You are implementing a highly available deployment of SAP HANA on Azure virtual machines. You need to ensure that the deployment meets the following requirements:
* Supports host auto-failover
* Minimizes cost
How should you configure the highly available components of the deployment? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

see the explanation for below image:
Explanation
Answer selected as in image below.

Comment: *

Name: *

Email: *

Verification: *

You have an on-premises SAP landscape that uses a DB2 database and contains an SAP Financial Accounting (SAP FIN) deployment. The deployment contains a file share that stores 50 TB of bitmap files. You plan to migrate the on-premises SAP landscape to SAP HANA on Azure (Large Instances) and Azure Files shares.
The solution must meet the following requirements:
* Minimize downtime.
* Minimize administrative effort.
You need to recommend a migration solution.
What should you recommend for each resource? To answer, drag the appropriate services to the correct resources. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:

Comment: *

Name: *

Email: *

Verification: *

You are planning the deployment of a three-tier SAP landscape on Azure that will use SAP HANA. The solution must meet the following requirements:
Network latency between SAP NetWeaver and HANA must be minimized.
An SAP production landscape on Azure must be supported.
Network performance must be validated regularly.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation
Graphical user interface, text Description automatically generated with medium confidence

Box 1: A proximity placement group
Azure offers proximity placement groups. Proximity placement groups can be used to force grouping of different VM types into a single Azure datacenter to optimize the network latency between these different VM types to thebest possible. In the process of deploying the first VM into such a proximity placement group, the VM gets bound to a specific datacenter.
Note: SAP applications based on the SAP NetWeaver or SAP S/4HANA architecture are sensitive to network latency between the SAP application tier and the SAP database tier. This sensitivity is the result of most of the business logic running in the application layer. Because the SAP application layer runs the business logic, it issues queries to the database tier at a high frequency, at a rate of thousands or tens of thousands per second. In most cases, the nature of these queries is simple. They can often be run on the database tier in 500 microseconds or less.
Box 2: Enable Accelerated Networking
To further reduce network latency between Azure VMs, we recommend that you choose Azure Accelerated Networking. Use it when you deploy Azure VMs for an SAP workload, especially for the SAP application layer and the SAP DBMS layer.
Box 3: Network Performance Monitor
Network Performance Monitor (NPM) - a cloud-based network monitoring solution for cloud-only, on-premises, and hybrid networking environments.
Network Performance Monitor offers three broad capabilities:
Performance Monitor: You can monitor network connectivity across cloud deployments and on-premises locations, multiple data centers, and branch offices and mission-critical multitier applications or microservices. With Performance Monitor, you can detect network issues before users complain.
Service Connectivity Monitor
ExpressRoute Monitor
Note 2: Azure Monitor for SAP Solutions is an Azure-native monitoring product for anyone running their SAP landscapes on Azure. It works with both SAP on Azure Virtual Machines and SAP on Azure Large Instances.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-proximity-placement-scenarios
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_general
https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/sap-on-azure-general-update-march-20

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Active Directory (Azure AD) tenant and an SAP Cloud Platform Identity Authentication Service tenant.
You need to ensure that users can use their Azure AD credentials to authenticate to SAP applications and services that trust the SAP Cloud Platform Identity Authentication Service tenant.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Explanation

Table Description automatically generated
Step 1: Create and configure an enterprise application in the Azure AD tentant To configure the integration of SAP Cloud Platform Identity Authentication into Azure AD, you need to add SAP Cloud Platform Identity Authentication from the gallery to your list of managed SaaS apps.
* Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
* On the left navigation pane, select the Azure Active Directory service.
* Navigate to Enterprise Applications and then select All Applications.
* To add new application, select New application.
* In the Add from the gallery section, type SAP Cloud Platform Identity Authentication in the search box.
* Select SAP Cloud Platform Identity Authentication from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
Graphical user interface, text, application Description automatically generated

Step 2: Download the single sign-on (SSO) metadata from the Azure AD tenant.
Download single sign-on metadata from Azure Active Directory.
Step 3: Create and configure a corporate identity provider.
Create corporate identity provider.
Step 4: Download the SAP Cloud Platform Identity Authentication Service tenant metadata.
Download Identity Authentication service tenant metadata.
Step 5: Upload the SAP Cloud Platform Identity Authentication Service tenant metadata to Azure AD tenant.
Upload Identity Authentication service tenant metadata to Azure Active Directory.
You have already uploaded the metadata file from Azure Active Directory to Identity Authentication service.
It's time to do it the other way round now and upload the metadata of Identity Authentication service to Azure Active Directory.
Reference:
https://developers.sap.com/tutorials/cp-ias-azure-ad.html

Comment: *

Name: *

Email: *

Verification: *

You have an SAP landscape on Azure.
You plan to deploy a new SAP application server by using an Azure Resource Manager template.
You need to ensure that all new servers are deployed with Azure Disk Encryption enabled.
How should you complete the relevant component of the template? To answer, select the appropriate options in the answer area.
NOTE:Each correct selection is worth one point.

Correct Answer:

Explanation
Graphical user interface, text, application, email Description automatically generated

Box 1: extensions
Azure Disk Encryption can be enabled via Azure PowerShell or Azure CLI. That is normally seen in remediation. In a real-world scenario you would like to see a virtual machine during its creation include disk encryption process. This is technically possible thanks to Disk Encryption VM extension.
Box 2: AzureDiskEncryption
Example:
"type": "Microsoft.Compute/virtualMachines/extensions",
"name": "[concat(parameters('vmName'),'/diskEncryption')]",
"apiVersion": "2019-03-01",
"location": "[parameters('location')]",
"dependsOn": [
"[resourceId('Microsoft.Compute/virtualMachines/', parameters('vmName'))]"
],
"properties": {
"publisher": "Microsoft.Azure.Security",
"type": "AzureDiskEncryption",
Reference:
https://azsec.azurewebsites.net/2019/12/28/azure-disk-encryption-arm-template-for-windows-vm/

Comment: *

Name: *

Email: *

Verification: *