AZ-120 Planning and Administering Microsoft Azure for SAP Workloads Exam Update Version

Exam AZ-120: Planning and Administering Microsoft Azure for SAP Workloads
Languages: English, Japanese, Chinese (Simplified), Korean, French, German, Spanish, Portuguese (Brazil), Russian, Arabic (Saudi Arabia), Chinese (Traditional), Italian
Retirement date: none

This exam measures your ability to accomplish the following technical tasks: Migrate SAP Workloads to Azure; Design and Implement an Infrastructure to Support SAP Workloads; Design and Implement High Availability and Disaster Recovery; and Maintain SAP Workloads on Azure.

Skills measured
The content of this exam was updated on May 28, 2021. Please download the exam skills outline below to see what changed.
Migrate SAP Workloads to Azure (25–30%)
Design and Implement an Infrastructure to Support SAP Workloads (25–30%)
Design and Implement High Availability and Disaster Recovery (HA/DR) (20–25%)
Maintain SAP Workloads on Azure (15–20%)

The following exam guide shows the changes that were implemented on May 28, 2021.

Audience Profile
Candidates for this exam should be architects or engineers with extensive experience and knowledge of the SAP system landscape and industry standards that are specific to the initial migration or integration and the long-term operation of an SAP solution on Microsoft Azure.

Responsibilities for an architect or an engineer for Azure for SAP Workloads include making recommendations on services and adjusting resources as appropriate for optimal resiliency, performance, scale, provision, size, and monitoring.
Architects or engineers for Azure for SAP Workloads partner with cloud administrators, cloud DBAs, and clients to implement solutions.

A candidate for this exam should have extensive experience and knowledge of SAP applications:
SAP HANA, S/4HANA, SAP NetWeaver, SAP BW/4HANA, OS servers for SAP applications and databases, Azure portal, Azure Marketplace, Azure Resource Manager templates (ARM templates), operating systems, virtualization, cloud infrastructure, storage structures, high availability design, disaster recovery design, data protection concepts, and networking. For this exam, we strongly recommend that you have an Azure Administrator Associate or Azure
Solutions Architect Expert certification, in addition to SAP HANA and Linux certifications.

Skills Measured
NOTE: The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. This list is NOT definitive or exhaustive.

NOTE: Most questions cover features that are General Availability (GA). The exam may contain questions on Preview features if those features are commonly used.

Migrate SAP Workloads to Azure (25–30 10-15%)
Create an inventory of existing SAP landscapes
 network inventory
 security inventory
 computing inventory
 operations system inventory
 resiliency and availability inventory
 SAP Database Inventory
 SAP Landscape architecture
 SAP workload performance SLA and metrics
 migration considerations

Identify requirements for target infrastructure
 estimate target database size
 determine supportability of operating systems and databases in Azure
 estimate compute, storage, and network requirements for the target database
 determine target SAPS by using Early Watch Alert (EWA) reports or Quick Sizer
 assess constraints imposed by subscription models and quota limits
 recommend licensing and pricing across SAP tiers
 recommend components, such as Azure Data Factory, Data Lake, Microsoft Power BI, and SAP Cloud
 specify a Microsoft support option for SAP on Azure

Design and implement identity and access for SAP workloads
 design a migration strategy
 certified and support SAP HANA hardware directory
 design criteria for Tailored Datacenter Integration (TDI) solutions
 databox
 HANA System Replication (HSR)
 Azure Migrate SAP
 backup and restore methods and solutions
 infrastructure optimization for migration
 design and implement access control and authorization for SAP workloads
 design and implement authentication for SAP workloads
 manage access permissions to SAP systems
 design and implement an SAP migration strategy
 choose a migration scenario (lift-and-shift, lift-shift-migrate, lift-shift-migrate to HANA) or green field
 choose migration methods
 configure storage to support migration
 implement an SAP migration

Design an Azure Solutionand Implement an Infrastructure to Support SAP Workloads (25–30 20-25%)

Design a core infrastructure solution in Azure to support SAP workloadsDesign and implement a compute solution for SAP workloads
 network topology requirements
 security requirements
 virtual or bare metal
 compute
 operating system requirements
 supported SAP products/versions
 storage requirements
 proximity placement group
 infrastructure requirements
 design Azure infrastructure services to support SAP workloads
 specify a compute platform (Azure Virtual Machines versus HANA Large Instances [HLIs])
 configure Enhanced Monitoring
 configure Accelerated Networking
 configure VMs for Availability Sets
 configure VMs for Availability Zones
 deploy an OS by using the Azure Marketplace
 create and deploy a custom image
 automate deployment by using ARM templates
 connect to an Azure HLI
 configure license registration for an Azure HLI
 configure and apply operating system updates to an Azure HLI
 configure a snapshot

Design and implement a network topology for SAP on Azure Virtual Machines or Azure HLI
 backup and restoration requirements
 SLA/High Availability
 data protection (LRS/GRS, Availability Zones)
 compliance
 monitoring
 licensing
 application interfaces
 dependencies
 design and configure proximity placement groups
 define SAP zones and subnets
 design for latency considerations
 design for network security
 design and implement networking for Azure HLI
 plan for the use of Azure Express Route (FastPath versus direct)
 optimize networking to minimize latency between/within SAP tiers
 configure routing for Azure HLI
 design and configure load balancing for a reverse proxy

Design and implement a storage solution for SAP on Azure Virtual Machine or Azure HLI
 specify an appropriate disk option (Managed, Premium, Ultra disk, SOFS with Storage

Spaces Direct [SSD], Azure NetApp Files, Azure Shared Managed Disks)
 specify when to use disk striping
 design for security considerations for storage
 design for data protection considerations
 design and implement caching for disks
 configure Write Accelerator
 configure encryption

Design and Implement High Availability and Disaster Recovery (HA/DR) (20–25%)
Design a resilient Azure solution to support SAP workloads Design a high availability and disaster recovery solution for SAP on Azure Virtual Machine or Azure HLI
 HA/DR models supported in HANA (N+N, N+M)
 application servers (NetWeaver and XS Advanced)
 SAP Central services
 availability sets
 availability zones
 Disaster Recovery (DR) with paired regions
 database HA
 design an Azure Site Recovery strategy for SAP workloads
 design HANA system replication/SQL Server Always On/Data Guard
 design an availability set and availability zone strategy for SAP workloads
 design load balancing for SAP HA or database HA
 design for regional considerations
 design for service-level agreement (SLA) considerations

Implement high availability and disaster recovery
 configure STONITH
 configure database-level replication, including HANA System Replication, SQL Server Always On, and Oracle Data Guard
 configure fencing/Stonith Block Device (SBD)
 configure Azure Site Recovery
 configure storage-level replication for SAP Central Services
 configure load balancing for SAP HA or database HA
 configure clustering
 configure and validate backups
 perform backup and restore
 test disaster recovery

Maintain SAP Workloads on AzureBuild and Deploy Azure for SAP Workloads (15–20%)
Automate deployment of Virtual Machines (VMs)
 azure Resource Manager (ARM) templates
 automated configuration of VM
 scripting with automation tools, including script development, script modification, and deployment dependencies

Implement and manage virtual networking
 IDS/IPS for Azure
 routing fundamentals
 subnetting strategy
 isolation and segmentation for SAP landscape

Manage access and authentication on Azure
 custom domains
 Azure AD Identity Protection
 Azure AD join
 conditional access policies
 role-based access control (RBAC)
 service principal
 just in time access

Implement and manage identities
 Azure AD Connect
 AD Federation and single sign-on
 LDAP/Kerberos/SSH
 Linux VMs Active Directory domain membership mechanism
 SAP HANA Cloud Platform Identity Authentication (integration with Azure AD)

Optimize performance and costs
 test performance and health of SAP workloads on Azure by using ABAPmeter
 storage structure
 SAP workloads on Azure support pre-requisites
 scheduled maintenance for planned outages
 recovery plan for unplanned outages
 SAP application and infrastructure housekeeping (i.e. snapshots on OS volumes)
 bandwidth adjustment for ExpressRoute
 IPtables ExpressRoute Fast Path and ExpressRoute GlobalReach for HANA Large Instances (HLI)
 optimize performance and cost of SAP HANA virtual hardware and Azure HLIs
 optimize performance and cost of SAP HANA Hardware and Cloud Measurement Tools (HCMT)
 measure/reduce network latency between SAP servers and clients
 optimize network performance and bandwidth costs
 optimize performance and cost of SAP application servers
 optimize performance by using the SAPS benchmark tool
 configure snoozing
 resize VMs
 optimize storage costs
 optimize an SAP workload on Azure by using Azure Advisor

Monitor SAP workloads on Azure
 Azure Extension for SAP
 Azure Monitor
 log Analytics workspaces & metrics
 monitor SAP workloads by using Azure Monitor for SAP Solutions
 monitor SAP workloads by using Log Analytics
 monitor networking

Build & Deploy HA/DR infrastructure for SAP products
 ASCS/SCS deployments on Linux & Windows (SOFS with S2D, Azure NetApp Files, 3rd
party products that emulate shared storage)
 HA/DR scenarios for SAP HANA
 HA/DR scenarios for AnyDB
 HA for non-NetWeaver Products like SAP Business One, SAP Business Object BI
 where to use load balances & troubleshooting connectivity

Validate Azure Infrastructure for SAP Workloads (10-15%)
Perform infrastructure validation check
 Apache JMeter, Spirent Avalanche, Microfocus LoadRunner
 test implementation for SAP workloads
 verify network performance and throughput
 verify storage
 SAP HANA Hardware and Cloud Measurement Tools (HCMT) (HANA)
 flexible I/O tester (FIO) and DD

Perform operational readiness check
 backup and restore
 High Availability checks
 failover test
 DR test
 print test

Operationalize Azure SAP Architecture (10-15%)
Optimize performance
 test performance and health of SAP workloads on Azure by using ABAPmeter
 storage structure
 SAP workloads on Azure support pre-requisites
 scheduled maintenance for planned outages
 recovery plan for unplanned outages
 SAP application and infrastructure housekeeping (i.e. snapshots on OS volumes)
 bandwidth adjustment for ExpressRoute
 IPtables ExpressRoute Fast Path and ExpressRoute GlobalReach for HANA Large Instances (HLI)

Migrate SAP workloads to Azure
 migration strategy
 Azure Migrate
 private and public IP addresses, network routes, network interface, subnets, and virtual network
 storage configuration
 source and target environments preparation
 backup and restore of data
 SQL Server Migration Assistant (SSMA) (migration from DB2, Oracle, SAP ASE, to SQL Server in an Azure VM)

QUESTION 1
You are evaluating which migration method Litware can implement based on the current environment and the business goals.
Which migration method will cause the least amount of downtime?

A. Migrate SAP ECC to SAP Business Suite in HANA, and then migrate SAP to Azure.
B. Use Near-Zero Downtime (NZDT) to migrate to SAP HANA and Azure during the same maintenance window.
C. Use the Database Migration Option (DMO) to migrate to SAP HANA and Azure during the same maintenance window.
D. Migrate SAP to Azure, and then migrate SAP ECC to SAP Business Suite on HANA.

Correct Answer: C

QUESTION 2
You have an SAP environment on Azure that uses multiple subscriptions.
To meet GDPR requirements, you need to ensure that virtual machines are deployed only to the West Europe and North Europe Azure regions.
Which Azure components should you use?

A. Azure resource locks and the Compliance admin center
B. Azure resource groups and role-based access control (RBAC)
C. Azure management groups and Azure Policy
D. Azure Security Center and Azure Active Directory (Azure AD) groups
Correct Answer: C

QUESTION 3
You deploy an SAP environment on Azure.
Your company has a Service Level Agreement (SLA) of 99.99% for SAP.
You implement Azure Availability Zones that have the following components:
Redundant SAP application servers
ASCS/ERS instances that use a failover cluster
Database high availability that has a primary instance and a secondary instance
You need to validate the high availability configuration of the ASCS/ERS cluster.
What should you use?

A. SAP Web Dispatcher
B. Azure Traffic Manager
C. SAPControl
D. SAP Solution Manager

Correct Answer: B


QUESTION 4
You plan to deploy an SAP environment on Azure.
You plan to store all SAP connection strings securely in Azure Key Vault without storing credentials on the
Azure virtual machines that host SAP.
What should you configure to allow the virtual machines to access the key vault?

A. Azure Active Directory (Azure AD) Privilege Identity Manager (PIM)
B. role-based access control (RBAC)
C. a Managed Service Identity (MSI)
D. the Custom Script Extension

Correct Answer: C

QUESTION 5
You plan to deploy SAP application servers that run Windows Server 2016.
You need to use PowerShell Desired State Configuration (DSC) to configure the SAP application server once
the servers are deployed.
Which Azure virtual machine extension should you install on the servers?

A. the Azure DSC VM Extension
B. the Azure virtual machine extension
C. the Azure Chef extension
D. the Azure Enhanced Monitoring Extension for SAP

Correct Answer: A

Actualkey Microsoft AZ-120 Exam pdf, Certkingdom Microsoft AZ-120 PDF

Best Microsoft AZ-120 Certification, Microsoft AZ-120 Training at certkingdom.com