ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-120 All Questions

View all questions & answers for the AZ-120 exam
Go to Exam

Exam AZ-120 topic 3 question 19 discussion

Actual exam question from Microsoft's AZ-120
Question #: 19
Topic #: 3
[All AZ-120 Questions]

You plan to migrate an SAP environment to Azure.
You need to design an Azure network infrastructure to meet the following requirements:
✑ Prevent end users from accessing the database servers.
✑ Isolate the application servers from the database servers.
✑ Ensure that end users can access the SAP systems over the Internet.
✑ Minimize the costs associated to the communications between the application servers and database servers.
Which two actions should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A. In the same Azure virtual network, segregate the SAP application servers and database servers by using different subnets and network security groups.
  • B. Segregate the SAP application servers and database servers by using different Azure virtual networks.
  • C. Create a site-to-site VPN between the on-premises network and Azure.
  • D. Configure an internal Azure Standard Load Balancer for incoming connections.
  • E. Configure Azure Traffic Manager to route incoming connections.
Show Suggested Answer Hide Answer
Suggested Answer: AC 🗳️
by Sourabh1703 at June 25, 2020, 9:11 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Avanade2023
Highly Voted 4 years, 4 months ago
A is correct, because segregating application servers and database servers by using different subnets and network security groups is a minimum cost solution. C is correct, because S2S VPN is over the Internet. D is not correct, because users cannot access to SAP environment if you just use internal Azure Standard Load Balancer. unless you use external Load Balancer.
upvoted 13 times
Avanade2023
4 years, 2 months ago
I like to explain why E is not the answer as below: Azure Traffic Manager is a Inter-Region Service, it can distribute traffic optimally to services across global Azure regions. There is not any requirements to use Azure Traffic Manager in the scenario. Please refer to following articles: https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview
upvoted 8 times
...
...
Arturo_Cloud
Highly Voted 4 years, 4 months ago
An internal load balancer is not the same as an external one. In this case they talk about an internal load balancer (this type of load balancing does not have the Internet) The correct answer would be A and E, Traffic Manager routes users through the Internet based on requests by DNS.
upvoted 11 times
...
4c78df0
Most Recent 5 months, 2 weeks ago
Selected Answer: AC
correct
upvoted 1 times
...
rajsofan
8 months, 2 weeks ago
A and D are the most appropriate answers since standard load balancer can be used for external users via Natting
upvoted 1 times
...
klaas7777
3 years, 3 months ago
CORRECT
upvoted 1 times
...
Nihh
3 years, 7 months ago
I somehow think E is also right.
upvoted 1 times
...
gills
3 years, 8 months ago
Traffic Manager is out because there is no mention of dual region archiecture. Internal Load Balancers not going to be used as well for internet firewall. And internal std load balancer is for more HA setup. The only thing possible is A and C (since access IS over internet since the site to site VPN does run over internet). Also remember end users are the users in an on prem customer.
upvoted 6 times
...
Shub94
3 years, 9 months ago
Shall we say, A & E are correct answers? Any thoughts?
upvoted 1 times
...
Bhanuxyz
4 years ago
A and C are correct as per https://github.com/microsoft/SAP-on-Azure-Networking-Considerations. "site to site vpn over internet" is the key point
upvoted 6 times
...
kktg
4 years, 1 month ago
Answer : A and C are correct https://github.com/microsoft/SAP-on-Azure-Networking-Considerations
upvoted 5 times
...
Kapsy
4 years, 2 months ago
A is definitely correct. E seems to be a proper match which enables Internet connectivity.
upvoted 2 times
...
praveenkumarh1912
4 years, 3 months ago
C is incorrect because accessing via site to site vpn is not same as accessing anywhere from internet. D is incorrect because you cannot use internal standard load balancer for internet based traffic. It is only for traffic within a vnet. E is the closest solution which can route internet traffic.
upvoted 3 times
...
maybelline_ny
4 years, 3 months ago
though S2S VPN is over internet but users need to be on-premise, it's not the same as accessing SAP over the internet. Isn't E is more appropriate to route traffic to the web dispatcher?
upvoted 1 times
...
Sourabh1703
4 years, 4 months ago
A and D, S2S VPN is not needed, as users need internet access, for this a standard load balancer provides external connectivity
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago