AZ-120 · Question #74
You plan to migrate an SAP environment to Azure. You need to design an Azure network infrastructure to meet the following requirements: - Prevent end users from accessing the database servers…
The correct answer is A. In the same Azure virtual network, segregate the SAP application servers and database servers E. Configure Azure Traffic Manager to route incoming connections. Option A - Using different subnets for application and database servers within the same virtual network allows you to isolate traffic and apply Network Security Groups (NSGs) to restrict access. NSGs can block end users from directly accessing database subnets while allowing…
Question
You plan to migrate an SAP environment to Azure. You need to design an Azure network infrastructure to meet the following requirements:
- Prevent end users from accessing the database servers.
- Isolate the application servers from the database servers.
- Ensure that end users can access the SAP systems over the Internet.
- Minimize the costs associated to the communications between the
application servers and database servers. Which two actions should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Options
- AIn the same Azure virtual network, segregate the SAP application servers and database servers
- BSegregate the SAP application servers and database servers by using Azure virtual networks.
- CCreate a site-to-site VPN between the on-premises network and Azure.
- DConfigure an internal Azure Standard Load Balancer for incoming connections.
- EConfigure Azure Traffic Manager to route incoming connections.
How the community answered
(54 responses)- A57% (31)
- B24% (13)
- C6% (3)
- D13% (7)
Explanation
Option A - Using different subnets for application and database servers within the same virtual network allows you to isolate traffic and apply Network Security Groups (NSGs) to restrict access. NSGs can block end users from directly accessing database subnets while allowing application servers to communicate with the database. Keeping both tiers in the same virtual network avoids cross-VNet data transfer costs, minimizing communication costs between application and database servers. Option E - Azure Traffic Manager provides DNS-based global load balancing for incoming user traffic over the Internet, ensuring users can access SAP systems reliably. It supports routing users to the appropriate SAP application servers, meeting the requirement for Internet access.
Topics
Community Discussion
No community discussion yet for this question.