All Microsoft exams
Free AZ-120 practice test: 30 questions with answers
30 original questions for Azure for SAP Workloads Specialty, drawn from every topic area. Answer each one to see whether you got it right and why. No sign-up.
- Free questions
- 30
- Full bank
- 112 questions
- Real exam
- 100 min
All 30 AZ-120 questions with answers
The same questions as the test above, grouped by exam topic. Open any question to see the answer and explanation.
Migrate SAP workloads to Azure (8 questions)
Question 1
A company runs an SAP Business Suite system on Oracle Database and wants to move it to Azure and convert it to SAP HANA in the same change window. Which SAP-supported approach should the migration team use for the database conversion?
- AReplicate the virtual machines with Azure Migrate, then copy the tables manually into HANA
- BRestore the latest Oracle backup onto a HANA virtual machine with Azure Backup
- CBuild an Azure Data Factory pipeline that copies each SAP table into a new HANA schema
- DRun the Database Migration Option of Software Update Manager during the migration
Show answer and explanationHide answer
Correct answer: DThe Database Migration Option (DMO) of Software Update Manager is SAP's supported way to combine a change of database platform to HANA with a migration or upgrade. Replicating VMs only moves the Oracle database as it is, restoring an Oracle backup does not change the platform, and copying tables with Data Factory does not give a consistent SAP system.
Question 2
A consultant is sizing the SAP application servers for a new Azure landing zone. The team needs a hardware-independent performance figure to compare the current on-premises servers with candidate Azure VM sizes. Which unit should they use?
- ASAPS, the SAP Application Performance Standard
- BIOPS delivered by the managed disks attached to each server
- CPeak network throughput in megabits per second for each NIC
- DProcessor clock speed in gigahertz of the host CPU family
Show answer and explanationHide answer
Correct answer: ASAPS is the SAP-defined, hardware-independent measure of application performance that SAP sizing uses. IOPS and network throughput describe storage and network capacity rather than SAP workload, and clock speed does not reflect the overall capacity of a server.
Question 3
When SAP HANA runs on Azure, why are the data volume and the log volume usually placed on separate disks or volume groups?
- AAzure Backup can take snapshots of the data volume only when it has its own separate disk
- BHANA can compress the data volume only when it sits on a different disk type from the log
- CLog writes are latency sensitive and must not compete with data writes
- DIt lets the database stop writing its transaction log, which reduces the need for backups
Show answer and explanationHide answer
Correct answer: CSAP HANA writes its redo log on every commit, so log writes need low latency, while data volumes see large bursts of writes at savepoints. Separating them keeps log latency stable. The other options describe effects that do not drive the design, and the last one would disable a log that HANA needs for recovery.
Question 4
A company has Software Assurance for its Windows Server and SQL Server licences and wants to lower the licensing cost of the SAP application and database servers it moves to Azure. Which Azure benefit lets it reuse those existing licences?
- AAzure Hybrid Benefit for existing Windows and SQL Server licences
- BAzure Spot pricing, which offers spare capacity at a lower rate
- CDev/Test pricing, which applies only to non-production workloads
- DReserved VM Instances, which discount the compute hours of committed VMs
Show answer and explanationHide answer
Correct answer: AAzure Hybrid Benefit lets Software Assurance Windows Server and SQL Server licences be used on Azure VMs. Reserved Instances lower compute price without reusing licences, Spot pricing offers interruptible capacity, and Dev/Test pricing is limited to non-production use.
Question 5
A company must move its SAP ECC system to Azure with the shortest possible cutover and no change to its current database platform. Which migration strategy best fits these constraints?
- AConvert the custom ABAP code to Azure Functions before the move begins
- BRebuild the system on SAP HANA with a new installation and reload the data
- CRehost the existing servers and database on Azure VMs using replication
- DMove the system to a managed platform and redesign its business processes first
Show answer and explanationHide answer
Correct answer: CA rehost, or lift-and-shift, moves the existing servers and database with minimal change, which suits a short cutover and a fixed database platform. Rebuilding on HANA, rewriting custom code or redesigning business processes each add scope and risk that these constraints rule out.
Question 6
Which two items must be captured when estimating compute and storage sizing for an SAP system on Azure? (Choose two.)
- ASAPS and memory requirements for each application and database tier
- BPeak IOPS and throughput needed by the database data and log volumes
- CThe SAP GUI version installed on the users' laptops
- DThe number of SAP transport requests released each quarter
Show answer and explanationHide answer
Correct answer: A, BSAPS and memory size the application and database servers, and peak IOPS and throughput size the data and log storage, so both belong in the estimate. The SAP GUI version and the number of transport requests do not determine compute or storage capacity.
Question 7
A migration team must move 40 Windows and Linux VMs from an on-premises datacenter to Azure with replication and a short cutover window. Which Azure service should it use to discover the servers and replicate them?
- AAzure Storage Explorer to copy the virtual hard disk files
- BAzure Backup restore points taken on the day of cutover
- CAzure Cost Management to forecast the monthly run cost
- DAzure Migrate with Azure Site Recovery replication
Show answer and explanationHide answer
Correct answer: DAzure Migrate discovers and assesses on-premises servers and uses Azure Site Recovery replication to move them with a short cutover. Storage Explorer copies files without discovery or replication, Backup restore points are not kept in sync, and Cost Management forecasts spend without moving workloads.
Question 8
Before a migration to SAP HANA, the team wants to confirm that the planned SAP release, operating system and database versions are supported together. Which SAP resource should it check?
- AThe SAP Quick Sizer hardware sizing estimate
- BThe Azure Pricing Calculator cost estimate
- CThe SAP Product Availability Matrix
- DThe Azure Advisor recommendations for the subscription
Show answer and explanationHide answer
Correct answer: CThe SAP Product Availability Matrix lists which SAP releases, operating systems and databases are supported together, which is the compatibility check needed before migrating. Quick Sizer estimates hardware demand, the Pricing Calculator estimates cost, and Azure Advisor reviews existing Azure resources.
Design and implement an infrastructure to support SAP workloads on Azure (8 questions)
Question 9
An architect must choose Azure virtual machine sizes for SAP HANA production servers. Where should the architect confirm that a specific VM size is certified by SAP for HANA?
- AThe Azure Marketplace listing for the SAP HANA image
- BThe SAP-published list of certified IaaS platforms for SAP HANA
- CThe VM size comparison page in the Azure portal, filtered by SAP workloads
- DThe Azure Advisor score for the planned subscription
Show answer and explanationHide answer
Correct answer: BSAP publishes the list of certified IaaS platforms for SAP HANA, which is where a VM size is confirmed as certified. A Marketplace listing, a portal filter or an Advisor score does not show SAP certification for a specific VM size.
Question 10
What is the main purpose of the VM extension for SAP solutions on an Azure virtual machine that runs SAP software?
- AIt installs the SAP GUI client on the VM so that administrators can sign in remotely
- BIt replaces Azure Load Balancer health probes for SAP cluster nodes
- CIt encrypts the SAP database files with a customer managed encryption key
- DIt shares Azure infrastructure metrics with the SAP host for SAP monitoring
Show answer and explanationHide answer
Correct answer: DThe VM extension for SAP solutions passes Azure infrastructure metrics to the SAP host so that SAP monitoring can show the VM's resource use. Installing the SAP GUI, encrypting database files and replacing load balancer health probes are not what the extension does.
Question 11
A platform team wants an open-source framework that its own DevOps pipelines run to deploy SAP infrastructure on Azure and install SAP, with the definitions written as code in Terraform and Ansible. Which option fits?
- AAzure Resource Manager templates exported from the Azure portal
- BSAP Deployment Automation Framework
- CAzure Site Recovery replication plans for SAP systems
- DAzure Center for SAP solutions, a managed service in the Azure portal
Show answer and explanationHide answer
Correct answer: BSAP Deployment Automation Framework is an open-source project that uses Terraform for infrastructure and Ansible for SAP installation, run from the customer's own pipelines. Azure Center for SAP solutions is a managed service, exported ARM templates do not install SAP, and Site Recovery is for replication.
Question 12
Which two statements about private endpoints for Azure PaaS services used by SAP landscapes are correct? (Choose two.)
- AClients reach the PaaS resource through a private IP address inside the virtual network
- BPublic network access to the PaaS resource can be turned off
- CThe SAP application becomes reachable from the internet without a firewall
- DNetwork security groups on the subnet are no longer needed
Show answer and explanationHide answer
Correct answer: A, BA private endpoint gives a PaaS service a private IP inside the virtual network, and public network access can then be disabled. Private endpoints do not expose the SAP application to the internet and do not remove the need for network security groups.
Question 13
The team wants the SAP application servers and the HANA database placed in the same datacenter to reduce network latency between them. Which Azure feature should it use?
- AA proximity placement group for the SAP VMs
- BA Traffic Manager profile with priority routing
- CAn availability set that spreads VMs across fault domains
- DA paired region that holds the database replica
Show answer and explanationHide answer
Correct answer: AA proximity placement group keeps the grouped VMs in the same datacenter to reduce latency between them. Traffic Manager routes client requests, availability sets spread VMs across fault domains, and a paired region is for distant disaster recovery, so none of these places VMs together.
Question 14
A governance team must stop SAP virtual machines from being created in regions that are not approved, and must require a cost center tag on every resource. Which Azure service enforces these rules at deployment time?
- AAzure Cost Management budgets and alerts
- BMicrosoft Defender for Cloud secure score
- CAzure Policy assignments with deny effects
- DAzure Monitor action groups for notifications
Show answer and explanationHide answer
Correct answer: CAzure Policy evaluates resources at deployment and, with deny effects, blocks creation of resources in non-approved regions or without required tags. Budgets only notify on spend, Defender for Cloud scores security posture, and action groups send notifications when alerts fire.
Question 15
In an Azure landing zone for SAP, which hierarchy lets production and non-production SAP subscriptions inherit the same governance policies?
- AResource tags applied to each virtual machine
- BManagement groups that contain the SAP subscriptions
- CResource locks applied to each resource group
- DAzure Lighthouse delegations to a managed service provider
Show answer and explanationHide answer
Correct answer: BManagement groups organize subscriptions into a hierarchy, and policies assigned to a group are inherited by the subscriptions below it. Tags and locks do not pass policy down a hierarchy, and Lighthouse delegates management to a service provider rather than organizing subscriptions.
Question 16
Users of an SAP Fiori launchpad must sign in with their Microsoft Entra ID accounts and reach SAP through single sign-on. Which configuration makes this possible?
- AAn Azure Bastion host placed in front of the Fiori server
- BA SAML 2.0 trust between the SAP system and Microsoft Entra ID
- CA public IP address and an inbound rule that opens the HTTPS port
- DAzure Key Vault secrets that store each user's SAP password
Show answer and explanationHide answer
Correct answer: BA SAML 2.0 trust lets the SAP system accept sign-ins issued by Microsoft Entra ID, which provides single sign-on. Bastion gives secure administrative access, opening a public port does not authenticate users, and storing passwords in Key Vault does not enable federated sign-in.
Design and implement high availability and disaster recovery (HA/DR) (7 questions)
Question 17
A team builds a highly available SAP ASCS cluster on two Linux VMs with Pacemaker. In a failover test the cluster stops and waits because it cannot confirm that the failed node is powered off. Which component must the team configure?
- AA longer health probe interval on the Standard load balancer
- BA second public IP address on the ASCS virtual machine
- CAn additional network interface dedicated to SAP GUI traffic
- DA fencing device such as an Azure fence agent
Show answer and explanationHide answer
Correct answer: DPacemaker needs fencing (STONITH) so that a node whose state it cannot confirm is powered off, which prevents split-brain. Load balancer probe timing, a public IP or an extra NIC for GUI traffic do not let the cluster confirm node state.
Question 18
Which Azure construct protects SAP virtual machines against the failure of an entire datacenter within a region?
- AA proximity placement group that keeps VMs in one datacenter
- BA paired region that holds a secondary copy of the workload
- CAvailability sets, with the VMs spread across fault domains
- DAvailability zones, with the VMs placed in different zones
Show answer and explanationHide answer
Correct answer: DAvailability zones are physically separate datacenters within a region, so VMs spread across zones survive a datacenter failure. Availability sets only isolate VMs from rack and host failures inside one datacenter, a proximity placement group co-locates VMs, and a paired region is a cross-region disaster recovery design.
Question 19
A bank runs SAP HANA primary and secondary nodes in two availability zones of the same Azure region and requires zero data loss on failover. Which HANA System Replication mode should it configure?
- ASynchronous replication, so each commit waits for the secondary
- BNightly log shipping of copied backup files to the secondary
- CAsynchronous replication, which does not wait for the secondary
- DPeriodic snapshot copies of the data volume taken every few hours
Show answer and explanationHide answer
Correct answer: ASynchronous HANA System Replication makes each commit wait until the secondary has the log, so committed data is not lost when the primary fails within the supported distance between zones. Asynchronous replication, nightly log shipping and periodic snapshots all leave a window of unreplicated data.
Question 20
An SAP HANA database must be restorable to a specific point in time between two full backups. Which backup capability provides this with Azure Backup for SAP HANA?
- ADaily VM restore points that capture the entire virtual machine
- BBlob storage soft delete that keeps deleted backup files for a time
- CDaily snapshots of the managed data disks attached to the VM
- DLog backups that enable point-in-time recovery
Show answer and explanationHide answer
Correct answer: DLog backups record the transaction log between full backups, which allows restore to a point in time with Azure Backup for SAP HANA. Daily VM restore points and disk snapshots cannot recover to an arbitrary moment, and soft delete only protects files that were deleted.
Question 21
A company needs disaster recovery for its SAP landscape in the paired region. Application VMs are replicated with Azure Site Recovery. Which HANA design best protects the database in the DR region?
- ASynchronous HANA System Replication to a secondary in the DR region
- BAzure Load Balancer rules that redirect database traffic to the DR region
- CAsynchronous HANA System Replication to a secondary in the DR region
- DNightly export of database tables to a flat file in the DR region
Show answer and explanationHide answer
Correct answer: CAsynchronous HANA System Replication keeps a copy in the DR region without making each commit wait across the long distance between regions. Synchronous replication across regions adds latency to every commit, a nightly export loses a day of data, and load balancer rules cannot move database replication.
Question 22
Which two statements about Azure paired regions are correct for SAP disaster recovery planning? (Choose two.)
- APlanned platform updates are staggered so that paired regions are not updated at the same time
- BPaired regions share the same datacenters and power supply for lower latency
- CGeo-redundant storage copies backup data to the paired region
- DPaired regions automatically synchronize SAP HANA transactions in real time
Show answer and explanationHide answer
Correct answer: A, CPaired regions are updated in a staggered order, and geo-redundant storage replicates data to the paired region, both useful in disaster recovery planning. Paired regions do not share datacenters, and nothing synchronizes HANA transactions between them automatically.
Question 23
In a Pacemaker-managed ASCS cluster on Azure behind a Standard load balancer, why is floating IP enabled on the load balancer rules?
- ASo the health probe can be skipped during a planned failover
- BSo the load balancer can encrypt traffic between the two cluster nodes
- CSo each cluster node keeps its own separate public address for administration
- DSo the ASCS virtual IP stays with the active node after failover
Show answer and explanationHide answer
Correct answer: DA floating IP lets the load balancer keep the cluster's virtual address with whichever node is currently active. Load balancing does not encrypt traffic, nodes keep their own addresses separately, and skipping the health probe would break failover detection.
Maintain SAP workloads on Azure (7 questions)
Question 24
A team wants SAP-aware monitoring of its HANA databases and NetWeaver application servers from the Azure portal, with dashboards and alerts across the whole SAP landscape. Which Azure service provides this?
- AAzure Monitor for SAP solutions
- BAzure Advisor for cost and performance recommendations
- CAzure Service Health for platform incident notices
- DAzure Cost Management for monthly spend analysis
Show answer and explanationHide answer
Correct answer: AAzure Monitor for SAP solutions collects SAP-specific metrics from HANA and NetWeaver and presents them with dashboards and alerts. Service Health reports Azure platform incidents, Advisor gives recommendations, and Cost Management tracks spend rather than SAP application health.
Question 25
Which Azure feature gives a virtual machine advance notice of planned platform maintenance through the instance metadata service, so that an SAP application can prepare before the event?
- AScheduled Events in the instance metadata service
- BMaintenance configurations that define customer maintenance windows
- CAdvisor recommendations about upcoming maintenance activities
- DService Health alerts that report planned platform maintenance
Show answer and explanationHide answer
Correct answer: AScheduled Events exposes upcoming platform maintenance to the VM through the instance metadata service, which lets the application prepare gracefully. Maintenance configurations schedule customer-controlled windows, while Service Health and Advisor report information that the VM cannot read directly.
Question 26
A non-production SAP landscape runs 24 hours a day, but its systems are used only during office hours. The team wants to cut compute cost with the least risk to the systems. What should it do?
- AMove the non-production VMs to Spot pricing so Azure can evict them
- BStop and start non-production VMs on a schedule with a runbook
- CResize every non-production VM to the largest available size for stability
- DStore the non-production HANA data on archive-tier storage
Show answer and explanationHide answer
Correct answer: BStopping idle non-production VMs on a schedule with an automation runbook cuts compute charges while keeping the systems available in working hours. Spot VMs can be evicted at any time, enlarging VMs raises cost, and archive storage is unsuitable for active database files.
Question 27
A team wants one place that reviews its Azure SAP resources and suggests improvements for cost, reliability, performance, security and operational excellence, including VM right-sizing. Which service provides these recommendations?
- AAzure Network Watcher packet capture and flow log analysis
- BAzure Policy compliance dashboards that report resource configuration state
- CAzure Advisor recommendations for right-sizing and cost savings
- DAzure Migrate assessment reports for on-premises servers
Show answer and explanationHide answer
Correct answer: CAzure Advisor analyzes resource configuration and usage and gives recommendations across the five pillars, including right-sizing. Policy dashboards report compliance, Network Watcher diagnoses network traffic, and Migrate assesses on-premises servers before migration.
Question 28
Which two activities support sustained performance of SAP workloads on Azure after go-live? (Choose two.)
- AReviewing CPU and memory trends to decide when to right-size VMs
- BMonitoring disk throughput against the limits of the attached storage
- CTurning off SAP performance monitoring to reduce Azure Monitor costs
- DKeeping every SAP VM at its largest size permanently to avoid tuning
Show answer and explanationHide answer
Correct answer: A, BTrend reviews for right-sizing and watching storage throughput against its limits both help keep SAP performance steady over time. Turning off monitoring removes the evidence needed to tune, and permanent oversizing wastes cost without managing performance.
Question 29
An operations team must patch the operating system on the two nodes of a clustered SAP ASCS pair with minimal disruption. Which approach should it follow?
- APatch both nodes at the same time to finish the outage in one window
- BPatch one node at a time, moving the SAP resources to the other node first
- CSkip patching the cluster nodes because they sit in an availability set
- DStop the cluster, patch both nodes, and leave the cluster stopped afterwards
Show answer and explanationHide answer
Correct answer: BRolling patches move the SAP resources to the other node before each node is updated, so the service stays available. Patching both nodes together causes an outage, skipping patches leaves known vulnerabilities, and availability sets do not replace patching.
Question 30
A team wants to run one query across the logs of its SAP VMs, Azure Monitor alerts and HANA diagnostic data. Which Azure resource stores these logs for querying?
- AA Log Analytics workspace that holds collected logs
- BAn Azure Key Vault that stores secrets, keys and certificates
- CA resource group tag set that labels cost reports
- DA Recovery Services vault that stores backup data
Show answer and explanationHide answer
Correct answer: AA Log Analytics workspace collects and stores logs from VMs, alerts and diagnostics so they can be queried together with Kusto Query Language. A Recovery Services vault holds backup data, Key Vault holds secrets and keys, and tags are labels rather than log stores.