Pass4Lead

100% Real IT Exam Q&As.

Easily Pass with a High Score.

Copyright © Pass4Lead.com, All Rights Reserved.

All our exam practice questions and answers are only for our product buyers to get prepared for their
coming certification examinations. Any unauthorized sharing is forbidden. It may cause the suspending
of ones account, membership and product update if there is a violation of this rule.
Congratulations! You can visit www.Pass4Lead.com
and use the Coupon code: Pass4Lead to enjoy 20%
off on Next Order.
Vendor: Microsoft

Exam Code: AZ-120

Exam Name: Planning and Administering Microsoft Azure

for SAP Workloads

Q&As: 165 (There are 5 parts in the dump, 165

questions in total.)
Testlet 1

Case Study

This is a case study. Case studies are not timed separately. You can use as much exam time as you
would like to complete each case. However, there may be additional case studies and sections on this
exam. You must manage your time to ensure that you are able to complete all questions included on this
exam in the time provided.

To answer the questions included in a case study, you will need to reference information that is provided in
the case study. Case studies might contain exhibits and other resources that provide more information
about the scenario that is described in the case study. Each question is independent of the other questions
in this case study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers
and to make changes before you move to the next section of the exam. After you begin a new section, you
cannot return to this section.

To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to
explore the content of the case study before you answer the questions. Clicking these buttons displays
information such as business requirements, existing environment, and problem statements. If the case
study has an All Information tab, note that the information displayed is identical to the information
displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to
return to the question.

Overview

Litware, Inc. is an international manufacturing company that has 3,000 employees.

Litware has two main offices. The offices are located in Miami, FL, and Madrid, Spain.

Existing Environment

Infrastructure

Litware currently uses a third-party provider to host a datacenter in Miami and a disaster recovery
datacenter in Chicago, IL.

The network contains an Active Directory domain named litware.com. Litware has two third-party
applications hosted in Azure.

Litware already implemented a site-to-site VPN connection between the on-premises network and Azure.

SAP Environment

Litware currently runs the following SAP products:

1. Enhancement Pack6 for SAP ERP Central Component 6.0 (SAP ECC 6.0)
2. SAP Extended Warehouse Management (SAP EWM)
3. SAP Supply Chain Management (SAP SCM)
4. SAP NetWeaver Process Integration (PI)
5. SAP Business Warehouse (SAP BW)
6. SAP Solution Manager

All servers run on the Windows Server platform. All databases use Microsoft SQL Server. Currently, you
have 20 production servers.

You have 30 non-production servers including five testing servers, five development servers, five quality
assurance (QA) servers, and 15 pre-production servers.

Currently, all SAP applications are in the litware.com domain.

Problem Statements
The current version of SAP ECC has a transaction that, when run in batches overnight, takes eight hours
to complete. You confirm that upgrading to SAP Business Suite on HANA will improve performance
because of code changes and the SAP HANA database platform.

Litware is dissatisfied with the performance of its current hosted infrastructure vendor. Litware experienced
several hardware failures and the vendor struggled to adequately support its 24/7 business operations.

Requirements

Business Goals

Litware identifies the following business goals:

1. Increase the performance of SAP ECC applications by moving to SAP HANA. All other SAP databases
will remain on SQL Server.
2. Move away from the current infrastructure vendor to increase the stability and availability of the SAP
services.
3. Use the new Environment, Health and Safety (EH&S) in Recipe Management function.
4. Ensure that any migration activities can be completed within a 48-hour period during a weekend.

Planned Changes

Litware identifies the following planned changes:

1. Migrate SAP to Azure.

2. Upgrade and migrate SAP ECC to SAP Business Suite on HANA Enhancement Pack 8.

Technical Requirements

Litware identifies the following technical requirements:

1. Implement automated backups.

2. Support load testing during the migration.
3. Identify opportunities to reduce costs during the migration.
4. Continue to use the litware.com domain for all SAP landscapes.
5. Ensure that all SAP applications and databases are highly available.
6. Establish an automated monitoring solution to avoid unplanned outages.
7. Remove all SAP components from the on-premises network once the migration is complete.
8. Minimize the purchase of additional SAP licenses. SAP HANA licenses were already purchased.
9. Ensure that SAP can provide technical support for all the SAP landscapes deployed to Azure.

QUESTION 1
You need to ensure that you can receive technical support to meet the technical requirements.

What should you deploy to Azure?

A. SAP Landscape Management (LaMa)

B. SAP Gateway
C. SAP Web Dispatcher
D. SAPRouter

Correct Answer: A
Explanation

Explanation/Reference:
Scenario: Ensure that SAP can provide technical support for all the SAP landscapes deployed to Azure.

References:
https://blogs.sap.com/2019/07/22/sap-landscape-management-on-microsoft-azure-part-1/
QUESTION 2
You need to recommend a solution to reduce the cost of the SAP non-production landscapes after the
migration.

What should you include in the recommendation?

A. Configure scaling of Azure App Service

B. Migrate the SQL Server databases to Azure SQL Data Warehouse
C. Deallocate virtual machines when not in use
D. Deploy non-production landscapes to Azure DevTest Labs

Correct Answer: A
Explanation

Explanation/Reference:
References:
https://docs.microsoft.com/en-us/azure/architecture/example-scenario/apps/sap-dev-test

QUESTION 3
You are evaluating the migration plan.

Licensing for which SAP product can be affected by changing the size of the virtual machines?

A. SAP ECC
B. SAP Solution Manager
C. PI
D. SAP SCM

Correct Answer: A
Explanation

Explanation/Reference:
Scenario: Increase the performance of SAP ECC applications by moving to SAP HANA.

References:
https://azure.microsoft.com/en-us/pricing/details/virtual-machines/rhel-sap-hana/

QUESTION 4
You are evaluating which migration method Litware can implement based on the current environment and
the business goals.

Which migration method will cause the least amount of downtime?

A. Migrate SAP ECC to SAP Business Suite in HANA, and then migrate SAP to Azure.
B. Use Near-Zero Downtime (NZDT) to migrate to SAP HANA and Azure during the same maintenance
window.
C. Use the Database Migration Option (DMO) to migrate to SAP HANA and Azure during the same
maintenance window.
D. Migrate SAP to Azure, and then migrate SAP ECC to SAP Business Suite on HANA.

Correct Answer: C
Explanation

Explanation/Reference:
The SAP Database Migration Option (DMO) with System Move option of SUM, used as part of the
migration allows customer the options to perform the migration in a single step, from source system on-
premises, or to the target system residing in Microsoft Azure, minimizing overall downtime.

References:
https://blogs.sap.com/2017/10/05/your-sap-on-azure-part-2-dmo-with-system-move/
QUESTION 5
What should you use to perform load testing as part of the migration plan?

A. JMeter
B. SAP LoadRunner by Micro Focus
C. Azure Application Insights
D. Azure Monitor

Correct Answer: B
Explanation

Explanation/Reference:
Scenario: Upgrade and migrate SAP ECC to SAP Business Suite on HANA Enhancement Pack 8.

With the SAP LoadRunner application by Micro Focus, you can accelerate testing and development,
reduce slowdowns and expenses, and gain a better understanding of performance issues. Validate
software performance, virtualize your network, simulate workloads, benchmark production system
performance, and optimize your deployment of SAP HANA software

References:
https://www.sap.com/products/loadrunner.html

QUESTION 6
HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
In a Hybrid-IT scenario, Active Directory from on-premises can be extended to serve as the
authentication mechanism through an Azure deployed domain controller (as well as potentially using the
integrated DNS).
It is important to distinguish between traditional Active Directory Servers and Microsoft Azure Active
Directory that provides only a subset of the traditional on-premises AD offering. This subset include Identity
and Access Management, but does not have the full AD schema or services that many 3rd party
application take advantage of. While Azure Active Directory IS a requirement to establish authentication for
the Azure virtual machines in use, and it can synchronize users with customers’ on-premises AD, the two
are explicitly different and customers will likely continue to require full Active Directory servers deployed in
Microsoft Azure.

References:
https://www.suse.com/media/guide/sap_hana_on_azure_101.pdf

QUESTION 7
HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:

QUESTION 8
Litware is evaluating whether to add high availability after the migration

What should you recommend to meet the technical requirements?

A. SAP HANA system replication and Azure Availability Sets

B. Azure virtual machine auto-restart with SAP HANA service auto-restart.
C. Azure Site Recovery

Correct Answer: A
Explanation

Explanation/Reference:
Testlet 1

Case Study

This is a case study. Case studies are not timed separately. You can use as much exam time as you
would like to complete each case. However, there may be additional case studies and sections on this
exam. You must manage your time to ensure that you are able to complete all questions included on this
exam in the time provided.

To answer the questions included in a case study, you will need to reference information that is provided in
the case study. Case studies might contain exhibits and other resources that provide more information
about the scenario that is described in the case study. Each question is independent of the other questions
in this case study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers
and to make changes before you move to the next section of the exam. After you begin a new section, you
cannot return to this section.

To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to
explore the content of the case study before you answer the questions. Clicking these buttons displays
information such as business requirements, existing environment, and problem statements. If the case
study has an All Information tab, note that the information displayed is identical to the information
displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to
return to the question.

Overview

Contoso, Ltd. is a manufacturing company that has 15,000 employees.

The company uses SAP for sales and manufacturing.

Contoso has sales offices in New York and London and manufacturing facilities in Boston and Seattle.

Existing Environment

Active Directory

The network contains an on-premises Active Directory domain named ad.contoso.com. User email
addresses use a domain name of contoso.com.

SAP Environment

The current SAP environment contains the following components:

1. SAP Solution Manager

2. SAP ERP Central Component (SAP ECC)
3. SAP Supply Chain Management (SAP SCM)
4. SAP application servers that run Windows Server 2008 R2
5. SAP HANA database servers that run SUSE Linux Enterprise Server 12 (SLES 12)

Problem Statements

Contoso identifies the following issues in its current environment:

1. The SAP HANA environment lacks adequate resources.

2. The Windows servers are nearing the end of support.
3. The datacenters are at maximum capacity.

Requirements

Planned Changes
Contoso identifies the following planned changes:

1. Deploy Azure Virtual WAN.

2. Migrate the application servers to Windows Server 2016.
3. Deploy ExpressRoute connections to all of the offices and manufacturing facilities.
4. Deploy SAP landscapes to Azure for development, quality assurance, and production.

All resources for the production landscape will be in a resource group named SAPProduction.

Business goals

Contoso identifies the following business goals:

1. Minimize costs whenever possible.

2. Migrate SAP to Azure without causing downtime.
3. Ensure that all SAP deployments to Azure are supported by SAP.
4. Ensure that all the production databases can withstand the failure of an Azure region.
5. Ensure that all the production application servers can restore daily backups from the last 21 days.

Technical Requirements

Contoso identifies the following technical requirements:

1. Inspect all web queries.

2. Deploy an SAP HANA cluster to two datacenters.
3. Minimize the bandwidth used for database synchronization.
4. Use Active Directory accounts to administer Azure resources.
5. Ensure that each production application server has four 1-TB data disks.
6. Ensure that an application server can be restored from a backup created during the last five days within
15 minutes.
7. Implement an approval process to ensure that an SAP administrator is notified before another
administrator attempts to make changes to the Azure virtual machines that host SAP.

It is estimated that during the migration, the bandwidth required between Azure and the New York office
will be 1 Gbps. After the migration, a traffic burst of up to 3 Gbps will occur.

Proposed Backup Policy

An Azure administrator proposes the backup policy shown in the following exhibit.
Azure Resource Manager Template

An Azure administrator provides you with the Azure Resource Manager template that will be used to
provision the production application servers.
QUESTION 1
This question requires that you evaluate the underlined text to determine if it is correct.

You are planning for the administration of resources in Azure.

To meet the technical requirements, you must first implement Active Directory Federation Services (AD
FS).

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.

A. No change is needed
B. Azure AD Connect
C. Azure AD join
D. Enterprise State Roaming
Correct Answer: B
Explanation

Explanation/Reference:
AD connect, it's not mandatory to have AD FS, you can use Password HAsh Synch or Passthrough
Authentication, but AD Connect is mandatory to synch you on-promises accounts to Azure AD

References:
https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/sap-hana-cloudplatform-identity-
authentication-tutorial

QUESTION 2
Once the migration completes, to which size should you set the ExpressRoute circuit to the New York
office to meet the business goals and technical requirements?

A. 500 Mbps
B. 1,000 Mbps
C. 2,000 Mbps
D. 5,000 Mbps

Correct Answer: C
Explanation

Explanation/Reference:
ExpressRoute circuits are configured to allow you to burst up to two times the bandwidth limit you procured
for no additional cost.

Scenario: It is estimated that during the migration, the bandwidth required between Azure and the New
York office will be 1 Gbps. After the migration, a traffic burst of up to 3 Gbps will occur.

References:
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-faqs

QUESTION 3
Which Azure service should you deploy for the approval process to meet the technical requirements?

A. Just in time (JIT) VM access

B. Azure Active Directory (Azure AD) Identity Protection
C. Azure Active Directory (Azure AD) Privileged identity Manager (PIM)
D. Azure Active Directory (Azure AD) conditional access

Correct Answer: B
Explanation

Explanation/Reference:

QUESTION 4
You are planning the Azure network infrastructure to support the disaster recovery requirements.

What is the minimum number of virtual networks required for the SAP deployment?

A. 1
B. 2
C. 3
D. 4

Correct Answer: B
Explanation
Explanation/Reference:
Scenario: Ensure that all the production databases can withstand the failure of an Azure region.

Note: Use Azure Site Recovery to replicate applications across regions. Azure Site Recovery replicates
workloads running on physical and virtual machines from a primary site (either on-premises or in Azure) to
a secondary location (in Azure). When an outage occurs at the customer's primary site, a failover can be
triggered to quickly return the customer to an operational state. After the primary location is restored,
customers can then fail back.

References:
https://docs.microsoft.com/en-us/azure/architecture/resiliency/recovery-loss-azure-region

QUESTION 5
HOTSPOT

You are planning replication of the SAP HANA database for the disaster recovery environment in Azure.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Box 1: No
SAP HANA Replication consists of one primary node and at least one secondary node. Changes to the
data on the primary node are replicated to the secondary node synchronously or asynchronously.

Box 2: No
Since SPS11 SAP HANA system replication can be run in two different operation
modes:
delta_datashipping
logreplay

Box 3: Yes

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-hana-high-availability-rhel

https://blogs.sap.com/2018/01/08/your-sap-on-azure-part-4-high-availability-for-sap-hana-using-system-
replication/

QUESTION 6
HOTSPOT

You are evaluating the proposed backup policy.

For each of the following statements, select Yes if the statement is true. otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Box 1: Yes
Scenario: Technical requirements: Ensure that an application server can be restored from a backup
created during the last five days within 15 minutes.

Instant Restore has 'The instance recovery snapshot(s) for 5 Day(s)'.

Box 2: No
Scenario: Ensure that all the production application servers can restore daily backups from the last 21
days.

The Retention of daily backup point is set to for 14 days only.

Box 3: Yes

Reference:
https://docs.microsoft.com/en-us/azure/backup/backup-instant-restore-capability

QUESTION 7
HOTSPOT

Before putting the SAP environment on Azure into production, which command should you run to ensure
that the virtual machine disks meet the business requirements? To answer, select the appropriate options
in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
Scenario: Ensure that all the production databases can withstand the failure of an Azure region.

References:
https://docs.microsoft.com/en-us/powershell/module/az.compute/get-azvmimage

QUESTION 8
HOTSPOT
You need to provide the Azure administrator with the values to complete the Azure Resource Manager
template.

Which values should you provide for diskCount, StorageAccountType, and domainName? To
answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Box 1: 4

Scenario: the Azure Resource Manager template that will be used to provision the production application
servers.
Ensure that each production application server has four 1-TB data disks.

Box 2: Standard_LRS
Scenario: Minimize costs whenever possible.

Box 3: contoso.onmicrosoft.com
The network contains an on-premises Active Directory domain named ad.contoso.com.
The Initial domain: The default domain (onmicrosoft.com) in the Azure AD Tenant. For example,
contoso.onmicrosoft.com.

References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-userprincipalname
Testlet 1

Mix Questions
QUESTION 1
You are migrating SAP to Azure. The ASCS application servers are in one Azure zone, and the SAP
database server in in a different Azure zone. ASCS/ERS is configured for high availability.

During performance testing, you discover increased response times in Azure, even though the Azure
environment has better computer and memory configurations than the on-premises environment.

During the initial analysis, you discover an increased wait time for Enqueue.

What are three possible causes of the increased wait time? Each correct answer presents a complete
solution.

NOTE: Each correct selection is worth one point.

A. a missing Enqueue profile

B. disk I/O during Enqueue backup operations
C. misconfigured load balancer rules and health check probes for Enqueue and ASCS
D. active Enqueue replication
E. network latency between the database server and the SAP application servers

Correct Answer: CDE

Explanation

Explanation/Reference:
E: The network latency across Availability Zones is not the same in all Azure regions. In some cases, you
can deploy and run the SAP application layer across different zones because the network latency from one
zone to the active DBMS VM is acceptable. But in some Azure regions, the latency between the active
DBMS VM and the SAP application instance, when deployed in different zones, might not be acceptable
for SAP business processes.

References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-ha-availability-zones

QUESTION 2
You have an on-premises SAP environment that uses AIX servers and IBM DB2 as the database platform.

You plan to migrate SAP to Azure. In Azure, the SAP workloads will use Windows Server and Microsoft
SQL Server as the database platform.

What should you use to export from DB2 and import the data to SQL Server?

A. R3load
B. Azure SQL Data Warehouse
C. SQL Server Management Studio (SSMS)
D. R3trans

Correct Answer: A
Explanation

Explanation/Reference:
Both R3load and SSMA can be used to migrate from DB2 to SQL Server. In the options there is not SSMA,
but SSMS, the SSMS cannot be use to migrate DB2 to SQL Server.

Refer to:
https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/sap-os-db-migration-to-sql-server-
faq/ba-p/366986
https://sapnwnewbie.blogspot.com/2013/07/osdb-migration-cmd-str-toc-ext-r3load.html
https://docs.microsoft.com/en-us/sql/ssma/sql-server-migration-assistant?view=sql-server-ver15
https://docs.microsoft.com/en-us/sql/ssms/sql-server-management-studio-ssms?view=sql-server-ver15

QUESTION 3
You have an SAP environment that is managed by using VMware vCenter.

You plan to migrate the SAP environment to Azure.

You need to gather information to identify which compute resources are required in Azure.

What should you use to gather the information?

A. Azure Migrate and SAP EarlyWatch Alert reports

B. Azure Site Recovery and SAP Quick Sizer
C. SAP Quick Sizer and SAP HANA system replication
D. Azure Site Recovery Deployment Planner and SAP HANA Cockpit

Correct Answer: A
Explanation

Explanation/Reference:
Azure Migrate is a Microsoft service that helps an enterprise assess how its on-premises workloads will
perform, and how much they will cost to host, in the Azure public cloud. An enterprise can use Azure
Migrate to discover information about the VMware VMs running within its own data center, including CPU
and memory usage, as well as performance history.

SAP EarlyWatch Alert (EWA) is a monitoring service for SAP customers, to monitor SAP systems in the
solution landscape.

Incorrect Answers:
D: SAP HANA Cockpit is an administrative tool with a web interface for a correspondingly named database
engine, a part of SAP ERP software. It allows both offline and cloud operations for managing databases,

References:
https://searchcloudcomputing.techtarget.com/definition/Azure-Migrate

QUESTION 4
You plan to migrate an SAP ERP Central Component (SAP ECC) production system to Azure.

You are reviewing the SAP EarlyWatch Alert report for the system.

You need to recommend sizes for the Azure virtual machines that will host the system.

Which two sections of the report should you review? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. Hardware Capacity
B. Patch Levels under SAP Software Configuration
C. Hardware Configuration under Landscape
D. Database and ABAP Load Optimization
E. Data Volume Management

Correct Answer: AC
Explanation

Explanation/Reference:
References:
https://wiki.scn.sap.com/wiki/display/SM/Hardware+Capacity+Checks+in+EWA

QUESTION 5
You plan to migrate an SAP environment to Azure.

You need to recommend a solution to migrate the SAP application servers to Azure. The solution must
minimize downtime and changes to the environments.

What should you include in the recommendation?

A. Azure Storage Explorer

B. Azure Import/Export service
C. AzCopy
D. Azure Site Recovery

Correct Answer: D
Explanation

Explanation/Reference:
Site Recovery is used to manage and orchestrate disaster recovery of on-premises machines and Azure
VMs. However, it can also be used for migration. Migration uses the same steps as disaster recovery with
one exception. In a migration, failing machines over from your on-premises site is the final step. Unlike
disaster recovery, you can't fail back to on-premises in a migration scenario.

References:
https://docs.microsoft.com/en-us/azure/site-recovery/migrate-tutorial-on-premises-azure

QUESTION 6
You plan to migrate an on-premises SAP development system to Azure.

Before the migration, you need to check the usage of the source system hardware, such as CPU, memory,
network, etc.

Which transaction should you run from SAP GUI?

A. SM51
B. DB01
C. DB12
D. OS07N/ST06

Correct Answer: D
Explanation

Explanation/Reference:
SAP transaction OS07N (Remote Operating System Activity) is classified in the Basis Component module
under application component Operating System Monitors and runs Monitoring Operating System program
RSHOST1N upon execution.

Incorrect Answers:
A: Transaction code SM51 is to display list of active application servers that have registered in the SAP
message server.

B: DB01 is a transaction code used for Analyze Exclusive Lockwaits in SAP.

C: Transaction code DB12 is to collects and presents information that is necessary to monitor database
backups.

ST06 is a transaction code used for Operating System Monitor in SAP. SAP transaction ST06 (Operating
System Monitor) is classified in the Basis Component module under application component Operating
System Monitors and runs Monitoring Operating System program RSHOST05 upon execution.

References:
http://www.saptransactions.com/codes/OS07N/
https://www.saptransactions.com/codes/ST06/
QUESTION 7
Your company has an SAP environment that contains the following components:

SAP systems based on SAP HANA and SAP Adaptive Server Enterprise (SAP ASE) that run on SUSE
Linux Enterprise Server 12 (SLES 12)
Multiple SAP applications

The company plans to migrate all the applications to Azure.

You need to get a comprehensive list of all the applications that are part of the SAP environment.

What should you use?

A. the SAP license information

B. the SAP Solution Manager
C. the data volume management report
D. the network inventory and locations

Correct Answer: B
Explanation

Explanation/Reference:
The SAP Solution Manager is a centralized robust application management and administration solution
used to implement, support, operate and monitor your SAP enterprise solutions, SAP Solution Manager is
a platform providing integrated content, tools, methodologies and access to SAP systems.

Incorrect Answers:
C: Data volume management is a framework that helps the solution operations team of an SAP-centric
solution to balance the need of business' access to a wealth of data and IT efforts to monitor and control
data growth and to minimize data volume.

References:
https://blogs.sap.com/2009/02/20/sap-solution-manager-overview-for-dummies/

QUESTION 8
You plan to migrate an SAP HANA instance to Azure.

You need to gather CPU metrics from the last 24 hours from the instance.

Solution: You query views from SAP HANA Studio.

Does this meet the goal?

A. Yes
B. No

Correct Answer: A
Explanation

Explanation/Reference:
SAP HANA Studio -> Administration -> Overview -> CPU Usage.
SAP HANA Studio -> Administration -> Performance -> Load -> [System] CPU.

QUESTION 9
You plan to migrate an SAP HANA instance to Azure.

You need to gather CPU metrics from the last 24 hours from the instance.

Solution: You run SAP HANA Quick Sizer.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Explanation

Explanation/Reference:
The SAP HANA cockpit provides a single point of access to a range of SAP HANA administration and
monitoring tasks. It is used to monitor and ensure the overall health of the system.

The HANA Monitoring dashboard also visualizes key HANA Metrics of SAP HANA system.

Reference:
https://developers.sap.com/tutorials/dt-monitoring-hana-part1.html
https://www.hanatutorials.com/p/hana-monitoring-dashboard.html

QUESTION 10
You plan to migrate an SAP HANA instance to Azure.

You need to gather CPU metrics from the last 24 hours from the instance.

Solution: You use DBA Cockpit from SAP GUI.

Does this meet the goal?

A. Yes
B. No

Correct Answer: A
Explanation

Explanation/Reference:
The SAP HANA cockpit provides a single point of access to a range of SAP HANA administration and
monitoring tasks. It is used to monitor and ensure the overall health of the system.

The HANA Monitoring dashboard also visualizes key HANA Metrics of SAP HANA system.

Reference:
https://developers.sap.com/tutorials/dt-monitoring-hana-part1.html
https://help.sap.com/viewer/afa922439b204e9caf22c78b6b69e4f2/2.10.0.0/en-US
https://www.hanatutorials.com/p/hana-monitoring-dashboard.html

QUESTION 11
Note: This question is part of a series of questions that present the same scenario. Each question in the
series contains a unique solution that might meet the stated goals. Some question sets might have more
than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions
will not appear in the review screen.

You have a complex SAP environment that has both ABAP- and Java-based systems. The current on-
premises landscapes are based on SAP NetWeaver 7.0 (Unicode and Non- Unicode) running on Windows
Server and Microsoft SQL Server.

You need to migrate the SAP environment to a HANA-certified Azure environment.

Solution: You deploy a new environment to Azure that uses SAP NetWeaver 7.4. You export the
databases from the on-premises environment, and then you import the databases into the Azure
environment.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Explanation

Explanation/Reference:
Instead use Azure Site Recovery to migrate.

Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-architecture

QUESTION 12
Note: This question is part of a series of questions that present the same scenario. Each question in the
series contains a unique solution that might meet the stated goals. Some question sets might have more
than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions
will not appear in the review screen.

You have a complex SAP environment that has both ABAP- and Java-based systems. The current on-
premises landscapes are based on SAP NetWeaver 7.0 (Unicode and Non- Unicode) running on Windows
Server and Microsoft SQL Server.

You need to migrate the SAP environment to a HANA-certified Azure environment.

Solution: You upgrade to SAP NetWeaver 7.4, and then you migrate SAP to Azure by using Azure Site
Recovery.

Does this meet the goal?

A. Yes
B. No

Correct Answer: A
Explanation

Explanation/Reference:
We need upgrade to SAP NetWeaver 7.4 before the migration. Then Azure Site Recovery is used for the
migration to Azure.

Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-architecture

QUESTION 13
Note: This question is part of a series of questions that present the same scenario. Each question in the
series contains a unique solution that might meet the stated goals. Some question sets might have more
than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions
will not appear in the review screen.

You have a complex SAP environment that has both ABAP- and Java-based systems. The current on-
premises landscapes are based on SAP NetWeaver 7.0 (Unicode and Non- Unicode) running on Windows
Server and Microsoft SQL Server.

You need to migrate the SAP environment to a HANA-certified Azure environment.

Solution: You migrate SAP to Azure by using Azure Site Recovery, and then you upgrade to SAP
NetWeaver 7.4.
Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Explanation

Explanation/Reference:
We need upgrade to SAP NetWeaver 7.4 before the migration.

Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-architecture

QUESTION 14
You have an on-premises SAP environment hosted on VMware VSphere that uses Microsoft SQL Server
as the database platform.

You plan to migrate the environment to Azure. The database platform will remain the same.

You need gather information to size the target Azure environment for the migration.

What should you use?

A. the SAP EarlyWatch report

B. Azure Advisor
C. the SAP HANA sizing report
D. Azure Monitor

Correct Answer: C
Explanation

Explanation/Reference:
https://azure.microsoft.com/nl-nl/blog/sap-on-azure-architecture-designing-for-performance-and-scalability/

"For existing on-premises systems, you should reference system configuration and resource utilization
data. The system utilization information is collected by the SAP OS Collector and can be reported via SAP
transaction OS07N as well as the EarlyWatch Alert."

QUESTION 15
Note: This question is part of a series of questions that present the same scenario.
Each question in

the series contains a unique solution that might meet the stated goals. Some question sets might have

more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You deploy SAP HANA on Azure (Large Instances).

You need to back up the SAP HANA database to Azure.

Solution: You create a Recovery Services vault and a backup policy.

Does this meet the goal?

A. Yes
B. No
Correct Answer: A
Explanation

Explanation/Reference:
Backup architecture
The backup process begins by creating a Recovery services vault in Azure. This vault will be used to store
the backups and recovery points created over time.
The Azure VM running SAP HANA server is registered with the vault, and the databases to be backed-up
are discovered. To enable the Azure Backup service to discover databases, a preregistration script must
be run on the HANA server as a root user.
This script creates AZUREWLBACKUPHANAUSER DB user and a corresponding key with the same
name in hdbuserstore. Refer to the setting up permissions section to understand more about what the
script does.
Azure Backup Service now installs the Azure Backup Plugin for HANA on the registered SAP HANA
server.
The AZUREWLBACKUPHANAUSER DB user created by the preregistration script is used by the Azure
Backup Plugin for HANA to perform all backup and restore operations. If you attempt to configure backup
for SAP HANA DBs without running this script, you might receive the following error:
UserErrorHanaScriptNotRun.
To configure backup on the databases that are discovered, choose the required backup policy and enable
backups.
Once the backup is configured, Azure Backup service sets up the Backint parameters at the DATABASE
level on the protected SAP HANA server.
The Azure Backup Plugin for HANA maintains all the backup schedules and policy details. It triggers the
scheduled backups and communicates with the HANA Backup Engine through the Backint APIs.
The HANA Backup Engine returns a Backint stream with the data to be backed up.
All the scheduled backups and on-demand backups (triggered from the Azure portal) that are either full or
differential are initiated by the Azure Backup Plugin for HANA. However, log backups are managed and
triggered by HANA Backup Engineitself.

Reference:
https://docs.microsoft.com/en-us/azure/backup/sap-hana-db-about
https://docs.microsoft.com/en-us/azure/backup/backup-azure-sap-hana-database#configure-backup

QUESTION 16
You have an SAP environment on Azure that uses multiple subscriptions.

To meet GDPR requirements, you need to ensure that virtual machines are deployed only to the West
Europe and North Europe Azure regions.

Which Azure components should you use?

A. Azure resource locks and the Compliance admin center

B. Azure resource groups and role-based access control (RBAC)
C. Azure management groups and Azure Policy
D. Azure Security Center and Azure Active Directory (Azure AD) groups

Correct Answer: C
Explanation

Explanation/Reference:
Azure Policy enables you to set policies to conform to the GDPR. Azure Policy is generally available today
at no additional cost to Azure customers. You can use Azure Policy to define and enforce policies that help
your cloud environment become compliant with internal policies as well as external regulations.

Azure Policy is deeply integrated into Azure Resource Manager and applies across all resources in Azure.
Individual policies can be grouped into initiatives to quickly implement multiple rules. You can also use
Azure Policy in a wide range of compliance scenarios, such as ensuring that your data is encrypted or
remains in a specific region as part of GDPR compliance. Microsoft is the only hyperscale cloud provider to
offer this level of policy integration built in to the platform for no additional charge.
References:
https://azure.microsoft.com/de-de/blog/new-capabilities-to-enable-robust-gdpr-compliance/

QUESTION 17
A customer that has a large enterprise SAP environment plans to migrate to Azure. The environment uses
servers that run Windows Server 2016 and Microsoft SQL Server.

The environment is critical and requires a comprehensive business continuity and disaster recovery
(BCDR) strategy that minimizes the recovery point objective (RPO) and the recovery time objective (RTO).

The customer wants a resilient environment that has a secondary site that is at least 250 kilometers away.

You need to recommend a solution for the customer.

Which two solutions should you recommend? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. warm standby virtual machines in paired regions

B. Azure Traffic Manager to route incoming traffic
C. warm standby virtual machines in an Azure Availability Set that uses geo-redundant storage (GRS)
D. an internal load balancer to route Internet traffic
E. warm standby virtual machines in Azure Availability Zones

Correct Answer: AC
Explanation

Explanation/Reference:
A: An Azure Region Pair is a relationship between two Azure Regions within the same geographic region
for disaster recovery purposes. If one of the regions were to experience a disaster or failure, then the
services in that region will automatically failover to that regions secondary region in the pair.

C: For increased availability, you can deploy two VMs with two HANA instances within an Azure availability
set that uses HANA system replication for availability.

References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-hana-availability-one-region

QUESTION 18
You plan to deploy an SAP environment on Azure that will use Azure Availability Zones.

Which load balancing solution supports the deployment?

A. Azure Basic Load Balancer

B. Azure Standard Load Balancer
C. Azure Application Gateway v1 SKU

Correct Answer: B
Explanation

Explanation/Reference:
When you deploy Azure VMs across Availability Zones and establish failover solutions within the same
Azure region, some restrictions apply:
You can't use an Azure Basic Load Balancer to create failover cluster solutions based on Windows Server
Failover Clustering or Linux Pacemaker. Instead, you need to use the Azure Standard Load Balancer SKU.

References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-ha-availability-zones

QUESTION 19
You have an Azure subscription.
Your company has an SAP environment that runs on SUSE Linux Enterprise Server (SLES) servers and
SAP HANA. The environment has a primary site and a disaster recovery site. Disaster recovery is based
on SAP HANA system replication. The SAP ERP environment is 4 TB and has a projected growth of 5%
per month.

The company has an uptime Service Level Agreement (SLA) of 99.99%, a maximum recovery time
objective (RTO) of four hours, and a recovery point objective (RPO) of 10 minutes.

You plan to migrate to Azure.

You need to design an SAP landscape for the company.

Which options meet the company's requirements?

A. Azure virtual machines and SLES for SAP application servers

SAP HANA on Azure (Large Instances) that uses SAP HANA system replication for high availability
and disaster recovery
B. ASCS/ERS and SLES clustering that uses the Pacemaker fence agent
SAP application servers deployed to an Azure Availability Zone
SAP HANA on Azure (Large Instances) that uses SAP HANA system replication for database high
availability and disaster recovery
C. SAP application instances deployed to an Azure Availability Set
SAP HANA on Azure (Large Instances) that uses SAP HANA system replication for database high
availability and disaster recovery
D. ASCS/ERS and SLES clustering that uses the Azure fence agent
SAP application servers deployed to an Azure Availability Set
SAP HANA on Azure (Large Instances) that uses SAP HANA system replication for database high
availability and disaster recovery

Correct Answer: B
Explanation

Explanation/Reference:
With Availability Zones, Azure offers industry best 99.99% VM uptime SLA.

References:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-faqs

QUESTION 20
You deploy SAP HANA on Azure (Large Instances).

You need to back up the SAP HANA database to Azure.

Solution: You configure DB13 to back up directly to a local disk.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Explanation

Explanation/Reference:
You need to back up the SAP HANA database to Azure, not to a local disk.

References:
https://docs.microsoft.com/en-us/azure/backup/sap-hana-db-about

https://docs.microsoft.com/en-us/azure/backup/backup-azure-sap-hana-database#configure-backup
QUESTION 21
You plan to migrate an SAP HANA instance to Azure.

You need to gather CPU metrics from the last 24 hours from the instance.

Solution: You use Monitoring from the SAP HANA Cockpit.

Does this meet the goal?

A. Yes
B. No

Correct Answer: A
Explanation

Explanation/Reference:
The SAP HANA cockpit provides a single point of access to a range of SAP HANA administration and
monitoring tasks. It is used to monitor and ensure the overall health of the system.

The HANA Monitoring dashboard also visualizes key HANA Metrics of SAP HANA system.

Reference:
https://developers.sap.com/tutorials/dt-monitoring-hana-part1.html
https://help.sap.com/viewer/afa922439b204e9caf22c78b6b69e4f2/2.10.0.0/en-US
https://www.hanatutorials.com/p/hana-monitoring-dashboard.html

QUESTION 22
You deploy an SAP environment on Azure.

Your company has a Service Level Agreement (SLA) of 99.99% for SAP.

You implement Azure Availability Zones that have the following components:

1. Redundant SAP application servers

2. ASCS/ERS instances that use a failover cluster
3. Database high availability that has a primary instance and a secondary instance

You need to validate the load distribution to the application servers. What should you use?

A. SAPControl
B. SAP Solution Manager
C. Azure Monitor
D. SAP Web Dispatcher

Correct Answer: D
Explanation

Explanation/Reference:
Load balancers. These are used to distribute traffic to virtual machines in the application-tier subnet. For
high availability, use the built-in SAP Web Dispatcher, Azure Load Balancer, or network appliances,
depending on the traffic type (such as HTTP or SAPGUI) or the required network services, such as Secure
Sockets Layer (SSL) termination.

Reference:
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/sap/sap-netweaver

QUESTION 23
You plan to deploy an SAP environment on Azure.

During a bandwidth assessment, you identify that connectivity between Azure and an on-premises
datacenter requires up to 5 Gbps.
You need to identify which connectivity method you must implement to meet the bandwidth requirement.
The solution must minimize costs.

Which connectivity method should you identify?

A. an ExpressRoute connection
B. an Azure site-to-site VPN that is route-based
C. an Azure site-to-site VPN that is policy-based
D. Global VNet peering

Correct Answer: B
Explanation

Explanation/Reference:
Azure site-to-site VPN is cheaper.

Incorrect Answers:
A: ExpressRoute could be quite expensive.

C: Policy-based gateways use static routing, and only work with site-to-site connections.

References:
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/vpn

QUESTION 24
You plan to migrate an SAP environment to Azure.

You need to create a design to facilitate end-user access to SAP applications over the Internet, while
restricting user access to the virtual machines of the SAP application servers.

What should you include in the design?

A. Configure a public IP address for each SAP application server

B. Deploy an internal Azure Standard Load Balancer for incoming connections
C. Use an SAP Web Dispatcher to route all incoming connections
D. Configure point-to-site VPN connections for each user

Correct Answer: C
Explanation

Explanation/Reference:
1. A public internet user can reach the SAP Web-Dispatcher over port 443
2. The SAP Web-Dispatcher can reach the SAP Application server over port 443
3. The App Subnet accepts traffic on port 443 from 10.0.0.0/24
4. The SAP Application server sends traffic on port 30015 to the SAP DB server
5. The DB subnet accepts traffic on port 30015 from 10.0.1.0/24.
6. Public Internet Access is blocked on both App Subnet and DB Subnet.
References:
https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/

QUESTION 25
You have an Azure subscription.

You deploy Active Directory domain controllers to Azure virtual machines.

You plan to deploy Azure for SAP workloads.

You plan to segregate the domain controllers from the SAP systems by using different virtual networks.

You need to recommend a solution to connect the virtual networks. The solution must minimize costs.

What should you recommend?

A. a site-to-site VPN
B. virtual network peering
C. user-defined routing
D. ExpressRoute

Correct Answer: B
Explanation

Explanation/Reference:
https://github.com/MicrosoftDocs/azure-docs/issues/32537 https://azure.microsoft.com/en-us/blog/vnet-
peering-and-vpn-gateways/

QUESTION 26
You deploy an SAP environment on Azure.

Your company has a Service Level Agreement (SLA) of 99.99% for SAP.

You implement Azure Availability Zones that have the following components:

1. Redundant SAP application servers

2. ASCS/ERS instances that use a failover cluster
3. Database high availability that has a primary instance and a secondary instance

You need to validate the high availability configuration of the ASCS/ERS cluster.

What should you use?

A. SAP Web Dispatcher

B. Azure Traffic Manager
C. SAPControl
D. SAP Solution Manager

Correct Answer: B
Explanation

Explanation/Reference:
https://documentation.suse.com/sbp/all/pdf/SAP_NW740_SLE12_SetupGuide_color_en.pd f

QUESTION 27
You are deploying an SAP environment on Azure that will use an SAP HANA database server.

You provision an Azure virtual machine for SAP HANA by using the M64s virtual machine SKU.

You need to set the swap space by using the Microsoft Azure Linux Agent (waagent) configuration file.

Which two settings should you configure? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. ResourceDisk.EnableSwapEncryption=n
B. AutoUpdate.Enabled=n
C. ResourceDisk.SwapSizeMB=229376
D. ResourceDisk.EnableSwap=y

Correct Answer: CD
Explanation

Explanation/Reference:
To create a swap file in the directory that's defined by the ResourceDisk.MountPoint parameter, you can
update the /etc/waagent.conf file by setting the following three parameters:
ResourceDisk.Format=y
ResourceDisk.EnableSwap=y
ResourceDisk.SwapSizeMB=xx

Reference:
https://support.microsoft.com/en-us/help/4010058/how-to-add-a-swap-file-in-linux-azure-virtual-machines
QUESTION 28
You plan to deploy an SAP environment on Azure.

You plan to store all SAP connection strings securely in Azure Key Vault without storing credentials on the
Azure virtual machines that host SAP.

What should you configure to allow the virtual machines to access the key vault?

A. Azure Active Directory (Azure AD) Privilege Identity Manager (PIM)

B. role-based access control (RBAC)
C. a Managed Service Identity (MSI)
D. the Custom Script Extension

Correct Answer: C
Explanation

Explanation/Reference:
To reference a credential stored in Azure Key Vault, you need to:
1. Retrieve data factory managed identity
2. Grant the managed identity access to your Azure Key Vault
3. Create a linked service pointing to your Azure Key Vault.
4. Create data store linked service, inside which reference the corresponding secret stored in key vault.

Reference:
https://docs.microsoft.com/bs-latn-ba/azure/data-factory/store-credentials-in-key-vault

QUESTION 29
You plan to deploy SAP application servers that run Windows Server 2016.

You need to use PowerShell Desired State Configuration (DSC) to configure the SAP application server
once the servers are deployed.

Which Azure virtual machine extension should you install on the servers?

A. the Azure DSC VM Extension

B. the Azure virtual machine extension
C. the Azure Chef extension
D. the Azure Enhanced Monitoring Extension for SAP

Correct Answer: A
Explanation

Explanation/Reference:
The Azure Desired State Configuration (DSC) VM Extension is updated as-needed to support
enhancements and new capabilities delivered by Azure, Windows Server, and the Windows Management
Framework (WMF) that includes Windows PowerShell.

Reference:
https://docs.microsoft.com/en-us/powershell/scripting/dsc/getting-started/azuredscexthistory

QUESTION 30
You deploy an SAP environment on Azure by following the SAP workload on Azure planning and
deployment checklist.

You need to verify whether Azure Diagnostics is enabled.

Which cmdlet should you run?

A. Get-AzureVMAvailableExtension
B. Get-AzVmDiagnosticsExtension
C. Test-AzDeployment
D. Test-VMConfigForSAP

Correct Answer: B
Explanation

Explanation/Reference:
The Get-AzVMDiagnosticsExtension cmdlet gets the settings of the Azure Diagnostics extension on a
virtual machine.

Incorrect Answers:
D: You can check the configuration of a virtual machine by calling the Test-VMConfigForSAP_GUI
commandlet.

Reference:
https://docs.microsoft.com/en-us/powershell/module/az.compute/get-azvmdiagnosticsextension

QUESTION 31
This question requires that you evaluate the underlined text to determine if it is correct.

You have an Azure resource group that contains the virtual machines for an SAP environment.

You must be assigned the Contributor role to grant permissions to the resource group.

Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If
the statement is incorrect, select the answer choice that makes the statement correct.

A. No change is needed
B. User Access Administrator
C. Managed Identity Contributor
D. Security Admin

Correct Answer: B
Explanation

Explanation/Reference:
Contributor - Can create and manage all types of Azure resources but can't grant access to others.
User Access Administrator - Lets you manage user access to Azure resources.

Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/overview

QUESTION 32
You plan to migrate an SAP environment to Azure.

You need to design an Azure network infrastructure to meet the following requirements:

1. Prevent end users from accessing the database servers.

2. Isolate the application servers from the database servers.
3. Ensure that end users can access the SAP systems over the Internet.
4. Minimize the costs associated to the communications between the application servers and database
servers.

Which two actions should you include in the solution? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. In the same Azure virtual network, segregate the SAP application servers and database servers by
using different subnets and network security groups.
B. Segregate the SAP application servers and database servers by using Azure virtual networks.
C. Create a site-to-site VPN between the on-premises network and Azure.
D. Configure an internal Azure Standard Load Balancer for incoming connections.
E. Configure Azure Traffic Manager to route incoming connections.

Correct Answer: AC
Explanation

Explanation/Reference:

QUESTION 33
You are deploying SAP Fiori to an SAP environment on Azure.

You are configuring SAML 2.0 for an SAP Fiori instance named FPP that uses client 100 to authenticate to
an Azure Active Directory (Azure AD) tenant.

Which provider named should you use to ensure that the Azure AD tenant recognizes the SAP Fiori
instance?

A. https://FPP
B. ldap://FPP
C. https://FPP100
D. ldap://FPP-100

Correct Answer: C
Explanation

Explanation/Reference:
By default, the provider name is in the format <sid><client>. Azure AD expects the name in the format
<protocol>://<name>. We recommend that you maintain the provider name as https://<sid><client> so you
can configure multiple SAP Fiori ABAP engines in Azure AD.

Example:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/sap-fiori-tutorial

QUESTION 34
You have an SAP environment on Azure.

Your on-premises network connects to Azure by using a site-to-site VPN connection.

You need to alert technical support if the network bandwidth usage between the on-premises network and
Azure exceeds 900 Mbps for 10 minutes.

What should you use?

A. NIPING
B. Azure Enhanced Monitoring for SAP
C. Azure Network Watcher
D. Azure Monitor

Correct Answer: D
Explanation

Explanation/Reference:
You set up alerts on Azure VPN Gateway metrics. Azure Monitor provides the ability to set up alerts for
Azure resources. You can set up alerts for virtual network gateways of the "VPN" type.

Metric: AverageBandwidth: Average combined bandwidth utilization of all site-to-site connections on the
gateway.
Reference:
https://docs.microsoft.com/bs-latn-ba/azure/vpn-gateway/vpn-gateway-howto-setup-alerts-virtual-network-
gateway-metric

QUESTION 35
You need direct connectivity from an on-premises network to SAP HANA (Large Instances). The solution
must meet the following requirements:

1. Minimize administrative effort.

2. Provide the highest level of resiliency.

What should you use?

A. ExpressRoute Global Reach

B. Linux IPTables
C. ExpressRoute
D. NGINX as a reverse proxy

Correct Answer: A
Explanation

Explanation/Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-network-architecture

Express Route Global Reach Microsoft introduced a new functionality called ExpressRoute Global Reach.
Global Reach can be used for HANA Large Instances in two scenarios:
Enable direct access from on-premises to your HANA Large Instance units deployed in different regions
Enable direct communication between your HANA Large Instance units deployed in different regions Direct
Access from on-premises In the Azure regions where Global Reach is offered, you can request enabling
the Global Reach functionality for your ExpressRoute circuit that connects your on-premises network to the
Azure virtual network that connects to your HANA Large Instance units as well.

QUESTION 36
You have an on-premises SAP environment hosted on VMware vSphere.

You plan to migrate the environment to Azure by using Azure Site Recovery.

You need to prepare the environment to support Azure Site Recovery.

What should you deploy first?

A. an on-premises data gateway to vSphere

B. Microsoft System Center Virtual Machine Manager (VMM)
C. an Azure Backup server
D. a configuration server to vSphere

Correct Answer: D
Explanation

Explanation/Reference:
When you set up disaster recovery for on-premises VMware VMs, Site Recovery needs access to the
vCenter Server/vSphere host so that the Site Recovery process server can automatically discover VMs,
and fail them over as needed. By default the process server runs on the Site Recovery configuration
server. Add an account for the configuration server to connect to the vCenter Server/vSphere host.

Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-manage-vcenter

QUESTION 37
This question requires that you evaluate the underlined text to determine if it is correct.
When deploying SAP HANA to an Azure virtual machine, you can enable Write Accelerator to reduce the
latency between the SAP application servers and the database layer.

Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If
the statement is incorrect, select the answer choice that makes the statement correct.

A. No change is needed
B. install the Mellanox driver
C. start the NIPING service
D. enable Accelerated Networking

Correct Answer: D
Explanation

Explanation/Reference:
To further reduce network latency between Azure VMs, we [Microsoft] recommend that you choose Azure
Accelerated Networking. Use it when you deploy Azure VMs for an SAP workload, especially for the SAP
application layer and the SAP DBMS layer.

Incorrect Answers:
A: Write Accelerator is a disk capability for M-Series Virtual Machines (VMs) on Premium Storage with
Azure Managed Disks exclusively. As the name states, the purpose of the functionality is to improve the I/
O latency of writes against Azure Premium Storage.

B: Mellanox offers a robust and full set of protocol software and driver for Linux with the ConnectX EN
family cards. Designed to provide a high performance support for Enhanced Ethernet with fabric
consolidation over TCP/IP based LAN applications. The driver and software in conjunction with the
Industry's leading ConnectX family of cards achieve full line rate, full duplex of up to 100Gbps performance
per port.

C: To analyze network issue or measure network metrics you can test the connection using SAP's NIPING
program. You can use NIPING to analyze the network connection between any two machines running SAP
software.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_general

QUESTION 38
You plan to deploy a high availability SAP environment that will use a failover clustering solution.

You have an Azure Resource Manager template that you will use for the deployment. You have the
following relevant portion of the template.
What is created by the template?

A. a zone-redundant public IP address for the internal load balancer

B. a zone-redundant frontend IP address for the internal Azure Basic Load Balancer
C. a zone-redundant frontend IP address for the internal Azure Standard Load Balancer
D. a zonal frontend IP address for the internal Azure Standard Load Balancer

Correct Answer: D
Explanation

Explanation/Reference:
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-standard-availability-zones

QUESTION 39
Note: This question is part of a series of questions that present the same scenario. Each question in the
series contains a unique solution that might meet the stated goals. Some question sets might have more
than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions
will not appear in the review screen.

You deploy SAP HANA on Azure (Large Instances).

You need to back up the SAP HANA database to Azure.

Solution: You use a third-party tool that uses backint to back up the SAP HANA database to Azure storage.

Does this meet the goal?

A. Yes
B. No

Correct Answer: A
Explanation

Explanation/Reference:
https://blogs.sap.com/2018a/08/31/overview-of-backint-for-sap-hana-and-faq-for-3rd-party-backup-tool-
support/
https://documentation.commvault.com/commvault/v11_sp16/article?p=114414.htm

QUESTION 40
You recently migrated an SAP HANA environment to Azure.

You plan to back up SAP HANA databases to disk on the virtual machines, and then move the backup files
to Azure Blob storage for retention.

Which command should you run to move the backups to the Blob storage?

A. robocopy
B. backint
C. azcopy
D. scp

Correct Answer: C
Explanation

Explanation/Reference:
To store directories and files on Azure storage, one could use CLI or PowerShell. There is also a ready-to-
use utility, AzCopy, for copying data to Azure storage.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-hana-backup-file-level

QUESTION 41
You have an SAP production landscape on-premises and an SAP development landscape on Azure. You
deploy a network virtual appliance to act as a firewall between the Azure subnet and the on- premises
network.

Solution: You deploy an Azure Standard Load balancer.

Does this meet the goal?

A. Yes
B. No
Correct Answer: A
Explanation

QUESTION 42
You have an SAP production landscape on-premises and an SAP development landscape on Azure.

You deploy a network virtual appliance to act as a firewall between the Azure subnet and the on- premises
network.

Solution: You configure route filters for Microsoft peering.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Explanation

Explanation/Reference:

QUESTION 43
You have an SAP production landscape on-premises and an SAP development landscape on Azure.

You deploy a network virtual appliance to act as a firewall between the Azure subnet and the on- premises
network.

Solution: You configure a user-defined route table.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Explanation

Explanation/Reference:

QUESTION 44
Your company has a an on-premises SAP environment.

Recently, the company split into two companies named Litware, inc and Contoso.Ltd. Litware retained the
SAP environment.
Litware plans to export data that is relevant only to Contoso. The export will be 1.5 TB.

Contoso build a new SAP environment on Azure.

You need to recommend a solution for Litware to make the data available to Contoso in Azure. The
solution must meet the following requirements:

1. Minimize the impact on the network.

2. Minimize the administrative effort for Litware.

What should you include in the recommendation.

A. Azure Migrate
B. Azure Databox
C. Azure Site Recovery
D. Azure import/Export service

Correct Answer: C
Explanation

Explanation/Reference:

QUESTION 45
You plan to migrate an on-premises SAP environment to Azure. You need to identity whether any SAP
application servers host multiple SAP system identifiers (SlDs).
What should you do?

A. Run SAP HAN A sizing report.

B. From the SAP EarlyWatch Alert report, compare the physical host names to the virtual host names.
C. Run the SAP Report from ABAPMeter.
D. From the SAP EarlyWatch Alert report, compare the services to the reference objects

Correct Answer: C
Explanation

QUESTION 46
You are building an SAP environment by using Azure Resource Manager templates. The SAP environment
will use Linux virtual machines.

You need to correlate the LUN of the data disks in the template to the volume of the virtual machines.

Which command should you run/

A. Is /dev/ disk/azure/root
B. Is /dev/ disk/azure/scsil
C. Tree /dev/ disk/azure/root
D. Tree /dev/disk/azure/resource

Correct Answer: C
Explanation

Explanation/Reference:

QUESTION 47
This question requires that you evaluate the underlined text to determine if it is correct.

You have an SAP environment on Azure that uses Microsoft SQL server as the RDBMS.

You plan to migrate to an SAP HANA database.

To calculate the amount of memory and disk space required for the database, you can use SAP Quick
Sizer.

Instructions: Review the underlined text, If the makes the stamen correct, select `'No change is needed." if
the statement is incorrect select the answer choice that makes the statement correct.

A. No change is needed.
B. Azure Migrate
C. /SDF/HDB_SIZING
D. SQL Server Management Studio (SSMS)

Correct Answer: C
Explanation

Explanation/Reference:
If you want to move an existing deployed system from another relational database management system
(RDBMS) to HANA. SAP provides reports to run on your existing SAP system. If the database is moved to
HANA, these reports check the data and calculate memory requirements for the HANA instance.

/SDF/HDB_SIZING is a standard Executable ABAP Report available within your SAP system (depending
on your version and release level).

ABAP code listing snippet for SAP ABAP Report /SDF/HDB_SIZING *&-------------------------------*
*& Report /SDF/HDB_SIZING // ZNEWHDB_SIZE
*&
*&-------------------------------*
*& Estimates the memory requirement in HANA of non-HANA databases * *& When run on HANA, size the
database using real memory consumption *& values.
*&-------------------------------*
*
*
REPORT /SDF/HDB_SIZING LINE-SIZE 101 LINE-COUNT 90 NO STANDARD PAGE HEADING.
DATA: l_version TYPE c LENGTH 6 VALUE '54'. "54.2 TYPES: ty_para(2) TYPE n,
ty_top(3) TYPE n.

TYPE-POOLS: abap.
DATA: tabname TYPE tabname,
subrc TYPE sy-subrc,
p_prf TYPE abap_bool,

See full code listing within your SAP system using transactions such as SE80 and SE38

Reference:
https://www.se80.co.uk/sapreports/-/-fs-/-fs-sdf-fs-hdb_sizing.htm
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-sizing

QUESTION 48
You are planning high availability for an SAP environment on Azure. The SAP environment will use
datacenters in to different zones. Testing shows that the latency between the two zones supports
synchronous DBMS replication.

You need to design a solution to ensure that SAP services are available if an Azure datacenter within a
zone fails. The solution must meet the following requirements:

1. Provide automatic failover

2. Minimize costs

Which high availability configuration meet the requirements?

A. Azure Availability Zones with an active/passive deployment

B. Azure Site Recovery
C. Azure Availability Sets with active/passive clustering
D. Azure Availability Sets with active/active clustering

Correct Answer: D
Explanation

Explanation/Reference:

QUESTION 49
You are deploying an SAP production landscape to Azure.

Your company's chief information security officer (CISO) requires that the SAP deployment complies with
ISO 27001.
You need to generate a compliance report for ISO 27001.

What should you use?

A. Azure Security Center

B. Azure Log Analytics
C. Azure Active Directory (Azure AD)
D. Azure Monitor

Correct Answer: A
Explanation

Explanation/Reference:
In the Azure Security Center regulatory compliance blade, you can get an overview of key portions of your
compliance posture with respect to a set of supported standards. Currently supported standards are Azure
CIS, PCI DSS 3.2, ISO 27001, and SOC TSP.

Reference:
https://azure.microsoft.com/en-us/blog/regulatory-compliance-dashboard-in-azure-security-center-now-
available/

QUESTION 50
A customer enterprise SAP environment plans to migrate to Azure. The environment uses servers that
runs Windows Server 2016 and Microsoft SQL Server. The environment is critical and requires a
comprehensive business continuity and disaster recovery (BCDRJ strategy that minimizes the recovery
point objective (RPO) and the recovery time objective (RTO). The customer wants a resilient environment
that has a secondary site that is at least 250 Kilometers away. You need to recommend a solution for the
customer.

Which two solutions should you recommend?

Each correct answer presents part ot the solution.

NOTE; Each correct selection Is worth one point.

A. an internal load balancer to route Internet traffic

B. warm standby virtual machines in Azure Availability Zones.
C. warn standby virtual machines in paired regions
D. Warm standby virtual machine an Azure Availability Set that uses geo-redundant storage (GRS)
E. Azure Traffic Manager to route incoming traffic.

Correct Answer: CD
Explanation

Explanation/Reference:
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-hana-availability-one- region

QUESTION 51
You deploy on SAP environment on Azure.

You need to monitor the performance of the SAP NetWeaver environment by using the Azure Enhanced
Monitoring Extension for SAP.

What should you do first?

A. From Azure CLI, install the Linux Diagnostic Extension.

B. From the Azure portal, enable the Azure Network Watcher Agent.
C. From the Azure portal, enable the Custom Script Extension.
D. From Azure CLI. run the az v aem m set command.
Correct Answer: B
Explanation

Explanation/Reference:
This solution requires the VM Agent to be installed in the Azure Virtual Machines you want to run SAP
systems.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/vm-extension-for-sap

QUESTION 52
You plan to deploy an SAP environment on Azure. The SAP environment will have landscapes for
production, development. and quality assurance.

You need to minimize the costs associated with running the development and quality assurance
landscapes on Azure. What should you do?

A. Create Azure Automation runbooks to stop, deallocate, and start Azure virtual machines.
B. Create a scheduled task that runs the stopsap command.
C. Configure scaling for Azure App Service.
D. Configure Azure virtual machine scales sets.

Correct Answer: A
Explanation

Explanation/Reference:
You can optimize your Azure Costs by Automating SAP System Start ?Stop using runbooks.

Reference:
https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/optimize-your-azure-costs-by-
automating-sap-system-start-stop/ba-p/2120675

QUESTION 53
You migrate an SAP environment to Azure.

You need to inspect all the outbound traffic from the SAP application servers to the Internet.

Which two Azure resources should you use? Each correct answer presents part of the solution.

A. Network Performance Monitor

B. Azure Firewall
C. Azure Traffic Manager
D. Azure Load Balancer NAT rules
E. Azure user-defined routes
F. a web application firewall (WAF) for Azure Application Gateway

Correct Answer: BE
Explanation

Explanation/Reference:

QUESTION 54
You have a n SAP environment on Azure.

Your on-premises network uses a 1-Gbps ExpresRoute circuit to connect to Azure Private peering is
enabled on the circuit. The default route (0.0.0.0/0) from the on-premises network is advertised You need
to resolve the issue without modifying the ExpresRoute circuit.

The solution must minimize administrative effort.

What should you do?

A. Create a user-defined route tint redirects traffic to the Blob storage.

B. Create an application security group.
C. Change the backup solution to use a third-party software that can write to the Blob storage.
D. Enable virtual network service endpoints.

Correct Answer: D
Explanation

Explanation/Reference:
Private endpoint enables connectivity between the consumers from the same ExpressRoute.

Note: Consult with SAP HANA on Microsoft Service Management. If they advise you to increase the
bandwidth of the SAP HANA on Azure (Large Instances) ExpressRoute circuit, create an Azure support
request. (You can request an increase for a single circuit bandwidth up to a maximum of 10 Gbps.)

Reference:
https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-overview
https://docs.microsoft.com/bs-cyrl-ba/azure/virtual-machines/workloads/sap/hana-additional-network-
requirements#increase-expressroute-circuit-bandwidth

QUESTION 55
You have an SAP ERP Central Component (SAP ECQ) environment on Azure. You need to add an
additional SAP application server to meet the following requirements:

1. Provide the highest availability.

2. Provide the fastest speed between the new server and the database.

What should you do?

A. Place the new server in a different Azure Availability Zone than the database.
B. Place the new server in the same Azure Availability Set as the database and the other application
servers.
C. Place the new server in the same Azure Availability Zone as the database and the other application
servers.

Correct Answer: A
Explanation

QUESTION 56
You have an existing SAP production landscape that uses SAP HANA databases.

You plan to migrate the landscape to Azure.

Which Azure virtual machine series will be Azure supported for the production SAP HANA database
deployment?

A. F-Series
B. A-Series
C. M-Series
D. N-Series

Correct Answer: C
Explanation

Explanation/Reference:
QUESTION 57
Note: This question is part of a series of questions that present the same scenario. Each question in the
series contains a unique solution that might meet the stated goals. Some question sets might have more
than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions
will not appear in the review screen.

You have a complex SAP environment that has both ABAP- and Java-based systems. The current on-
premises landscapes are based on SAP NetWeaver 7.0 (Unicode and Non- Unicode) running on Windows
Server and Microsoft SQL Server.

You need to migrate the SAP environment to an Azure environment.

Solution: You migrate the SAP environment as is to Azure by using Azure Site Recovery.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Explanation

Explanation/Reference:
We need upgrade to SAP NetWeaver 7.4 before the migration.

Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-architecture

QUESTION 58
You have an SAP Cloud Platform subscription and an Azure Active Directory (Azure AD) tenant.

You need to ensure that Azure AD users can access SAP Cloud App by using their Azure AD credentials.

What should you configure?

A. Active Directory Domain Services (AD DS)

B. SAP Cloud Platform Identity Authentication
C. A conditional access policy
D. SAP Cloud Connector

Correct Answer: A
Explanation

Explanation/Reference:
When you integrate SAP Cloud Platform Identity Authentication with Azure AD, you can:

1. Control in Azure AD who has access to SAP Cloud Platform Identity Authentication.
2. Enable your users to be automatically signed-in to SAP Cloud Platform Identity Authentication with their
Azure AD accounts.
3. Manage your accounts in one central location - the Azure portal.

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/sap-hana-cloud-platform-identity-
authentication-tutorial

QUESTION 59
You have an SAP landscape on Azure.

You deploy an SAP Web Dispatcher named web1.

You need to confirm that web1 can support 1,500 users.

What should you use?

A. Apache JMeter
B. lometer
C. ABAPMeter
D. FIO

Correct Answer: A
Explanation

Explanation/Reference:

QUESTION 60
You deploy an SAP environment on Azure.

You need to ensure that incoming requests are distributed evenly across the application servers.

What should you use?

A. SAP Web Dispatcher

B. SAP Solution Manager
C. SAP Control
D. Azure Monitor

Correct Answer: A
Explanation

Explanation/Reference:
The SAP Web Dispatcher (SWD) component is used as a load balancer for SAP traffic among the SAP
application servers.

Reference:
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/sap/sap-netweaver

QUESTION 61
You have an on-premises SAP landscape that contains an IBM DB2 database.

You need to recommend a solution to migrate the landscape to Azure and the database to SAP HANA.
The solution must meet the following requirements:

1. Be supported by SAP.
2. Minimize downtime.

What should you include in the recommendation?

A. SAP Database Migration Option (DMO) with System Move

B. Azure Database Migration Service
C. Azure Import/Export service
D. Azure Data Box Gateway

Correct Answer: A
Explanation

Explanation/Reference:
In 2013, SAP introduced new procedure called Database Migration Option (part of Software Update
Manager), which can help you during the migration to HANA database. It combines Unicode conversion,
system update and database migration into a single step which extremely simplified the overall process.
Reference:
https://blogs.sap.com/2017/10/05/your-sap-on-azure-part-2-dmo-with-system-move/

QUESTION 62
You have an on-premises SAP landscape that contains a 20-TB IBM DB2 database. The database
contains large tables that are optimized for read operations via secondary indexes.

You plan to migrate the database platform to SQL Server on Azure virtual machines.

You need to recommend a database migration approach that minimizes the time of the export stage.

What should you recommend?

A. log shipping
B. deleting secondary indexes
C. SAP Database Migration Option (DMO) in parallel transfer mode
D. table splitting

Correct Answer: B
Explanation

Explanation/Reference:
Secondary indexes for very large tables can be removed from the STR file and built ONLINE with scripts
after the main portion of the import has finished and post processing tasks such as configuring STMS are
occurring.

References:
https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/very-large-database-migration-to-
azure-8211-recommendations/ba-p/368146

QUESTION 63
You have an on-premises third-party enterprise resource planning (ERP) system that uses Microsoft SQL
Server 2016.

You plan to migrate the ERP system to SAP Business Suite on SAP HANA on Azure virtual machines.

You need to identify the appropriate sizing for Business Suite on HANA.

What should you use?

A. SAP Quick Sizer for HANA Cloud

B. HANA Cockpit
C. SAP Quick Sizer for HANA
D. SAP Cloud Platform Cockpit

Correct Answer: A
Explanation

Explanation/Reference:
If a customer runs non-SAP systems, the only way of Sizing the required Hardware for SAP HANA is the
Quick-Sizer tool.
HANA-based Cloud Quick Sizer: Please use this version, if the product that you want to size shall run in
the Cloud; e.g. SAP S/4HANA Cloud and SAP Data Warehouse Cloud.

Reference:
https://www.sap.com/about/benchmark/sizing.html#quick-sizer

QUESTION 64
You plan to migrate an on-premises SAP development system to Azure.
Before the migration, you need to check the usage of the source system hardware, such as CPU, memory,
network, etc.

Which transaction should you run from SAP GUI?

A. SM51
B. DB01
C. DB12
D. ST06

Correct Answer: D
Explanation

Explanation/Reference:
ST06 is a transaction code used for Operating System Monitor in SAP.
SAP transaction ST06 (Operating System Monitor) is classified in the Basis Component module under
application component Operating System Monitors and runs Monitoring Operating System program
RSHOST05 upon execution.

Incorrect Answers:
A: Transaction code SM51 is to display list of active application servers that have registered in the SAP
message server.

B: DB01 is a transaction code used for Analyze Exclusive Lockwaits in SAP.

C: Transaction code DB12 is to collects and presents information that is necessary to monitor database
backups.

Reference:
https://saptransactions.com/codes/ST06/

QUESTION 65
You have an SAP landscape on Azure that contains the virtual machines shown in the following table.

You need to ensure that the Application Server role is available if a single Azure datacenter fails.

What should you include in the solution?

A. a local network gateway

B. Azure Load Balancer Standard
C. Azure Virtual WAN
D. Azure Active Directory (Azure AD) Application Proxy

Correct Answer: B
Explanation

Explanation/Reference:
For the load balancers of the failover clusters of SAP Central Services and the DBMS layer, you need to
use the Standard SKU Azure Load Balancer. The Basic Load Balancer won't work across zones.

Note:
The DBMS also is a single point of contact in an SAP system. You need to protect it by using a high-
availability solution. The following figure shows a SQL Server AlwaysOn high-availability solution in Azure,
with Windows Server Failover Clustering and the Azure internal load balancer.
Incorrect Answers:
C: Azure Virtual WAN is a networking service that brings many networking, security, and routing
functionalities together to provide a single operational interface.

D: Application Proxy is recommended for giving remote users access to internal resources. Application
Proxy replaces the need for a VPN or reverse proxy for these remote access use cases.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-high-availability-architecture-
scenarios

QUESTION 66
This question requires that you evaluate the underlined text to determine if it is correct.

You have an SAP environment on Azure that uses Microsoft SQL Server as the RDBMS.

You plan to migrate to an SAP HANA database.

To calculate the amount of memory and disk space required for the database, you can use SAP Quick
Sizer.

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.

A. No change is needed
B. Azure Migrate
C. /SDF/HDB_SIZING
D. SQL Server Management Studio (SSMS)

Correct Answer: C
Explanation

Explanation/Reference:
If you want to move an existing deployed system from another relational database management system
(RDBMS) to HANA. SAP provides reports to run on your existing SAP system. If the database is moved to
HANA, these reports check the data and calculate memory requirements for the HANA instance.

/SDF/HDB_SIZING is a standard Executable ABAP Report available within your SAP system (depending
on your version and release level).

ABAP code listing snippet for SAP ABAP Report /SDF/HDB_SIZING

*&-------------------------------*
*& Report /SDF/HDB_SIZING // ZNEWHDB_SIZE
*&
*&-------------------------------*
*& Estimates the memory requirement in HANA of non-HANA databases *
*& When run on HANA, size the database using real memory consumption
*& values.
*&-------------------------------*
*
*
REPORT /SDF/HDB_SIZING LINE-SIZE 101 LINE-COUNT 90
NO STANDARD PAGE HEADING.
DATA: l_version TYPE c LENGTH 6 VALUE '54'. "54.2
TYPES: ty_para(2) TYPE n,
ty_top(3) TYPE n.
TYPE-POOLS: abap.
DATA: tabname TYPE tabname,
subrc TYPE sy-subrc,
p_prf TYPE abap_bool,

....See full code listing within your SAP system using transactions such as SE80 and SE38
Incorrect Answers:
A: When you're starting an implementation from scratch, SAP Quick Sizer will calculate memory
requirements of the implementation of SAP software on top of HANA.

Reference:
https://www.se80.co.uk/sapreports/-/-fs-/-fs-sdf-fs-hdb_sizing.htm
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-sizing

QUESTION 67
You are deploying an SAP production landscape to Azure.

Your company's chief information security officer (CISO) requires that the SAP deployment complies with
ISO 27001.

You need to generate a compliance report for ISO 27001.

What should you use?

A. Azure Log Analytics

B. Azure Monitor
C. Azure Active Directory (Azure AD)
D. Azure Security Center

Correct Answer: D
Explanation

Explanation/Reference:
In the Azure Security Center regulatory compliance blade, you can get an overview of key portions of your
compliance posture with respect to a set of supported standards. Currently supported standards are Azure
CIS, PCI DSS 3.2, ISO 27001, and SOC TSP.

Reference:
https://azure.microsoft.com/en-us/blog/regulatory-compliance-dashboard-in-azure-security-center-now-
available/

QUESTION 68
Note: This question is part of a series of questions that present the same scenario. Each question
in the series contains a unique solution that might meet the stated goals. Some question sets
might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You deploy SAP HANA on Azure (Large Instances).

You need to back up the SAP HANA database to Azure.

Solution: Back up directly to disk, copy the backups to an Azure virtual machine, and then copy the backup
to an Azure Storage account.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Explanation

Explanation/Reference:
Instead you should create a Recovery Services vault and a backup policy.
Reference:
https://docs.microsoft.com/en-us/azure/backup/sap-hana-db-about
https://docs.microsoft.com/en-us/azure/backup/backup-azure-sap-hana-database#configure-backup

QUESTION 69
You deploy an SAP environment on Azure.

You need to monitor the performance of the SAP NetWeaver environment by using Azure Extension for
SAP.

What should you do first?

A. From Azure CLI, install the Linux Diagnostic Extension

B. From the Azure portal, enable the Custom Script Extension
C. From Azure CLI, run the az vm aem set command
D. From the Azure portal, enable the Azure Network Watcher Agent

Correct Answer: D
Explanation

Explanation/Reference:
This solution requires the VM Agent to be installed in the Azure Virtual Machines you want to run SAP
systems.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/vm-extension-for-sap

QUESTION 70
You have an Azure virtual machine that runs SUSE Linux Enterprise Server (SLES). The virtual machine
hosts a highly available deployment of SAP HANA.

You need to validate whether Accelerated Networking is operational for the virtual machine,

What should you use?

A. ethtool
B. netsh
C. iometer
D. fio

Correct Answer: A
Explanation

Explanation/Reference:
Check for activity on the VF (virtual function) with the ethtool -S eth0 | grep vf_ command. If you receive
output similar to the following sample output, accelerated networking is enabled and working.

vf_rx_packets: 992956
vf_rx_bytes: 2749784180
vf_tx_packets: 2656684
vf_tx_bytes: 1099443970
vf_tx_dropped: 0
Accelerated Networking is now enabled for your VM.

Incorrect Answers:
B: Network shell (netsh) is a command-line utility that allows you to configure and display the status of
various network communications server roles and components after they are installed on computers
running Windows Server.

C: Iometer is an I/O subsystem measurement and characterization tool for single and clustered systems. It
is used as a benchmark and troubleshooting tool and is easily configured to replicate the behaviour of
many popular applications. One commonly quoted measurement provided by the tool is IOPS.

D: FIO is a popular tool to benchmark storage on the Linux VMs. It has the flexibility to select different IO
sizes, sequential or random reads and writes. It spawns worker threads or processes to perform the
specified I/O operations. You can specify the type of I/O operations each worker thread must perform using
job files

Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/create-vm-accelerated-networking-cli

QUESTION 71
You plan to deploy an SAP landscape that will have virtual machines deployed to multiple Azure regions.

You need to ensure that the virtual machines can communicate across the regions.

What should you configure?

A. virtual network peering in Azure

B. Azure Bastion hosts
C. local network gateways
D. Azure Relay

Correct Answer: A
Explanation

Explanation/Reference:
Depending on the rules and restrictions you want to apply between the different virtual networks hosting
VMs of different SAP systems, you should peer those virtual network

Note: Virtual network peering enables you to seamlessly connect two or more Virtual Networks in Azure.
The virtual networks appear as one for connectivity purposes. The traffic between virtual machines in
peered virtual networks uses the Microsoft backbone infrastructure. Like traffic between virtual machines in
the same network, traffic is routed through Microsoft's private network only.

Azure supports the following types of peering:

Virtual network peering: Connect virtual networks within the same Azure region.
Global virtual network peering: Connecting virtual networks across Azure regions.

Incorrect Answers:
B: Azure Bastion is a fully managed service that provides more secure and seamless Remote Desktop
Protocol (RDP) and Secure Shell Protocol (SSH) access to virtual machines (VMs) without any exposure
through public IP addresses.

D: The Azure Relay service enables you to securely expose services that run in your corporate network to
the public cloud. You can do so without opening a port on your firewall, or making intrusive changes to
your corporate network infrastructure.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-network-architecture
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview

QUESTION 72
You deploy an SAP production landscape on Azure virtual machines that run SUSE Linux Enterprise
Server (SLES).

You need to generate a report that details performance differences between instances of an SAP AS
ABAP system.

What should you use?

A. JMeter
B. ABAPmeter
C. Micro Focus LoadRunner
D. SAP UI Speedtest Tool

Correct Answer: B
Explanation

Explanation/Reference:
Use ABAPMETER in NetWeaver AS ABAP when you want to test the general performance/health of each
instance in a NetWeaver AS ABAP system.

Incorrect Answers:
D: The SAP UI Speedtest Tool is used to network bandwidth and latency.
The UI5 Speedtest Tool regularly checks your network connection and allows you to review the results via
a UI5 web interface.

Reference:
https://userapps.support.sap.com/sap/support/knowledge/en/2879613

QUESTION 73
You have an on-premises SAP NetWeaver development landscape that contains the resources shown in
the following table.

You have a 500-Mbps ExpressRoute circuit between the on-premises environment and a virtual network.

You plan to migrate the landscape to Azure.

What should you include in the solution?

A. Azure Data Box

B. Microsoft System Center 2019 - Data Protection Manager (DPM 2019)
C. Azure Site Recovery
D. Azure Backup Server

Correct Answer: C
Explanation

Explanation/Reference:
Simplify cloud migration by using Site Recovery to migrate your SAP deployment to Azure.

Incorrect Answers:
A: Not necessary with the fast ExpressRoute circuit.
Data Box devices easily move data to Azure when busy networks aren’t an option. Move large amounts of
data to Azure when you're limited by time, network availability, or costs, using common copy tools such as
Robocopy. All data is AES-encrypted, and the devices are wiped clean after upload, in accordance with
NIST Special Publication 800-88 revision 1 standards.

Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-sap

QUESTION 74
You have an SAP environment on Azure.
Your on-premises network uses a 1-Gbps ExpressRoute circuit to connect to Azure. Private peering is
enabled on the circuit. The default route (0.0.0.0/0) from the on-premises network is advertised.

Whenever backups are copied to Azure Blob storage, the ExpressRoute circuit is saturated.

You need to resolve the issue without modifying the ExpressRoute circuit. The solution must minimize
administrative effort.

What should you do?

A. Create a user-defined route that redirects traffic to the Blob storage

B. Create an application security group
C. Change the backup solution to use a third-party software that can write to the Blob storage
D. Enable virtual network private endpoints.

Correct Answer: D
Explanation

Explanation/Reference:
Private endpoint enables connectivity between the consumers from the same ExpressRoute.

Note: Consult with SAP HANA on Microsoft Service Management. If they advise you to increase the
bandwidth of the SAP HANA on Azure (Large Instances) ExpressRoute circuit, create an Azure support
request. (You can request an increase for a single circuit bandwidth up to a maximum of 10 Gbps.)

Reference:
https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-overview
https://docs.microsoft.com/bs-cyrl-ba/azure/virtual-machines/workloads/sap/hana-additional-network-
requirements#increase-expressroute-circuit-bandwidth

QUESTION 75
You plan to deploy an SAP environment on Azure. The SAP environment will have landscapes for
production, development and quality assurance.

You need to minimize the costs associated with running the development and quality assurance
landscapes on Azure.

What should you do?

A. Configure scaling for Azure App Service

B. Create a scheduled task that runs the stopsap command
C. Configure Azure virtual machine scale sets
D. Create Azure Automation runbooks to stop, deallocate, and start Azure virtual machines

Correct Answer: D
Explanation

Explanation/Reference:
You can optimize your Azure Costs by Automating SAP System Start – Stop using runbooks.

Reference:
https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/optimize-your-azure-costs-by-
automating-sap-system-start-stop/ba-p/2120675

QUESTION 76
Note: This question is part of a series of questions that present the same scenario. Each question in the
series contains a unique solution that might meet the stated goals. Some question sets might have more
than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions
will not appear in the review screen.

You have an SAP production landscape on-premises and an SAP development landscape on Azure.

You deploy a network virtual appliance to act as a firewall between the Azure subnets and the on-premises
network.

You need to ensure that all traffic is routed through the network virtual appliance.

Solution: You create an Azure Traffic Manager profile.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Explanation

Explanation/Reference:

QUESTION 77
You plan to deploy an SAP production landscape that uses SAP HANA databases on Azure.

You need to configure the storage infrastructure to support the SAP HANA deployment

The solution must meet the SAP issued requirements for data throughput and I/O.

How should you configure the storage?

A. RAID1
B. RAID5
C. RAID0
D. RAID6

Correct Answer: B
Explanation

QUESTION 78
You plan to automate a deployment of SAP NetWeave on Azure virtual machines by using Azure
Resource Manager templates. The database tier will consist of two instances of an Azure Marketplace
Microsoft SQL Server 2017 virtual machine image that each has 8 TB of RAM.

Which task should you include in the templates used to deploy the SQL Server virtual machines?

A. Enable buffer pool extensions in SQL Server.

B. Enable read caching on the disks used to store the SQL Server database log files.
C. Run the SQL Server setup and specify the /ACTION=REBUILDDATABASE and /SQLCOLLATION
switches.
D. Run the SQL Server setup and specify the /ACTION-INSTALL and /SQLMAXMEMORY switches.

Correct Answer: D
Explanation

QUESTION 79
You plan to deploy an SAP production landscape on Azure.

You need to minimize latency between SAP HANA database servers and SAP NetWeaver servers.
What should you implement?

A. Azure Private Link

B. an Availability Set
C. a proximity placement group
D. a virtual machine scale set

Correct Answer: C
Explanation

QUESTION 80
You have an SAP production landscape that uses SAP HANA databases on Azure. The HANA database
server is a Standard.M32ms Azure virtual machine that has 864 GB of RAM.

The HANA database is 400 GB. You expect the database to grow by 40 percent during the next 12
months.

You resize the HANA database server virtual machine to Standard_m64ms and ,024 GB of RAM.

You need to recommend additional changes to minimize performance degradation caused by database
growth

What should you recommend for the HANA database server?

A. Increase the number of vCPUs.

B. Configure additional disks
C. Add a secondary network interface.
D. Add a scale out node.

Correct Answer: A
Explanation

QUESTION 81
You have an on-premises SAP production landscape.

You plan to migrate to SAP on Azure.

You need to generate an SAP Early Watch Alert report.

What should you use?

A. Azure Advisor
B. SAP HANA Cockpit
C. SAP Software Provisioning Manager
D. SAP Solution Manager

Correct Answer: D
Explanation

QUESTION 82
You deploy an SAP landscape on Azure.

You plan to use an Azure Automation account to stop the SAP virtual machines outside of business hours.

You need to ensure that you can use Azure Automation runbook a for the virtual machines.
What does the Azure Automation account require?

A. an Azure Storage account

B. an Azure App Service WebJob
C. a Recovery Services vault
D. a Run As account

Correct Answer: B
Explanation

QUESTION 83
You have an on-premises SAP NetWeaver deployment that uses Windows Server 2016 and Microsoft
SQL Server 2016.

You need to migrate the deployment to an Azure virtual machine that runs Windows Server 2016 and has
Microsoft SQL Server 2019 installed.

Which migration method should you use?

A. heterogeneous SAP classical migration

B. classical SAP Database Migration Option (DMO)
C. lift-and-shift
D. Azure Migrate

Correct Answer: B
Explanation

QUESTION 84
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs SAP
HANA and a user named User1. User1 is assigned the Virtual Machine Contributor role of VM1.

You need to prevent User1 from placing VM1 in the Stopped (deallocated) state. User1 must be able to
restart the operating system on VM1.

What should you do?

A. Assign an Azure Policy definition to the resource group that contains VM1.
B. Create a resource lock on VM1.
C. Configure the Desired State Configuration (DSC) extension on VM1.
D. Assign User1 the Virtual Machine User Login rote for VM1.

Correct Answer: C
Explanation

QUESTION 85
You have an SAP production landscape that uses SAP HANA databases on Azure.

You need to deploy a disaster recovery solution to the SAP HANA databases. The solution must meet the
following requirements:

1. Support failover between Azure regions.

2. Minimize data loss in the event of a failover.

What should you deploy?

A. Azure Site Recovery

B. Always On availability group
C. HANA system replication that uses asynchronous replication
D. HANA system replication that uses synchronous replication

Correct Answer: C
Explanation

QUESTION 86
You are planning a highly available SAP HANA deployment on Azure virtual machines.

You need to recommend a solution for monitoring TCP latency between the SAP application and the
database tiers on the TCP socket layer.

What should you include in the recommendation?

A. the Azure Network Watcher reachability report

B. Azure Extension for SAP
C. the NIPING command
D. the PING command

Correct Answer: A
Explanation

QUESTION 87
You have an SAP HANA on Azure (Large Instances) deployment.

You need to generate hearth check log files for the Deployment.

What should you do?

A. From a SSH session on the HANA Large instance node. Run/var/waagent/

Microsoft.AzureCAT.AzureEnhancedMonitoring.MonitorX64Linux- 1.0.082/AzuredMonitoring -
monitoring.
B. From the Azure portal, select New support request.
C. From A SSH session on the HANA large instances node, run/opt/sgi/health_check/microsoft_tdi-sh.
D. From the Azure portal, select Diagnose and solve problems.

Correct Answer: C
Explanation

QUESTION 88
You have an on-premises deployment of SAP on DB2.

You plan to migrate the deployment to Azure and Microsoft SQL Server 2017.

What should you use to migrate the deployment?

A. SQL Server Migration Assistant (SSMA)

B. Azure SQL Data Sync
C. db2haicu
D. DSN1COPY

Correct Answer: A
Explanation
Question Set 1

QUESTION 1
HOTSPOT

You are designing the backup for an SAP database.

You have an Azure Storage account that is configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the
information presented in the graphic.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
Box 1: standard solid-state drives (SSDs)
Standard SSD Managed Disks, a low-cost SSD offering, are optimized for test and entry-level production
workloads requiring consistent latency.

Box 2: to another Azure region

Geo-redundant storage (GRS) copies your data synchronously three times within a single physical location
in the primary region using LRS. It then copies your data asynchronously to a single physical location in a
secondary region that is hundreds of miles away from the primary region.

References:
https://azure.microsoft.com/en-us/pricing/details/managed-disks/

https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy#geo-redundant-storage

QUESTION 2
HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
1. No
Oracle Data Guard running in Maximum Availability mode. Currently, Oracle Real Application Clusters
(RAC) is not supported in Azure either for high availability or for scalability

2. Yes
3. No
The following OS versions are supported with the Oracle Database on Microsoft Azure:
Windows Server 2019 (only from Oracle Database 19.5.0 on) Windows Server 2016 (only from Oracle
Database 12.2.0.1 on) Windows Server 2012 (no support for Oracle Database 19c) Windows Server 2012
R2
Windows Server 2008 R2 Service Pack 1 (no support for Oracle 12.2.0.1) Oracle Linux 7
Oracle Linux 8 (only from Oracle Database 19.7.0 on)

https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/windows-2016-is-now-generally-
available-for-sap/ba-p/368021

QUESTION 3
HOTSPOT

You have an on-premises SAP environment.

Backups are performed by using tape backups. There are 50 TB of backups.

A Windows file server has BMP images of checks used by SAP Finance. There are 9 TB of images.

You need to recommend a method to migrate the images and the tape backups to Azure. The solution
must maintain continuous replication of the images.

What should you include in the recommendation? To answer, select the appropriate options in the answer
area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Tape backups: Azure DataBox
The Microsoft Azure Data Box cloud solution lets you send terabytes of data into Azure in a quick,
inexpensive, and reliable way. The secure data transfer is accelerated by shipping you a proprietary Data
Box storage device. Each storage device has a maximum usable storage capacity of 80 TB and is
transported to your datacenter through a regional carrier. The device has a rugged casing to protect and
secure data during the transit.

File server: Azure Storage Explorer

Azure Storage Explorer is an application which helps you to easily access the Azure storage account
through any device on any platform, be it Windows, MacOS, or Linux. You can easily connect to your
subscription and manipulate your tables, blobs, queues, and files.

Incorrect Answers:
Not Azure Data Box Edge: Azure Data Box Edge is rebranded as Azure Stack Edge. Azure Stack Edge is
a Hardware-as-a-service solution. Microsoft ships you a cloud-managed device with a built-in Field
Programmable Gate Array (FPGA) that enables accelerated AI-inferencing and has all the capabilities of a
network storage gateway.

References:
https://docs.microsoft.com/en-us/azure/databox/data-box-overview

https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/vs-azure-tools-storage-manage-with-
storage-explorer.md

QUESTION 4
HOTSPOT

You have an on-premises SAP environment. Application servers run on SUSE Linux Enterprise Server
(SLES) servers. Databases run on SLES servers that have Oracle installed.

You need to recommend a solution to migrate the environment to Azure. The solution must use currently
deployed technologies whenever possible and support high availability.
What should you include in the recommendation? To answer, select the appropriate options in the answer
area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:

QUESTION 5
HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
Box 1: Yes
By moving much of Azure's software-defined networking stack off the CPUs and into FPGA-based
SmartNICs, compute cycles are reclaimed by end user applications, putting less load on the VM,
decreasing jitter and inconsistency in latency.

Box 2: Yes

Box 3: No
Accelerated Networking (AN) is generally available (GA) and widely available for Windows and the latest
distributions of Linux

References:
https://azure.microsoft.com/en-us/blog/maximize-your-vm-s-performance-with-accelerated-networking-
now-generally-available-for-both-windows-and-linux/

QUESTION 6
HOTSPOT

You have the following Azure Resource Manager template.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Box 1: Yes
Count is 6.

Box 2: No
Mode is serial.

Box 3: NO

References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/copy-resources

QUESTION 7
HOTSPOT

You deploy SAP HANA by using SAP HANA on Azure (Large Instances).

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Box 1: Yes

Box 2: Yes
The SAP Azure Enhanced Monitoring Extension allows for collecting diagnostic data including OS and
Application performance counters from Azure VMs running SAP workloads.

Box 3: No

References:
http://www.deployazure.com/compute/virtual-machines/sap-azure-enhanced-monitoring-extension/
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/azure-monitor-overview

QUESTION 8
HOTSPOT

You are planning the Azure network infrastructure for an SAP environment.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
Box 1: NO

Box 2: Yes

Box 3: Yes
Be aware that network traffic between two peered Azure virtual networks is subject to transfer costs. Huge
data volume that consists of many terabytes is exchanged between the SAP application layer and the
DBMS layer. You can accumulate substantial costs if the SAP application layer and DBMS layer are
segregated between two peered Azure virtual networks.

References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_general

QUESTION 9
HOTSPOT

Your on-premises network contains SAP and non-SAP applications.

You have JAVA-based SAP systems that use SPNEGO for single-sign on (SSO) authentication.

Your external portal uses multi-factor authentication (MFA) to authenticate users.

You plan to extend the on-premises authentication features to Azure and to migrate the SAP applications
to Azure.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
Box 1: Yes

Box 2: Yes
Password hash synchronization is one of the sign-in methods used to accomplish hybrid identity. Azure AD
Connect synchronizes a hash, of the hash, of a users password from an on-premises Active Directory
instance to a cloud-based Azure AD instance.

Password hash synchronization is an extension to the directory synchronization feature implemented by

Azure AD Connect sync. You can use this feature to sign in to Azure AD services like Office 365. You sign
in to the service by using the same password you use to sign in to your on-premises Active Directory
instance.

Box 3: Yes
If your organization is federated with Azure AD, you can use Azure Multi-Factor Authentication to secure
AD FS resources, both on-premises and in the cloud. Azure MFA enables you to eliminate passwords and
provide a more secure way to authenticate.

References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta
QUESTION 10
HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Explanation

Explanation/Reference:
Box 1: No
To log in to a Linux VM with Azure AD credentials, install the Azure Active Directory login VM extension.

Note: Azure AD Connect is the Microsoft tool designed to meet and accomplish your hybrid identity goals.

Box 2: NO

Box 3: No

References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/deployment-guide
QUESTION 11
HOTSPOT

You are integrating SAP HANA and Azure Active Directory (Azure AD).

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Explanation

Explanation/Reference:
Explanation:

Box 1: Yes
To configure Azure AD single sign-on with SAP HANA, perform the following steps:

1. In the Azure portal, on the SAP HANA application integration page, select Single sign-on.

2. On the Select a Single sign-on method dialog, select SAML/WS-Fed mode to enable single sign-on.
Box 2: No

Box 3: No
Key security considerations for deploying SAP on Azure

References:
https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/saphana-tutorial

QUESTION 12
HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Box 1: Yes
The SAP Azure Enhanced Monitoring Extension builds on top of the Azure Diagnostic extension, which
stores its data in an Azure Storage account that you specify.

Box 2: Yes
The Set-AzVMAEMExtension cmdlet updates the configuration of a virtual machine to enable or update the
support for monitoring for SAP systems that are installed on the virtual machine. The cmdlet installs the
Azure Enhanced Monitoring (AEM) extension that collects the performance data and makes it discoverable
for the SAP system.
The -OSType specifies the OS. Either Windows or Linux.

Box 3: Yes

References:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostics-extension-overview

https://docs.microsoft.com/en-us/powershell/module/az.compute/set-azvmaemextension

QUESTION 13
HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
Box 1: No

Box 2: Yes
The minimum SAP HANA certified conditions for the different storage types are:

Azure Premium SSD - /hana/log is required to be cached with Azure Write Accelerator. The /hana/data
volume could be placed on Premium SSD without Azure Write Accelerator or on Ultra disk

Box 3: Yes

References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-vm-operations-storage

QUESTION 14
HOTSPOT

You plan to deploy a highly available ASCS instance to SUSE Linux Enterprise Server (SLES) virtual
machines in Azure.

You are configuring an internal Azure Standard Load Balancer for the ASCS instance.
How should you configure the internal Standard Load Balancer? To answer, select the appropriate options
in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Explanation

Explanation/Reference:
Session persistence: None.
Floating IP: Enabled.
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/high-availability-guide-suse

QUESTION 15
HOTSPOT

You have an Azure Availability Set that is configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the
information presented in the graphic.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Box 1: the same fault domain
Fault domains define the group of virtual machines that share a common power source and network
switch. If a storage fault domain fails due to hardware or software failure, only the VM instance with disks
on the storage fault domain fails.

Box 2: managed disks

Managed disks provide better reliability for Availability Sets by ensuring that the disks of VMs in an
Availability Set are sufficiently isolated from each other to avoid single points of failure. It does this by
automatically placing the disks in different storage fault domains (storage clusters) and aligning them with
the VM fault domain.

References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability

QUESTION 16
HOTSPOT

You have an SAP environment that contains the following components:

1. Enhancement Package 6 for SAP ERP Central Component 6.0 (SAP ECC 6.0)
2. Servers that run SUSE Linux Enterprise Server 12 (SLES 12)
3. Databases on IBM DB2 10.5
4. SAP Solution Manager 7.1

You plan to migrate the SAP environment to Azure.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
Box 1: Yes

Box 2: No
Upgrade to ECC 7.01 or later.

Box 3: No
With Microsoft Azure, you can migrate your existing SAP application running on IBM Db2 for Linux, UNIX,
and Windows (LUW) to Azure virtual machines. With SAP on IBM Db2 for LUW, administrators and
developers can still use the same development and administration tools, which are available on-premises.

Reference:
https://docs.microsoft.com/en-us/azure/data-factory/connector-sap-table

https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_ibm
QUESTION 17
HOTSPOT

You are deploying an SAP environment across Azure Availability Zones. The environment has the
following components:

1. ASCS/ERS instances that use a failover cluster

2. SAP application servers across the Azure Availability Zones
3. Database high availability by using a native database solution

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Explanation

Explanation/Reference:
Box 1: Yes

Box 2: Yes
AAP application server to database server latency can be tested with ABAPMeter report /SSA/CAT.

Box 3: Yes
To analyze network issue or measure network metrics you can test the connection using SAP's NIPING
program. You can use NIPING to analyze the network connection between any two machines running SAP
software.

QUESTION 18
HOTSPOT

You have SAP ERP on Azure.

For SAP high availability, you plan to deploy ASCS/ERS instances across Azure Availability Zones and to
use failover clusters.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Explanation

Explanation/Reference:
Box 1: No
You can't use an Azure Basic Load Balancer to create failover cluster solutions based on Windows Server
Failover Clustering or Linux Pacemaker. Instead, you need to use the Azure Standard Load Balancer SKU.
Box 2: Yes
Azure Availability Zones is one of the high-availability features that Azure provides. Using Availability
Zones improves the overall availability of SAP workloads on Azure.
The SAP application layer is deployed across one Azure availability set. For high availability of SAP
Central Services, you can deploy two VMs in a separate availability set.

Box 3: Yes
You must use Azure Managed Disks when you deploy to Azure Availability Zones.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-ha-availability-zones

QUESTION 19
HOTSPOT

A company named Contoso, Ltd. has users across the globe. Contoso is evaluating whether to migrate
SAP to Azure.

The SAP environment runs on SUSE Linux Enterprise Server (SLES) servers and SAP HANA databases.
The Suite on HANA database is 4 TB.

You need to recommend a migration solution to migrate SAP application servers and the SAP HANA
databases. The solution must minimize downtime.

Which migration solutions should you recommend? To answer, select the appropriate options in the
answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Box 1: Azure Site Recovery
Microsoft Azure Site Recovery (ASR) now supports SUSE Linux Enterprise Server 11 SP3/SP4 and SUSE
Linux Enterprise Server 12 SP1/SP2/SP3. This is great for customers that are planning to migrate systems
to Microsoft Azure or customers who need to have a business continuity strategy for their Azure
deployments.

Azure Site Recovery enables SUSE customers to migrate their non-Azure virtual machines or physical
servers to Microsoft Azure virtual machines.

Box 2: SAP Hana System replication

Reference:
https://www.suse.com/c/asr_supports_suse/
https://www.netapp.com/us/media/tr-4746.pdf

QUESTION 20
HOTSPOT

For each of the following statements, select yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:

QUESTION 21
HOTSPOT

You have ah SAP environment on Azure that contains a single-tenant SAP NANA server at instance 03.

You need to monitor the network throughput from an SAP application server to the SAP HANA server.

How should you complete the script? To answer, select the appropriate options in the answer are.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
QUESTION 22
HOTSPOT

for each of the following statements, select Yes if the statement is true. Otherwise. select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Explanation

Explanation/Reference:

QUESTION 23
HOTSPOT

Your on-premises network contains SAP and non-SAP applications. ABAP-based SAP systems are
integrated with IDAP and use user name/password-based authentication for logon.

You plan to migrate the SAP applications to Azure.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE:
Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:

QUESTION 24
HOTSPOT

You have an SAP development landscape on Azure.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Explanation

Explanation/Reference:

QUESTION 25
HOTSPOT

You have an Azure alert rule and action group as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the
information presented in the graphic.
NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Box 1: five minutes
Window Size is 5 minutes.

Box 2: admins action group will be emailed

The admins1 actiongroup will be executed.

QUESTION 26
HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Explanation

Explanation/Reference:
Box 1: Yes
The following is a quick checklist of storage configuration best practices for running your SQL Server on
Azure VM:
Place data, log, and tempdb files on separate drives.
Box 2: Yes
Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, greatly improving its
networking performance. This high-performance path bypasses the host from the data path, which reduces
latency, jitter, and CPU utilization for the most demanding network workloads on supported VM types.

Box 3: No

Note: The maximum transmission unit (MTU) is the largest size frame (packet), specified in bytes, that can
be sent over a network interface. The MTU is a configurable setting. The default MTU used on Azure VMs,
and the default setting on most network devices globally, is 1,500 bytes.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/create-vm-accelerated-networking-powershell
https://docs.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/performance-guidelines-best-
practices-checklist

QUESTION 27
HOTSPOT

You have an on-premises deployment of SAP HANA.

You plan to migrate the deployment to Azure.

You need to identify the following from the last six months:

1. The number of active users

2. The database performance

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Reference:
https://assets.cdn.sap.com/sapcom/docs/2019/09/0e8d0628-687d-0010-87a3-c30de2ffd8ff.pdf

QUESTION 28
HOTSPOT

You have an SAP production landscape on Azure that contains the virtual machines shown in the following
table.

You configure HANA system replication as shown in the following table.

You configure two load balancers as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Explanation

Explanation/Reference:

QUESTION 29
HOTSPOT

You have an on-premises deployment of SAP Business Suite on HANA that includes a CPU-intensive
application tier and a 20-TB database tier.
You plan to migrate to SAP HANA on Azure.

You need to recommend a compute option to host the application and database tiers. The solution must
minimize cost.

What should you recommend for each tier? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Explanation

Explanation/Reference:
Box 1: Ev3 series M Azure virtual machines
The Ev3 series pricing is starting from $58.40 /per month.

The E-series Azure VMs are optimized for heavy in-memory applications such as SAP HANA. These VMs
are configured with high memory-to-core ratios, which makes them well-suited for memory-intensive
enterprise applications, large relational database servers, in-memory analytics workloads etc.

The Ev3-series VMs range from 2 to 64 vCPUs and 16-432 GiB of RAM, respectively.
Example workloads include SAP HANA (e.g., E64s v3, E20ds v4, E32ds v4, E48ds v4, E64ds v4), SAP
S/4 HANA application layer, SAP NetWeaver application layer, and more broadly memory-intensive
enterprise applications, large relational database servers, data warehousing workloads, business
intelligence applications, in-memory analytics workloads, and additional business-critical applications,
including systems that process financial transactions of various nature...

Incorrect Answers:
On price: The M-series family pricing is starting from $1,121.65 /per month.

Note: The M-series family of Azure virtual machines are memory optimized and are ideal for heavy in-
memory workloads such as SAP HANA. The M-Series offer up to 4 TB of RAM on a single VM. In addition,
these VMs offer a virtual CPU count of up to 128 vCPUs on a single VM to enable high performance
parallel processing.
Example workloads include SAP HANA, SAP S/4 HANA, SQL Hekaton and other large in-memory
business critical workloads requiring massive parallel compute power.

Box 2: Hana on Azure (Large Instances)

The storage used in HANA Large Instances has a file size limitation. The size limitation is 16 TB per file.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-storage-architecture
https://azure.microsoft.com/en-us/pricing/details/virtual-machines/series/

QUESTION 30
HOTSPOT

You are planning the deployment of a three-tier SAP landscape on Azure that will use SAP HANA. The
solution must meet the following requirements:

1. Network latency between SAP NetWeaver and HANA must be minimized.

2. An SAP production landscape on Azure must be supported.
3. Network performance must be validated regularly.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
Box 1: A proximity placement group
Azure offers proximity placement groups. Proximity placement groups can be used to force grouping of
different VM types into a single Azure datacenter to optimize the network latency between these different
VM types to the best possible. In the process of deploying the first VM into such a proximity placement
group, the VM gets bound to a specific datacenter.

Note: SAP applications based on the SAP NetWeaver or SAP S/4HANA architecture are sensitive to
network latency between the SAP application tier and the SAP database tier. This sensitivity is the result of
most of the business logic running in the application layer. Because the SAP application layer runs the
business logic, it issues queries to the database tier at a high frequency, at a rate of thousands or tens of
thousands per second. In most cases, the nature of these queries is simple. They can often be run on the
database tier in 500 microseconds or less.

Box 2: Enable Accelerated Networking

To further reduce network latency between Azure VMs, we recommend that you choose Azure
Accelerated Networking. Use it when you deploy Azure VMs for an SAP workload, especially for the SAP
application layer and the SAP DBMS layer.
Incorrect Answers:
Azure Write Accelerator is a functionality that is available for Azure M-Series VMs exclusively. As the name
states, the purpose of the functionality is to improve I/O latency of writes against the Azure premium
storage. For SAP HANA, Write Accelerator is supposed to be used against the /hana/log volume only.
Therefore, the /hana/data and /hana/log are separate volumes with Azure Write Accelerator supporting
the /hana/log volume only.

Box 3: Network Performance Monitor

Network Performance Monitor (NPM) - a cloud-based network monitoring solution for cloud-only, on-
premises, and hybrid networking environments.

Network Performance Monitor offers three broad capabilities:

Performance Monitor: You can monitor network connectivity across cloud deployments and on-premises
locations, multiple data centers, and branch offices and mission-critical multitier applications or
microservices. With Performance Monitor, you can detect network issues before users complain.
Service Connectivity Monitor
ExpressRoute Monitor

Note 2: Azure Monitor for SAP Solutions is an Azure-native monitoring product for anyone running their
SAP landscapes on Azure. It works with both SAP on Azure Virtual Machines and SAP on Azure Large
Instances.

Incorrect Answers:
Apache JMeter is a free and open source tool for performance testing of web applications.
SAP application server to database server latency can be tested with ABAPMeter report /SSA/CAT.
Latency between SAP application server and DBMS server can be tested using TCPPing (Ping is not an
accurate tool on Azure) or the SAP ABAP report /SSA/CAT -> ABAPMeter – columns DB Access and E.
DB Access.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-proximity-placement-scenarios
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_general
https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/sap-on-azure-general-update-
march-2019/ba-p/377456

QUESTION 31
HOTSPOT

You have an SAP production landscape that uses SAP HANA databases.

You configure a metric alert for the primary HANA server as shown in the following exhibit.
You have an action group shown in the following exhibit.

The amy_email is configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
Box 1: No
The period is 15 minutes. Only alerts or emails will be sent.

Box 2: Yes

Box 3: Yes

QUESTION 32
HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
Box 1: No
Load balancers. Load balancers are used to distribute traffic to virtual machines in the application-tier
subnet. For high availability, use the built-in SAP Web Dispatcher, Azure Load Balancer, or network
appliances. Your choice depends on the traffic type (like HTTP or SAP GUI) or the required network
services, like Secure Sockets Layer (SSL) termination.

Box 2: Yes
Availability group listener SAP application SQL server load balancer disaster recovery

Box 3: Yes

Reference:
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/sap/sap-netweaver
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/high-availability-guide-suse
https://blogs.sap.com/2020/10/20/sap-on-azure-sap-netweaver-7.5-on-ms-sql-server-2019-high-
availability-and-disaster-recovery-with-4-nodes-alwayson-cluster/

QUESTION 33
HOTSPOT

You have an Azure subscription that contains a resource group named RG1. The role assignments for
RG1 are shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the
information presented in the graphic.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Box 1: User2

Note:
Backup Contributor - This role has all permissions to create and manage backup except deleting Recovery
Services vault and giving access to others. Imagine this role as admin of backup management who can do
every backup management operation.

Box 2: User3
The User Access Administrator role lets you manage user access to Azure resources.

Reference:
https://docs.microsoft.com/en-us/azure/backup/backup-rbac-rs-vault
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

QUESTION 34
HOTSPOT

You have an SAP landscape on Azure.

You plan to deploy a new SAP application server by using an Azure Resource Manager template.

You need to ensure that all new servers are deployed with Azure Disk Encryption enabled.

How should you complete the relevant component of the template? To answer, select the appropriate
options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Box 1: extensions
Azure Disk Encryption can be enabled via Azure PowerShell or Azure CLI. That is normally seen in
remediation. In a real-world scenario you would like to see a virtual machine during its creation include disk
encryption process. This is technically possible thanks to Disk Encryption VM extension.

Box 2: AzureDiskEncryption
Example:
..
"type": "Microsoft.Compute/virtualMachines/extensions",
"name": "[concat(parameters('vmName'),'/diskEncryption')]",
"apiVersion": "2019-03-01",
"location": "[parameters('location')]",
"dependsOn": [
"[resourceId('Microsoft.Compute/virtualMachines/', parameters('vmName'))]"
],
"properties": {
"publisher": "Microsoft.Azure.Security",
"type": "AzureDiskEncryption",
..

Reference:
https://azsec.azurewebsites.net/2019/12/28/azure-disk-encryption-arm-template-for-windows-vm/

QUESTION 35
HOTSPOT

You have an Azure alert rule and action group as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the
information presented in the graphic.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
Box 1: five minutes
Window Size is 5 minutes.

Box 2: admins action group will be emailed

The admins1 actiongroup will be executed.

Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-metric-overview

QUESTION 36
HOTSPOT

You deploy an Azure Internal load balancer.

You deploy a node of an SAP NetWeaver 7.4 ABAP system named SP1.

You plan to deploy a second node.

You need to verify that the health probe port is configured for the cluster. The cluster IP address resource
name is SAP SP1 IP.

How should you complete the command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Explanation

Explanation/Reference:
Box 1: Get-ClusterResource
Example:
Get-ClusterResource -Name $SAPIPresourceName | Get-ClusterParameter

Write-Output " "

Write-Output "Current probe port property of the SAP cluster resource '$SAPIPresourceName' is
'$OldProbePort'."
Write-Output " "
Write-Output "Setting the new probe port property of the SAP cluster resource
'$SAPIPresourceName' to '$ProbePort' ..."
Write-Output " "

Box 2: Get-ClusterParameter

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-high-availability-installation-
wsfc-shared-disk

QUESTION 37
HOTSPOT

You have an on-premises SAP landscape and an Azure subscription that contains a virtual network named
VNET1. VNET1 has the following settings.
You plan to migrate the landscape to Azure.

You need to configure VNET1 to support the SAP landscape.

Use the drop-down menus to select the answer choice that completes each statement based on the
information presented in the settings.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:
Box 1: add a virtual network gateway

Box 2: use remote gateways

Each virtual network, regardless of whether peered with another virtual network, can still have its own
gateway to connect to an on-premises network. When you peer virtual networks, you can also configure
the gateway in the peered virtual network as a transit point to an on-premises network. In this case, the
virtual network that uses a remote gateway cannot have its own gateway. A virtual network can have only
one gateway that can be either a local or remote gateway (in the peered virtual network).

Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview

QUESTION 38
HOTSPOT

You are planning an SAP NetWeaver deployment on Azure. The database her will consist of Two Azure
virtual machines that have Microsoft SQL Server 2017 installed. Each virtual machine will be deployed to a
separate availability zone.

You need to perform the following:

1. Minimize network latency between the virtual machines.

2. Measure network latency between the virtual machines.
What should you do? To answer, select the appropriate options in the answer area.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:

QUESTION 39
HOTSPOT

You have a Recovery Services vault backup policy for SAP HANA on an Azure virtual machine as shown
in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the
information presented in the graphic.

NOTE: Each correct selection is worth one point.

Hot Area:
Correct Answer:

Explanation

Explanation/Reference:

QUESTION 40
HOTSPOT
You have an existing on-premises SAP landscape that is hosted on VMware VSphere.

You plan to migrate the landscape to Azure.

You configure the Azure Site Recovery replication policy shown in the following exhibit.

Hot Area:

Correct Answer:

Explanation

Explanation/Reference:
QUESTION 41
HOTSPOT

You plan to migrate an SAP database from Oracle to Microsoft SQL Server by using the SQL Server
Migration Assistant (SSMA).

You are configuring a Proof of Concept (PoC) for the database migration You plan to perform the migration
multiple times as part of the PoC.

You need to ensure that you can perform the migrations as quickly as possible. The solution must ensure
that all Oracle schemas are migrated.

Which migration method and migration mode should you use? To answer, select the appropriate options in
the answer area

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:

QUESTION 42
HOTSPOT

You are implementing a highly available deployment of SAP HANA on Azure virtual machines. You need to
ensure that the deployment meets the following requirements:

1. Supports host auto-failover

2. Minimizes cost

How should you configure the highly available components of the deployment? To answer, select the
appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:

QUESTION 43
HOTSPOT

You plan to deploy a scale-out SAP HANA deployment on Azure virtual machines that will contain a
standby node.

You need to recommend a storage solution for the deployment.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point

Hot Area:

Correct Answer:
Explanation

Explanation/Reference:
Question Set 1

QUESTION 1
DRAG DROP

You migrate SAP ERP Central Component (SAP ECC) production and non-production landscapes to
Azure.

You are licensed for SAP Landscape Management (LaMa).

You need to refresh from the production landscape to the non-production landscape.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list
of actions to the answer area and arrange them in the correct order.

Select and Place:

Correct Answer:
Explanation

Explanation/Reference:
Step 1: From the Azure portal, create a service principal
The Azure connector can use a Service Principal to authorize against Microsoft Azure. Follow these steps
to create a Service Principal for SAP Landscape Management (LaMa).

Step 2: Add permissions to the service principal

The Service Principal does not have permissions to access your Azure resources by default. You need to
give the Service Principal permissions to access them.

Step 3: From the Cloud Managers tab in LaMa, add an adapter

Create a new connector in SAP LaMa
Open the SAP LaMa website and navigate to Infrastructure. Go to tab Cloud Managers and click on Add.
Select the Microsoft Azure Cloud Adapter

Step 4: Install and configure LaMA on an SAP NetWeater instance

Provision a new adaptive SAP system
You can manually deploy a new virtual machine or use one of the Azure templates in the quickstart
repository. It contains templates for SAP NetWeaver ASCS, SAP NetWeaver application servers, and the
database. You can also use these templates to provision new hosts as part of a system copy/clone etc.

Note: To support customers on their journey into a cloud model (hybrid or entirely public cloud), SAP and
Microsoft partnered to create an adapter that integrates the SAP management capabilities of LaMa with
the IaaS advantages of Microsoft Azure.

References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/lama-installation

QUESTION 2
DRAG DROP

You have an SAP environment on Azure.

You use Azure Recovery Services to back up an SAP application server.

You need to test the restoration process of a file on the server.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the
list of actions to the answer area and arrange them in the correct order.

Select and Place:

Correct Answer:

Explanation

Explanation/Reference:
Step 1: From Azure Recover Vault, select File Recovery
To restore files or folders from the recovery point, go to the virtual machine and choose the desired
recovery point.

Step 2: Download and run the mount disk executable

Step 3: recover the file and unmount the disk

QUESTION 3
DRAG DROP

You have an SAP environment on Azure.

You use Azure Site Recovery to protect an SAP production landscape.

You need to validate whether you can recover the landscape in the event of a failure. The solution must
minimize the impact on the landscape.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list
of actions to the answer area and arrange them in the correct order.

Select and Place:

Correct Answer:
Explanation

Explanation/Reference:
Step 1: Create a virtual network...
We recommended that for test failover, you choose a network that's isolated from the production recovery
site network specific in the Compute and Network settings for each VM. By default, when you create an
Azure virtual network, it is isolated from other networks. The test network should mimic your production
network:

The test network should have same number of subnets as your production network. Subnets should have
the same names.
The test network should use the same IP address range.

Step 2: Add a public IP address...

Because Site Recovery does not replicate the cloud witness, we recommend that you deploy the cloud
witness in the disaster recovery region.

Step 3: Shut down production virtual machines

Make sure that the primary VM is shut down when you run the test failover. Otherwise there will be two
VMs with the same identity, running in the same network at the same time. This can lead to unexpected
consequences.

Step 4: Select Test failover from the Recovery Plans blade

References:
https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-test-failover-to-azure

QUESTION 4
DRAG DROP

You have a large and complex SAP environment on Azure.

You are designing a training landscape that will be used 10 times a year.

You need to recommend a solution to create the training landscape. The solution must meet the following
requirements:

1. Minimize the effort to build the training landscape.

2. Minimize costs.

In which order should you recommend the actions be performed for the first training session? To answer,
move all actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

Correct Answer:
Explanation

Explanation/Reference:
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/planning-guide

QUESTION 5
DRAG DROP

You are validating an SAP HANA on Azure (Large Instances) deployment.

You need to ensure that sapconf is installed and the kernel parameters are set appropriately for the
active profile.

How should you complete the commands? To answer, drag the appropriate values to the correct targets.
Each value may be used once, more than once, or not at all. You may need to drag the split bar between
panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer:
Explanation

Explanation/Reference:
Box 1: sapconf
The configuration is split into two parts:
/etc/sysconfig/sapconf
/usr/lib/tuned//tuned.conf

Box 2: sap-hana

References:
https://blogs.sap.com/2017/12/22/prepare-your-linux-for-your-sap-solution-with-saptune/

QUESTION 6
DRAG DROP

You need to connect SAP HANA on Azure (Large Instances) to an Azure Log Analytics workspace.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list
of actions to the answer area and arrange them in the correct order.

Select and Place:

Correct Answer:

Explanation

Explanation/Reference:
Step 1: Install the Azure Enhanced Monitoring.
The SAP Azure Enhanced Monitoring Extension allows for collecting diagnostic data including OS and
Application performance counters from Azure VMs running SAP workloads.

Step 2: Install the Log Analytics client on the SAP HANA on Azure (Large Instances) instance.

Step 3: Configure a Log Analytics gateway on the virtual network.

Step 4: On the gateway, run.

References:
http://www.deployazure.com/compute/virtual-machines/sap-azure-enhanced-monitoring-extension/

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/gateway

QUESTION 7
DRAG DROP

You plan to deploy multiple SAP HANA virtual machines to Azure by using an Azure Resource Manager
template.

How should you configure Accelerated Networking and Write Accelerator in the template? To answer, drag
the appropriate values to the correct targets. Each value may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer:
Explanation

Explanation/Reference:
Box 1: true
enableAcceleratedNetworking: If the network interface is accelerated networking enabled.
To further reduce network latency between Azure VMs, we [Micorosoft] recommend that you choose Azure
Accelerated Networking. Use it when you deploy Azure VMs for an SAP workload, especially for the SAP
application layer and the SAP DBMS layer.

Box 2: true
Write Accelerator should be used for the volumes that contain the transaction log or redo logs of a DBMS.
It is not recommended to use Write Accelerator for the data volumes of a DBMS as the feature has been
optimized to be used against log disks.

References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_general

QUESTION 8
DRAG DROP

Your on-premises network contains an Active Directory domain.

You have an SAP environment on Azure that runs on SUSE Linux Enterprise Server (SLES) servers.

You configure the SLES servers to use domain controllers as their NTP servers and their DNS servers.

You need to join the SLES servers to the Active Directory domain.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the
list of actions to the answer area and arrange them in the correct order.

Select and Place:

Correct Answer:
Explanation

Explanation/Reference:
Step 1: Install the samba-winbind package
Install samba-winbind

Step 2: Add realm details to /etc/krb5.conf and /etc/samba/smb.conf

Edit files - best way to do this is to use yast on test machine and copy files from it
In following examples you need to replace EXAMPLE/EXAMPLE.COM/.example.com with your values/
settings
/etc/samba/smb.conf
[global]
workgroup = EXAMPLE
usershare allow guests = NO #disallow guests from sharing
idmap gid = 10000-20000
idmap uid = 10000-20000
kerberos method = secrets and keytab
realm = EXAMPLE.COM
security = ADS
template homedir = /home/%D/%U
template shell = /bin/bash
winbind offline logon = yes
winbind refresh tickets = yes

/etc/krb5.conf
[libdefaults]
default_realm = EXAMPLE.COM
clockskew = 300
[realms]
EXAMPLE.COM = {
kdc = PDC.EXAMPLE.COM
default_domain = EXAMPLE.COM
admin_server = PDC.EXAMPLE.COM
}
..

Step 3: Run net ads join -U administrator

Join the SLES 12 Server to the AD domain
References:
https://www.suse.com/support/kb/doc/?id=7018461

QUESTION 9
DRAG DROP

You have an on-premises SAP environment that runs on SUSE Linux Enterprise Server (SLES) servers
and Oracle. The version of the SAP ERP system is 6.06 and the version of the portal is SAP NetWeaver
7.3.

You need to recommend a migration strategy to migrate the SAP ERP system and the portal to Azure. The
solution must be hosted on SAP HANA.

What should you recommend? To answer, drag the appropriate tools to the correct components. Each tool
may be used once, more than once, or not at all. You may need to drag the split bar between panes or
scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer:

Explanation

Explanation/Reference:
1) SUM+DMO+System update.
2) Heterogeneous system copy.

QUESTION 10
DRAG DROP

You have an SAP environment on Azure.

You use Azure Site Recovery to protect an SAP production landscape.

You need to validate whether you can recover the landscape in the event of a failure. The solution must
minimize the impact on the landscape.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list
of actions to the answer area and arrange them in the correct order.

Select and Place:

Correct Answer:
Explanation

Explanation/Reference:
Step 1: Create a virtual network...
We recommended that for test failover, you choose a network that's isolated from the production recovery
site network specific in the Compute and Network settings for each VM. By default, when you create an
Azure virtual network, it is isolated from other networks. The test network should mimic your production
network:

The test network should have same number of subnets as your production network. Subnets should have
the same names.
The test network should use the same IP address range.

Step 2: Add a public IP address...

Because Site Recovery does not replicate the cloud witness, we recommend that you deploy the cloud
witness in the disaster recovery region.

Step 3: Shut down production virtual machines

Make sure that the primary VM is shut down when you run the test failover. Otherwise there will be two
VMs with the same identity, running in the same network at the same time. This can lead to unexpected
consequences.

Step 4: Select Test failover from the Recovery Plans blade

Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-test-failover-to-azure
QUESTION 11
DRAG DROP

Your on-premises network contains an Active Directory domain.

You are deploying a new SAP environment on Azure.

You need to configure SAP Single Sign-On to ensure that users can authenticate lo SAP GUI and SAP
WebGUI.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list
of actions to the answer area and arrange them in the correct order.

Select and Place:

Correct Answer:

Explanation

Explanation/Reference:

QUESTION 12
DRAG DROP

You deploy an SAP environment on Azure.

You need to grant an SAP administrator read-only access to the Azure subscription. The SAP
administrator must be prevented from viewing network information. How should you configure the role-
based access control (RBAC) role definition? To answer, drag the appropriate values to the correct
targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar
between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer:

Explanation

Explanation/Reference:
QUESTION 13
DRAG DROP

You deploy an SAP environment on Azure.

You need to configure SAP NetWeaver to authenticate by using Azure Active Directory (Azure AD).

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list
of actions to the answer area and arrange them in the correct order.

Select and Place:

Correct Answer:
Explanation

Explanation/Reference:

QUESTION 14
DRAG DROP

A customer has an on-premises SAP environment.

The customer plans to migrate SAP to Azure.

You need to prepare the environment for the planned migration.

Which three actions should you perform in sequence before the migration? To answer, move the
appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

Correct Answer:
Explanation

Explanation/Reference:

QUESTION 15
DRAG DROP

You have an Azure subscription.

You plan to deploy a SAP NetWeaver landscape that will use SQL Server on Azure virtual machines. The
solution must meet the following requirements:

1. The SAP application and database tiers must reside in the same Azure zone.
2. The application tier in the Azure virtual machines must belong to the same Availability Set.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list
of actions to the answer area and arrange them in the correct order.

NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct
orders you select.

Select and Place:

Correct Answer:

Explanation

Explanation/Reference:
Step 1: Create a proximity placement group
A proximity placement group is a logical grouping of Azure resources within the same Azure data center in
order to reduce latency.

Step 2: Create an Availability Set

Create an availability set that references the Azure proximity group.
By adding the availability sets to proximity placement groups, the network latencies are considerably
reduced, thereby improving the overall performance.

Step 3: Deploy SQL Server on Azure Virtual machines

Step 4: Deploy the application tier in the Azure virtual machines

Deploy the application layer VMs by referencing the availability set and the proximity placement group.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-proximity-placement-scenarios
QUESTION 16
DRAG DROP

You have an Azure Active Directory (Azure AD) tenant and an SAP Cloud Platform Identity Authentication
Service tenant.

You need to ensure that users can use their Azure AD credentials to authenticate to SAP applications and
services that trust the SAP Cloud Platform Identity Authentication Service tenant.

In which order should you perform the actions? To answer, move all actions from the list of actions to the
answer area and arrange them in the correct order.

Select and Place:

Correct Answer:

Explanation
Explanation/Reference:
Step 1: Create and configure an enterprise application in the Azure AD tentant
To configure the integration of SAP Cloud Platform Identity Authentication into Azure AD, you need to add
SAP Cloud Platform Identity Authentication from the gallery to your list of managed SaaS apps.
Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
On the left navigation pane, select the Azure Active Directory service.
Navigate to Enterprise Applications and then select All Applications.
To add new application, select New application.
In the Add from the gallery section, type SAP Cloud Platform Identity Authentication in the search box.
Select SAP Cloud Platform Identity Authentication from results panel and then add the app. Wait a few
seconds while the app is added to your tenant.

Step 2: Download the single sign-on (SSO) metadata from the Azure AD tenant.
Download single sign-on metadata from Azure Active Directory.

Step 3: Create and configure a corporate identity provider.

Create corporate identity provider.

Step 4: Download the SAP Cloud Platform Identity Authentication Service tenant metadata.
Download Identity Authentication service tenant metadata.

Step 5: Upload the SAP Cloud Platform Identity Authentication Service tenant metadata to Azure AD
tenant.
Upload Identity Authentication service tenant metadata to Azure Active Directory.
You have already uploaded the metadata file from Azure Active Directory to Identity Authentication service.
It’s time to do it the other way round now and upload the metadata of Identity Authentication service to
Azure Active Directory.

Reference:
https://developers.sap.com/tutorials/cp-ias-azure-ad.html

QUESTION 17
DRAG DROP

You have an Azure Active Directory (Azure AD) tenant and an SAP Cloud Platform tenant.

You need to ensure that users sign in automatically by using their Azure AD accounts when they connect
to SAP Cloud Platform.

Which four actions should you perform in sequence? To answer, move all actions from the list of actions to
the answer area and arrange them in the correct order.

Select and Place:

Correct Answer:
Explanation

Explanation/Reference:

QUESTION 18
DRAG DROP

You plan to deploy SAP HANA to an Azure virtual machine that has a constrained vCPU size.

You need to validate that the virtual machine complies with SAP-defined resource requirements by using
the SAP HANA Hardware and Cloud Measurement Tools (HCMT).

In which order should you perform the actions? To answer, move all actions from the list of actions to the
answer area and arrange them in the correct order.

Select and Place:

Correct Answer:
Explanation

Explanation/Reference:
About Pass4Lead.com
As a professional IT exam study guide provider, Pass4Lead.com provides our
candidates with the most accurate and high quality IT exam training material.

Cisco Citrix CompTIA Check Point

EMC EXIN HP Juniper
LPI Nortel Oracle VMware

and so on, you can find all kinds of exam questions, study guides, practice tests here.
Our aim is to be your assistance on your way to be successful in your IT certifications.
We provide our customers with the 100% Pass Guaranteed or Full Refund.

We spare no efforts to help you to pass any IT Certification exams at the first try.
Do not hesitate to contact us if you need any help on the products, payments or
questions about IT exams.

You can reach us on:

https://www.Pass4Lead.com/contact-us.html

We will get in touch with you in 24 hours. You satisfactory is the recognition for us.
You could rely upon us anytime you need help. We are at your service.

Guarantee & Policy | Privacy & Policy | Terms & Conditions

Any charges made through this site will appear as Global Simulators Limited.
All trademarks are the property of their respective owners.

Copyright © Pass4Lead.com, All Rights Reserved.