You have an SAP landscape on Azure that contains a virtual machine named VM1. VM1 hosts the central services application.
You need to encrypt VM1. The solution must meet the following requirements:
• All disks must be encrypted.
• The impact on the CPU of VM1 must be minimized.
• The manual rotation of encryption keys must be supported.
Which type of encryption should you use?
A. Encryption at rest with platform-managed keys
B. Encryption at rest with customer-managed keys
C. Azure Disk Encryption
D. Encryption at host
Show Answer
Correct Answer: B
Explanation: Use encryption at rest with customer-managed keys. Encryption is handled by Azure’s storage infrastructure, minimizing CPU impact on VM1, and you can manually rotate the customer-managed keys. Azure Disk Encryption runs in the guest and can consume VM CPU; platform-managed keys do not provide customer-controlled manual rotation.
Question 32
You have an Azure subscription that contains a Windows-based SAP deployment.
You plan to register the SAP deployment with Azure Center for SAP solutions.
You need to verify that SAP system-level prerequisites are met.
Which command should you run?
A. saposcol
B. sapacext
C. saphostexec
D. hostexecstart
Show Answer
Correct Answer: C
Explanation: Run `saphostexec` to verify the SAP Host Agent status on Windows. For example, use `C:\Program Files\SAP\hostctrl\exe\saphostexec -status`.
Question 33
You have two Azure subscriptions.
You plan to deploy virtual machines to both subscriptions. The virtual machines will host SAP workloads. As part of the deployment the virtual machines will be deployed to an availability zone named Availability Zone 1 in each subscription.
You need to ensure that the virtual machines will reside in the same physical datacenter.
What should you do first?
A. Use the Check Zone Peers REST API.
B. Deploy the virtual machines to the same availability set.
C. Deploy the virtual machines to the same proximity group.
D. Use the List By Location REST API.
Show Answer
Correct Answer: A
Explanation: Use the Check Zone Peers REST API first to verify that Availability Zone 1 in the two subscriptions maps to the same physical zone. Zone numbering can differ between subscriptions, so matching zone names alone does not guarantee the VMs will be in the same datacenter.
Question 34
You have an SAP landscape on Azure that contains the virtual machines shown in the following table.
You need to ensure that the Application Server role is available if a single Azure datacenter fails.
What should you include in the solution?
A. Azure Private Link
B. Azure Application Gateway v2
C. Azure Virtual WAN
D. Microsoft Entra Application Proxy
Show Answer
Correct Answer: B
Explanation: Azure Application Gateway v2 can be deployed as a zone-redundant service across availability zones, allowing it to route requests to healthy SAP application servers if a single datacenter/zone fails.
Question 35
You have an Azure subscription.
You plan to deploy an SAP production landscape in Azure.
You need to use Azure NetApp Files as the storage solution for SAP HANA databases.
How should you configure an application volume group to reduce latency?
A. Deploy a dedicated virtual network.
B. Deploy an availability zone.
C. Configure a proximity placement group.
D. Configure a QoS policy.
Show Answer
Correct Answer: C
Explanation: Configure a proximity placement group so the SAP HANA virtual machines and Azure NetApp Files volumes are placed close together, reducing network latency.
Question 36
You have an Azure subscription.
You plan to deploy SAP on Azure.
You need to recommend a disk encryption solution for virtual machines. The solution must meet the following requirements:
• Support the encryption of operating system, data, and temp disks.
• Support the encryption of data at rest and data in transit.
• Minimize CPU overhead on the virtual machines.
What should you include in the recommendation?
A. Azure Disk Encryption
B. server-side encryption (SSE)
C. Confidential disk encryption
D. encryption at host
Show Answer
Correct Answer: D
Explanation: Encryption at host covers OS, data, and temporary disks, and encrypts data both at rest and as it moves between the VM and Azure Storage. Because encryption is performed by the host rather than using the VM’s CPU, it minimizes VM CPU overhead.
Question 37
You have a highly available deployment of SAP NetWeaver on Azure virtual machines. The database tier is hosted on two virtual machines that run Windows Server 2019 and have Microsoft SQL Server 2022 installed. The NetWeaver, application, and database tiers each reside on a separate subnet within the same virtual network.
You run ABAPMeter against the deployment and discover that the average value of Acc DB is 2 ms.
You need to lower the Acc DB value.
What should you do?
A. Redeploy the NetWeaver, application, and SQL Server virtual machines to the same proximity placement group.
B. Increase the tempdb size on the SQL Server virtual machines.
C. Configure the SQL Server database to use asynchronous replication.
D. Move the application virtual machines to the same subnet as the SQL Server virtual machines.
Show Answer
Correct Answer: A
Explanation: Acc DB includes time spent waiting for database operations, so lowering network latency between the application and SQL Server tiers can reduce it. Placing the NetWeaver, application, and SQL Server VMs in the same proximity placement group keeps them physically close in Azure. Increasing tempdb size or changing replication mode does not directly address the measured latency, and subnet placement alone does not ensure physical proximity.
Question 38
HOTSPOT
You have an Azure subscription that contains a virtual network named VNet1.
You plan to deploy SAP NetWeaver to VNet1 and use Azure NetApp Files for storage.
You need to recommend a network configuration for VNet1. The solution must use an IP address space of 10.0.0.0/20 and meet the following requirements:
• Fully support SAP.
• Minimize implementation effort.
• Minimize latency between compute and storage services.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: To minimize implementation effort: Add a subnet for the NetWeaver virtual machines and delegate one subnet to Azure NetApp Files.
To minimize latency: Implement proximity placement groups.
Explanation: A dedicated delegated subnet enables Azure NetApp Files without an unnecessary second storage subnet. Proximity placement groups place compute and storage close together to reduce latency.
Question 39
You have a Hyper-V virtual machine named VM1 that runs Windows Server 2019.
You plan to deploy 10 Azure virtual machines based on VM1. The virtual machines will host instances of SAP NetWeaver.
You need to create an image of VM1 for the deployment.
What should you do first?
A. Run the Sysprep utility.
B. Join VM1 to an Active Directory Domain Services (AD DS) domain.
C. Configure Azure Site Recovery.
D. Upload the VHDX of VM1 to an Azure Storage account.
Show Answer
Correct Answer: A
Explanation: Run Sysprep first to generalize the Windows Server VM before capturing it as an image for deployment to multiple Azure VMs.
Question 40
HOTSPOT
You have an Azure subscription.
You need to deploy an instance of SAP HANA that will use Azure NetApp Files to host data. The solution must use proximity placement groups.
Which protocol and feature should you configure for the deployment? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Protocol: NFSv4.1
Feature: An application volume group
Explanation: SAP HANA data volumes on Azure NetApp Files use NFSv4.1. An application volume group for SAP HANA supports placing the volumes near compute resources by using a proximity placement group.
$19
Get all 299 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
