure AD integration, allowing organizations to enforce security policies based on user, device, location, and risk factors.
Why the other options are wrong
- A. Windows Authentication is for on-premises domain-joined scenarios and does not support Azure AD conditional access policies.
- B. Azure AD Identity Protection is a risk management tool, not an SSO solution for SAP applications.
- C. LDAP is a directory protocol that does not provide SSO capabilities or integration with Azure AD conditional access.
Question 99
You have an SAP production landscape in Azure. You plan to migrate the landscape to an SAP RISE managed workload. Which task will be the sole responsibility of the SAP vendor after the migration?
Show answer and explanation
Correct answer: C. sizing the Azure resources that host the landscape
Under SAP RISE, sizing Azure resources that host the landscape is the sole responsibility of the SAP vendor. SAP assumes full responsibility for determining appropriate VM sizes, storage configurations, and infrastructure capacity planning based on workload requirements. This is part of SAP's managed service obligations.
Why the other options are wrong
- A. Configuring security monitoring in Microsoft Sentinel remains a shared responsibility; the customer retains control over their security operations center and monitoring strategy.
- B. Implementing SSO is typically a shared responsibility or customer responsibility, as it involves integration with customer identity systems.
- D. Configuring virtual network peering remains the customer's responsibility as it involves their Azure networking architecture and connectivity policies.
Question 100
You have a Hyper-V virtual machine named VM1 that runs Windows Server 2019. You plan to deploy 10 Azure virtual machines based on VM1. The virtual machines will host instances of SAP NetWeaver. You need to create an image of VM1 for the deployment. What should you do first?
Show answer and explanation
Correct answer: A. Run the Sysprep utility.
The Sysprep utility is the first step to prepare a Windows Server 2019 VM for image capture and deployment. Sysprep removes system-specific information such as the computer name, security identifiers, and event logs, ensuring each deployed VM has unique identifiers. This generalization must occur before uploading or capturing the image.
Why the other options are wrong
- B. Joining to an AD DS domain should not occur before generalization, as domain membership is system-specific.
- C. Azure Site Recovery is a disaster recovery solution, not an imaging tool for VM deployment preparation.
- D. Uploading to storage should occur only after the VM has been properly generalized with Sysprep.
Question 101
You have a Microsoft Entra tenant named contoso.com. You are designing an authentication and authorization solution for SAP Business Technology Platform (BTP) software as a service (SaaS) applications. SAP BTP subaccounts trust the SAP Cloud Identity Services - Identity Authentication Service (IAS) tenant of your company. You plan to establish a trust between the IAS tenant and contoso.com. You need to ensure that authorization decisions in the SAP BTP applications are based exclusively on claims issued by contoso.com. What should you do?
Show answer and explanation
Correct answer: D. From IAS, disable the Use Identity Authentication user store option.
To ensure authorization decisions in SAP BTP applications are based exclusively on claims issued by contoso.com (Microsoft Entra), you must disable the Use Identity Authentication user store option in IAS. When this option is disabled, IAS acts as a pure identity provider that passes through claims from the federated Entra tenant without mixing them with its own user store attributes. This ensures that only Entra-issued claims are used for authorization decisions in SAP BTP.
Why the other options are wrong
- A. Enabling this option would allow IAS to use its own user store, which would mix IAS attributes with Entra claims, violating the requirement for exclusive reliance on Entra claims.
- B. SAP BTP default attributes would introduce non-Entra-sourced claims into authorization decisions.
- C. While disabling default attributes in BTP might help, the critical action is to disable the IAS user store at the source to prevent attribute mixing.
Question 102
You have an Azure subscription. You plan to deploy a virtual machine named VM1 that will have the following configurations: • Data disk size: 4 TB • Generation: Generation 2 • Data disk type: Ultra disk • Data disk encryption type: Double encryption VM1 will host the SAP global transport directory in a volume on the data disk. You need to ensure that you can replicate VM1 by using Azure Site Recovery. Which configuration should you change?
Show answer and explanation
Correct answer: B. data disk type
Ultra disks are not supported by Azure Site Recovery for replication. To enable Site Recovery compatibility for VM1, the data disk type must be changed from Ultra disk to a supported type such as Premium SSD v1 or Premium SSD v2, while maintaining all other configurations.
Why the other options are wrong
- A. Generation 2 VMs are supported by Azure Site Recovery without limitation.
- C. Double encryption (customer-managed keys with platform-managed encryption) is supported by Azure Site Recovery.
- D. Data disk sizes up to 4 TB are supported by Azure Site Recovery for replication.
Question 103
You have an Azure subscription that contains an SAP HANA on Azure (Large Instances) deployment. The deployment is forecasted to require an additional 256 GB of storage. What is the minimum amount of additional storage you can allocate?
Show answer and explanation
Correct answer: C. 1 TB
SAP HANA on Azure (Large Instances) storage is allocated in fixed increments of 1 TB. When additional storage is required, the minimum allocation unit is 1 TB, regardless of the actual amount needed. Therefore, to accommodate a forecasted need for 256 GB of additional storage, you must allocate a minimum of 1 TB.
Why the other options are wrong
- A. 256 GB allocation is not available; storage increments must be in 1 TB units.
- B. 512 GB allocation is not available; storage increments must be in 1 TB units.
- D. 2 TB would be double the minimum required allocation.
Question 104
Your on-premises network contains the following: • A 1-Gbps internet connection • An SAP HANA 1.0 instance that has a 4-TB database • An SAP landscape that uses SUSE Linux Enterprise (SLES) 12 You have an Azure subscription that contains a virtual machine. The virtual machine is of the M64s SKU and runs SLES 15 and HANA 2.0. You need to migrate the database to the virtual machine and upgrade the database to HANA 2.0. The solution must meet the following requirements: • The migration must be performed during a weekend. • The database can be offline during the migration. Which migration method should you use?
Show answer and explanation
Correct answer: D. HANA database export and import
HANA database export and import is the most suitable method for this scenario. The database can be offline, the migration occurs during a weekend window when downtime is acceptable, and export/import handles both the 4TB data transfer and the HANA 1.0 to 2.0 upgrade efficiently. This method is simpler than backup/log shipping and avoids the limitations of network bandwidth for large datasets.
Why the other options are wrong
- A. Azure Data Box is overkill for this scenario and requires more administrative coordination than export/import.
- B. HANA database backup and log shipping is more complex and better suited for minimizing downtime in active systems, not for offline weekend migrations.
- C. Azure Migrate is designed for infrastructure migration, not for HANA database export/import or version upgrades.
Question 105
You have a Hyper-V generation 2 virtual machine image that was prepared by running sysprep.exe. You plan to use the image as part of an SAP application server deployment on Azure. You need to ensure that you can deploy the image as an Azure virtual machine. What should you do first?
Show answer and explanation
Correct answer: C. Convert the VHDX disk image to a VHD disk image.
Azure virtual machines require VHD format disk images, not VHDX format. Since the image is in Hyper-V generation 2 format (VHDX), it must be converted to VHD before it can be deployed to Azure. This conversion is the first critical step before any upload or deployment operations can proceed. Azure does not natively support VHDX files for VM deployment.
Why the other options are wrong
- A. Converting to a dynamically expanding disk is unnecessary and would complicate the upload process.
- B. Azure Storage Explorer is not the appropriate tool; the file format must be converted first.
- D. Azcopy cannot be run before the disk format is corrected, as Azure cannot accept VHDX files.
Question 106
You have a deployment of SAP NetWeaver on Azure that contains a virtual machine named VM1. You need to configure the Linux OS provider for Azure Monitor for SAP solutions on VM1. What should you do first?
Show answer and explanation
Correct answer: B. Install performance co-pilot (PCP) on VM1.
Before configuring the Linux OS provider for Azure Monitor for SAP solutions, Performance Co-Pilot (PCP) must be installed on VM1. PCP is a prerequisite that provides the performance monitoring metrics collection framework required by the Azure Monitor for SAP solutions provider. This installation must occur before the monitoring agent can function properly.
Why the other options are wrong
- A. TLS 1.2 configuration is important but occurs after the core monitoring components are installed.
- C. Insights is enabled within Azure Monitor after the VM components are already configured.
- D. Node exporter is installed after PCP and is used for Prometheus-based metrics but is not the first step.
That was 106 of 424.
The full Microsoft AZ-120 pack has all 424 questions, each with the answer, the explanation and why the other options are wrong, plus a questions-only copy for timed runs. US$39, paid once, with free monthly updates and a pass-or-your-money-back guarantee.
Not ready yet? Get the first 113 free as one PDF by email. Get the Half Pack →