Correct Answer: Submit a policy exception request to the Cloud Platform team, documenting the SAP HANA certification requirement for M-series, and request the policy be updated or an exemption be granted for the SAP resource group
Azure Policy exemptions are the proper mechanism for legitimate exceptions. The process: (1) Document the business and technical requirement (SAP HANA requires M-series per SAP cer...
Correct Answer
Submit a policy exception request to the Cloud Platform team, documenting the SAP HANA certification requirement for M-series, and request the policy be updated or an exemption be granted for the SAP resource group
Why This Answer Is Correct
Azure Policy exemptions are the proper mechanism for legitimate exceptions. The process: (1) Document the business and technical requirement (SAP HANA requires M-series per SAP certification), (2) Request a policy exemption scoped to the specific resource group or subscription containing SAP workloads, (3) The exemption is recorded, audited, and time-bounded. Deploying to a different subscription bypasses governance but creates management sprawl. Tag manipulation to avoid policy is a security violation. Blueprints assign policies — they don't override them.
This question evaluates your knowledge of High Availability — a core concept tested in Microsoft Certified: Azure for SAP Workloads Specialty (AZ-120). Understanding High Availability is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You are configuring SAP HANA System Replication (HSR) across two different Azure Availability Zones in the same region. What replication mode should you use to ensure zero data loss while minimizing the impact on the primary node's performance?
You are designing the network topology for an SAP landscape on Azure. To ensure high availability of the SAP ASCS/SCS instance across two VMs in an availability set, what networking component is required to route traffic to the active node?
When configuring a SUSE Linux Enterprise Server (SLES) Pacemaker cluster for SAP ASCS High Availability in Azure, what resource is used to reliably fence (STONITH) a failed node?
You are migrating a legacy SAP ECC system running on Windows Server to Azure. You want to ensure the VMs automatically restart on healthy hardware if an underlying Azure host fails. What is this capability called?
Your organization uses Azure Active Directory (Entra ID) for authentication. You want to configure Single Sign-On (SSO) for your SAP Fiori launchpad. Which standard protocol is natively supported by both SAP Fiori (ABAP front-end) and Azure AD for this purpose?