Home » Microsoft » AZ-120 v.2 » What should you recommend?
You plan to migrate an SAP environment to Azure.
You need to create a design to facilitate end-user access to SAP applications over the Internet, while restricting user access to the virtual machines of the SAP application servers.
What should you include in the design?
A. Configure a public IP address for each SAP application server
B. Deploy an internal Azure Standard Load Balancer for incoming connections
C. Use an SAP Web Dispatcher to route all incoming connections
D. Configure point-to-site VPN connections for each user
Correct Answer: C
Explanation/Reference:
Explanation:
1. A public internet user can reach the SAP Web-Dispatcher over port 443 2. The SAP Web-Dispatcher can reach the SAP Application server over port 443 3. The App Subnet accepts traffic on port 443 from 10.0.0.0/24 4. The SAP Application server sends traffic on port 30015 to the SAP DB server 5. The DB subnet accepts traffic on port 30015 from 10.0.1.0/24.
6. Public Internet Access is blocked on both App Subnet and DB Subnet.
References:
https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/
AZ-120: Planning and Administering Microsoft Azure for SAP Workloads
Free dumps for AZ-120 in PDF format also you can read online.
High quality AZ-120 PDF and software. VALID exam to help you pass.
|
|