HOTSPOT

for each of the following statements, select Yes if the statement is true. Otherwise. select No. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Box 1: Yes

The SAP Azure Enhanced Monitoring Extension builds on top of the Azure Diagnostic extension, which stores its data in an Azure Storage account that you specify.

Box 2: Yes

The Set-AzVMAEMExtension cmdlet updates the configuration of a virtual machine to enable or update the support for monitoring for SAP systems that are installed on the virtual machine. The cmdlet installs the Azure Enhanced Monitoring (AEM) extension that collects the performance data and makes it discoverable for the SAP system. The -OSType specifies the OS. Either Windows or Linux.

Box 3: Yes

References:

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostics-extension-overview

https://docs.microsoft.com/en-us/powershell/module/az.compute/set-azvmaemextension

DRAG DROP

Your on-premises network contains an Active Directory domain.

You have an SAP environment on Azure that runs on SUSE Linux Enterprise Server (SLES) servers.

You configure the SLES servers to use domain controllers as their NTP servers and their DNS servers.

You need to join the SLES servers to the Active Directory domain.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Step 1: Install the samba-winbind package

Install samba-winbind

Step 2: Add realm details to /etc/krb5.conf and /etc/samba/smb.conf

Edit files – best way to do this is to use yast on test machine and copy files from it

In following examples you need to replace EXAMPLE/EXAMPLE.COM/.example.com with your values/settings

/etc/samba/smb.conf

[global]

workgroup = EXAMPLE

usershare allow guests = NO #disallow guests from sharing

idmap gid = 10000-20000

idmap uid = 10000-20000

kerberos method = secrets and keytab

realm = EXAMPLE.COM

security = ADS

template homedir = /home/%D/%U

template shell = /bin/bash

winbind offline logon = yes

winbind refresh tickets = yes

/etc/krb5.conf

[libdefaults]

default_realm = EXAMPLE.COM

clockskew = 300

[realms]

EXAMPLE.COM = {

kdc = PDC.EXAMPLE.COM

default_domain = EXAMPLE.COM

admin_server = PDC.EXAMPLE.COM

}

Step 3: Run net ads join -U administrator

Join the SLES 12 Server to the AD domain

References: https://www.suse.com/support/kb/doc/?id=7018461

HOTSPOT

You are integrating SAP HANA and Azure Active Directory (Azure AD).

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Box 1: Yes

To configure Azure AD single sign-on with SAP HANA, perform the following steps:

HOTSPOT

You are integrating SAP HANA and Azure Active Directory (Azure AD).

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Box 1: Yes

To configure Azure AD single sign-on with SAP HANA, perform the following steps:

HOTSPOT

You are integrating SAP HANA and Azure Active Directory (Azure AD).

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Box 1: Yes

To configure Azure AD single sign-on with SAP HANA, perform the following steps:

HOTSPOT

Your on-premises network contains SAP and non-SAP applications. ABAP-based SAP systems are integrated with IDAP and use user name/password-based authentication for logon. You plan to migrate the SAP applications to Azure.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

DRAG DROP

You deploy an SAP environment on Azure.

You need to grant an SAP administrator read-only access to the Azure subscription. The SAP administrator must be prevented from viewing network information.

How should you configure the role-based access control (RBAC) role definition? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

You are deploying SAP Fiori lo an SAP environment on Azure.

You are configuring SAML 2.0 for an SAP Fiori instance named FPP that uses client 100 to authenticate to an Azure Active Directory (Azure AD) tenant.

Which provider name should you use to ensure that the Azure AD tenant recognizes the SAP fiori instance?

Reveal Solution Hide Solution

You plan to deploy a high availability SAP environment that will use a failover clustering solution.

You have an Azure Resource Manager template that you will use for the deployment. You have the following relevant portion of the template.

What is created by the template?

Reveal Solution Hide Solution