Microsoft • AZ-120
Validates expertise in migrating SAP workloads to Azure and implementing infrastructure to support SAP solutions on the Azure platform.
Questions
582
Duration
100 minutes
Passing Score
700/1000
Difficulty
SpecialtyLast Updated
Jan 2026
The Microsoft Certified: Azure for SAP Workloads Specialty (AZ-120) validates an architect or engineer's ability to plan, migrate, and operate SAP solutions on the Microsoft Azure platform. The certification covers the full lifecycle of SAP workloads on Azure—from assessing existing landscapes and designing target infrastructures, to implementing compute, networking, and storage solutions tailored for SAP systems including SAP HANA, SAP Business Suite, SAP NetWeaver, and SAP BW/4HANA. It also tests proficiency with SAP RISE integration on Azure, automation via the SAP Deployment Automation Framework and Azure Center for SAP solutions, and governance using Azure Policy and Azure Resource Manager/Bicep templates.
The exam was last updated on January 14, 2026, and reflects current Microsoft tooling such as Azure Center for SAP solutions, SAP Landscape Management (LaMa) connector, and Azure NetApp Files. Professionals earning this certification demonstrate they can architect solutions that meet enterprise-grade requirements for resiliency, performance, scale, and cost-efficiency—skills that are critical as large enterprises accelerate the migration of mission-critical SAP workloads into hyperscale cloud environments.
This certification is designed for cloud architects and engineers who specialize in designing, implementing, and managing SAP landscapes on Azure. Ideal candidates come from backgrounds in SAP Basis administration, enterprise infrastructure architecture, or cloud solutions engineering, and are responsible for decisions spanning compute sizing, network topology, storage configuration, high availability clustering, and disaster recovery planning for SAP systems.
Candidates typically hold roles such as Azure SAP Architect, SAP on Azure Consultant, or Cloud Infrastructure Engineer, and often serve as the technical bridge between SAP application teams and Azure cloud operations. Those targeting this certification are generally mid-to-senior professionals who already possess hands-on experience with SAP technologies and are expanding their expertise into Azure-native tooling. Microsoft strongly recommends holding the Azure Administrator Associate certification before sitting for AZ-120.
There are no mandatory prerequisites to register for AZ-120, but Microsoft strongly recommends that candidates hold the Azure Administrator Associate (AZ-104) certification before attempting this exam. Familiarity with the Azure portal, Azure Marketplace, and infrastructure-as-code tools such as ARM templates and Bicep is expected.
On the SAP side, candidates should have extensive hands-on experience with SAP HANA, SAP Business Suite, and SAP NetWeaver, as well as knowledge of SAP-specific concepts such as STONITH, Pacemaker clustering, SAP Central Services (SCS), and Write Accelerator. Solid understanding of virtualization, cloud networking (including ExpressRoute and proximity placement groups), storage architectures (including Azure NetApp Files and Azure Files), and high availability and disaster recovery design patterns is also expected before attempting this specialty exam.
Exam AZ-120 is a proctored assessment with a 100-minute time limit, delivered through Pearson VUE either online or at a testing center. The exam includes interactive components in addition to traditional question formats such as multiple choice, multi-select, drag-and-drop, and case studies. Microsoft does not publish the exact number of questions, but the format is consistent with other Azure specialty exams, typically ranging between 40–60 scored items.
The passing score is 700 out of 1000. Scores are reported immediately upon completion via Pearson VUE, and a detailed score report is provided. If a candidate fails, they may retake the exam after 24 hours; subsequent retakes are subject to Microsoft's standard retake policy. The exam is available in English, Japanese, Chinese (Simplified), French, German, Spanish, and Brazilian Portuguese. Microsoft certifications earned through AZ-120 expire annually and can be renewed at no cost via an online assessment on Microsoft Learn.
The AZ-120 certification positions professionals for highly specialized and well-compensated roles at the intersection of enterprise SAP ecosystems and Azure cloud infrastructure. Common job titles include Azure SAP Architect, SAP on Azure Consultant, and Cloud Infrastructure Engineer, with average U.S. salaries in the range of $120,000–$160,000 annually depending on seniority and location. Given that SAP systems underpin core operations at the majority of large enterprises—and that Microsoft Azure is used by over 95% of Fortune 500 companies—demand for professionals who can bridge both platforms remains strong and is expected to grow as organizations accelerate S/4HANA migrations and adopt SAP RISE on Azure.
Compared to broader Azure certifications such as the Solutions Architect Expert (AZ-305), the AZ-120 is a narrower but deeper credential that signals rare cross-domain expertise combining SAP application knowledge with Azure infrastructure architecture. Microsoft data indicates that certified professionals earn on average 15% more than non-certified peers and are often considered for senior advisory and leadership roles. The certification renews annually via a free online assessment on Microsoft Learn, keeping holders current with rapidly evolving Azure-SAP integration features.
5 sample questions with correct answers and explanations. Start a practice session to test yourself across all 582 questions.
1. An IT team is deploying Azure Data Factory to create a data pipeline from their SAP system. They learn that a specific piece of software must be installed to enable communication between the cloud service and the on-premises or virtual network-based SAP system. What is this mandatory component?
Explanation
The integration runtime is a mandatory component required to enable communication between Azure Data Factory and an on-premises or virtual network-based SAP system. The self-hosted integration runtime is installed on a machine within the same network as the SAP system and acts as a secure data bridge, managing the communication and data transfer to the Azure service. An ExpressRoute circuit is one way to connect the network, but the integration runtime is the specific Data Factory component that facilitates the data flow.
2. A company is evaluating the different types of Azure Virtual Machines for their SAP NetWeaver workload. They are looking at the general-purpose VMs available in Azure. What is the common term used in the provided material to refer to these standard Azure IaaS machines?
Explanation
The term VMs is used as the general shorthand for standard Azure IaaS (Infrastructure-as-a-Service) virtual machines. These are the general-purpose virtual servers that can be used to host a wide variety of workloads, including SAP NetWeaver application servers. HANA certified machines are a specific subset of these VMs that have been certified for the more demanding HANA database. Large Instances are bare-metal servers, and Azure Regions are the geographic locations of the datacenters.
3. A company is implementing SAP HANA System Replication in a configuration without automatic failover and without pre-loading data into the secondary instance's memory. What is a potential advantage of this specific configuration?
Explanation
The correct solution involves using a smaller VM size for the secondary instance. In a HANA System Replication scenario where data is not pre-loaded into the cache of the secondary instance, you can realize certain benefits. One of these is the ability to use a smaller VM size for the secondary machine. In the event of a failover, you would have an extra step to resize the VM to match the primary before completing the failover. This can lead to cost savings during normal operation. This configuration would have a longer RTO because data needs to be loaded into memory after failover occurs. Achieving RPO=0 would still require synchronous replication, but the advantage of this specific configuration is related to the resource usage on the secondary node, not the RPO characteristics.
4. A solutions architect is explaining why the company should choose Azure to run its mission-critical SAP workloads to the board of directors. They emphasize the long history of collaboration between the two companies. What is a key outcome of this strong SAP and Microsoft partnership?
Explanation
Microsoft continuously updates its platform and submits new certification data to SAP as a key outcome of the strong SAP and Microsoft partnership. This deep and continuous engineering collaboration ensures that Azure remains a highly performant, secure, and well-supported platform for running SAP, giving customers confidence in their choice. The other statements are incorrect. Microsoft does not provide SAP licenses. SAP runs on both Linux and Windows in Azure. Other cloud providers can also run SAP.
5. ThreatDetection Ltd wants to understand how Microsoft Defender for Cloud helps improve their security stance. What does the security score represent?
Explanation
The security score in Microsoft Defender for Cloud is a single score that allows you to understand your current security situation at a glance. A higher score indicates a lower identified risk level. The score aggregates all security findings across your resources, subscriptions, and organization, providing a quick assessment of your overall security posture and helping prioritize security improvements.
One-time access to this exam