You plan to migrate an SAP environment to Azure.
You need to create a design to facilitate end-user access to SAP applications over the Internet, while restricting user access to the virtual machines of the SAP application servers.
What should you include in the design?

• A.Configure a public IP address for each SAP application server
• B.Deploy an internal Azure Standard Load Balancer for incoming connections
• C.Use an SAP Web Dispatcher to route all incoming connections
• D.Configure point-to-site VPN connections for each user

Correct Answer: C

Explanation
* A public internet user can reach the SAP Web-Dispatcher over port 443
* The SAP Web-Dispatcher can reach the SAP Application server over port 443
* The App Subnet accepts traffic on port 443 from 10.0.0.0/24
* The SAP Application server sends traffic on port 30015 to the SAP DB server
* The DB subnet accepts traffic on port 30015 from 10.0.1.0/24.
* Public Internet Access is blocked on both App Subnet and DB Subnet.

References:
https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/

Comment: *

Name: *

Email: *

Verification: *

You have an SAP environment on Azure.
You use Azure Site Recovery to protect an SAP production landscape.
You need to validate whether you can recover the landscape in the event of a failure. The solution must minimize the impact on the landscape.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Explanation:
Step 1: Create a virtual network...
We recommended that for test failover, you choose a network that's isolated from the production recovery site network specific in the Compute and Network settings for each VM. By default, when you create an Azure virtual network, it is isolated from other networks. The test network should mimic your production network:
The test network should have same number of subnets as your production network. Subnets should have the same names.
The test network should use the same IP address range.
Step 2: Add a public IP address...
Because Site Recovery does not replicate the cloud witness, we recommend that you deploy the cloud witness in the disaster recovery region.
Step 3: Shut down production virtual machines
Make sure that the primary VM is shut down when you run the test failover. Otherwise there will be two VMs with the same identity, running in the same network at the same time. This can lead to unexpected consequences.
Step 4: Select Test failover from the Recovery Plans blade
References:
https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-test-failover-to-azure

Comment: *

Name: *

Email: *

Verification: *

Your on-premises network contains an Active Directory domain.
You are deploying a new SAP environment on Azure.
You need to configure SAP Single Sign-On to ensure that users can authenticate lo SAP GUI and SAP WebGUI.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

For each of the following statements, select Yes if the stamen is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

You have an on-premises deployment of SAP HANA.
You plan to migrate the deployment to Azure.
You need to identify the following from the last six months:
The number of active users
The database performance
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://assets.cdn.sap.com/sapcom/docs/2019/09/0e8d0628-687d-0010-87a3-c30de2ffd8ff.pdf

Comment: *

Name: *

Email: *

Verification: *