Exam AZ-120 topic 5 question 2 discussion

Express Route cannot be used to DIRECTLY connect On-premise to HLI. Answer is A https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-network-architecture

Express Route Global Reach Microsoft introduced a new functionality called ExpressRoute Global Reach. Global Reach can be used for HANA Large Instances in two scenarios: Enable direct access from on-premises to your HANA Large Instance units deployed in different regions Enable direct communication between your HANA Large Instance units deployed in different regions Direct Access from on-premises In the Azure regions where Global Reach is offered, you can request enabling the Global Reach functionality for your ExpressRoute circuit that connects your on-premises network to the Azure virtual network that connects to your HANA Large Instance units as well.

C is correct. (ExpressRoute enables connectivity from your on-premises network to Microsoft cloud services. ExpressRoute Global Reach enables connectivity between your own on-premises networks through your existing ExpressRoute circuits, using Microsoft's global network.ExpressRoute enables connectivity from your on-premises network to Microsoft cloud services. ExpressRoute Global Reach enables connectivity between your own on-premises networks through your existing ExpressRoute circuits, using Microsoft's global network.)

That's right, the proper answer is: A. ExpressRoute Global Reach

ExpressRoute is a better option than ExpressRoute Global Reach in this case because it provides a private, dedicated connection between an on-premises network and Azure, which ensures the highest level of resiliency and security. With ExpressRoute, traffic never traverses the public internet, providing a more secure and reliable connection to SAP HANA (Large Instances). ExpressRoute Global Reach is used to connect two ExpressRoute circuits in different regions, which is not necessary in this scenario.

C: Express Route is the correct answer

Ans is A. ER without GR option can not route traffic from on-prem to HLI nets. For ER without GR option to route traffic from on-prem to HLI nets must be implemented transitive routing by means of reverse-proxy\IPTables\AZFW https://docs.microsoft.com/en-us/learn/modules/sap-hana-azure-compute-network-storage/7-workloads-azure-large-instances-routing-considerations and https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-network-architecture

A. ExpressRoute Global Reach https://docs.microsoft.com/en-us/learn/modules/sap-hana-azure-compute-network-storage/7-workloads-azure-large-instances-routing-considerations

Microsoft used Express Route to connect HLI to customer's VNet. So now going from the customer VNet to customer on-premises, it would be Express Route as well as it fulfills what is required. Express Route Global Reach when you are setting up a HSR from one HLI to another HLI sitting in a DR site. From MS docs --> "HANA Large Instances networks are isolated from each other for security. By default, instances residing in diferent regions do not communicate with each other, except for the dedicated storage replication. However, to use HSR, inter-region communications are required. ExpressRoute Global Reach, IP routing tables, or proxies can be used to enable cross-regions HSR. "

Shall we say, ExpressRoute Global Reach is final answer? Any thoughts

ExpressRoute Global Reach is the good answer, check the link https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-network-architecture#direct-access-from-on-premises

Answer : ExpressRoute correct Answer, Express Route Global Reach is not correct option, Because ExpressRoute Global Reach. can be used for HANA Large Instances in two scenarios: Enable direct access from on-premises to your HANA Large Instance units deployed in different regions Enable direct communication between your HANA Large Instance units deployed in different regions

Answer is: A

What is the solution for this? A or C

Direct Access from on-premises In the Azure regions where Global Reach is offered, you can request enabling the Global Reach functionality for your ExpressRoute circuit that connects your on-premises network to the Azure virtual network that connects to your HANA Large Instance units as well. There are some cost implications for the on-premises side of your ExpressRoute circuit. For prices, check the prices for Global Reach Add-On. There are no additional costs for you related to the circuit that connects the HANA Large Instance unit(s) to Azure.

One ER to you azure account and one internal HANA express route. These cannot be used to connect to HLI directly from on-prem. Global reach allows direct connectivity from on-premise by connecting these 2 ER circuits. Answer is A.

direct connectivity can not be established via ER. You can do only a transitive routing via VNET. Correct answer should be C.