Design and Implement Networking for SAP on Azure Virtual Machines AZ-120 Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A company runs SAP on Azure and needs to access an Azure Storage account for SAP transport files. The storage account is currently accessible over the public endpoint. The security team requires that all access to the storage account be private and that no public endpoint be exposed. You also need to ensure that on-premises SAP systems can access the storage account over ExpressRoute. What should you configure?

   • AUse a VPN gateway to connect on-premises to the VNet and access the storage account via its public endpoint.
   • BEnable a service endpoint on the SAP VNet subnet and disable public access on the storage account.
   • CCreate a private endpoint for the storage account, disable public access, and configure DNS to resolve the storage account to the private IP.
   • DUse Azure Firewall to block public access to the storage account and allow access only from the SAP VNet.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which Azure service provides domain name resolution for resources in a virtual network by default?

   • AAzure DNS
   • BAzure Private DNS
   • CAzure-provided name resolution
   • DAzure Traffic Manager
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   You are designing the virtual network for an SAP deployment that includes a database tier, an application tier, and a web dispatcher tier. The security team requires that the database tier be isolated from the application tier, but the application tier must be able to communicate with the database tier on specific ports. What is the most efficient way to design the subnets and network security?

   • ACreate three subnets and use network security groups on the database subnet to allow only the required ports from the application subnet.
   • BPlace all VMs in a single subnet and use NSGs on each VM's NIC.
   • CCreate a separate virtual network for the database tier and peer it to the application VNet.
   • DUse Azure Firewall between the application and database tiers.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   An SAP environment on Azure has a HANA database that generates a large amount of network traffic. The network team is concerned about packet loss and latency spikes during peak hours. They need to ensure consistent network performance for SAP traffic. You need to design a solution. What should you do?

   • AEnable Accelerated Networking on all SAP VMs and use a proximity placement group to co-locate the VMs.
   • BPlace the SAP VMs in different availability zones to spread the network load.
   • CUse a larger VM size for the HANA database to increase network bandwidth.
   • DUse Azure Traffic Manager to load balance network traffic between multiple HANA instances.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company is deploying an SAP S/4HANA cluster in a single Azure region. The database and application servers must be placed in the same availability set to meet the SAP note guidance for high availability. The network team has already created a virtual network with three subnets. You need to ensure that the VMs are deployed in the same data center to minimize network latency between the application and database tiers. What should you do?

   • AUse Azure Service Endpoints for the database subnet to keep traffic within the Azure backbone.
   • BEnable Accelerated Networking on all VMs to reduce the network latency between tiers.
   • CDeploy all VMs into the same subnet and rely on the subnet's default routing to keep them together.
   • DCreate a proximity placement group and associate it with the availability set before deploying the VMs.
   Reveal Solution Discussion Select an answer first