You have an Azure Active Directory (Azure AD) tenant and an SAP Cloud Platform Identity Authentication Service tenant.
You need to ensure that users can use their Azure AD credentials to authenticate to SAP applications and services that trust the SAP Cloud Platform Identity Authentication Service tenant.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

1 - Create and configure an enterprise application in the Azure AD tentant
2 - Download the single sign-on (SSO) metadata from the Azure AD tenant.
3 - Create and configure a corporate identity provider.
4 - Download the SAP Cloud Platform Identity Authentication Service tenant metadata.
5 - Upload the SAP Cloud Platform Identity Authentication Service tenant metadata to Azure AD tenant.
Reference:
https://developers.sap.com/tutorials/cp-ias-azure-ad.html

Comment: *

Name: *

Email: *

Verification: *

You plan to migrate an SAP HANA instance to Azure.
You need to gather CPU metrics from the last 24 hours from the instance.
Solution: You query views from SAP HANA Studio.
Does this meet the goal?

• A.Yes
• B.No

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Availability Set that is configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Box 1: the same fault domain
Fault domains define the group of virtual machines that share a common power source and network switch. If a storage fault domain fails due to hardware or software failure, only the VM instance with disks on the storage fault domain fails.
Box 2: managed disks
Managed disks provide better reliability for Availability Sets by ensuring that the disks of VMs in an Availability Set are sufficiently isolated from each other to avoid single points of failure. It does this by automatically placing the disks in different storage fault domains (storage clusters) and aligning them with the VM fault domain.
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability

Comment: *

Name: *

Email: *

Verification: *

HOTSPOT
You have SAP ERP on Azure.
For SAP high availability, you plan to deploy ASCS/ERS instances across Azure Availability Zones and to use failover clusters.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Explanation:
Box 1: No
You can't use an Azure Basic Load Balancer to create failover cluster solutions based on Windows Server Failover Clustering or Linux Pacemaker. Instead, you need to use the Azure Standard Load Balancer SKU.
Box 2: Yes
Azure Availability Zones is one of the high-availability features that Azure provides. Using Availability Zones improves the overall availability of SAP workloads on Azure.
The SAP application layer is deployed across one Azure availability set. For high availability of SAP Central Services, you can deploy two VMs in a separate availability set.
Box 3: Yes
You must use Azure Managed Disks when you deploy to Azure Availability Zones.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-ha-availability-zones

Comment: *

Name: *

Email: *

Verification: *

Your on-premises network contains SAP and non-SAP applications.
You have JAVA-based SAP systems that use SPNEGO for single-sign on (SSO) authentication.
Your external portal uses multi-factor authentication (MFA) to authenticate users.
You plan to extend the on-premises authentication features to Azure and to migrate the SAP applications to Azure.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation
Box 1: Yes
Box 2: Yes
Password hash synchronization is one of the sign-in methods used to accomplish hybrid identity. Azure AD Connect synchronizes a hash, of the hash, of a users password from an on-premises Active Directory instance to a cloud-based Azure AD instance.
Password hash synchronization is an extension to the directory synchronization feature implemented by Azure AD Connect sync. You can use this feature to sign in to Azure AD services like Office 365. You sign in to the service by using the same password you use to sign in to your on-premises Active Directory instance.
Box 3: Yes
If your organization is federated with Azure AD, you can use Azure Multi-Factor Authentication to secure AD FS resources, both on-premises and in the cloud. Azure MFA enables you to eliminate passwords and provide a more secure way to authenticate.
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta

Comment: *

Name: *

Email: *

Verification: *