AZ-120 sample exam questions

15 exam-style questions for Microsoft AZ-120: SAP on Azure, with answers and explanations. Take them as a timed practice exam first if you want a score out of 1000.

  1. Question 1Single choiceTopic 1
    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
    meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
    You plan to migrate an SAP HANA instance to Azure.
    You need to gather CPU metrics from the last 24 hours from the instance.
    Solution: You query views from SAP HANA Studio.
    Does this meet the goal?
    1. A
      Yes
    2. B
      No
    Show answer

    Correct answer: A

    Why

    SAP HANA Studio can query monitoring views such as M_HOST_RESOURCE_UTILIZATION and the load history, which provide CPU metrics over the last 24 hours, so this meets the goal.

  2. Question 2HotspotTopic 1
    HOTSPOT

    You plan to implement a deployment of SAP NetWeaver on Azure. The deployment will be hosted on virtual machines that run Windows Server 2022.

    You need to configure an authentication solution for the deployment. The solution must meet the following requirements:

    • Support single sign-on (SSO) and multi-factor authentication (MFA) for SAP NetWeaver applications.
    • Minimize administrative effort.

    What should you include in the solution? To answer, select the appropriate options in the answer area.

    NOTE: Each correct selection is worth one point.

    Authenticate the virtual machines by using:Active Directory Domain Services (AD DS) / Azure AD / Azure Active Directory Domain Services (Azure AD DS)
    Authenticate the SAP NetWeaver applications by using:Active Directory Domain Services (AD DS) / Azure AD / Azure Active Directory Domain Services (Azure AD DS)
    Show answer
    • Authenticate the virtual machines by using: Azure Active Directory Domain Services (Azure AD DS)
    • Authenticate the SAP NetWeaver applications by using: Azure AD
    Why

    Azure AD DS provides a managed domain for joining the Windows Server VMs without running your own domain controllers, minimizing administration. SAP NetWeaver integrates with Azure AD through SAML for SSO, and Azure AD Conditional Access adds MFA. These are now named Microsoft Entra Domain Services and Microsoft Entra ID.

  3. Question 3Single choiceTopic 2
    You are deploying an SAP production landscape to Azure.

    Your company's chief information security officer (CISO) requires that the SAP deployment complies with ISO 27001.

    You need to generate a compliance report for ISO 27001.

    What should you use?
    1. A
      Azure Log Analytics
    2. B
      Azure Monitor
    3. C
      Azure Active Directory (Azure AD)
    4. D
      Azure Security Center
    Show answer

    Correct answer: D

    Why

    Microsoft Defender for Cloud (formerly Azure Security Center) has a regulatory compliance dashboard with ISO 27001 reports. Log Analytics and Monitor only collect data, and Azure AD handles identity.

  4. Question 4HotspotTopic 2
    HOTSPOT

    Your network contains an on-premises SAP landscape. The landscape contains a database server named DB1.

    You have an Azure subscription that contains a storage account named storageaccount1.

    You export multiple databases to separate folders in a folder named D:\Data on DB1.

    You plan to migrate the on-premises SAP landscape to Azure.

    You need to copy the exported databases on DB1 to a container in storageaccountl by using AzCopy.

    How should you complete the command? To answer, select the appropriate options in the answer area.

    NOTE: Each correct selection is worth one point.

    azcopyBench / Copy / Load / Sync
    Option--blob-tier / --include-path / --include-pattern / --recursive
    Show answer
    • azcopy Copy
    • Option --recursive
    Why

    azcopy copy uploads the local folder to the blob container, and --recursive makes it include all the subfolders that hold each exported database. Sync compares source and destination rather than doing a plain upload, and bench only tests throughput.

  5. Question 5Single choiceTopic 3
    You plan to deploy an SAP environment on Azure.
    You plan to store all SAP connection strings securely in Azure Key Vault without storing credentials on the Azure virtual machines that host SAP.
    What should you configure to allow the virtual machines to access the key vault?
    1. A
      Azure Active Directory (Azure AD) Privilege Identity Manager (PIM)
    2. B
      role-based access control (RBAC)
    3. C
      a Managed Service Identity (MSI)
    4. D
      the Custom Script Extension
    Show answer

    Correct answer: C

    Why

    A managed identity (formerly Managed Service Identity) lets the VM authenticate to Key Vault with Azure AD without any stored credentials. RBAC or access policies grant permissions but need an identity first, PIM handles just-in-time elevation, and the Custom Script Extension runs scripts.

  6. Question 6HotspotTopic 3
    HOTSPOT

    You have an on-premises SAP HANA deployment that uses HANA system replication in synchronous mode.

    You plan to migrate the on-premises deployment to Azure and use ultra disks as part of the HANA deployment on Azure.

    You need to configure storage resources and high availability for the HANA deployment on Azure.

    What should you do? To answer, select the appropriate options in the answer area.

    NOTE: Each correct selection is worth one point.

    Use the ultra disks as:Data disks only / Data disks and the operating system disk / Data disks, the operating system disk, and the temporary disk
    Implement high availability by using:Availability sets / Availability zones / Multiple regions
    Show answer
    • Use the ultra disks as: Data disks only
    • Implement high availability by using: Availability zones
    Why

    Ultra disks can only be used as data disks, not as OS or temporary disks. Availability zones give datacenter-level protection with latency low enough for synchronous HANA system replication, whereas replication across regions would normally be asynchronous.

  7. Question 7Drag and drop: orderTopic 4
    DRAG DROP

    You plan to deploy SAP HANA to an Azure virtual machine that has a constrained vCPU size.

    You need to validate that the virtual machine complies with SAP-defined resource requirements by using the SAP HANA Hardware and Cloud Measurement Tools (HCMT).

    In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

    Arrange 5 of these in the correct order:

    • Download the HCMT.
    • Run the hcmt command and specify the executionplan.json parameter.
    • Upload the ZIP file to the SAP HANA Hardware and Cloud Measurement Analysis.
    • Run the hcmtsetup command.
    • Run the SAPCAR utility.
    Show answer
    1. Download the HCMT.
    2. Run the SAPCAR utility.
    3. Run the hcmtsetup command.
    4. Run the hcmt command and specify the executionplan.json parameter.
    5. Upload the ZIP file to the SAP HANA Hardware and Cloud Measurement Analysis.
    Why

    HCMT ships as an SAR archive, so you download it and extract it with SAPCAR. Then hcmtsetup prepares the tool, hcmt runs the measurements from the execution plan, and the resulting ZIP is uploaded to the online analysis service for evaluation.

  8. Question 8Single choiceTopic 4
    Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

    After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

    You have an on-premises datacenter.

    You have an Azure subscription that contains a virtual network named VNet1.

    You have an SAP RISE managed workload.

    You need to ensure transitive connectivity between the datacenter, VNet1, and the managed workload.

    Solution: You configure a Site-to-Site (S2S) VPN connection between the datacenter and VNet1 and an S2S VPN connection between VNet1 and the managed workload.

    Does this meet the goal?
    1. A
      Yes
    2. B
      No
    Show answer

    Correct answer: B

    Why

    VPN connections from the datacenter to VNet1 and from VNet1 to the managed workload are not transitive, because gateways do not forward traffic between separate connections by default. Transitive connectivity needs routing such as a hub with route server, virtual WAN or an appliance, so this does not meet the goal.

  9. Question 9Single choiceTopic 5
    You have an SAP landscape on Azure that uses SAP HANA.

    You perform a daily backup of HANA to Azure Blob Storage and retain copies of each backup for one year.

    You need to reduce the backup storage costs.

    What should you implement?
    1. A
      a stored access policy
    2. B
      a Recovery Services Vault backup policy
    3. C
      a storage access tier
    Show answer

    Correct answer: C

    Why

    HANA backups written to Blob Storage are cheapest when moved to a cooler storage access tier, such as Cool or Archive, with lifecycle management for one-year retention. A stored access policy only controls SAS permissions, and a Recovery Services vault policy applies to Azure Backup, not files in Blob storage.

  10. Question 10HotspotTopic 5
    HOTSPOT

    You have an Azure subscription.

    You plan to deploy SAP HANA to Azure virtual machines by using Azure Center for SAP solutions. The virtual machines will use customized resource names.

    You need to use the Azure command-line interface (CLI) to deploy the solution.

    How should you complete the command? To answer, select the appropriate options in the answer area.

    NOTE: Each correct selection is worth one point.

    az workloadssap-application-server-instance / sap-database-instance / sap-virtual-instance
    --configuration ./payload.bicep / json / tf
    Show answer
    • az workloads sap-virtual-instance
    • --configuration ./payload. json
    Why

    Azure Center for SAP solutions deploys a whole system as a Virtual Instance for SAP solutions, using az workloads sap-virtual-instance create. The configuration is supplied as a JSON payload file, which is also where customized resource names are defined.

  11. Question 11Single choiceTopic 6
    You are evaluating which migration method Litware can implement based on the current environment and the business goals.
    Which migration method will cause the least amount of downtime?
    1. A
      Migrate SAP ECC to SAP Business Suite in HANA, and then migrate SAP to Azure.
    2. B
      Use Near-Zero Downtime (NZDT) to migrate to SAP HANA and Azure during the same maintenance window.
    3. C
      Use the Database Migration Option (DMO) to migrate to SAP HANA and Azure during the same maintenance window.
    4. D
      Migrate SAP to Azure, and then migrate SAP ECC to SAP Business Suite on HANA.
    Show answer

    Correct answer: B

    Why

    Near-Zero Downtime (NZDT) replicates data to the target while the source stays in use, leaving only a short cutover, so it causes the least downtime. DMO combined with the move needs a long single maintenance window for the whole export and import. Doing two separate migrations adds downtime.

  12. Question 12Single choiceTopic 8
    You are evaluating the migration plan.
    Licensing for which SAP product can be affected by changing the size of the virtual machines?
    1. A
      SAP ECC
    2. B
      SAP Solution Manager
    3. C
      PI
    4. D
      SAP SCM
    Show answer

    Correct answer: A

    Why

    The case study text is not available here, so this is the best-supported choice. SAP licences are bound to the hardware key of the host, so resizing the VMs running the production ERP system, SAP ECC, can invalidate its licence. Solution Manager, PI and SCM are less tied to sizing.

  13. Question 13Single choiceTopic 9
    You need to recommend a solution to reduce the cost of the SAP non-production landscapes after the migration.
    What should you include in the recommendation?
    1. A
      Configure scaling of Azure App Service
    2. B
      Migrate the SQL Server databases to Azure SQL Data Warehouse
    3. C
      Deallocate virtual machines when not in use
    4. D
      Deploy non-production landscapes to Azure DevTest Labs
    Show answer

    Correct answer: D

    Why

    The given answer suggests Azure DevTest Labs, which provides auto-shutdown policies and cost controls for non-production workloads. Deallocating VMs when not in use is also a valid saving, so the choice is close. App Service scaling and SQL Data Warehouse do not apply to SAP non-production VMs.

  14. Question 14Single choiceTopic 11
    What should you use to perform load testing as part of the migration plan?
    1. A
      JMeter
    2. B
      SAP LoadRunner by Micro Focus
    3. C
      Azure Application Insights
    4. D
      Azure Monitor
    Show answer

    Correct answer: B

    Why

    SAP LoadRunner by Micro Focus is the SAP-supported load testing tool, which simulates users against SAP applications for migration validation. Azure Application Insights and Azure Monitor observe behavior rather than generating load, and JMeter does not natively simulate SAP GUI traffic.

  15. Question 15Single choiceTopic 12
    Once the migration completes, to which size should you set the ExpressRoute circuit to the New York office to meet the business goals and technical
    requirements?
    1. A
      500 Mbps
    2. B
      1,000 Mbps
    3. C
      2,000 Mbps
    4. D
      5,000 Mbps
    Show answer

    Correct answer: B

    Why

    The case study text is not available here; this is the commonly cited answer. After migration the New York office needs enough ExpressRoute bandwidth for user and replication traffic, and 1,000 Mbps covers it. 500 Mbps is likely too small, while 2,000 and 5,000 Mbps add unneeded cost.