Description

For learners studying for Microsoft Certified: Azure for SAP Workloads Specialty
What you'll learn
Practice pack content
Domain 1 - Migrate SAP workloads to Azure
Domain 2 – Design and implement an infrastructure to support SAP workloads on Azure
Domain 3 – Design and implement high availability and disaster recovery (HADR)
Domain 4 – Maintain SAP workloads on Azure
Final Exam Simulators
Exam Study Guide
Interactive Flashcards
Try 3 Microsoft Azure for SAP Workloads AZ-120 practice questions
Choose an answer, explore the explanation, and see why the other options are less suitable. Three short scenarios. No sign-in required.
Migrate SAP workloads to AzureIdentify requirements for target infrastructure · Subscription and quota limits
1. A quota blocker before SAP migration
During an SAP HANA migration, the target Azure VM size is SAP-certified and offered in the chosen region. The subscription has sufficient total regional vCPUs, but predeployment validation reports a VM-family vCPU quota error for that size. What must the architect do before scheduling the cutover?
- Increase only the subscription's total regional vCPU quota, leaving the VM-family limit unchanged.
- Request an increase to that VM family's regional vCPU quota and confirm it before the migration.
- Purchase Reserved VM Instances for the selected series to remove the subscription quota restriction.
- Deploy the VMs into an availability set so quota is calculated at the availability-set scope.
Answer and full explanation
Correct answer: B — Request and confirm the appropriate VM-family vCPU quota increase.
Why B is correct
Azure enforces both total regional and VM-family vCPU quotas for standard virtual machines within a subscription and region. The scenario explicitly says the total regional limit is sufficient, so the family-specific limit is the blocker. A quota increase request for the selected VM family in the target region addresses that limit. The team should obtain confirmation before committing to the SAP cutover window. Quota approval does not guarantee that the VM size has deployment capacity at the desired time, so capacity planning remains necessary.
Why the other options are less suitable
- A — Total regional quota only: The subscription already has enough total regional vCPUs. Raising that limit alone leaves the separate VM-family quota violation unresolved.
- C — Reserved VM Instances: Reservations can reduce eligible compute charges but do not bypass the subscription's vCPU quota enforcement. The family limit still needs to support the planned deployment.
- D — Availability set: Availability sets help distribute VMs across fault and update domains where applicable. They do not change the scope at which Azure enforces the VM-family vCPU quota.
Key takeaway: Verify both regional and VM-family quotas before SAP cutover; pricing commitments and availability configurations do not remove quota restrictions.
Read two more sample questions
Design and implement an infrastructure to support SAP workloads on AzureDesign and implement networking for SAP on Azure virtual machines · ExpressRoute
2. Private connectivity to SAP virtual machines
A manufacturer is moving SAP application servers to Azure while retaining an integration system in its on-premises data center. An ExpressRoute circuit is already provisioned, and SAP traffic must reach the Azure VMs' private IP addresses without traversing the public internet. Which configuration completes the required network path?
- Deploy a site-to-site VPN gateway and route SAP integration traffic through an internet-based IPsec tunnel.
- Enable ExpressRoute Microsoft peering and advertise the SAP subnet using public service prefixes.
- Create an Azure Storage private endpoint and direct SAP application traffic through that endpoint.
- Enable Azure private peering and connect the SAP virtual network with an ExpressRoute virtual network gateway.
Answer and full explanation
Correct answer: D — Use Azure private peering with an ExpressRoute virtual network gateway.
Why D is correct
ExpressRoute Azure private peering is designed to route between an on-premises network and private IP addresses in Azure virtual networks. With the circuit provisioned, private peering provides the relevant routing domain for the SAP VMs. An ExpressRoute virtual network gateway connects the SAP virtual network to that circuit. Unlike an internet-based site-to-site VPN, the ExpressRoute circuit provides private connectivity through the connectivity provider. The team must still validate route exchange, network security rules, and the bandwidth and latency requirements of the SAP integration traffic.
Why the other options are less suitable
- A — Internet-based VPN: An IPsec VPN can protect traffic in transit and may serve as a backup connection. Its primary data path traverses the internet, contrary to the stated requirement.
- B — Microsoft peering: Microsoft peering is for reaching supported Microsoft public services through ExpressRoute. Accessing Azure VM private IPs through the virtual network calls for Azure private peering instead.
- C — Storage private endpoint: A private endpoint can expose a supported Azure Storage resource through a private address. It does not connect the on-premises integration server to the SAP application VMs or establish the required WAN route.
Key takeaway: Azure private peering plus the appropriate ExpressRoute virtual network gateway connects on-premises systems to Azure VM private addresses.
Design and implement high availability and disaster recovery (HADR)Design and implement a high availability solution for SAP on Azure virtual machines · Pacemaker and STONITH
3. Preventing split-brain during SAP HANA failover
A business runs two SAP HANA virtual machines on SUSE Linux with HANA System Replication, Pacemaker, and an internal Azure Load Balancer. During a network-partition test, each node can lose contact with its peer; a failed or isolated node must be prevented from continuing to run the protected database during takeover. Which additional control best addresses this risk?
- Enable Pacemaker STONITH with a supported Azure fencing mechanism and validate fencing during failover tests.
- Shorten the Azure Load Balancer health-probe interval so the healthy node is selected more quickly.
- Place both virtual machines in different availability zones without configuring cluster-level node fencing.
- Deploy Azure Site Recovery for both HANA virtual machines and invoke its recovery plan for each local failover.
Answer and full explanation
Correct answer: A — Configure and test Pacemaker STONITH fencing.
Why A is correct
A network partition can create uncertainty about which node may safely host the active SAP HANA workload. Pacemaker uses STONITH fencing to isolate a node so that conflicting owners do not keep the protected resource active. Azure-supported fencing methods, such as an appropriately configured Azure fence agent or STONITH Block Device, provide the required node-level control. The team must enable fencing and verify that it succeeds under failure conditions rather than assuming replication alone makes takeover safe. This directly addresses the risk of split-brain behavior during local high-availability failover.
Why the other options are less suitable
- B — Faster load-balancer probes: Health probes help route connections to a healthy service endpoint. Changing their frequency does not fence a node that may still access or operate the database.
- C — Availability zones: Zones improve resilience to certain infrastructure failures by separating resources. Geographic or infrastructure separation alone does not resolve cluster ownership after a network partition.
- D — Azure Site Recovery: Site Recovery supports disaster-recovery planning for supported infrastructure components. A recovery plan is not a replacement for Pacemaker's immediate node-fencing safeguards in a local HANA HA cluster.
Key takeaway: HANA replication and load balancing do not replace tested STONITH fencing in a Pacemaker high-availability cluster.
Preview complete
You have tried all three samples
Review the explanations or try the samples again. This short preview covers only a small part of the exam objectives.
Your sample score resets when this page reloads.
Your practice pack includes
More ways to make each study session count
Focus on a topic, practise under a time limit, or return to the supporting resources before your next attempt.
Domain-based practice
Timed practice sets
Study guide
Flashcards
Requirements
- Microsoft targets architects and engineers experienced with SAP HANA, NetWeaver, Azure networking, storage, high availability and disaster recovery. Azure Administrator Associate certification is strongly recommended, not presented as a mandatory prerequisite.
- If SAP migration, ExpressRoute, Pacemaker or Azure Monitor is unfamiliar, combine practice questions with Microsoft Learn training and practical exercises in your own authorized environment; labs are not implied to be included.
- Access this online ExamsDigest practice product using an internet-connected device, a current web browser and an ExamsDigest account. Online connectivity is required to use the product.
Know the exam you’re studying for
These details describe Microsoft's official Microsoft Certified: Azure for SAP Workloads Specialty exam.
What our students say
"The AZ-120 practice questions helped me understand how to approach SAP migration and Azure infrastructure scenarios. I especially appreciated the detailed explanations because they showed me exactly where I was making mistakes and what I needed to study next."
James Mitchell
✓ Verified Review
"I was having trouble with SAP HANA high availability and disaster recovery concepts. The practice exams made those topics much easier to understand, and the real-world scenarios helped me identify my weak areas before exam day."
Sarah Thompson
✓ Verified Review
"I tried a few other AZ-120 study resources before finding ExamsDigest. What I liked most was how clearly each answer was explained. Instead of memorizing questions, I actually started understanding the reasoning behind Azure architecture and SAP workload decisions."
Daniel Roberts
✓ Verified Review
Your questions, answered.
Which Microsoft exam and objectives does this practice target?
This practice targets Exam AZ-120: Planning and Administering Azure for SAP Workloads, the exam associated with Microsoft Certified: Azure for SAP Workloads Specialty. The examples reflect the published skills measured as of April 17, 2026. Check the exam code and latest study-guide revision before purchasing or booking, especially if you will sit a localized exam, because Microsoft updates language versions on different schedules.
Who should use AZ-120 practice questions?
AZ-120 is designed for architects and engineers who design, migrate and manage enterprise SAP landscapes on Azure. Experience with SAP HANA or NetWeaver, virtual machines, storage, networking, high availability and recovery is especially useful. Microsoft strongly recommends Azure Administrator Associate certification, although the certification page describes that as guidance rather than a mandatory prerequisite. These scenarios assume meaningful familiarity with both SAP operations and Azure infrastructure.
How should I study SAP on Azure alongside the practice questions?
Use the published AZ-120 study guide to organize your preparation by objective, then connect question decisions to Microsoft Learn documentation and practical work in your own environment. For example, review supported SAP virtual machines, validate quota assumptions, examine ExpressRoute private peering and test Pacemaker fencing safely. Combine this with migration planning, monitoring and backup exercises where you have permission and resources; question practice alone cannot replace implementation experience.
How should I review questions I answer incorrectly?
Start by identifying the decisive business or technical requirement in each scenario, such as a VM-family quota, a private-IP routing constraint or a node-fencing requirement. Compare your choice with the explanation and the reasons each alternative is less suitable. Revisit the corresponding AZ-120 objective and technical documentation, then retry a similar problem. Use weak-topic patterns to guide study rather than treating one practice percentage as a pass forecast.
What question types and timing should I expect on AZ-120?
Microsoft lists 100 minutes to complete AZ-120 and notes that the proctored exam may contain interactive components. Microsoft certification exams can use several item formats, including case studies and drag-and-drop, and some exams may contain labs; the presence of labs is not guaranteed for AZ-120. The three examples on this page use single-answer multiple choice, so they are only a limited preview of exam-style decision making.
Does this practice pack include exam registration or award the Microsoft certification?
Working through practice questions does not itself register you for AZ-120, issue an official exam result or award a Microsoft credential. Official exam registration and certification are managed through Microsoft’s certification process, and the certification requires meeting its examination requirements. Check the actual ExamsDigest product terms for any voucher-related provision rather than assuming one is included. Microsoft also requires eligible specialty certifications to be renewed periodically after they are earned.
30-day conditional refund policy
Eligible requests must be made within 30 calendar days, with no more than 20% of any included simulator completed. The purchase must not already be refunded or under a payment dispute or chargeback. Other provisions apply; mandatory consumer rights remain unaffected.
Useful links for your preparation



