I85PREP
⌘ K
Azure AZ-120 study materials
Azure AZ-120 study resources

Azure AZ-120 practice questions

One question at a time. Build your Azure AZ-120 understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Migrate SAP workloads to Azure

A company is planning to migrate an SAP NetWeaver application server to Azure virtual machines. Which Azure feature should be used to guarantee that the VM's disk throughput and network bandwidth are not affected by other tenants on the same physical host?

  1. Azure Dedicated Host Correct answer.
  2. Availability Zones
  3. Proximity placement groups
  4. Accelerated networking

Explanation

Azure Dedicated Host provides physical servers dedicated to a single customer, so the VM does not share the host hardware with other tenants. This isolation helps provide more predictable performance for latency-sensitive SAP workloads. Availability features address redundancy rather than host-level isolation.

Question 2Migrate SAP workloads to Azure

Which SAP-certified Azure virtual machine family is specifically designed for memory-intensive SAP HANA scale-up deployments with the largest memory sizes?

  1. A-series
  2. F-series
  3. B-series
  4. M-series Correct answer.

Explanation

The M-series (including Mv2 and Mv3) offers the largest memory-to-vCPU ratios among SAP-certified Azure VM families and is used for large SAP HANA scale-up systems. B-series are burstable, F-series are compute-optimized, and A-series are general-purpose legacy sizes.

Question 3Migrate SAP workloads to Azure

An SAP HANA database will run on Azure. According to SAP and Microsoft guidance, which storage type should be used for the /hana/data and /hana/log volumes to meet performance requirements?

  1. Azure Premium SSD or Ultra Disk Correct answer.
  2. Azure Files standard SMB share
  3. Azure Blob storage standard tier
  4. Azure NetApp Files standard service level

Explanation

SAP HANA data and log volumes require low-latency, high-IOPS block storage, which is provided by Azure managed Premium SSD or Ultra Disk. Standard Blob and standard SMB shares do not meet the latency profile. Azure NetApp Files is supported in some scenarios but the standard service level is not the typical answer for data and log performance.

Question 4Migrate SAP workloads to Azure

What is the purpose of the SAP software provisioning via Azure Center for SAP solutions?

  1. To automate deployment of SAP system infrastructure and SAP software installation Correct answer.
  2. To back up SAP data to Azure Blob storage
  3. To provide a managed SAP HANA database service
  4. To monitor SAP application performance with Application Insights

Explanation

Azure Center for SAP solutions includes a software provisioning capability that automates creation of the Azure infrastructure and the installation of SAP software for supported system types. It is not a managed database service, a backup tool, or an APM product.

Question 5Migrate SAP workloads to Azure

A migration team must move a 40 TB SAP HANA database from on-premises to Azure over a limited 200 Mbps internet link. Which approach is most appropriate to complete the transfer in a reasonable time?

  1. AzCopy over the internet
  2. Azure Data Box Correct answer.
  3. Azure VPN Gateway
  4. Azure ExpressRoute with 1 Gbps

Explanation

For very large datasets over constrained bandwidth, Azure Data Box provides physical shipping of data to Azure and avoids months of transfer time. VPN and ExpressRoute still depend on link capacity, and AzCopy over the internet is limited by the same bandwidth problem.

Question 6Migrate SAP workloads to Azure

Which Azure service should be used to provide a shared, highly available file system for SAP global transport directories and interface files across multiple SAP application servers?

  1. Azure Container Registry
  2. Azure Queue Storage
  3. Azure Table Storage
  4. Azure NetApp Files Correct answer.

Explanation

Azure NetApp Files provides SMB and NFS file shares that can be mounted by multiple SAP application servers for transport directories, /sapmnt, and interface files. Queue, Table, and Container Registry are not file systems and cannot serve as shared SAP directories.

Question 7Migrate SAP workloads to Azure

A company wants to run SAP HANA on Azure VMs with the lowest possible recovery time objective across a regional outage. Which design should be recommended?

  1. Single HANA VM with Azure Backup
  2. HANA on a single VM with Premium SSD
  3. HANA with local disk snapshots only
  4. HANA system replication to a secondary VM in a paired region Correct answer.

Explanation

HANA system replication to a VM in a paired or secondary region provides a warm standby that can be promoted during a regional outage, minimizing recovery time. Backups and snapshots restore data but require longer recovery and do not provide a running secondary system.

Question 8Migrate SAP workloads to Azure

Which Azure construct is used to define and deploy SAP infrastructure as code using templates that can be versioned and repeated across environments?

  1. Azure Resource Manager templates or Bicep Correct answer.
  2. Azure Blueprints
  3. Azure Policy
  4. Azure Advisor

Explanation

ARM templates and Bicep files describe infrastructure declaratively and can be versioned, parameterized, and redeployed consistently. Policy, Blueprints, and Advisor support governance and recommendations but are not the primary IaC authoring mechanism.

Question 9Migrate SAP workloads to Azure

A SAP NetWeaver system requires an Azure VM size with at least 32 vCPUs and 512 GB RAM and must be SAP-certified. Which approach best identifies a valid size?

  1. Use a B-series VM with burstable CPU
  2. Consult the SAP certified Azure VM size list and select an eligible size such as E32s_v3 or M-series Correct answer.
  3. Choose the largest general-purpose size available in the region
  4. Select any size with 32 vCPUs regardless of SAP certification

Explanation

SAP publishes a certified hardware directory, and Microsoft documents which Azure VM sizes are certified for SAP NetWeaver and HANA. Selecting from this list ensures support and adequate resources. Arbitrary sizes or burstable VMs may not be certified or may lack the required memory.

Question 10Migrate SAP workloads to Azure

Which Azure networking component is required to connect an on-premises SAP landscape to Azure with a private, dedicated connection that does not traverse the public internet?

  1. Azure VPN Gateway with site-to-site
  2. Azure Bastion
  3. Azure Firewall
  4. Azure ExpressRoute Correct answer.

Explanation

ExpressRoute provides a private dedicated circuit through a connectivity provider, keeping SAP traffic off the public internet. VPN Gateway uses the internet, Bastion provides secure RDP/SSH access, and Firewall filters traffic but does not create a private circuit.

Question 11Migrate SAP workloads to Azure

An SAP HANA scale-out deployment will use multiple Azure VMs. What must be configured to ensure the HANA nodes can communicate with low latency and high throughput?

  1. Azure Application Gateway
  2. Azure Load Balancer with public IP
  3. Azure DNS private zones only
  4. Accelerated networking and a proximity placement group Correct answer.

Explanation

HANA scale-out requires low-latency internode communication, which is improved by accelerated networking and by placing VMs close together with a proximity placement group. Load Balancer, Application Gateway, and DNS do not provide the required data-path performance.

Question 12Migrate SAP workloads to Azure

Which Azure feature should be used to protect SAP VMs against a datacenter failure within a region while maintaining low inter-node latency?

  1. Resource Groups
  2. Availability Sets
  3. Managed Disks
  4. Availability Zones Correct answer.

Explanation

Availability Zones distribute VMs across physically separate datacenters within a region, protecting against datacenter failure while keeping latency low. Availability Sets protect against host failure but not datacenter failure, and resource groups and managed disks are not availability constructs.

Question 13Migrate SAP workloads to Azure

A SAP application server on Azure must authenticate to an on-premises Active Directory domain. Which configuration supports this requirement?

  1. Use only Microsoft Entra ID join without directory sync
  2. Extend the corporate AD into Azure using domain controllers on Azure VMs or Entra Domain Services Correct answer.
  3. Join the VMs to a workgroup
  4. Use local SAM accounts on each VM

Explanation

SAP NetWeaver commonly relies on AD for authentication and authorization, so the corporate domain must be reachable in Azure, either through domain controllers deployed in Azure or through a managed domain service. Workgroups, local accounts, and cloud-only identity do not provide the required domain integration.

Question 14Migrate SAP workloads to Azure

What is the primary role of Azure Monitor for SAP solutions?

  1. To replicate SAP HANA data between regions
  2. To collect and visualize telemetry from SAP systems and the underlying Azure infrastructure Correct answer.
  3. To provide a managed SAP HANA database
  4. To install SAP software on Azure VMs

Explanation

Azure Monitor for SAP solutions is a monitoring offering that gathers SAP application, database, and Azure infrastructure metrics into a single view. It does not install software, replicate data, or provide a managed database.

Question 15Migrate SAP workloads to Azure

An SAP HANA database on Azure uses Premium SSD for /hana/data. Which additional configuration is recommended to improve write latency for the log volume?

  1. Enable read caching on the log disk
  2. Use Azure Write Accelerator on the log disk Correct answer.
  3. Use a standard HDD for the log volume
  4. Place the log volume on the OS disk

Explanation

Write Accelerator is designed to reduce write latency for the HANA log volume on M-series VMs. Read caching is inappropriate for write-heavy log disks, and standard HDD or OS-disk placement would degrade performance.

Question 16Migrate SAP workloads to Azure

Which Azure disk type should be selected for an SAP HANA database that requires sub-millisecond latency and the ability to configure IOPS independently of capacity?

  1. Azure Standard SSD
  2. Azure Standard HDD
  3. Azure Ultra Disk Correct answer.
  4. Azure Premium SSD v1

Explanation

Ultra Disk offers configurable IOPS and throughput independent of capacity and very low latency, making it suitable for demanding HANA workloads. Standard SSD, Premium SSD v1, and Standard HDD do not provide the same independent configurability.

Question 17Migrate SAP workloads to Azure

A company is migrating SAP ERP Central Component to Azure and wants to minimize downtime during the cutover. Which approach is most appropriate?

  1. Use SAP system copy with a synchronized cutover window and pre-staged data Correct answer.
  2. Run the on-premises and Azure systems without any data synchronization
  3. Export all data to CSV and re-import after go-live
  4. Perform a fresh installation and manual data entry

Explanation

A planned SAP system copy or migration with pre-staged data and a synchronized cutover minimizes downtime by preparing the target ahead of the final switch. Fresh installation with manual entry, CSV re-import, and unsynchronized parallel systems either lose data or extend downtime.

Question 18Migrate SAP workloads to Azure

Which tool can be used to assess an on-premises SAP landscape and generate a sizing recommendation for Azure?

  1. Azure Migrate Correct answer.
  2. Azure Cost Management
  3. Azure Monitor
  4. Azure Policy

Explanation

Azure Migrate discovers on-premises servers and provides sizing and cost estimates for Azure, including SAP-relevant workloads. Cost Management, Policy, and Monitor do not perform discovery and sizing assessments.

Question 19Migrate SAP workloads to Azure

An SAP HANA system on Azure must be backed up to meet a recovery point objective of 15 minutes. Which combination best meets this requirement?

  1. Monthly snapshots of the OS disk
  2. Weekly full backups only
  3. Azure Site Recovery replication only
  4. HANA data and log backups to Azure Blob storage with frequent log backups Correct answer.

Explanation

Frequent HANA log backups to Azure Blob storage, combined with periodic data backups, allow point-in-time recovery within a short RPO. Weekly full backups, monthly snapshots, and ASR alone cannot achieve a 15-minute RPO for the database.

Question 20Migrate SAP workloads to Azure

Which Azure Load Balancer configuration is required for an SAP HANA high-availability pair using a virtual IP?

  1. An Application Gateway with URL path routing
  2. A Traffic Manager profile with priority routing
  3. A Standard SKU internal load balancer with a floating IP and health probe Correct answer.
  4. A Basic SKU public load balancer

Explanation

HANA HA clusters use a virtual IP that must be handled by a Standard internal load balancer with floating IP enabled and a health probe on the HANA port. Basic SKU lacks the required capabilities, and Application Gateway and Traffic Manager operate at different layers.

Question 21Migrate SAP workloads to Azure

What is the recommended way to deploy SAP GUI and front-end components for users connecting to SAP on Azure?

  1. Use a web browser only with no client software
  2. Run SAP GUI on the HANA database server
  3. Install SAP GUI on the domain controller
  4. Install SAP GUI on user workstations or use published remote apps Correct answer.

Explanation

SAP GUI is a client component installed on user devices or delivered through remote app publishing, keeping it separate from servers. Installing it on database or domain controller servers is not supported practice and adds load and security risk.

Question 22Migrate SAP workloads to Azure

A company wants to use Azure Center for SAP solutions to manage an existing SAP system. What must be done first?

  1. Delete and recreate all VMs
  2. Register the existing SAP system as an ACSS virtual instance Correct answer.
  3. Reinstall the SAP system using ACSS
  4. Migrate the database to Azure SQL

Explanation

Azure Center for SAP solutions can register existing SAP systems as virtual instances so they can be managed through the service. Reinstallation, VM recreation, and migration to Azure SQL are not prerequisites and would be disruptive or invalid.

Question 23Migrate SAP workloads to Azure

Which SAP component should be placed on a shared Azure NetApp Files volume to allow multiple application servers to access the same transport requests?

  1. /usr/sap/trans Correct answer.
  2. /var/log
  3. /etc
  4. /hana/shared

Explanation

The SAP transport directory /usr/sap/trans must be shared across all application servers so transport requests are visible system-wide. /hana/shared, /etc, and /var/log are host-specific or database-related and are not the transport directory.

Question 24Migrate SAP workloads to Azure

An SAP landscape requires network isolation between production and non-production systems in Azure. Which feature should be used?

  1. Azure DNS only
  2. A single flat subnet for all systems
  3. Public IP addresses on all VMs
  4. Virtual network peering with network security groups and separate subnets Correct answer.

Explanation

Separate virtual networks or subnets combined with network security groups provide traffic isolation between production and non-production systems. A flat subnet, public IPs, and DNS alone do not enforce isolation.

Question 25Migrate SAP workloads to Azure

Which consideration is most important when choosing an Azure region for an SAP HANA deployment?

  1. The region must have the most availability zones
  2. The region must be the cheapest available
  3. The region must offer the required SAP-certified VM sizes and paired-region disaster recovery Correct answer.
  4. The region must be closest to the administrator's home office

Explanation

SAP HANA requires certified VM sizes, and disaster recovery planning depends on region pairing, so the chosen region must satisfy both. Cost, zone count, and administrator location are secondary to certification and DR capability.

Question 26Migrate SAP workloads to Azure

Which Azure virtual machine family is specifically certified by SAP for in-memory databases such as SAP HANA?

  1. F-series compute-optimized VMs
  2. M-series memory-optimized VMs Correct answer.
  3. B-series burstable VMs
  4. A-series general-purpose VMs

Explanation

SAP certifies specific Azure VM families for HANA based on memory-to-vCPU ratios and throughput. The M-series is designed for large in-memory workloads and appears on the SAP HANA certified hardware directory. Burstable, compute-optimized, and legacy general-purpose families are not certified for production HANA.

Question 27Migrate SAP workloads to Azure

A company is planning a lift-and-shift migration of an SAP NetWeaver system to Azure. Which activity should be performed before provisioning any Azure resources?

  1. Configure Azure ExpressRoute before any assessment
  2. Purchase Azure Reserved Instances for the target VMs
  3. Complete an SAP sizing and dependency assessment of the source landscape Correct answer.
  4. Enable Azure Backup on the on-premises SAP servers

Explanation

A migration begins with discovery: understanding the source system's sizing, database size, dependencies, and interfaces. Sizing drives VM and storage selection, and dependency mapping shapes the landing zone design. Purchasing reservations or connectivity before assessment risks rework and oversizing.

Question 28Migrate SAP workloads to Azure

Which Azure storage option is best suited for hosting the /hana/shared directory of an SAP HANA system on Azure?

  1. Local temporary disk of the HANA VM
  2. Azure NetApp Files Correct answer.
  3. Premium managed disks attached to a single VM
  4. Azure Blob Storage mounted with NFS 3.0

Explanation

The /hana/shared directory must be accessible from all nodes in a HANA scale-out or high-availability deployment. Azure NetApp Files provides a shared, SAP-certified NFS file system with the performance and availability required. Single-VM disks and local temporary storage cannot be shared reliably across nodes.

Question 29Migrate SAP workloads to Azure

Which Azure resource provides a private, isolated network boundary for SAP production systems?

  1. A public IP address on each SAP VM
  2. A virtual network with dedicated subnets Correct answer.
  3. A shared virtual network peering to the internet
  4. An Azure Traffic Manager profile

Explanation

A virtual network defines an isolated address space, and subnets segment workloads within it. Placing production SAP systems in dedicated subnets enforces separation from other tiers and supports network security groups and routing control. Public IPs and internet peering remove the isolation the requirement demands.

Question 30Migrate SAP workloads to Azure

An SAP application server needs to access a database over a dedicated private connection. Which Azure construct defines the address range used for that connection?

  1. A private DNS zone
  2. A network security group rule
  3. A route table entry
  4. A subnet within the virtual network Correct answer.

Explanation

Subnets carve the virtual network address space into segments, and the subnet address range determines which IP addresses SAP VMs can use. Network security groups filter traffic, route tables direct it, and DNS zones resolve names, but none defines the address space itself.

Question 31Migrate SAP workloads to Azure

Which Azure service should be used to centrally manage and monitor the health of SAP systems and their Azure infrastructure together?

  1. Azure Monitor for SAP solutions Correct answer.
  2. Microsoft Defender for Cloud
  3. Azure Advisor
  4. Azure Service Health

Explanation

Azure Monitor for SAP solutions is purpose-built to collect SAP application metrics alongside Azure infrastructure telemetry. It surfaces the health of HANA, NetWeaver, and related components in a single view. Advisor, Service Health, and Defender address recommendations, platform events, and security posture rather than SAP workload monitoring.

Question 32Migrate SAP workloads to Azure

A company wants to migrate an SAP system to Azure with minimal risk. Which practice should be used to validate the target environment before the production cutover?

  1. Rely only on vendor documentation without validation
  2. Skip testing and migrate directly during a maintenance window
  3. Migrate only the database and leave the application tier on-premises
  4. Perform a full test migration and functional test in a non-production subscription Correct answer.

Explanation

A rehearsal migration in a non-production environment validates sizing, connectivity, and application behavior before the real cutover. It exposes issues with dependencies, performance, and configuration while rollback is still simple. Migrating without validation concentrates risk in the production window.

Question 33Migrate SAP workloads to Azure

Which Azure feature allows an SAP landscape to be deployed repeatedly with consistent configuration from a template?

  1. Azure Policy
  2. Azure Automation State Configuration
  3. Azure Resource Manager templates Correct answer.
  4. Azure Blueprints

Explanation

Azure Resource Manager templates declaratively define the resources and configuration of an SAP landscape and can be redeployed for repeatability. Policy enforces rules, Blueprints package governance artifacts, and State Configuration manages in-guest state, but templates are the deployment mechanism.

Question 34Migrate SAP workloads to Azure

An SAP HANA database on Azure must survive the failure of a single Azure datacenter while keeping recovery time low. Which configuration meets this requirement?

  1. Deploy a single HANA VM with Premium SSD storage
  2. Rely on Azure Backup with a 24-hour schedule
  3. Deploy HANA in an availability zone pair with synchronous replication Correct answer.
  4. Deploy HANA in an availability set within one datacenter

Explanation

Availability zones are physically separate datacenters within a region, and synchronous HANA system replication between zones provides automatic failover with minimal data loss. A single VM or an availability set within one datacenter does not survive a datacenter failure, and daily backups have a high recovery point objective.

Question 35Migrate SAP workloads to Azure

A company needs to connect its on-premises SAP landscape to Azure with predictable latency and a private dedicated circuit. Which service should be used?

  1. Azure ExpressRoute Correct answer.
  2. Azure VPN Gateway over the public internet
  3. Azure Front Door
  4. Azure Bastion

Explanation

ExpressRoute provides a private, dedicated connection through a connectivity provider, offering predictable latency and bandwidth for SAP traffic. A site-to-site VPN traverses the public internet and cannot guarantee the same performance characteristics. Bastion and Front Door serve different purposes entirely.

Question 36Migrate SAP workloads to Azure

An SAP HANA scale-out cluster on Azure requires that all nodes communicate over a low-latency private network. Which configuration should be applied?

  1. Use Azure Firewall to route inter-node traffic
  2. Place all HANA nodes in the same virtual network and subnet with accelerated networking enabled Correct answer.
  3. Place each HANA node in a separate virtual network
  4. Assign public IP addresses to each HANA node

Explanation

HANA scale-out nodes need low-latency, high-throughput communication, which is achieved by co-locating them in the same virtual network and subnet with accelerated networking. Public IPs, separate networks, and firewall inspection add latency and complexity without benefit.

Question 37Migrate SAP workloads to Azure

A company wants to use Azure Center for SAP solutions to manage an SAP system that already runs on Azure. What must be done before registration?

  1. The SAP system must be discovered and registered as an SAP system resource Correct answer.
  2. The SAP system must be moved to an availability set
  3. The SAP system must be converted to a managed disk layout
  4. The SAP system must be migrated to a different region

Explanation

Azure Center for SAP solutions requires the existing SAP system to be discovered and registered so that it becomes an SAP system resource in Azure. Registration is the prerequisite for management, monitoring, and visibility features. Region changes, storage conversions, and availability set moves are not prerequisites.

Question 38Migrate SAP workloads to Azure

An SAP application server uses a shared file system for transport directories across multiple application servers. Which Azure solution provides the required shared access?

  1. Azure NetApp Files with NFS exports Correct answer.
  2. Azure Files with the SMB protocol on a standard tier
  3. A temporary disk on the central services VM
  4. A Premium SSD attached to each application server

Explanation

Transport directories must be shared across application servers, and Azure NetApp Files provides a high-performance NFS file system certified for SAP. Attaching separate disks gives each server its own copy, and standard-tier SMB shares or temporary disks do not meet the performance and durability requirements.

Question 39Migrate SAP workloads to Azure

An SAP HANA database on Azure uses Premium SSD for /hana/data. Which additional measure improves durability against disk failure?

  1. Disable all caching and rely on the local temporary disk
  2. Use unmanaged disks in a storage account
  3. Enable Azure Disk Host Caching set to ReadOnly and use a managed disk with zone-redundant storage Correct answer.
  4. Enable write caching on the data disk

Explanation

Read-only host caching improves read performance for the data volume, and zone-redundant managed disks replicate data across availability zones for durability. Local temporary disks are not durable, unmanaged disks are legacy, and write caching on data disks is not supported for HANA data volumes.

Question 40Migrate SAP workloads to Azure

A company is migrating SAP ERP Central Component to Azure and wants to minimize downtime during cutover. Which approach best supports this goal?

  1. Migrate only the database and keep the application on-premises
  2. Use a phased migration with a final delta synchronization before switching users Correct answer.
  3. Perform a single full export and import during the cutover window
  4. Migrate during business hours without a maintenance window

Explanation

A phased approach copies the bulk of the data ahead of time and performs a short delta synchronization at cutover, reducing the downtime window. A single full export and import during cutover maximizes the outage, and splitting tiers adds latency and does not reduce downtime.

Question 41Migrate SAP workloads to Azure

Which Azure Load Balancer configuration is required for an SAP HANA high-availability pair that uses a virtual IP?

  1. An internal load balancer with no health probe
  2. A Standard Load Balancer with a high-availability ports rule and floating IP enabled Correct answer.
  3. A Basic Load Balancer with a health probe on port 80
  4. A public load balancer with a NAT rule

Explanation

SAP HANA high-availability pairs require an internal Standard Load Balancer with a high-availability ports rule and floating IP enabled so the virtual IP moves with the active node. Basic Load Balancer lacks the required capabilities, and a health probe is needed for failover detection.

Question 42Migrate SAP workloads to Azure

Which consideration is most important when selecting an Azure region for an SAP HANA deployment?

  1. The region offers the certified VM sizes and availability zones required by the workload Correct answer.
  2. The region is geographically closest to the company's headquarters
  3. The region hosts the most Azure services overall
  4. The region has the lowest cost for general-purpose VMs

Explanation

Region selection for SAP HANA depends on availability of SAP-certified VM families, availability zones, and required services. Cost and service breadth matter but cannot compensate for missing certified hardware or zone support. Proximity to headquarters is secondary to technical and latency requirements.

Question 43Migrate SAP workloads to Azure

An SAP NetWeaver application server on Azure must authenticate users against an on-premises Active Directory domain. Which configuration supports this requirement?

  1. Extend the on-premises domain into Azure using domain controllers in the virtual network Correct answer.
  2. Join the VMs to an Azure AD-only tenant without directory synchronization
  3. Use local Windows accounts on each SAP server
  4. Configure each SAP server with a workgroup

Explanation

Extending the on-premises Active Directory into Azure with domain controllers in the virtual network allows SAP servers to join the domain and authenticate users. Local accounts, workgroup configurations, and cloud-only tenants without synchronization do not provide the required domain authentication.

Question 44Migrate SAP workloads to Azure

A company wants to deploy SAP GUI and front-end components for users connecting to SAP on Azure. Which approach is recommended?

  1. Run SAP GUI inside the database server session
  2. Deploy all front-end components on the HANA database server
  3. Deploy front-end components close to users and connect over the corporate network or VPN Correct answer.
  4. Force all users to connect directly to the application server over the public internet

Explanation

Front-end components should be placed near users to reduce latency, with connectivity through the corporate network or VPN for security. Running front ends on the database server or exposing the application server directly to the internet creates performance and security problems.

Question 45Migrate SAP workloads to Azure

An SAP HANA system on Azure must meet a recovery point objective of 15 minutes. Which combination best meets this requirement?

  1. Continuous HANA system replication to a secondary site plus Azure Backup for the file system Correct answer.
  2. Monthly snapshots retained on the same VM
  3. Daily database backups to local disk
  4. Weekly full backups only

Explanation

Continuous system replication keeps a secondary copy nearly current, satisfying a 15-minute recovery point objective, while Azure Backup protects the file system and configuration. Weekly, daily, and monthly schedules cannot meet a 15-minute objective because they leave long gaps between recovery points.

Question 46Migrate SAP workloads to Azure

A company plans to migrate a large SAP landscape and needs to estimate Azure VM and storage requirements. Which approach provides the most reliable sizing recommendation?

  1. Collect performance data from the source system and map it to SAP-certified Azure SKUs Correct answer.
  2. Select VM sizes based on the number of SAP users only
  3. Choose the largest available VM sizes to avoid performance issues
  4. Copy the on-premises hardware specifications directly without analysis

Explanation

Sizing should be based on measured CPU, memory, I/O, and database growth from the source system, then mapped to SAP-certified Azure SKUs. Choosing the largest sizes wastes cost, copying hardware specifications ignores architectural differences, and user counts alone omit workload characteristics.

Question 47Migrate SAP workloads to Azure

An SAP HANA scale-out deployment on Azure must tolerate the loss of one availability zone. Which design provides this resilience?

  1. Use a single large VM instead of scale-out
  2. Rely on Azure Site Recovery for automatic HANA failover
  3. Place all nodes in one availability zone with local redundancy
  4. Distribute HANA nodes across availability zones with synchronous replication and a standby node Correct answer.

Explanation

Distributing nodes across availability zones with synchronous replication and a standby node allows the cluster to survive a zone failure with minimal data loss. Keeping all nodes in one zone or collapsing to a single VM creates a single point of failure, and Site Recovery is not an automatic HANA failover mechanism.

Question 48Migrate SAP workloads to Azure

A company is designing the Azure landing zone for SAP and must ensure that production traffic never traverses the public internet. Which combination satisfies this requirement?

  1. ExpressRoute for hybrid connectivity plus private endpoints and user-defined routes for forced tunneling Correct answer.
  2. Azure Bastion plus public IP addresses for administration
  3. Azure Front Door plus a public load balancer
  4. A site-to-site VPN plus public IP addresses on all SAP VMs

Explanation

ExpressRoute provides private hybrid connectivity, private endpoints keep PaaS traffic on the Azure backbone, and user-defined routes enforce that traffic is not routed to the internet. VPN over the internet, public IPs, and public load balancers all expose traffic to public paths.

Question 49Migrate SAP workloads to Azure

An SAP system on Azure uses Azure NetApp Files for /hana/data and /hana/log. Which design decision most affects performance for this configuration?

  1. Selecting the correct service level and volume quota to meet throughput requirements Correct answer.
  2. Enabling SMB protocol for the HANA volumes
  3. Choosing the smallest possible volume size to reduce cost
  4. Placing the volumes in a different region from the VMs

Explanation

Azure NetApp Files performance is governed by the service level and volume quota, which determine available throughput. Undersizing volumes caps performance, SMB is not appropriate for HANA data and log volumes, and cross-region placement adds latency and is not supported for this use.

Question 50Migrate SAP workloads to Azure

A company wants to migrate an SAP system to Azure and must decide between a lift-and-shift and a replatform approach. Which factor most strongly favors replatforming to SAP-certified Azure services?

  1. The desire to keep the existing operating system version unchanged
  2. The need to minimize changes to the existing architecture
  3. The need to reduce long-term operational overhead and take advantage of managed capabilities Correct answer.
  4. The requirement to preserve the current backup tooling

Explanation

Replatforming adopts managed Azure services and certified configurations, which reduces long-term operational overhead and improves resilience and scalability. Preserving the existing OS, backup tooling, and architecture are goals that favor lift-and-shift rather than replatforming.