Correct Answer: Enable TCP Reset on Idle (tcp_reset_idle) on the ILB rule, and configure SAP kernel parameters (KEEPALIVE) to detect stale connections faster
After a HANA failover, existing TCP connections from app servers to the old primary are stale. Two fixes work together: (1) **TCP Reset on Idle** on the ILB rule sends RST packets ...
Correct Answer
Enable TCP Reset on Idle (tcp_reset_idle) on the ILB rule, and configure SAP kernel parameters (KEEPALIVE) to detect stale connections faster
Why This Answer Is Correct
After a HANA failover, existing TCP connections from app servers to the old primary are stale. Two fixes work together: (1) **TCP Reset on Idle** on the ILB rule sends RST packets to terminate stale connections that exceed the idle timeout, (2) **SAP kernel KEEPALIVE settings** (e.g., `enque/encni/set_so_keepalive = true`, OS-level `tcp_keepalive_time`) probe the connection health and detect failures faster. Traffic Manager adds DNS TTL-based delay. A 1-second health probe interval is too aggressive and may cause false failovers.
This question evaluates your knowledge of High Availability — a core concept tested in Microsoft Certified: Azure for SAP Workloads Specialty (AZ-120). Understanding High Availability is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You are configuring SAP HANA System Replication (HSR) across two different Azure Availability Zones in the same region. What replication mode should you use to ensure zero data loss while minimizing the impact on the primary node's performance?
You are designing the network topology for an SAP landscape on Azure. To ensure high availability of the SAP ASCS/SCS instance across two VMs in an availability set, what networking component is required to route traffic to the active node?
When configuring a SUSE Linux Enterprise Server (SLES) Pacemaker cluster for SAP ASCS High Availability in Azure, what resource is used to reliably fence (STONITH) a failed node?
You are migrating a legacy SAP ECC system running on Windows Server to Azure. You want to ensure the VMs automatically restart on healthy hardware if an underlying Azure host fails. What is this capability called?
Your organization uses Azure Active Directory (Entra ID) for authentication. You want to configure Single Sign-On (SSO) for your SAP Fiori launchpad. Which standard protocol is natively supported by both SAP Fiori (ABAP front-end) and Azure AD for this purpose?