Exam AZ-120: Planning and Administering Microsoft Azure for SAP
Workloads
Languages: English, Japanese, Chinese (Simplified), Korean, French, German,
Spanish, Portuguese (Brazil), Russian, Arabic (Saudi Arabia), Chinese
(Traditional), Italian
Retirement date: none
This exam measures your ability to accomplish the following technical tasks:
Migrate SAP Workloads to Azure; Design and Implement an Infrastructure to
Support SAP Workloads; Design and Implement High Availability and Disaster
Recovery; and Maintain SAP Workloads on Azure.
Skills measured
The content of this exam was updated on May 28, 2021. Please download the
exam skills outline below to see what changed.
Migrate SAP Workloads to Azure (25–30%)
Design and Implement an Infrastructure to Support SAP Workloads (25–30%)
Design and Implement High Availability and Disaster Recovery (HA/DR) (20–25%)
Maintain SAP Workloads on Azure (15–20%)
The following exam guide shows the changes that were
implemented on May 28, 2021.
Audience Profile
Candidates for this exam should be architects or engineers with extensive
experience and knowledge of the SAP system landscape and industry standards that
are specific to the initial migration or integration and
the long-term operation of an SAP solution on Microsoft Azure.
Responsibilities for an architect or an engineer for Azure for SAP Workloads
include making recommendations on services and adjusting resources as
appropriate for optimal resiliency, performance, scale, provision, size, and
monitoring.
Architects or engineers for Azure for SAP Workloads partner with cloud
administrators, cloud DBAs, and clients to implement solutions.
A candidate for this exam should have extensive experience and knowledge of SAP
applications:
SAP HANA, S/4HANA, SAP NetWeaver, SAP BW/4HANA, OS servers for SAP applications
and databases, Azure portal, Azure Marketplace,
Azure Resource Manager templates (ARM templates),
operating systems, virtualization, cloud infrastructure, storage
structures, high availability design, disaster recovery design, data protection
concepts, and networking. For this exam, we strongly recommend that you have an
Azure Administrator Associate or Azure
Solutions Architect Expert certification, in addition to SAP
HANA and Linux certifications.
Skills Measured
NOTE: The bullets that follow each of the skills measured are intended to
illustrate how we are assessing that skill. This list is NOT definitive or
exhaustive.
NOTE: Most questions cover features that are General Availability (GA). The exam
may contain questions on Preview features if those features are commonly used.
Migrate SAP Workloads to Azure (25–30 10-15%)
Create an inventory of existing SAP
landscapes
network inventory
security inventory
computing inventory
operations system inventory
resiliency and availability inventory
SAP Database Inventory
SAP Landscape architecture
SAP workload performance SLA and metrics
migration considerations
Identify requirements for target infrastructure
estimate target database size
determine supportability of operating systems and databases in Azure
estimate compute, storage, and network requirements for the target database
determine target SAPS by using Early Watch Alert (EWA) reports or Quick Sizer
assess constraints imposed by subscription models and quota limits
recommend licensing and pricing across SAP tiers
recommend components, such as Azure Data Factory, Data Lake, Microsoft Power
BI, and SAP Cloud
specify a Microsoft support option for SAP on Azure
Design and implement identity and access for SAP
workloads
design a migration strategy
certified and support SAP HANA hardware directory
design criteria for Tailored Datacenter Integration (TDI) solutions
databox
HANA System Replication (HSR)
Azure Migrate SAP
backup and restore methods and solutions
infrastructure optimization for migration
design and implement access control and authorization
for SAP workloads
design and implement authentication for SAP workloads
manage access permissions to SAP systems
design and implement an SAP migration strategy
choose a migration scenario (lift-and-shift, lift-shift-migrate,
lift-shift-migrate to HANA) or green field
choose migration methods
configure storage to support migration
implement an SAP migration
Design an Azure Solutionand Implement an Infrastructure
to Support SAP Workloads (25–30 20-25%)
Design a core infrastructure solution in Azure
to support SAP workloadsDesign and implement a compute solution
for SAP workloads
network topology requirements
security requirements
virtual or bare metal
compute
operating system requirements
supported SAP products/versions
storage requirements
proximity placement group
infrastructure requirements
design Azure infrastructure services to support SAP workloads
specify a compute platform (Azure Virtual Machines versus HANA Large Instances
[HLIs])
configure Enhanced Monitoring
configure Accelerated Networking
configure VMs for Availability Sets
configure VMs for Availability Zones
deploy an OS by using the Azure Marketplace
create and deploy a custom image
automate deployment by using ARM templates
connect to an Azure HLI
configure license registration for an Azure HLI
configure and apply operating system updates to an Azure HLI
configure a snapshot
Design and implement a network topology for SAP on
Azure Virtual Machines or Azure HLI
backup and restoration requirements
SLA/High Availability
data protection (LRS/GRS, Availability Zones)
compliance
monitoring
licensing
application interfaces
dependencies
design and configure proximity placement groups
define SAP zones and subnets
design for latency considerations
design for network security
design and implement networking for Azure HLI
plan for the use of Azure Express Route (FastPath versus direct)
optimize networking to minimize latency between/within SAP tiers
configure routing for Azure HLI
design and configure load balancing for a reverse proxy
Design and implement a storage solution for SAP on Azure Virtual Machine or
Azure HLI
specify an appropriate disk option (Managed, Premium, Ultra disk, SOFS with
Storage
Spaces Direct [SSD], Azure NetApp Files, Azure Shared Managed Disks)
specify when to use disk striping
design for security considerations for storage
design for data protection considerations
design and implement caching for disks
configure Write Accelerator
configure encryption
Design and Implement High Availability and Disaster Recovery (HA/DR) (20–25%)
Design a resilient Azure solution to support SAP workloads
Design a high availability and disaster recovery solution for SAP on Azure
Virtual Machine or Azure HLI
HA/DR models supported in HANA (N+N, N+M)
application servers (NetWeaver and XS Advanced)
SAP Central services
availability sets
availability zones
Disaster Recovery (DR) with paired regions
database HA
design an Azure Site Recovery strategy for SAP workloads
design HANA system replication/SQL Server Always On/Data Guard
design an availability set and availability zone strategy for SAP workloads
design load balancing for SAP HA or database HA
design for regional considerations
design for service-level agreement (SLA) considerations
Implement high availability and disaster recovery
configure STONITH
configure database-level replication, including HANA System Replication, SQL
Server Always On, and Oracle Data Guard
configure fencing/Stonith Block Device (SBD)
configure Azure Site Recovery
configure storage-level replication for SAP Central Services
configure load balancing for SAP HA or database HA
configure clustering
configure and validate backups
perform backup and restore
test disaster recovery
Maintain SAP Workloads on AzureBuild and Deploy Azure for SAP
Workloads (15–20%)
Automate deployment of Virtual Machines (VMs)
azure Resource Manager (ARM) templates
automated configuration of VM
scripting with automation tools, including script development, script
modification, and deployment dependencies
Implement and manage virtual networking
IDS/IPS for Azure
routing fundamentals
subnetting strategy
isolation and segmentation for SAP landscape
Manage access and authentication on Azure
custom domains
Azure AD Identity Protection
Azure AD join
conditional access policies
role-based access control (RBAC)
service principal
just in time access
Implement and manage identities
Azure AD Connect
AD Federation and single sign-on
LDAP/Kerberos/SSH
Linux VMs Active Directory domain membership mechanism
SAP HANA Cloud Platform Identity Authentication (integration with Azure AD)
Optimize performance and costs
test performance and health of SAP workloads on Azure by using
ABAPmeter
storage structure
SAP workloads on Azure support pre-requisites
scheduled maintenance for planned outages
recovery plan for unplanned outages
SAP application and infrastructure housekeeping (i.e. snapshots on OS volumes)
bandwidth adjustment for ExpressRoute
IPtables ExpressRoute Fast Path and ExpressRoute GlobalReach for HANA Large
Instances (HLI)
optimize performance and cost of SAP HANA virtual hardware and Azure HLIs
optimize performance and cost of SAP HANA Hardware and Cloud Measurement Tools
(HCMT)
measure/reduce network latency between SAP servers and clients
optimize network performance and bandwidth costs
optimize performance and cost of SAP application servers
optimize performance by using the SAPS benchmark tool
configure snoozing
resize VMs
optimize storage costs
optimize an SAP workload on Azure by using Azure Advisor
Monitor SAP workloads on
Azure
Azure Extension for SAP
Azure Monitor
log Analytics workspaces & metrics
monitor SAP workloads by using Azure Monitor for SAP Solutions
monitor SAP workloads by using Log Analytics
monitor networking
Build & Deploy HA/DR infrastructure for SAP products
ASCS/SCS deployments on Linux & Windows (SOFS with S2D, Azure NetApp
Files, 3rd
party products that emulate shared storage)
HA/DR scenarios for SAP HANA
HA/DR scenarios for AnyDB
HA for non-NetWeaver Products like SAP Business One, SAP Business Object BI
where to use load balances & troubleshooting connectivity
Validate Azure Infrastructure for
SAP Workloads (10-15%)
Perform infrastructure validation check
Apache JMeter, Spirent Avalanche, Microfocus LoadRunner
test implementation for SAP workloads
verify network performance and throughput
verify storage
SAP HANA Hardware and Cloud Measurement Tools (HCMT) (HANA)
flexible I/O tester (FIO) and DD
Perform operational readiness check
backup and restore
High Availability checks
failover test
DR test
print test
Operationalize Azure SAP Architecture (10-15%)
Optimize performance
test performance and health of SAP workloads on Azure by using
ABAPmeter
storage structure
SAP workloads on Azure support pre-requisites
scheduled maintenance for planned outages
recovery plan for unplanned outages
SAP application and infrastructure housekeeping (i.e. snapshots on OS volumes)
bandwidth adjustment for ExpressRoute
IPtables ExpressRoute Fast Path and ExpressRoute GlobalReach for HANA Large
Instances (HLI)
Migrate SAP workloads to Azure
migration strategy
Azure Migrate
private and public IP addresses, network routes, network interface, subnets,
and virtual network
storage configuration
source and target environments preparation
backup and restore of data
SQL Server Migration Assistant (SSMA) (migration from DB2, Oracle, SAP ASE, to
SQL Server in an Azure VM)
QUESTION 1
You are evaluating which migration method Litware can implement based on the
current environment and the business goals.
Which migration method will cause the least amount of downtime?
A. Migrate SAP ECC to SAP Business Suite in HANA, and then migrate SAP to Azure.
B. Use Near-Zero Downtime (NZDT) to migrate to SAP HANA and Azure during the
same maintenance window.
C. Use the Database Migration Option (DMO) to migrate to SAP HANA and Azure
during the same maintenance window.
D. Migrate SAP to Azure, and then migrate SAP ECC to SAP Business Suite on HANA.
Correct Answer: C
QUESTION 2
You have an SAP environment on Azure that uses multiple subscriptions.
To meet GDPR requirements, you need to ensure that virtual machines are deployed
only to the West Europe and North Europe Azure regions.
Which Azure components should you use?
A. Azure resource locks and the Compliance admin center
B. Azure resource groups and role-based access control (RBAC)
C. Azure management groups and Azure Policy
D. Azure Security Center and Azure Active Directory (Azure AD) groups
Correct Answer: C
QUESTION 3
You deploy an SAP environment on Azure.
Your company has a Service Level Agreement (SLA) of 99.99% for SAP.
You implement Azure Availability Zones that have the following components:
Redundant SAP application servers
ASCS/ERS instances that use a failover cluster
Database high availability that has a primary instance and a secondary instance
You need to validate the high availability configuration of the ASCS/ERS
cluster.
What should you use?
A. SAP Web Dispatcher
B. Azure Traffic Manager
C. SAPControl
D. SAP Solution Manager
Correct Answer: B
QUESTION 4
You plan to deploy an SAP environment on Azure.
You plan to store all SAP connection strings securely in Azure Key Vault without
storing credentials on the
Azure virtual machines that host SAP.
What should you configure to allow the virtual machines to access the key vault?
A. Azure Active Directory (Azure AD) Privilege Identity Manager (PIM)
B. role-based access control (RBAC)
C. a Managed Service Identity (MSI)
D. the Custom Script Extension
Correct Answer: C
QUESTION 5
You plan to deploy SAP application servers that run Windows Server 2016.
You need to use PowerShell Desired State Configuration (DSC) to configure the
SAP application server once
the servers are deployed.
Which Azure virtual machine extension should you install on the servers?
A. the Azure DSC VM Extension
B. the Azure virtual machine extension
C. the Azure Chef extension
D. the Azure Enhanced Monitoring Extension for SAP
Correct Answer: A
Actualkey Microsoft AZ-120 Exam pdf, Certkingdom Microsoft AZ-120 PDF
Best Microsoft AZ-120 Certification, Microsoft AZ-120 Training at certkingdom.com
