Planning and Administering Microsoft Azure for SAP Workloads — Question 4

You plan to migrate an SAP environment to Azure.
You need to design an Azure network infrastructure to meet the following requirements:
✑ Prevent end users from accessing the database servers.
✑ Isolate the application servers from the database servers.
✑ Ensure that end users can access the SAP systems over the Internet.
✑ Minimize the costs associated to the communications between the application servers and database servers.
Which two actions should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Answer options

• A. In the same Azure virtual network, segregate the SAP application servers and database servers by using different subnets and network security groups.
• B. Segregate the SAP application servers and database servers by using different Azure virtual networks.
• C. Create a site-to-site VPN between the on-premises network and Azure.
• D. Configure an internal Azure Standard Load Balancer for incoming connections.
• E. Configure Azure Traffic Manager to route incoming connections.

Correct answer: A, C

Explanation

Option A is correct because using different subnets and network security groups within the same Azure virtual network effectively isolates the application servers from the database servers while preventing end user access to the database. Option C is also correct as a site-to-site VPN allows secure communication between on-premises networks and Azure, facilitating the necessary connectivity. Options B, D, and E do not meet the requirements specified in the question.