Microsoft AZ-120 시험

Question No : 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy SAP HANA on Azure (Large Instances).
You need to back up the SAP HANA database to Azure.
Solution: You use a third-party tool that uses backint to back up the SAP HANA database to Azure storage.
Does this meet the goal?

• A.Yes
• B.No

답을 확인하기

정답:
Explanation:
https://blogs.sap.com/2018/08/31/overview-of-backint-for-sap-hana-and-faq-for-3rd-party-backup-tool-support/
https://documentation.commvault.com/commvault/v11_sp16/article?p=114414.htm

Question No : 2

HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

답을 확인하기

정답:


Explanation:
Box 1: No
To log in to a Linux VM with Azure AD credentials, install the Azure Active Directory login VM extension.
Note: Azure AD Connect is the Microsoft tool designed to meet and accomplish your hybrid identity goals.
Box 2: NO
Box 3: No
Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/deployment-guide

Question No : 3

HOTSPOT
Your on-premises network contains SAP and non-SAP applications.
You have JAVA-based SAP systems that use SPNEGO for single-sign on (SSO) authentication.
Your external portal uses multi-factor authentication (MFA) to authenticate users.
You plan to extend the on-premises authentication features to Azure and to migrate the SAP applications to Azure.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

답을 확인하기

정답:


Explanation:
Box 1: Yes
Box 2: Yes
Password hash synchronization is one of the sign-in methods used to accomplish hybrid identity. Azure AD Connect synchronizes a hash, of the hash, of a users password from an on-premises Active Directory instance to a cloud-based Azure AD instance.
Password hash synchronization is an extension to the directory synchronization feature implemented by Azure AD Connect sync. You can use this feature to sign in to Azure AD services like Office 365. You sign in to the service by using the same password you use to sign in to your on-premises Active Directory instance.
Box 3: Yes
If your organization is federated with Azure AD, you can use Azure Multi-Factor Authentication to secure AD FS resources, both on-premises and in the cloud. Azure MFA enables you to eliminate passwords and provide a more secure way to authenticate.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta

Question No : 4

This question requires that you evaluate the underlined BOLD text to determine if it is correct.
You have an Azure resource group that contains the virtual machines for an SAP environment.
You must be assigned the Contributor role to grant permissions to the resource group.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

• A.No change is needed
• B.User Access Administrator
• C.Managed Identity Contributor
• D.Security Admin

답을 확인하기

정답:
Explanation:
Contributor - Can create and manage all types of Azure resources but can’t grant access to others.
User Access Administrator - Lets you manage user access to Azure resources.
Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/overview

Question No : 5

DRAG DROP
You plan to deploy multiple SAP HANA virtual machines to Azure by using an Azure Resource Manager template.
How should you configure Accelerated Networking and Write Accelerator in the template? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

답을 확인하기

정답:


Explanation:
Box 1: true
enableAcceleratedNetworking: If the network interface is accelerated networking enabled.
To further reduce network latency between Azure VMs, we [Micorosoft] recommend that you choose Azure Accelerated Networking. Use it when you deploy Azure VMs for an SAP workload, especially for the SAP application layer and the SAP DBMS layer.
Box 2: true
Write Accelerator should be used for the volumes that contain the transaction log or redo logs of a DBMS. It is not recommended to use Write Accelerator for the data volumes of a DBMS as the feature has been optimized to be used against log disks.
Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_general

Question No : 6

HOTSPOT
You are planning the Azure network infrastructure for an SAP environment.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

답을 확인하기

정답:


Explanation:
Box 1: NO
Box 2: Yes
Box 3: Yes
Be aware that network traffic between two peered Azure virtual networks is subject to transfer costs. Huge data volume that consists of many terabytes is exchanged between the SAP application layer and the DBMS layer. You can accumulate substantial costs if the SAP application layer and DBMS layer are segregated between two peered Azure virtual networks.
Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_general

Question No : 7

DRAG DROP
You need to connect SAP HANA on Azure (Large Instances) to an Azure Log Analytics workspace.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

답을 확인하기

정답:


Explanation:
3524
Reference:
http://www.deployazure.com/compute/virtual-machines/sap-azure-enhanced-monitoring-extension/
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/gateway

Question No : 8

You deploy an SAP environment on Azure by following the SAP workload on Azure planning and deployment checklist.
You need to verify whether Azure Diagnostics is enabled.
Which cmdlet should you run?

• A.Get-AzureVMAvailableExtension
• B.Get-AzVmDiagnosticsExtension
• C.Test-AzDeployment
• D.Test-VMConfigForSAP

답을 확인하기

정답:
Explanation:
The Get-AzVMDiagnosticsExtension cmdlet gets the settings of the Azure Diagnostics extension on a virtual machine.
Incorrect Answers:
D: You can check the configuration of a virtual machine by calling the Test-VMConfigForSAP_GUI commandlet.
Reference: https://docs.microsoft.com/en-us/powershell/module/az.compute/get-azvmdiagnosticsextension

Question No : 9

You plan to deploy SAP application servers that run Windows Server 2016.
You need to use PowerShell Desired State Configuration (DSC) to configure the SAP application server once the servers are deployed.
Which Azure virtual machine extension should you install on the servers?

• A.the Azure DSC VM Extension
• B.the Azure virtual machine extension
• C.the Azure Chef extension
• D.the Azure Enhanced Monitoring Extension for SAP

답을 확인하기

정답:
Explanation:
The Azure Desired State Configuration (DSC) VM Extension is updated as-needed to support enhancements and new capabilities delivered by Azure, Windows Server, and the Windows Management Framework (WMF) that includes Windows PowerShell.
Reference: https://docs.microsoft.com/en-us/powershell/scripting/dsc/getting-started/azuredscexthistory

Question No : 10

HOTSPOT
You deploy SAP HANA by using SAP HANA on Azure (Large Instances).
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

답을 확인하기

정답:


Explanation:
Box 1: Yes
Box 2: Yes
The SAP Azure Enhanced Monitoring Extension allows for collecting diagnostic data including OS and Application performance counters from Azure VMs running SAP workloads.
Box 3: No
Reference:
http://www.deployazure.com/compute/virtual-machines/sap-azure-enhanced-monitoring-extension/
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/azure-monitor-overview

Question No : 11

You plan to deploy an SAP environment on Azure.
You plan to store all SAP connection strings securely in Azure Key Vault without storing credentials on the
Azure virtual machines that host SAP.
What should you configure to allow the virtual machines to access the key vault?

• A.Azure Active Directory (Azure AD) Privilege Identity Manager (PIM)
• B.role-based access control (RBAC)
• C.a Managed Service Identity (MSI)
• D.the Custom Script Extension

답을 확인하기

정답:
Explanation:
To reference a credential stored in Azure Key Vault, you need to:

Question No : 12

HOTSPOT
You have the following Azure Resource Manager template.



For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

답을 확인하기

정답:


Explanation:
Box 1: Yes
Count is 6.
Box 2: No
Mode is serial.
Box 3: NO
Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/copy-resources

Question No : 13

You are deploying an SAP environment on Azure that will use an SAP HANA database server. You provision an Azure virtual machine for SAP HANA by using the M64s virtual machine SKU. You need to set the swap space by using the Microsoft Azure Linux Agent (waagent) configuration file.
Which two settings should you configure? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A.ResourceDisk.EnableSwapEncryption=n
• B.AutoUpdate.Enabled=n
• C.ResourceDisk.SwapSizeMB=229376
• D.ResourceDisk.EnableSwap=y

답을 확인하기

정답:
Explanation:
To create a swap file in the directory that's defined by the ResourceDisk.MountPoint parameter, you
can update the /etc/waagent.conf file by setting the following three parameters:
ResourceDisk.Format=y
ResourceDisk.EnableSwap=y
ResourceDisk.SwapSizeMB=xx
Reference: https://support.microsoft.com/en-us/help/4010058/how-to-add-a-swap-file-in-linux-azure-virtual-
machines

Question No : 14

DRAG DROP
You are validating an SAP HANA on Azure (Large Instances) deployment.
You need to ensure that sapconf is installed and the kernel parameters are set appropriately for the active profile.
How should you complete the commands? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

답을 확인하기

정답:


Explanation:
Box 1: sapconf
The configuration is split into two parts:
/etc/sysconfig/sapconf
/usr/lib/tuned//tuned.conf
Box 2: sap-hana
Reference: https://blogs.sap.com/2017/12/22/prepare-your-linux-for-your-sap-solution-with-saptune/

Question No : 15

You deploy an SAP environment on Azure.
Your company has a Service Level Agreement (SLA) of 99.99% for SAP.
You implement Azure Availability Zones that have the following components:
* Redundant SAP application servers
* ASCS/ERS instances that use a failover cluster
* Database high availability that has a primary instance and a secondary instance
You need to validate the high availability configuration of the ASCS/ERS cluster.
What should you use?

• A.SAP Web Dispatcher
• B.Azure Traffic Manager
• C.SAP Control
• D.SAP Solution Manager

답을 확인하기

정답:
Explanation:
https://documentation.suse.com/sbp/all/pdf/SAP_NW740_SLE12_SetupGuide_color_en.pdf