Planning and Administering Microsoft Azure for SAP Workloads — Question 90

You have an existing SAP landscape on Azure. All SAP virtual machines are on the same virtual network. The SAP application servers, SAP management servers, and SAP database servers are each on their own subnet.

You need to ensure that only the application and management servers can access the subnet to which the database servers connect.

What should you configure?

Answer options

• A. Azure AD service principals
• B. Azure Key Vault secrets
• C. network security groups (NSGs)
• D. Azure Application Gateway and firewall rules

Correct answer: C

Explanation

The correct answer is C, as network security groups (NSGs) are used to control inbound and outbound traffic to network interfaces or subnets, thus allowing you to restrict access to the database subnet. Options A and B are unrelated to controlling network traffic, while option D, although it involves security, adds complexity without directly addressing the specific subnet access requirements.