This is the free Microsoft AZ-120 practice question bank —
150 of 299 total questions, each with a full explanation, free to
read with no signup required. Updated 2026-10-03.
Every answer is verified against official Microsoft documentation —
see our methodology.
Question 1
HOTSPOT
You have a Microsoft Entra tenant named contoso.com.
You have an SAP landscape in Azure.
You need to use an SAP HANA application to enable single sign-on (SSO) to contoso.com.
Which authentication protocol should you configure for the application, and what should you upload to the HANA XSA Web Console to enable SSO? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Protocol: SAML
Upload: The Federation Metadata XML
Explanation: SAP HANA XSA uses SAML for Microsoft Entra SSO. The federation metadata XML provides the Entra identity provider configuration needed to establish trust.
Question 2
You have an Azure subscription that contains a virtual network named VNet1.
You have an SAP RISE managed workload.
You need to configure connectivity from VNet1 to the SAP Business Technology Platform (BTP).
What should you include in the solution?
A. SAP Private Link service for Azure
B. Azure Application Gateway
C. an on-premises data gateway
D. SAP Web Dispatcher
Show Answer
Correct Answer: A
Explanation: Include SAP Private Link service for Azure. It enables private connectivity from VNet1 to SAP Business Technology Platform (BTP) without routing traffic over the public internet.
Question 3
You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant named contoso.com.
You have an on-premises deployment of SAP Landscape Management (LaMa).
You need to ensure that the on-premises LaMa deployment is authorized to manage the SAP resources provisioned to Sub1.
What should you create first?
A. a user-assigned managed identity in Sub1
B. a system-assigned managed identity in Sub1
C. an app registration in contoso.com
D. an external identity provider in contoso.com
Show Answer
Correct Answer: C
Explanation: Create an app registration in the Microsoft Entra tenant first. The on-premises SAP Landscape Management deployment can use the associated service principal to authenticate to Azure and be granted access to manage resources in Sub1. Managed identities are intended for workloads running in Azure.
Question 4
You have an Azure subscription that contains an Azure Synapse Analytics workspace named Synapse1.
You have an SAP RISE managed workload.
You need to implement a connector to copy data into an SAP HANA database by using a data pipeline created in Synapse1.
Which connector should you use?
A. SAP CDC
B. SAP Cloud for Customer
C. SAP ECC
D. ODBC
Show Answer
Correct Answer: D
Explanation: Use the ODBC connector to connect to the SAP HANA database in the SAP RISE managed workload and copy data through the Synapse pipeline.
Question 5
You have an Azure subscription.
You plan to deploy an SAP workload that will contain five virtual machines. The virtual machines will contain SAP application servers in an Azure region that does NOT support availability zones.
You need to maximize the number of fault domains for the virtual machines. The solution must ensure that you can protect the virtual machines by using Azure Site Recovery.
What should you use?
A. multiple availability sets
B. a single availability set
C. a virtual machine scale set in Flexible orchestration mode
D. a virtual machine scale set in Uniform orchestration mode
Show Answer
Correct Answer: B
Explanation: Use a single availability set. In a region without availability zones, it distributes the five VMs across the available fault domains (up to three), maximizing fault-domain coverage in one group. Availability-set VMs can also be protected by Azure Site Recovery.
Question 6
You have an SAP production landscape in Azure that contains the resources shown in the following table.
All the resources reside in the same Azure region.
You are planning a disaster recovery solution for the SAP production landscape.
For which resource can you use on-demand capacity reservation to pre-allocate the landscape resources in another Azure region?
A. VMSS1
B. AVSET1
C. AZVM1
D. AZDH1
Show Answer
Correct Answer: A
Explanation: On-demand capacity reservations can be associated with a virtual machine scale set, allowing compute capacity to be reserved in advance in the target region. Azure Dedicated Hosts and availability sets aren’t supported for this use; the qualifying resource here is VMSS1.
Question 7
You are planning the implementation of a Pacemaker cluster that will run Red Hat Enterprise Linux (RHEL) and host three SAP HANA nodes.
You need to recommend a solution to ensure that a node is shut down if there is an issue on the node. The solution must minimize complexity and costs.
What should you include in the recommendation?
A. an Azure Automation runbook
B. an Azure fence agent configuration
C. a virtual machine scale set in Flexible orchestration mode
D. a STONITH Block Device (SBD) with an iSCSI target
Show Answer
Correct Answer: B
Explanation: Use an Azure fence agent configuration. Pacemaker can use the Azure fencing agent to shut down or isolate an unhealthy cluster node through Azure, avoiding the extra infrastructure and complexity of an iSCSI target for SBD.
Question 8
You have an SAP production landscape in Azure in the North Europe Azure region.
You need to recommend a disaster recovery solution to ensure that services are available in the West Europe Azure region if the North Europe region becomes unavailable. The solution must meet the following requirements:
• Support the minimum recovery time objective (RTO) and recovery point objective (RPO).
• Support a two-node SAP Central Services (SCS) cluster.
• Minimize costs.
What should you include in the recommendation?
A. Azure Resource Mover
B. Azure Site Recovery
C. Azure Center for SAP solutions
D. Azure Migrate
E. SAP Landscape Management (LaMa)
Show Answer
Correct Answer: B
Explanation: Azure Site Recovery can replicate the SAP virtual machines from North Europe to West Europe and orchestrate failover, providing regional disaster recovery with low RPO/RTO. It can be used with a two-node SAP Central Services cluster, while avoiding the cost of running a fully active duplicate environment in the recovery region.
Question 9
You have an on-premises SAP HANA database. The database is 20 TB and contains tables up to 100 GB.
You need to migrate the database to Azure. The solution must meet the following requirements:
• Support table splitting.
• Minimize administrative effort.
Which migration method should you use?
A. Azure Migrate
B. SAP Database Migration Option (DMO)
C. SAP classical migration
D. Azure Database Migration Service
Show Answer
Correct Answer: B
Explanation: Use SAP Database Migration Option (DMO). It supports table splitting for large tables and automates much of the migration through Software Update Manager, reducing administrative effort.
Question 10
You have an Azure subscription named Sub1 that contains a virtual machine named VM1.
You have an SAP RISE managed workload that is integrated with Sub1.
You plan to use the SAP table connector to ingest data from the managed workload into Azure Data Factory.
What should you configure on VM1?
A. a self-hosted integration runtime
B. an Azure Databricks runtime
C. an Azure File Sync agent
D. an on-premises data gateway
Show Answer
Correct Answer: A
Explanation: Configure a self-hosted integration runtime on VM1. Azure Data Factory uses it to connect to the SAP RISE managed workload and transfer data through the SAP table connector.
$19
Get all 299 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
