New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-120 Exam - Topic 4 Question 7 Discussion

Actual exam question for Microsoft's AZ-120 exam
Question #: 7
Topic #: 4
[All AZ-120 Questions]

You plan to migrate an SAP environment to Azure.

You need to create a design to facilitate end-user access to SAP applications over the Internet, while

restricting user access to the virtual machines of the SAP application servers.

What should you include in the design?

Show Suggested Answer Hide Answer
Suggested Answer: C

A public internet user can reach the SAP Web-Dispatcher over port 443

The SAP Web-Dispatcher can reach the SAP Application server over port 443

The App Subnet accepts traffic on port 443 from 10.0.0.0/24

The SAP Application server sends traffic on port 30015 to the SAP DB server

The DB subnet accepts traffic on port 30015 from 10.0.1.0/24.

Public Internet Access is blocked on both App Subnet and DB Subnet.

References:

https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/


by Kimbery at May 03, 2022, 06:55 AM

Limited Time Offer

25%

Off

Get Premium AZ-120 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Zita
4 months ago
Point-to-site VPNs seem overkill for this scenario, right?
upvoted 0 times
...
Edison
5 months ago
I agree with Marya, C is the way to go!
upvoted 0 times
...
Mirta
5 months ago
Wait, why would you use a public IP for each server? That sounds risky!
upvoted 0 times
...
Franklyn
5 months ago
I think B is a better choice for managing incoming traffic.
upvoted 0 times
...
Marya
5 months ago
Definitely go with C, the SAP Web Dispatcher is key for routing.
upvoted 0 times
...
Derick
5 months ago
I definitely recall that the web dispatcher is key for routing, but I’m not clear on how it interacts with the application servers.
upvoted 0 times
...
Meghan
5 months ago
I feel like the VPN option could be a bit overkill for just accessing SAP applications.
upvoted 0 times
...
Lore
5 months ago
I think deploying an internal load balancer might be useful, but it seems like it wouldn't restrict access as needed.
upvoted 0 times
...
Malika
5 months ago
I remember we discussed using a web dispatcher in class, but I'm not entirely sure how it works in this context.
upvoted 0 times
...
Ardella
5 months ago
Alright, I think I've got this. The key is to look at the options and determine which one would actually achieve the desired traffic preference for R1. I'll need to evaluate each option carefully against the given topology and requirements.
upvoted 0 times
...
Josue
6 months ago
This seems straightforward - the question is asking when a heavy forwarder would be more appropriate than the universal forwarder. I'll need to carefully consider the scenarios provided.
upvoted 0 times
...
Xenia
6 months ago
One practice question had premiums 734.50, 740.90, 754.35, 754.35 for the bands, so this might mirror that.
upvoted 0 times
...

Save Cancel