AZ-120: Planning and Administering Azure for SAP WorkloadsDemo

By Microsoft · Question Mode

QuestionQ60

Design and implement an infrastructure to support SAP workloads on Azure

You have an existing SAP landscape in Azure. All SAP virtual machines reside on the same virtual network. The SAP application servers, SAP management servers, and SAP database servers are each located on their own subnet.

You need to ensure that only the application and management servers can access the subnet to which the database servers are connected.

What should you configure?

  • A Azure AD service principals
  • B Azure Key Vault secrets
  • C network security groups (NSGs)
  • D Azure Application Gateway and firewall rules
Explanation

Network security groups (NSGs) filter inbound and outbound traffic for resources in an Azure virtual network and can be associated with a subnet. An NSG applied to the database subnet can allow traffic from the application and management server subnets while denying traffic from other sources.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!