Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-120 Exam - Topic 17 Question 92 Discussion

You have an existing SAP landscape on Azure. All SAP virtual machines are on the same virtual network. The SAP application servers, SAP management servers, and SAP database servers are each on their own subnetYou need to ensure that only the application and management servers can access the subnet to which the database servers connectWhat should you configure?
B) Azure Application Gateway and firewall rules
A) Azure Key Vault secrets
C) network security groups (NSGs)
D) Azure AD service principals

Microsoft AZ-120 Exam - Topic 17 Question 92 Discussion

Actual exam question for Microsoft's AZ-120 exam
Question #: 92
Topic #: 17
[All AZ-120 Questions]

You have an existing SAP landscape on Azure. All SAP virtual machines are on the same virtual network. The SAP application servers, SAP management servers, and SAP database servers are each on their own subnet

You need to ensure that only the application and management servers can access the subnet to which the database servers connect

What should you configure?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Alaine at Jun 03, 2024, 07:42 AM

Limited Time Offer

25%

Off

Get Premium AZ-120 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Percy
10 months ago
I disagree, Azure AD service principals seem more relevant for access control.
upvoted 0 times
...
Myra
10 months ago
No way, it's all about the NSGs! They control access perfectly.
upvoted 0 times
...
Amber
10 months ago
Surprised that NSGs are the best choice here, thought it would be more complex.
upvoted 0 times
...
Abel
10 months ago
I think Azure Application Gateway could work too, right?
upvoted 0 times
...
Kayleigh
10 months ago
Definitely network security groups (NSGs) for this!
upvoted 0 times
...
Alyssa
11 months ago
NSGs seem like the right choice for restricting access, but I hope I remember the rules correctly for allowing traffic only from the application and management servers.
upvoted 0 times
...
Katheryn
11 months ago
I feel like we discussed Azure AD service principals, but I don't see how they would help with subnet access.
upvoted 0 times
...
Eladia
11 months ago
I'm not entirely sure, but I remember something about Azure Application Gateway being used for routing. Could that be relevant here?
upvoted 0 times
...
Cora
11 months ago
I think we might need to set up network security groups to control access between the subnets. That sounds familiar from our practice questions.
upvoted 0 times
...
Carmelina
11 months ago
This seems straightforward. I think the network security groups (NSGs) are the way to go here. I'll review the options and try to set up the appropriate rules to restrict access as required.
upvoted 0 times
...
Joesph
11 months ago
Okay, I've got a strategy for this. I'm going to look at the network security group (NSG) options to see if I can set up rules to only allow the application and management servers to access the database subnet.
upvoted 0 times
...
Dino
11 months ago
Hmm, I'm a bit unsure about this one. I know we need to control access to the database servers, but I'm not sure if Azure Key Vault or Azure AD would be the right approach here.
upvoted 0 times
...
Joanna
11 months ago
This looks like a networking and security question. I think the key is to restrict access to the database subnet, so I'll focus on the network security options.
upvoted 0 times
...
Dustin
11 months ago
Ugh, this is frustrating. I'm not entirely sure what's going on here. I'll have to read through the question and answers again to try to figure it out.
upvoted 0 times
...
Viva
12 months ago
I'm a bit confused by the wording of the question. I'll need to read through the options carefully and try to break down the key points to determine the best answer.
upvoted 0 times
...
Colton
12 months ago
Wasn't there something about SageMaker being linked to ECS in some scenarios? I might be mixing things up though.
upvoted 0 times
...
Elly
2 years ago
I bet the exam creators are having a laugh at the idea of using Azure AD service principals for something as straightforward as subnet access control. C is the obvious choice.
upvoted 0 times
Lettie
2 years ago
NSGs are a no-brainer choice for this scenario.
upvoted 0 times
...
Rupert
2 years ago
Agreed, NSGs provide a simple and effective way to secure your network.
upvoted 0 times
...
Zack
2 years ago
Definitely, NSGs are the way to go for controlling access to subnets.
upvoted 0 times
...
Cassie
2 years ago
Exactly, NSGs are the way to go for controlling access to subnets.
upvoted 0 times
...
Xochitl
2 years ago
C) network security groups (NSGs)
upvoted 0 times
...
Latia
2 years ago
C) network security groups (NSGs)
upvoted 0 times
...
...
Lashawnda
2 years ago
Key Vault? For network security? What is this, a crossover episode? C is the clear winner, folks.
upvoted 0 times
Twana
2 years ago
Agreed, NSGs are the way to go to control access to the subnets.
upvoted 0 times
...
Rosio
2 years ago
C) network security groups (NSGs)
upvoted 0 times
...
...
Peggie
2 years ago
Ah, the classic network security challenge. I'd definitely go with C - NSGs are the simplest and most effective solution here.
upvoted 0 times
Maynard
2 years ago
C) network security groups (NSGs) are the best option for controlling access between subnets.
upvoted 0 times
...
Freida
2 years ago
Agreed, NSGs are the way to go for this scenario.
upvoted 0 times
...
Shawna
2 years ago
C) network security groups (NSGs)
upvoted 0 times
...
...
Kati
2 years ago
Hmm, B sounds like overkill for this scenario. Why bring in a full-blown Application Gateway when we just need some basic network security rules?
upvoted 0 times
...
Martina
2 years ago
C is the way to go! NSGs are perfect for controlling access to subnets. Easy to set up and manage.
upvoted 0 times
Rosendo
2 years ago
I agree, NSGs are the best option for controlling access to subnets.
upvoted 0 times
...
Chauncey
2 years ago
C) network security groups (NSGs)
upvoted 0 times
...
Luis
2 years ago
Definitely, NSGs make it easy to manage access control for different servers.
upvoted 0 times
...
Charolette
2 years ago
I agree, NSGs are the best option for controlling access to subnets.
upvoted 0 times
...
Elenore
2 years ago
I agree, NSGs are the best option for controlling access to subnets.
upvoted 0 times
...
Linn
2 years ago
C) network security groups (NSGs)
upvoted 0 times
...
Chi
2 years ago
C) network security groups (NSGs)
upvoted 0 times
...
...
Whitley
2 years ago
I agree with Freeman. NSGs can help us restrict access to only the necessary servers and keep our SAP landscape secure.
upvoted 0 times
...
Freeman
2 years ago
I think we should configure network security groups (NSGs) to control the traffic between subnets.
upvoted 0 times
...

Save Cancel