nerdexam
Microsoft

AZ-120 · Question #7

AZ-120 Question #7: Real Exam Question with Answer & Explanation

The correct answer is A. No change is needed. The SAP Cloud Platform Identity Authentication and Active Directory Federation Services enable you to implement SSO across applications or services that are protected by Azure AD (as an IdP) with SAP applications and services that are protected by SAP Cloud Platform Identity Scen

Question

Case Study 2 - Contoso, Ltd Overview Contoso, Ltd. is a manufacturing company that has 15,000 employees. The company uses SAP for sales and manufacturing. Contoso has sales offices in New York and London and manufacturing facilities in Boston and Seattle. Existing Environment Active Directory The network contains an on-premises Active Directory domain named ad.contoso.com. User email addresses use a domain name of contoso.com. SAP Environment The current SAP environment contains the following components: - SAP Solution Manager - SAP ERP Central Component (SAP ECC) - SAP Supply Chain Management (SAP SCM) - SAP application servers that run Windows Server 2008 R2 - SAP HANA database servers that run SUSE Linux Enterprise Server 12 (SLES 12) Problem Statements Contoso identifies the following issues in its current environment: - The SAP HANA environment lacks adequate resources. - The Windows servers are nearing the end of support. - The datacenters are at maximum capacity. Requirements Planned Changes Contoso identifies the following planned changes: - Deploy Azure Virtual WAN. - Migrate the application servers to Windows Server 2016. - Deploy ExpressRoute connections to all of the offices and manufacturing facilities. - Deploy SAP landscapes to Azure for development, quality assurance, and production. All resources for the production landscape will be in a resource group named SAPProduction. Business goals Contoso identifies the following business goals: - Minimize costs whenever possible. - Migrate SAP to Azure without causing downtime. - Ensure that all SAP deployments to Azure are supported by SAP. - Ensure that all the production databases can withstand the failure of an Azure region. - Ensure that all the production application servers can restore daily backups from the last 21 days. Technical Requirements Contoso identifies the following technical requirements: - Inspect all web queries. - Deploy an SAP HANA cluster to two datacenters. - Minimize the bandwidth used for database synchronization. - Use Active Directory accounts to administer Azure resources. - Ensure that each production application server has four 1-TB data disks. - Ensure that an application server can be restored from a backup created during the last five days within 15 minutes. - Implement an approval process to ensure that an SAP administrator is notified before another administrator attempts to make changes to the Azure virtual machines that host SAP. It is estimated that during the migration, the bandwidth required between Azure and the New York office will be 1 Gbps. After the migration, a traffic burst of up to 3 Gbps will occur. Proposed Backup Policy An Azure administrator proposes the backup policy shown in the following exhibit. Azure Resource Manager Template An Azure administrator provides you with the Azure Resource Manager template that will be used to provision the production application servers. This question requires that you evaluate the underlined text to determine if it is correct. You are planning for the administration of resources in Azure. To meet the technical requirements, you must first implement Active Directory Federation Services (AD FS). Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

Exhibits

AZ-120 question #7 exhibit 1
AZ-120 question #7 exhibit 2
AZ-120 question #7 exhibit 3

Options

  • ANo change is needed
  • BAzure AD Connect
  • CAzure AD join
  • DEnterprise State Roaming

Explanation

The SAP Cloud Platform Identity Authentication and Active Directory Federation Services enable you to implement SSO across applications or services that are protected by Azure AD (as an IdP) with SAP applications and services that are protected by SAP Cloud Platform Identity Scenario: Use Active Directory accounts to administer Azure resources. Incorrect Answers: Not D: With Windows 10, Azure Active Directory (Azure AD) users gain the ability to securely synchronize their user settings and application settings data to the cloud. Enterprise State Roaming provides users with a unified experience across their Windows devices and reduces the time needed for configuring a new device. Enterprise State Roaming operates similar to the standard consumer settings sync that was first introduced in Windows 8. https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/sap-hana-cloud-platform- identity-authentication-tutorial

Community Discussion

No community discussion yet for this question.

Full AZ-120 Practice