Exam AZ-120 topic 3 question 24 discussion

Actual exam question from Microsoft's AZ-120

Question #: 24
Topic #: 3

You plan to migrate an SAP environment to Azure.
You need to create a design to facilitate end-user access to SAP applications over the Internet, while restricting user access to the virtual machines of the SAP application servers.
What should you include in the design?

A. Configure a public IP address for each SAP application server
B. Deploy an internal Azure Standard Load Balancer for incoming connections
C. Use an SAP Web Dispatcher to route all incoming connections
D. Configure point-to-site VPN connections for each user

Show Suggested Answer

Suggested Answer: C 🗳️
1. A public internet user can reach the SAP Web-Dispatcher over port 443
2. The SAP Web-Dispatcher can reach the SAP Application server over port 443
3. The App Subnet accepts traffic on port 443 from 10.0.0.0/24
4. The SAP Application server sends traffic on port 30015 to the SAP DB server
5. The DB subnet accepts traffic on port 30015 from 10.0.1.0/24.
6. Public Internet Access is blocked on both App Subnet and DB Subnet.

References:
https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/

by Bhagirathi at Dec. 31, 2020, 6:14 a.m.

Comments

Submit Cancel

4c78df0

8 months, 3 weeks ago

Selected Answer: C

correct

upvoted 1 times

...

d0bermannn

3 years, 3 months ago

correct

upvoted 2 times

...

Rodrigo29

3 years, 7 months ago

D. SAP Web Dispatcher is only for HTTP/HTTPS

upvoted 2 times

macalex

3 years, 6 months ago

Yes Web Dispatcher is only for HTTP / HTTPS --> Which is exactly what is required: "design to facilitate end-user access to SAP applications over the Internet, while restricting user access to the virtual machines of the SAP application servers." --> Answer C

upvoted 4 times

...

legends

3 years, 8 months ago

I'll go with SAP Web dispatcher, as the book I am reading says that "For Java-based systems or web services, load balancing can be done either by using SAP Web Dispatcher or a hardware load balancer such as F5 or A10 (acting as reverse proxy)". If web services comes under routing all incoming connections then "C" would be best option.

upvoted 2 times

...