Design and Implement Networking for SAP on Azure Virtual Machines AZ-120 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   When designing a virtual network (VNet) for an SAP workload on Azure, what is the primary purpose of creating separate subnets within the VNet?

   • ATo assign different public IP addresses to each subnet
   • BTo segment the network for security, routing, and resource organization
   • CTo enable communication between Azure regions
   • DTo increase the total number of IP addresses available in the VNet
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   You need to protect an SAP database subnet from unauthorized access from other subnets in the same virtual network. What is the most appropriate Azure network security measure?

   • AApply a network security group (NSG) to the database subnet
   • BCreate a proximity placement group
   • CUse Azure Front Door
   • DEnable Accelerated Networking on the database VMs
   Reveal Solution Discussion Select an answer first
4. 8application · hard

   An SAP environment on Azure has multiple application servers and a central HANA database. The network team wants to ensure that backup traffic from the database to Azure Backup does not interfere with SAP application traffic. You need to design network flow control. What should you do?

   • AConfigure a route table on the backup subnet to send backup traffic through a separate virtual network gateway.
   • BUse Azure Monitor network insights to monitor traffic and adjust bandwidth limits on the VMs.
   • CPlace the backup traffic on a separate subnet and use a network virtual appliance to prioritize traffic.
   • DUse Azure Traffic Manager to route backup traffic to a different region.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   You are designing an SAP HANA scale-out deployment across multiple availability zones. The database requires the lowest possible latency between nodes, but the application tier must remain available if an entire zone fails. You need to balance the latency requirement with the availability requirement. What should you do?

   • APlace all VMs in a single proximity placement group across multiple availability zones.
   • BPlace all database nodes in a single availability zone within a proximity placement group, and place the application tier in a separate zone.
   • CDeploy the database across two availability zones and accept higher latency.
   • DUse Accelerated Networking and rely on zone-to-zone latency.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company has SAP workloads in Azure and on-premises. They use ExpressRoute for connectivity. The network team wants to ensure that traffic between the SAP application tier and the database tier (both in Azure) does not traverse the on-premises network. What should you configure?

   • AConfigure the ExpressRoute gateway to not advertise routes for the Azure subnets.
   • BUse user-defined routes to force all traffic between the subnets to stay within the virtual network.
   • CPlace the application and database subnets in the same virtual network.
   • DEnable Accelerated Networking on the VMs to improve the path.
   Reveal Solution Discussion Select an answer first