Exam AZ-120 topic 2 question 32 discussion

Actual exam question from Microsoft's AZ-120

Question #: 32
Topic #: 2

You have an existing SAP landscape on Azure. All SAP virtual machines are on the same virtual network. The SAP application servers, SAP management servers, and SAP database servers are each on their own subnet.

You need to ensure that only the application and management servers can access the subnet to which the database servers connect.

What should you configure?

A. Azure AD service principals
B. Azure Key Vault secrets
C. network security groups (NSGs)
D. Azure Application Gateway and firewall rules

Show Suggested Answer

Suggested Answer: C 🗳️

by Ragdoll at Sept. 19, 2023, 11:58 p.m.

Comments

Submit Cancel

nilsson123

2 months, 1 week ago

Selected Answer: C

Network Security Groups (NSGs) are used to control inbound and outbound traffic to Azure resources. By applying NSGs, you can create security rules that allow or deny traffic based on source and destination IP addresses, port numbers, and protocols. This way, you can ensure that only the application and management servers have access to the database servers subnet.

upvoted 1 times

...

aeda24b

6 months, 4 weeks ago

Agree with the proposed solution

upvoted 1 times

...

smudo1965

9 months, 1 week ago

Selected Answer: C

Mentioned several time in the documentation

upvoted 1 times

...

ukocloud

1 year ago

Is clearly NSG https://learn.microsoft.com/en-us/azure/sap/workloads/hana-vm-operations

upvoted 1 times

...

Ragdoll

1 year, 1 month ago

Selected Answer: C

Use NSGs. AGW is only for layer 7 communication, not for database.

upvoted 1 times

...

Exam AZ-120 All Questions

View all questions & answers for the AZ-120 exam

Exam AZ-120 topic 2 question 32 discussion

Comments

nilsson123

aeda24b

smudo1965

ukocloud

Ragdoll

SY0-701