AZ-120 Certification Exam Guide + Practice Questions Updated 2026

Home / Microsoft / AZ-120

Comprehensive AZ-120 certification exam guide covering exam overview, skills measured, preparation tips, and practice questions with detailed explanations.

AZ-120 Exam Guide

This AZ-120 exam focuses on practical knowledge and real-world application scenarios related to the subject area. It evaluates your ability to understand core concepts, apply best practices, and make informed decisions in realistic situations rather than relying solely on memorization.

This page provides a structured exam guide, including exam focus areas, skills measured, preparation recommendations, and practice questions with explanations to support effective learning.

 

Exam Overview

The AZ-120 exam typically emphasizes how concepts are used in professional environments, testing both theoretical understanding and practical problem-solving skills.

 

Skills Measured

  • Understanding of core concepts and terminology
  • Ability to apply knowledge to practical scenarios
  • Analysis and evaluation of solution options
  • Identification of best practices and common use cases

 

Preparation Tips

Successful candidates combine conceptual understanding with hands-on practice. Reviewing measured skills and working through scenario-based questions is strongly recommended.

 

Practice Questions for AZ-120 Exam

The following practice questions are designed to reinforce key AZ-120 exam concepts and reflect common scenario-based decision points tested in the certification.

Question#1

HOTSPOT
You deploy an Azure Internal load balancer.
You deploy a node of an SAP NetWeaver 7.4 ABAP system named SP1.
You plan to deploy a second node.
You need to verify that the health probe port is configured for the cluster. The cluster IP address resource name is SAP SP1 IP.
How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


A. 

Explanation:
Box 1: Get-ClusterResource
Example:
Get-ClusterResource -Name $SAPIPresourceName | Get-ClusterParameter
Write-Output " "
Write-Output "Current probe port property of the SAP cluster resource '$SAPIPresourceName' is '$OldProbePort'."
Write-Output " "
Write-Output "Setting the new probe port property of the SAP cluster resource '$SAPIPresourceName' to '$ProbePort' ..."
Write-Output " "
Box 2: Get-ClusterParameter
Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-high-availability-installation-wsfc-shared-disk

Question#2

You are deploying SAP Fiori lo an SAP environment on Azure.
You are configuring SAML 2.0 for an SAP Fiori instance named FPP that uses client 100 to authenticate to an Azure Active Directory (Azure AD) tenant.
Which provider name should you use to ensure that the Azure AD tenant recognizes the SAP Fiori instance?

A. ldap://FPP
B. https://FPP
C. ldap://FPP-100
D. https://FPP100

Explanation:
By default, the provider name is in the format <sid><client>. Azure AD expects the name in the format <protocol>://<name>. We recommend that you maintain the provider name as https://<sid><client> so you can configure multiple SAP Fiori ABAP engines in Azure AD.
Example:



Reference: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/sap-fiori-tutorial

Question#3

You plan to deploy a high availability SAP environment that will use a failover clustering solution.
You have an Azure Resource Manager template that you will use for the deployment.
You have the following relevant portion of the template.



What is created by the template?

A. a zonal frontend IP address for the internal Azure Standard Load Balancer
B. a zone-redundant frontend IP address for the internal Azure Basic Load Balancer
C. a zone -redundant public IP address for the internal load balancer
D. a zone-redundant frontend IP address for the internal Azure Standard Load Balancer

Explanation:
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-standard-availability-zones

Question#4

DRAG DROP
Your on-premises network contains an Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant by using Microsoft Entra Connect.
You plan to deploy an on-premises instance of SAP NetWeaver that will integrate with SAP Cloud Identity Services.
You need to configure an authentication solution for the deployment.
The solution must meet the following requirements:
• Ensure that users can authenticate to NetWeaver and SAP Cloud Identity Services by using their AD DS domain credentials.
• Enforce multi-factor authentication (MFA).
• Minimize administrative efforts.
What should you include in the solution? To answer, drag the appropriate components to the correct platforms. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.


A. 

Question#5

DRAG DROP
You have a bill of materials (BOM) that describes SAP deployments.
You plan to automate the implementation of an SAP S4/HANA deployment to Azure by using the SAP deployment automation framework on Azure.
You need to generate the SAP application templates for the planned implementation and update the BOM.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.


A. 

Disclaimer

This page is for educational and exam preparation reference only. It is not affiliated with Microsoft, Microsoft Certified: Azure for SAP Workloads Specialty, or the official exam provider. Candidates should refer to official documentation and training for authoritative information.

Exam Code: AZ-120Q & A: 307 Q&AsUpdated:  2026-04-07

  Access Additional AZ-120 Practice Resources