- (Exam Topic 2)
You plan to migrate an on-premises SAP development system to Azure.
Before the migration, you need to check the usage of the source system hardware, such as CPU, memory, network, etc.
Which transaction should you run from SAP GUI?

1. A. SM51
2. B. DB01
3. C. DB12
4. D. OS07N

Correct Answer: D
SAP transaction OS07N (Remote Operating System Activity) is classified in the Basis Component module under application component Operating System Monitors and runs Monitoring Operating System program RSHOST1N upon execution.

- (Exam Topic 2)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
You have a complex SAP environment that has both ABAP- and Java-based systems. The current on-premises landscapes are based on SAP NetWeaver 7.0 (Unicode and Non-Unicode) running on Windows Server and Microsoft SQL Server.
You need to migrate the SAP environment to a HANA-certified Azure environment.
Solution: You upgrade to SAP NetWeaver 7.4, and then you migrate SAP to Azure by using Azure Site Recovery.
Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A
We need upgrade to SAP NetWeaver 7.4 before the migration. Then Azure Site Recovery is used for the migration to Azure.
Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-architecture

- (Exam Topic 2)
You plan to migrate an SAP environment to Azure.
You need to create a design to facilitate end-user access to SAP applications over the Internet, while
restricting user access to the virtual machines of the SAP application servers. What should you include in the design?

1. A. Configure a public IP address for each SAP application server
2. B. Deploy an internal Azure Standard Load Balancer for incoming connections
3. C. Use an SAP Web Dispatcher to route all incoming connections
4. D. Configure point-to-site VPN connections for each user

Correct Answer: C
A public internet user can reach the SAP Web-Dispatcher over port 443
The SAP Web-Dispatcher can reach the SAP Application server over port 443
The App Subnet accepts traffic on port 443 from 10.0.0.0/24
The SAP Application server sends traffic on port 30015 to the SAP DB server
The DB subnet accepts traffic on port 30015 from 10.0.1.0/24.
Public Internet Access is blocked on both App Subnet and DB Subnet.

References:
https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/

- (Exam Topic 2)
You have an SAP production landscape on-premises and an SAP development landscape on Azure.
You deploy a network virtual appliance to act as a firewall between the Azure subnet and the on-premises network.
Solution: You deploy an Azure Standard Load balancer. Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 2)
You are deploying SAP Fiori lo an SAP environment on Azure.
You are configuring SAML 2.0 for an SAP Fiori instance named FPP that uses client 100 to authenticate to an Azure Active Directory (Azure AD) tenant.
Which provider name should you use to ensure that the Azure AD tenant recognizes the SAP fiori instance?

1. A. ldap://FPP
2. B. https://FPP
3. C. ldap://FPP-100
4. D. https://FPP100

Correct Answer: D
By default, the provider name is in the format <sid><client>. Azure AD expects the name in the format
<protocol>://<name>. We recommend that you maintain the provider name as https://<sid><client> so you can configure multiple SAP Fiori ABAP engines in Azure AD.
Example:

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/sap-fiori-tutorial