Explanation:

Box 1: User2

Note:
Backup Contributor - This role has all permissions to create and manage backup except deleting Recovery Services vault and giving access to others. Imagine this role as admin of backup management who can do every backup management operation.
Box 2: User3
The User Access Administrator role lets you manage user access to Azure resources.
Reference:
https://docs.microsoft.com/en-us/azure/backup/backup-rbac-rs-vault
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
Topic 2, Litware, inc Case Study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all question include on this exam in the time provided.
To answer the question included in a case study, you will need to reference information that is provided in the case study. Case studies might contain and other resources that provide information about the scenario that is describe in the case study. Each question is independent of the other question in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answer and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To Start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such the content requirements, existing environment, and problem statements, if the case study has an All Information tab, note that the information displayed its identical to the information displayed on the subsequence tabs. When you are ready to answer a question click the Question button to return to the question.
Overview
Litware, inc. is an international manufacturing company that has 3,000 employees.
Litware has two main offices. The offices are located in Miami, FL, and Madrid Spain.
Existing Environment
Infrastructure
Litware currently uses a third-party provider to host a datacenter in Miami and a disaster recovery datacenter in Chicago, it.
The network contains an Active Directory domain named litware.com.Litware has two third-party applications hosted in Azure.
Litware already implemented a site-to-site VPN connection between the on-premises network and Azure.
SAP Environment
Litware currently runs the following SAP products:
* Enhancement Pack 6 for SAP ERP Central Component 6.0 (SAP ECC 6.0)
* SAP Extended Warehouse Management (SAP EWM)
* SAP Business Warehouse (SAP BW)
* SAP NetWeaver Process Integration (PI)
* SAP Solution Manager
All users run on the Windows Server platform. All databases use Microsoft SQL Server. Currently, you have
20 production servers.
You have 30 non-production servers including five testing severs, five development servers, five quality assurance (QA) servers, and 15 pre=production servers.
Currently, all SAP applications are in the litware.com domain.
Problem Statements
The current version of SAP ECC has a transaction that, when run in batches overnight, tables eight hours to complete. You confirm that upgrading to SAP Business Suite on HANA will improve performance because of code changes and the SAP HANA database platform.
Litware is dissatisfied with the performance of its current hosted infrastructure vendor. Litware experienced several hardware failures and the vendor struggled to adequately its 24/7 business operation.
Business Goals
Litware identifies the following business goals:
* Increase the performance of SAP ECC application by moving to SAP HANA. All other database will remain on SQL Server.
* Move away from the current infrastructure vendor to increase the stability and availability of the SAP services.
* Use the new Environment, Health and Safety (EH&S) in Recipe Management function.
* Ensure that any migration activities can be completed within a 48-hour period during a weekend.
Planned Changes
Litware identifies the following planned changes:
* Migrate SAP to Azure.
* Upgrade and migrate SAP ECC to SAP business Suite on HANA Enhancement Pack 8.
Technical requirements
Litware identifies the following technical requirements:
* Implement automated backups.
* Support load testing during the migrate.
* Identify opportunities to reduces costs during the migration.
* Continue to use the Litware.com domain for all SAP landscapes.
* Ensure that all SAP applications and databases are highly available.
* Remove all SAP components from the on-premises network once the migrate is complete.
* Minimize the purchase of additional SAP licenses. SAP HANA license were already purchased.
* Ensure that SAP can provide technical support for all the SAP landscapes deployed to Azure.

Azure Policy enables you to set policies to conform to the GDPR. Azure Policy is generally available today at no additional cost to Azure customers. You can use Azure Policy to define and enforce policies that help your cloud environment become compliant with internal policies as well as external regulations.
Azure Policy is deeply integrated into Azure Resource Manager and applies across all resources in Azure.
Individual policies can be grouped into initiatives to quickly implement multiple rules. You can also use Azure Policy in a wide range of compliance scenarios, such as ensuring that your data is encrypted or remains in a specific region as part of GDPR compliance. Microsoft is the only hyperscale cloud provider to offer this level of policy integration built in to the platform for no additional charge.
References:
https://azure.microsoft.com/de-de/blog/new-capabilities-to-enable-robust-gdpr-compliance/

When you set up disaster recovery for on-premises VMware VMs, Site Recovery needs access to the vCenter Server/vSphere host so that the Site Recovery process server can automatically discover VMs, and fail them over as needed. By default the process server runs on the Site Recovery configuration server. Add an account for the configuration server to connect to the vCenter Server/vSphere host.
References:
https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-manage-vcenter