Microsoft
AZ-120 · Question #29
AZ-120 Question #29: Real Exam Question with Answer & Explanation
The correct answer is C. Use an SAP Web Dispatcher to route all incoming connections. 1. A public internet user can reach the SAP Web-Dispatcher over port 443 2. The SAP Web-Dispatcher can reach the SAP Application server over port 443 3. The App Subnet accepts traffic on port 443 from 10.0.0.0/24 4. The SAP Application server sends traffic on port 30015 to the SA
Question
You plan to migrate an SAP environment to Azure. You need to create a design to facilitate end-user access to SAP applications over the Internet, while restricting user access to the virtual machines of the SAP application servers. What should you include in the design?
Exhibit
Options
- AConfigure a public IP address for each SAP application server
- BDeploy an internal Azure Standard Load Balancer for incoming connections
- CUse an SAP Web Dispatcher to route all incoming connections
- DConfigure point-to-site VPN connections for each user
Explanation
- A public internet user can reach the SAP Web-Dispatcher over port 443 2. The SAP Web-Dispatcher can reach the SAP Application server over port 443 3. The App Subnet accepts traffic on port 443 from 10.0.0.0/24 4. The SAP Application server sends traffic on port 30015 to the SAP DB server 5. The DB subnet accepts traffic on port 30015 from 10.0.1.0/24. 6. Public Internet Access is blocked on both App Subnet and DB Subnet. https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/
Community Discussion
No community discussion yet for this question.