AZ-120: Planning and Administering Azure for SAP WorkloadsDemo

By Microsoft · Question Mode

QuestionQ261

Design and implement an infrastructure to support SAP workloads on Azure

You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant named contoso.com.

You have an on-premises deployment of SAP Landscape Management (LaMa).

You need to ensure that the on-premises LaMa deployment is authorized to manage the SAP resources provisioned in Sub1.

What should you create first?

  • A a user-assigned managed identity in Sub1
  • B a system-assigned managed identity in Sub1
  • C an app registration in contoso.com
  • D an external identity provider in contoso.com
Explanation

The SAP LaMa connector for Azure manages Azure resources through the Azure Resource Manager API. For an on-premises LaMa deployment, it uses a service principal for authentication; creating that principal begins by creating an app registration in the Microsoft Entra tenant. Azure RBAC permissions can subsequently be assigned to that service principal for Sub1.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!