Planning and Administering Microsoft Azure for SAP Workloads — Question 91

You plan to deploy an SAP landscape on Azure that will use SAP HANA on Azure (Large Instances).

You need to ensure that outbound traffic from the application tier can flow only to the database tier.

What should you use?

Answer options

• A. application security groups
• B. network security groups (NSGs)
• C. Azure Firewall
• D. network virtual appliances (NVAs)

Correct answer: A

Explanation

The correct answer is A, application security groups, as they allow you to control outbound traffic between tiers in a more granular way, specifically for applications. The other options, while capable of managing security, do not provide the same level of application-specific traffic filtering needed for this scenario.