* A public internet user can reach the SAP Web-Dispatcher over port 443
* The SAP Web-Dispatcher can reach the SAP Application server over port 443
* The App Subnet accepts traffic on port 443 from 10.0.0.0/24
* The SAP Application server sends traffic on port 30015 to the SAP DB server
* The DB subnet accepts traffic on port 30015 from 10.0.1.0/24.
* Public Internet Access is blocked on both App Subnet and DB Subnet.

References:
https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/
Topic 1, Litware, inc
Case Study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all question include on this exam in the time provided.
To answer the question included in a case study, you will need to reference information that is provided in the case study. Case studies might contain and other resources that provide information about the scenario that is describe in the case study. Each question is independent of the other question in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answer and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To Start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such the content requirements, existing environment, and problem statements, if the case study has an All Information tab, note that the information displayed its identical to the information displayed on the subsequence tabs. When you are ready to answer a question click the Question button to return to the question.
Overview
Litware, inc. is an international manufacturing company that has 3,000 employees.
Litware has two main offices. The offices are located in Miami, FL, and Madrid Spain.
Existing Environment
Infrastructure
Litware currently uses a third-party provider to host a datacenter in Miami and a disaster recovery datacenter in Chicago, it.
The network contains an Active Directory domain named litware.com.Litware has two third-party applications hosted in Azure.
Litware already implemented a site-to-site VPN connection between the on-premises network and Azure.
SAP Environment
Litware currently runs the following SAP products:
* Enhancement Pack 6 for SAP ERP Central Component 6.0 (SAP ECC 6.0)
* SAP Extended Warehouse Management (SAP EWM)
* SAP Business Warehouse (SAP BW)
* SAP NetWeaver Process Integration (PI)
* SAP Solution Manager
All users run on the Windows Server platform. All databases use Microsoft SQL Server. Currently, you have 20 production servers.
You have 30 non-production servers including five testing severs, five development servers, five quality assurance (QA) servers, and 15 pre=production servers.
Currently, all SAP applications are in the litware.com domain.
Problem Statements
The current version of SAP ECC has a transaction that, when run in batches overnight, tables eight hours to complete. You confirm that upgrading to SAP Business Suite on HANA will improve performance because of code changes and the SAP HANA database platform.
Litware is dissatisfied with the performance of its current hosted infrastructure vendor. Litware experienced several hardware failures and the vendor struggled to adequately its 24/7 business operation.
Business Goals
Litware identifies the following business goals:
* Increase the performance of SAP ECC application by moving to SAP HANA. All other database will remain on SQL Server.
* Move away from the current infrastructure vendor to increase the stability and availability of the SAP services.
* Use the new Environment, Health and Safety (EH&S) in Recipe Management function.
* Ensure that any migration activities can be completed within a 48-hour period during a weekend.
Planned Changes
Litware identifies the following planned changes:
* Migrate SAP to Azure.
* Upgrade and migrate SAP ECC to SAP business Suite on HANA Enhancement Pack 8.
Technical Requirements
Litware identifies the following technical requirements:
* Implement automated backups.
* Support load testing during the migrate.
* Identify opportunities to reduces costs during the migration.
* Continue to use the Litware.com domain for all SAP landscapes.
* Ensure that all SAP applications and databases are highly available.
* Remove all SAP components from the on-premises network once the migrate is complete.
* Minimize the purchase of additional SAP licenses. SAP HANA license were already purchased.
* Ensure that SAP can provide technical support for all the SAP landscapes deployed to Azure.

Explanation:
Box 1: Azure Site Recovery
Microsoft Azure Site Recovery (ASR) now supports SUSE Linux Enterprise Server 11 SP3/SP4 and SUSE Linux Enterprise Server 12 SP1/SP2/SP3. This is great for customers that are planning to migrate systems to Microsoft Azure or customers who need to have a business continuity strategy for their Azure deployments.
Azure Site Recovery enables SUSE customers to migrate their non-Azure virtual machines or physical servers to Microsoft Azure virtual machines.
Box 2: System Copy for SAP Systems
In order to migrate an existing SAP HANA system into Azure, a SAP homogeneous system copy can be performed.
Reference:
https://www.suse.com/c/asr_supports_suse/
https://www.netapp.com/us/media/tr-4746.pdf

Explanation:
Box 1: No
Box 2: Yes
The minimum SAP HANA certified conditions for the different storage types are:
Azure Premium SSD - /hana/log is required to be cached with Azure Write Accelerator. The /hana/data volume could be placed on Premium SSD without Azure Write Accelerator or on Ultra disk Box 3: Yes References:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-vm-operations-storage

Explanation
Both R3load and SSMA can be used to migrate from DB2 to SQL Server. In the options there is not SSMA, but SSMS, the SSMS cannot be use to migrate DB2 to SQL Server. please refer to:
https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/sap-os-db-migration-to-sql-server-faq/b
https://sapnwnewbie.blogspot.com/2013/07/osdb-migration-cmd-str-toc-ext-r3load.html
https://docs.microsoft.com/en-us/sql/ssma/sql-server-migration-assistant?view=sql-server-ver15
https://docs.microsoft.com/en-us/sql/ssms/sql-server-management-studio-ssms?view=sql-server-ver15

Explanation:
Box 1: Yes
The SAP Azure Enhanced Monitoring Extension builds on top of the Azure Diagnostic extension, which stores its data in an Azure Storage account that you specify.
Box 2: Yes
The Set-AzVMAEMExtension cmdlet updates the configuration of a virtual machine to enable or update the support for monitoring for SAP systems that are installed on the virtual machine. The cmdlet installs the Azure Enhanced Monitoring (AEM) extension that collects the performance data and makes it discoverable for the SAP system.
The -OSType specifies the OS. Either Windows or Linux.
Box 3: Yes
References:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostics-extension-overview
https://docs.microsoft.com/en-us/powershell/module/az.compute/set-azvmaemextension