Design and Implement Networking for SAP on Azure Virtual Machines AZ-120 Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the purpose of Azure Private DNS zones in an SAP environment?

   • ATo resolve public internet domain names for SAP VMs
   • BTo filter DNS traffic based on security rules
   • CTo provide name resolution for resources within a virtual network using custom domain names
   • DTo provide load balancing for SAP application servers
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which connectivity option provides a private, dedicated connection between an on-premises network and Azure that does not traverse the public internet?

   • AVNet peering
   • BAzure Bastion
   • CExpressRoute
   • DSite-to-site VPN
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which Azure resource is used to filter network traffic between subnets in a virtual network based on allow/deny rules?

   • ANetwork security group (NSG)
   • BAzure Firewall
   • CRoute table
   • DVirtual network peering
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary difference between a service endpoint and a private endpoint for accessing Azure Storage from a virtual network?

   • AA service endpoint is only available for Azure Storage, while a private endpoint is available for all Azure services
   • BA service endpoint uses a public IP address, while a private endpoint uses a private IP address
   • CA service endpoint requires a VPN connection, while a private endpoint does not
   • DA service endpoint is more secure than a private endpoint
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company has an SAP environment in Azure with a hub-and-spoke topology. The SAP VMs are in a spoke VNet. The security team requires that all traffic between the spoke and the internet be inspected, but they also want to minimize the number of network virtual appliances. You need to design a solution that meets the security requirement and is cost-effective. What should you do?

   • ADeploy a network virtual appliance in each spoke to inspect traffic locally.
   • BDeploy Azure Firewall in the hub and route all spoke internet traffic through it.
   • CEnable Azure DDoS Protection on the spoke VNet.
   • DUse network security groups on the spoke subnets to filter internet traffic.
   Reveal Solution Discussion Select an answer first