AZ-120 Practice Test

Sample AZ-120 Practice Questions

10 real questions from the free AZ-120bank. Pick an answer in your head, then open “Show answer” for the explanation.

1. 1. A customer needs an Azure sizing recommendation for a new three-tier S/4HANA production system. They know the application-tier SAPS requirement and the HANA database memory requirement. Which unit does SAP use to express the application-tier throughput requirement that you must match against certified Azure VM types?

   • A. SAPS
   • B. IOPS
   • C. vCPU count alone
   • D. GB of allocated RAM
   Show answer

   Correct answer: A

   SAP expresses business transaction throughput in SAPS (SAP Application Performance Standard), and Azure VM throughput for certified SAP VM types is documented against SAPS in SAP Note 1928533. IOPS measures storage performance, not compute throughput. vCPU count alone ignores clock speed and architecture differences between VM families. RAM size determines whether a VM fits the HANA memory footprint but does not by itself express application-tier throughput.

2. 2. A customer wants to use Azure Data Factory to periodically extract data from their SAP system running under RISE with SAP ECS, and the data connector requires a self-hosted integration runtime to reach the SAP system over the private network peering. Whose Azure subscription should host and operate the VM running that self-hosted integration runtime?

   • A. SAP's RISE/ECS-managed subscription, since SAP is responsible for customer-side data integration tooling
   • B. The customer's own Azure subscription - the self-hosted integration runtime communicates with SAP over the established vnet peering, and the customer deploys and operates it
   • C. A brand-new, unrelated third-party Azure subscription that has no network peering to either the customer's environment or SAP's RISE environment
   • D. No subscription is needed, because Data Factory can reach RISE-managed SAP systems directly over the public internet, bypassing the integration runtime and vnet peering entirely
   Show answer

   Correct answer: B

   The self-hosted integration runtime VM used by Data Factory (or Synapse) to reach an SAP RISE/ECS system runs in the customer's own subscription and virtual network, connected via the established vnet peering; deployment and operation of that VM is explicitly the customer's responsibility, not SAP's. SAP RISE/ECS exposes communication ports but is not responsible for customer-side integration tooling. A disconnected third-party subscription would have no path to the SAP system's private network. Data Factory cannot reach the RISE-managed private network over the public internet without the integration runtime and peering in place.

3. 3. A customer asks what a VM extension for SAP is used for once it is installed on an SAP application or database VM in Azure. What is its primary purpose?

   • A. It automatically resizes the VM to a larger SKU whenever CPU utilization exceeds 80 percent
   • B. It collects Azure infrastructure performance counters (CPU, disk, network) and exposes them to the SAP Host Agent
   • C. It encrypts network traffic between the application server and the database server
   • D. It replaces the need for an operating system license on the VM
   Show answer

   Correct answer: B

   The Azure VM extension for SAP (Azure Enhanced Monitoring, AEM) collects Azure infrastructure-level performance data and makes it available to the SAP Host Agent so SAP transactions like ST06 and OS07N show accurate host metrics. It does not perform autoscaling, does not affect OS licensing, and is not a network encryption mechanism.

4. 4. A customer uses SAP Cloud Identity Authentication Services (IAS) in front of several SAP BTP applications and wants Microsoft Entra ID to remain the single, central identity provider for end users across the whole organization, including these BTP applications, without duplicating identity management inside SAP. What is the recommended integration pattern?

   • A. Create a completely separate, unrelated set of user accounts directly inside SAP IAS for BTP access
   • B. Configure Microsoft Entra ID to forward authentication requests to IAS as the final identity source of truth
   • C. Configure SAP IAS as a proxy identity provider that forwards authentication requests to Microsoft Entra ID, which acts as the central user store and identity provider
   • D. Disable Microsoft Entra ID entirely for any user who also needs BTP access
   Show answer

   Correct answer: C

   The documented pattern has SAP Cloud Identity Authentication Services act as a proxy identity provider that forwards authentication to Microsoft Entra ID, keeping Entra ID as the single central identity provider while still meeting SAP BTP's expected federation pattern. Creating a separate account set duplicates identity management, which the customer wants to avoid. Reversing the direction is not the documented pattern. Disabling Entra ID for BTP users contradicts the goal of central identity.

5. 5. A startup wants only billing and subscription management assistance for their brand-new Azure subscription and does not need any technical break-fix support yet. Which Azure support plan already covers billing and subscription management at no extra charge?

   • A. Professional Direct support
   • B. Unified support
   • C. Premier support
   • D. Basic support
   Show answer

   Correct answer: D

   Basic support is included automatically and at no charge with every Azure subscription, and it covers billing and subscription management questions. Professional Direct, Unified, and Premier are all paid tiers intended for customers who additionally need technical break-fix support and proactive guidance, which this startup does not yet require.