AZ-120 Exam Guide: Your Ultimate Path to Azure SAP Workloads Certification

The intersection of SAP enterprise software and Microsoft Azure cloud infrastructure represents one of the most specialized and financially rewarding niches in the entire enterprise technology landscape. Organizations that have invested decades and hundreds of millions of dollars in SAP landscapes are increasingly migrating those mission-critical workloads to Azure, driven by the promise of improved scalability, reduced infrastructure management burden, enhanced disaster recovery capabilities, and the ability to leverage Azure’s advanced analytics and artificial intelligence services alongside their core SAP systems. The professionals who understand both the SAP ecosystem and the Azure platform deeply enough to design, implement, and operate these complex environments command compensation that reflects the genuine rarity of that combined expertise.

The AZ-120 examination, formally titled Planning and Administering Microsoft Azure for SAP Workloads, is Microsoft’s credential for validating precisely this specialized knowledge. It targets architects, consultants, and administrators who work at the demanding intersection of SAP and Azure, requiring deep familiarity with SAP system architectures and sizing principles alongside expert knowledge of the Azure infrastructure services that host and support those workloads. Understanding what this examination covers, how it is structured, and how to prepare for it effectively is the essential starting point for any professional aiming to validate their SAP on Azure expertise through this prestigious and market-valued credential.

Defining the Professional Profile and Experience Level the AZ-120 Examination Targets

The AZ-120 is not an entry-level credential and makes no pretense of being accessible to candidates without substantial prior experience in both SAP and Azure environments. Microsoft positions this examination for professionals who have established expertise across both technology domains and are ready to demonstrate that they can apply that combined knowledge to the specific challenges of planning, deploying, and administering SAP workloads on Azure infrastructure. Understanding this positioning helps candidates assess honestly whether they are ready to begin preparation or whether they need to build additional foundational knowledge first.

On the SAP side, the examination assumes familiarity with SAP NetWeaver architecture, SAP HANA database technology, SAP S/4HANA and its infrastructure requirements, SAP Business Suite applications, and the general principles of SAP system sizing, high availability, and disaster recovery. Candidates without this SAP background will find large portions of the examination content essentially inaccessible because it builds on SAP architectural concepts without explaining them from first principles. On the Azure side, candidates should have solid working knowledge of Azure virtual machines, Azure networking including virtual networks, load balancers, and ExpressRoute, Azure storage services, Azure Site Recovery, and Azure Monitor. The AZ-120 examination assumes this Azure infrastructure knowledge and tests how it applies specifically to the demanding requirements of SAP workload hosting rather than retesting general Azure fundamentals.

SAP HANA Infrastructure Requirements and Azure Certified Instance Families

SAP HANA is the in-memory database platform that underpins SAP S/4HANA and many other modern SAP applications, and its infrastructure requirements are among the most demanding of any enterprise database technology. The AZ-120 examination tests candidates extensively on SAP HANA infrastructure requirements because selecting, sizing, and configuring the appropriate Azure infrastructure for HANA workloads is one of the most consequential decisions in any SAP on Azure deployment, with direct implications for performance, availability, supportability, and cost.

SAP certifies specific Azure virtual machine families for running SAP HANA workloads, and only certified instance types are supported for production HANA deployments. The M-series virtual machines, designed specifically for memory-intensive enterprise workloads, form the primary family for SAP HANA on Azure, with specific M-series SKUs certified for different HANA database sizes ranging from development and test environments through the largest production HANA scale-up deployments. For organizations requiring HANA databases that exceed the memory capacity of the largest available M-series instances, Azure Large Instances — dedicated bare-metal servers deployed in Microsoft data centers — provide the extreme memory configurations needed for the largest SAP landscapes. Candidates must understand the certification matrix that maps HANA workload sizes to certified Azure instance types, the storage configuration requirements including the specific use of Azure Premium SSD, Ultra Disk, and Azure NetApp Files for different HANA volume types, and the network throughput requirements that influence instance selection and storage configuration decisions.

Azure Virtual Machine Sizing and Selection for SAP Application Layer Workloads

While SAP HANA infrastructure requirements receive the most attention due to their demanding nature, the application layer components of SAP landscapes — including SAP NetWeaver application servers, SAP Central Services instances, SAP Web Dispatcher, and various SAP technical components — also have specific infrastructure requirements and best practices that the AZ-120 examination tests. Sizing and selecting appropriate Azure virtual machines for SAP application layer workloads requires understanding both the SAP sizing principles that translate business transaction volumes into infrastructure requirements and the Azure virtual machine families that best serve different workload characteristics.

SAP uses the SAPS metric — SAP Application Performance Standard — as the unit for measuring and communicating application server sizing requirements, and AZ-120 candidates must understand how SAPS requirements translate into Azure virtual machine selection decisions. The general-purpose D-series and E-series virtual machine families serve the majority of SAP application server workloads, with specific SKU selection driven by the SAPS requirements of the SAP system being sized and the memory requirements of the SAP application components being hosted. The examination also tests knowledge of the SAP-specific considerations that affect virtual machine configuration beyond raw compute sizing, including the use of accelerated networking to meet SAP’s network latency requirements, proximity placement groups that ensure low-latency communication between virtual machines hosting different components of the same SAP system, and the availability set and availability zone configurations that satisfy SAP’s high availability architecture requirements.

Designing High Availability Architectures for Mission-Critical SAP Environments

High availability design is one of the most technically demanding and examination-significant areas of SAP on Azure expertise, reflecting both the mission-critical nature of SAP landscapes and the architectural complexity of implementing SAP’s high availability requirements within Azure’s infrastructure model. SAP systems that support core business processes — financial accounting, order management, production planning, procurement — typically have stringent availability requirements that demand architectural approaches capable of surviving individual component failures without interrupting business operations.

SAP NetWeaver high availability on Azure centers on protecting the single points of failure in a standard SAP landscape: the SAP Central Services instance, which hosts the ABAP Message Server and Enqueue Server, and the database layer. Azure supports multiple approaches to protecting the SAP Central Services instance, including Windows Server Failover Clustering with Azure shared disk or Azure NetApp Files as the shared storage resource, and Pacemaker-based clustering on Linux using Azure Fence Agent for STONITH implementation. The examination tests candidates on the specific configuration requirements and limitations of each approach across both Windows and Linux operating systems. Database high availability for SAP HANA is typically implemented using SAP HANA System Replication, which synchronously replicates data between primary and secondary HANA instances and can be combined with Pacemaker clustering to enable automatic failover when the primary instance fails. Understanding the replication modes, takeover procedures, and cluster integration requirements of HANA System Replication is essential AZ-120 knowledge.

Implementing Disaster Recovery Solutions for SAP Workloads Across Azure Regions

Disaster recovery for SAP landscapes extends high availability principles beyond single-region resilience to address scenarios where an entire Azure region becomes unavailable due to a large-scale infrastructure event. Given the business criticality of SAP systems, many organizations require disaster recovery capabilities that can restore SAP operations in an alternate Azure region within hours of a regional failure, and designing and implementing those capabilities requires understanding of both Azure’s disaster recovery services and the SAP-specific considerations that affect recovery architecture choices.

Azure Site Recovery provides virtual machine replication and orchestrated failover capabilities that can protect SAP application server tiers by continuously replicating virtual machine disk contents to a secondary Azure region and enabling orchestrated failover when a disaster recovery activation is required. The examination tests candidates on how to configure Azure Site Recovery for SAP workloads, including the appropriate replication policies, recovery point objectives achievable with different replication configurations, and the use of recovery plans to orchestrate the sequenced startup of interdependent SAP components in the correct order during a failover. For the SAP HANA database tier, Azure Site Recovery is not the recommended approach due to its inability to guarantee database consistency for in-memory database workloads — instead, SAP HANA System Replication configured in asynchronous mode between regions is the standard approach for HANA disaster recovery, and candidates must understand how to design and implement this cross-region HANA replication architecture alongside the application tier protection provided by Azure Site Recovery.

Storage Architecture Design and Performance Optimization for SAP on Azure

Storage architecture is a critically important and technically nuanced aspect of SAP on Azure design, because storage performance directly affects SAP system responsiveness and the throughput requirements of SAP HANA and other SAP database technologies place specific demands on storage configuration that must be met to achieve certifiable and supportable deployments. The AZ-120 examination tests candidates on their ability to design storage architectures that satisfy SAP’s performance requirements while balancing cost and operational manageability.

SAP HANA’s storage requirements are defined by SAP’s storage certification requirements, which specify minimum throughput and latency thresholds for the different HANA volume types — data, log, shared, and backup — that must be met to achieve a supported HANA deployment. Azure Premium SSD storage, configured with appropriate disk striping using Linux logical volume manager or Windows Storage Spaces to aggregate the performance of multiple disks, is the standard approach for meeting HANA data and log volume requirements on most M-series virtual machine sizes. Azure Ultra Disk provides higher throughput and lower latency than Premium SSD and is particularly valuable for the most demanding HANA log volume requirements where Premium SSD performance is insufficient. Azure NetApp Files, a high-performance NFS storage service built on NetApp ONTAP technology, provides an alternative storage approach that is particularly well suited to HANA shared volumes, SAP transport directories, and scenarios where NFS-based shared storage simplifies the implementation of SAP high availability architectures.

SAP Deployment Automation and Infrastructure as Code on Azure

The complexity of SAP on Azure deployments — involving dozens of virtual machines, intricate networking configurations, specialized storage setups, and precise sequencing of component deployments — makes infrastructure automation not merely a convenience but a practical necessity for organizations that need to deploy SAP environments consistently, rapidly, and with minimal risk of human configuration error. The AZ-120 examination reflects this reality by testing candidates on the automation approaches and tools available for SAP on Azure deployments.

The SAP Deployment Automation Framework, an open-source project maintained by Microsoft and available on GitHub, provides a comprehensive Terraform and Ansible-based automation solution specifically designed for deploying SAP landscapes on Azure. The framework covers the full deployment lifecycle from Azure infrastructure provisioning through operating system configuration and SAP software installation, and its architecture accommodates the deployment of diverse SAP landscape topologies including standalone development systems, highly available production environments, and complex multi-tier landscapes with separate database, application, and web dispatcher layers. Candidates should understand the framework’s architectural components — the deployer virtual machine, the SAP library for state storage, the workload zone, and the SAP system definition — and how they work together to enable repeatable, consistent SAP deployments. Beyond the SAP Deployment Automation Framework, understanding how Azure Resource Manager templates, Bicep, and Terraform can be used for individual Azure infrastructure components of SAP environments rounds out the automation knowledge the examination tests.

Monitoring SAP Workloads on Azure Using Native and SAP-Specific Tooling

Comprehensive monitoring of SAP workloads on Azure requires visibility into multiple layers of the technology stack simultaneously — from Azure infrastructure performance metrics through operating system resource utilization to SAP application-level performance indicators and SAP HANA database internals. The AZ-120 examination tests candidates on how to implement monitoring solutions that provide this multi-layer visibility and enable operations teams to proactively identify and resolve performance issues before they affect SAP users and business processes.

Azure Monitor provides the foundational infrastructure monitoring layer, collecting metrics from Azure virtual machines, storage services, network components, and other Azure resources that form the infrastructure substrate of the SAP landscape. The Azure VM extension for SAP, which must be installed on all virtual machines running SAP workloads, collects infrastructure metrics from the Azure platform and makes them available to SAP’s own monitoring infrastructure through the SAP Host Agent, satisfying SAP’s requirement for infrastructure visibility within SAP Solution Manager and other SAP monitoring tools. Azure Monitor for SAP Solutions is a dedicated monitoring solution that extends Azure Monitor’s capabilities with SAP-specific monitoring content for SAP HANA, SAP NetWeaver, SAP application servers, and high availability components, providing pre-built dashboards, alert rules, and workbooks designed specifically for SAP on Azure operational visibility. Candidates must understand how to configure and use these monitoring capabilities together to achieve the comprehensive operational visibility that production SAP environments require.

Network Architecture Design and Connectivity Patterns for SAP on Azure

Network architecture design for SAP on Azure deployments involves decisions that profoundly affect both the security and the performance of the SAP landscape, and the AZ-120 examination tests candidates extensively on the network design patterns and connectivity options that apply to different SAP deployment scenarios. SAP landscapes have specific network requirements — low-latency communication between application servers and database servers, controlled external access for SAP GUI users and web-based interfaces, and secure integration with on-premise systems and external partners — that must be addressed in the network architecture design.

The hub and spoke network topology is the standard recommended architecture for SAP on Azure deployments, placing shared network services including ExpressRoute or VPN gateways, Azure Firewall, and DNS servers in a central hub virtual network and deploying SAP workload components in spoke virtual networks that peer to the hub for connectivity. This topology provides consistent security policy enforcement through centralized network security controls while enabling the workload isolation and network segmentation that enterprise security requirements demand. ExpressRoute connectivity between on-premise networks and Azure is strongly recommended for production SAP deployments because it provides the bandwidth, latency characteristics, and reliability that SAP workloads require for hybrid operations and migration scenarios where large data volumes must move between on-premise and Azure environments. Understanding ExpressRoute circuit configuration, gateway SKU selection for SAP-appropriate throughput, and the use of ExpressRoute Global Reach for connecting multiple on-premise locations through the Azure backbone network are all relevant examination topics.

Examination Preparation Resources and Study Approach Recommendations

Preparing effectively for the AZ-120 examination requires a study approach that acknowledges the dual-domain nature of the credential — candidates must be strong in both SAP architecture and Azure infrastructure to pass, and weakness in either domain will manifest as examination difficulty regardless of strength in the other. Honest self-assessment of current knowledge gaps across both domains is the essential first step in building a preparation plan that allocates study time appropriately.

Microsoft Learn provides official learning paths aligned to the AZ-120 examination content that cover the Azure-side knowledge requirements comprehensively and address the SAP-specific aspects of Azure service configuration and best practice. These official resources should form the backbone of preparation for the Azure content areas. For the SAP architecture and technology knowledge that the examination assumes, SAP’s own learning platform and documentation provide the most authoritative and comprehensive resources, and candidates who need to strengthen their SAP foundation should invest time in SAP HANA technology fundamentals, SAP NetWeaver architecture concepts, and SAP sizing methodology before attempting examination preparation focused on the Azure integration topics. Combining structured curriculum study with hands-on practice in actual Azure environments — deploying SAP HANA on Azure virtual machines in a test environment, configuring HANA System Replication, implementing Pacemaker clustering, and working with Azure Site Recovery for SAP workload protection — provides the practical familiarity that examination questions and real-world implementation work both require.

Conclusion

The AZ-120 examination and the Microsoft Certified Azure for SAP Workloads Specialty credential it awards occupy a unique and genuinely elite position in the landscape of cloud and enterprise technology certifications. The combination of deep SAP architectural knowledge and expert Azure infrastructure expertise that this credential validates is rare, genuinely difficult to develop, and consistently associated with compensation and career opportunities that reflect its scarcity. Organizations entrusting their most critical and complex SAP landscapes to Azure need professionals who can be relied upon to make the right architectural decisions, implement solutions that meet SAP’s exacting technical requirements, and operate those environments with the operational discipline that mission-critical business systems demand.

Earning the AZ-120 certification is a demanding undertaking that requires meaningful preparation investment from even highly experienced SAP and Azure professionals, because the examination tests the integration of these two knowledge domains at a depth that goes well beyond what most individuals encounter in typical day-to-day work. The professionals who succeed are those who approach preparation with genuine intellectual rigor, identify and address their knowledge gaps honestly rather than hoping familiarity with adjacent topics will be sufficient, and invest the hands-on practice time that translates conceptual understanding into the confident applied knowledge that both the examination and real implementation work require.

The career value of this certification, once earned, is substantial and durable. The global installed base of SAP software represents decades of accumulated business logic and data that organizations cannot simply replace, which means demand for professionals who can help those organizations operate their SAP landscapes effectively on modern cloud infrastructure will persist for many years to come. The professionals who build genuine expertise at the SAP and Azure intersection, validated through credentials like the AZ-120, position themselves at the center of an enterprise technology domain where the complexity of the work, the criticality of the systems involved, and the scarcity of truly qualified expertise combine to create career opportunities and compensation levels that few other technology specializations can match. Commit to the preparation process with the seriousness this credential deserves, and you will earn not just a certification but a professional capability that will serve your career and your clients at the highest levels of enterprise technology work for years to come.