PAS-C01 Practice Test 12 — 15 Questions

Question 1

Which TWO AWS services can be used to automate the deployment of SAP infrastructure during migration? (Choose 2.)

Accepted Answer

AWS Service Catalog. AWS CloudFormation allows you to model and provision SAP infrastructure as code using templates. Option B is correct because AWS Service Catalog allows you to create and manage a catalog of approved IT services, including SAP infrastructure templates, which can be deployed in a standardized and automated manner. Option D is wrong because AWS Elastic Beanstalk is a PaaS service that abstracts the underlying OS and is not designed for the specific requirements of SAP deployments, such as kernel patching and custom system configurations. Option A is wrong because AWS OpsWorks uses Chef/Puppet and is not typically used for SAP deployment automation. Option E is wrong because AWS CodePipeline is a CI/CD service, not for infrastructure deployment. So correct answers: B and C.

Answer

AWS OpsWorks

Answer

AWS Elastic Beanstalk

Answer

AWS CodePipeline

Question 2

A company runs SAP on AWS and wants to monitor operating system metrics such as memory usage, disk space, and process status using Amazon CloudWatch. Which agent configuration is required on the SAP application and database servers to send these metrics to CloudWatch?

Accepted Answer

Amazon CloudWatch Agent. The Amazon CloudWatch Agent can be installed on EC2 instances to collect operating system-level metrics such as memory usage, disk space, and process status and send them to CloudWatch. Option A is incorrect because the AWS X-Ray Daemon is used for distributed tracing, not metric collection. Option B is incorrect because the EC2 Launch Agent is used to run startup scripts, not to collect metrics. Option D is incorrect because the AWS Systems Manager Agent is used for management and patching, not for sending custom metrics to CloudWatch.

Answer

AWS X-Ray Daemon

Answer

EC2 Launch Agent

Answer

AWS Systems Manager Agent

Question 3

A company is migrating an SAP system to AWS using the SAP Landscape Reorganization (LaMa) tool. Which TWO actions can LaMa perform during the migration?

Accepted Answer

Migrate SAP systems from on-premises to AWS with minimal downtime.. LaMa is designed to orchestrate system migrations with minimal downtime by automating the cloning and replication process. It uses storage-level snapshots or database replication to keep the source system running until the final cutover, which is why Option B is correct.

Answer

Perform a heterogeneous system copy.

Answer

Convert the source database from Oracle to SAP HANA.

Answer

Automatically update DNS records after migration.

Question 4

Refer to the exhibit. An administrator is setting up an AWS DMS task to migrate an SAP database. They receive an error that they are not authorized to perform the operation. Which statement is true about the IAM policy?

Accepted Answer

The policy is missing the dms:CreateEndpoint and dms:DescribeEndpoints actions. The error 'not authorized' indicates the IAM policy lacks necessary permissions for the DMS task. The missing actions are dms:CreateEndpoint and dms:DescribeEndpoints, which are required to create and describe endpoints during the migration. Option B is correct because the policy explicitly denies these actions (or does not include them). Option A is incorrect because the policy does not allow all DMS actions; it is missing these two. Option C is incorrect because the error is not related to dms:CreateReplicationTask. Option D is incorrect because using a wildcard for Resource is not the cause; the issue is the missing actions, not the resource scope.

Answer

The policy allows all DMS actions

Answer

The policy is missing the dms:CreateReplicationTask action

Answer

The policy should specify an ARN instead of a wildcard for Resource

Question 5

A company runs SAP HANA on EC2 with a Multi-AZ deployment. The database uses EBS volumes for /hana/data and /hana/log. The operations team needs to implement a disaster recovery strategy with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. Which THREE actions should be taken? (Choose THREE.)

Accepted Answer

Take periodic EBS snapshots of the data and log volumes. Options A, B, and D are correct. A: EBS snapshots provide a backup mechanism for data and log volumes, contributing to the RPO. B: AWS CloudFormation automates the creation of DR infrastructure in another region, helping to achieve the RTO. D: SAP HANA system replication provides near-synchronous replication to a secondary instance, meeting the RPO of 15 minutes. C is incorrect because Amazon RDS for SAP HANA is not suitable for DR of an existing EC2-based HANA system; it would require migration and does not align with the given architecture. E is incorrect because AWS DMS is designed for database migrations, not for continuous replication of SAP HANA.

Answer

Migrate the database to Amazon RDS for SAP HANA

Answer

Use AWS Database Migration Service (DMS) for continuous replication

Question 6

A company runs SAP S/4HANA on AWS with a three-tier architecture. The operations team receives alerts that the application server's CPU utilization is consistently above 90%. The team wants to add an additional application server to distribute the load. Which AWS service should be used to register the new instance with the SAP system's load balancer?

Accepted Answer

Application Load Balancer (ALB). (Application Load Balancer). ALB can register EC2 instances as targets and distribute incoming traffic across multiple instances, making it suitable for adding an additional application server to distribute the load. Option A (CloudFront) is a CDN service, not a load balancer. Option B (Network Load Balancer) operates at the transport layer (TCP/UDP) and is not ideal for application-level load balancing. Option C (Route 53) is a DNS service and does not register instances directly.

Answer

Amazon CloudFront

Answer

Network Load Balancer (NLB)

Answer

Amazon Route 53

Question 7

An SAP system running on AWS experiences high latency when accessing data in Amazon S3. The operations team suspects network bandwidth limitations. Which AWS service can be used to monitor the network throughput between the EC2 instances and S3?

Accepted Answer

VPC Flow Logs. (VPC Flow Logs) is correct because VPC Flow Logs capture IP traffic information and can help analyze network throughput between EC2 instances and S3. Option A is incorrect because CloudWatch S3 metrics are request-level, not network-level. Option B is incorrect because Trusted Advisor provides best practice checks, not real-time monitoring. Option C is incorrect because AWS Config records resource changes, not network performance.

Answer

Amazon CloudWatch S3 metrics

Answer

AWS Trusted Advisor

Answer

AWS Config

Question 8

A company runs SAP HANA on AWS and wants to back up the database using Backint integration. Which AWS service is required to store the backups?

Accepted Answer

Amazon S3. Backint for SAP HANA on AWS is an interface that allows SAP HANA to back up directly to Amazon S3. Amazon S3 is the supported storage service for Backint integration. Option A (Amazon S3 Glacier) is an archival storage class and not directly used by Backint for backups. Option B (Amazon EBS) provides block storage volumes, but Backint does not interface with EBS for database backups. Option C (Amazon EFS) is a file storage service and is not compatible with the Backint API. Therefore, Option D (Amazon S3) is correct.

Answer

Amazon S3 Glacier

Answer

Amazon EBS

Answer

Amazon EFS

Question 9

An SAP system is deployed on EC2 with a Multi-AZ RDS for SAP ASE database. The operations team needs to ensure that database backups are stored in a separate AWS account for compliance. Which TWO actions should they take?

Accepted Answer

Use AWS KMS with cross-account permissions to allow the target account to decrypt and copy the snapshots.. The correct answers are C and D. Option C: Using AWS KMS with cross-account permissions allows the target account to decrypt and copy encrypted snapshots, enabling secure cross-account backup. Option D: AWS Backup with a cross-account backup policy can automatically copy RDS snapshots to another account, meeting compliance requirements. Option A is wrong because sharing snapshots publicly is a severe security risk. Option B is wrong because S3 cross-region replication is for S3 objects, not RDS snapshots. Option E is wrong because the RDS console does not have an automatic cross-account backup feature; this requires AWS Backup or manual snapshot sharing with KMS.

Answer

Share the snapshots publicly and then copy them to the target account.

Answer

Configure S3 cross-region replication for the automated backups.

Answer

Enable automatic cross-account backup in the RDS console.

Question 10

An SAP administrator needs to grant an external auditor read-only access to view SAP system logs stored in CloudWatch Logs. Which AWS identity-based policy should be used?

Accepted Answer

CloudWatchLogsReadOnlyAccess. The AWS managed policy CloudWatchLogsReadOnlyAccess grants read-only access specifically to CloudWatch Logs, which is required for viewing SAP system logs. Option A (AWSSupportAccess) is intended for AWS Support cases, not log access. Option C (AmazonS3ReadOnlyAccess) is for S3 buckets. Option D (CloudWatchReadOnlyAccess) includes CloudWatch metrics and alarms but not logs; for logs, CloudWatchLogsReadOnlyAccess is needed.

Answer

AWSSupportAccess

Answer

AmazonS3ReadOnlyAccess

Answer

CloudWatchReadOnlyAccess

Question 11

A company is designing an SAP S/4HANA workload on AWS. The system must be highly available within a single AWS Region. Which architecture ensures automatic failover for the SAP Central Services (ASCS) instance?

Accepted Answer

Configure Amazon Route 53 with health checks to failover to a secondary ASCS instance in a different Availability Zone.. Amazon Route 53 with health checks can monitor the primary ASCS instance and automatically fail over DNS resolution to a secondary ASCS instance in a different Availability Zone. This provides the necessary automatic failover for SAP Central Services (ASCS) without requiring a shared filesystem or cluster manager, as Route 53 health checks detect instance or service failure and update DNS records accordingly.

Answer

Place an Application Load Balancer (ALB) in front of two ASCS instances in different Availability Zones.

Answer

Deploy ASCS on a single EC2 instance with multiple Elastic Network Interfaces (ENIs).

Answer

Use Amazon CloudFront to distribute traffic to multiple ASCS instances in different Availability Zones.

Question 12

An SAP HANA database running on an EC2 instance with EBS volumes experiences high write latency. The instance type is r5.4xlarge. The EBS volumes are gp2. Which change is MOST likely to reduce write latency?

Accepted Answer

Change the EBS volumes to io2 with provisioned IOPS.. Changing from gp2 to io2 EBS volumes with provisioned IOPS provides consistent low-latency performance for high-write workloads like SAP HANA, directly addressing the write latency bottleneck. Option A is incorrect because Amazon EFS is a network file system and introduces additional network latency, making it unsuitable for database write operations. Option B is incorrect because a read replica only improves read throughput and does not affect write latency; writes still occur on the primary instance. Option C is incorrect because the r5 instance is already memory-optimized for SAP HANA; switching to a compute-optimized instance does not resolve the storage-level write latency issue.

Answer

Move the database files to Amazon EFS.

Answer

Add a read replica for the database.

Answer

Change the instance type to a compute-optimized instance.

Question 13

A company wants to monitor the disk space utilization of their SAP application servers. Which AWS service can provide a centralized view of disk space metrics without installing additional agents?

Accepted Answer

AWS Systems Manager Inventory. AWS Systems Manager Inventory (Option A) is correct because it can collect disk space utilization metrics from managed instances without requiring the installation of additional agents—the SSM Agent is either pre-installed on many Amazon Machine Images (AMIs) or installed as part of standard Systems Manager setup, so it is not considered an extra agent. In contrast, Amazon CloudWatch (Option B) requires the CloudWatch agent to collect disk metrics, which would be an additional installation. AWS CloudTrail (Option C) records API calls and does not monitor disk space. Amazon Inspector (Option D) is a vulnerability assessment service and does not provide disk metrics.

Answer

Amazon CloudWatch

Answer

AWS CloudTrail

Answer

Amazon Inspector

Question 14

A company is running SAP on AWS and wants to send alerts when the CPU utilization of an EC2 instance exceeds 90% for 5 minutes. Which AWS service should be used to create this alarm?

Accepted Answer

Amazon CloudWatch Alarms. Amazon CloudWatch Alarms (Option D) are the correct AWS service for creating alarms based on metrics such as CPU utilization. They monitor CloudWatch metrics and perform actions (e.g., send notifications via SNS) when thresholds are breached. Option A (AWS Lambda) can be a target action for an alarm but is not the alarm service itself. Option B (AWS Config) evaluates resource configurations against rules, not metric thresholds. Option C (Amazon SNS) is a notification service that can be triggered by CloudWatch Alarms but does not create the alarm.

Answer

AWS Lambda

Answer

AWS Config

Answer

Amazon Simple Notification Service (SNS)

Question 15

An SAP system on AWS needs to be highly available across multiple Availability Zones (AZs). The SAP Central Services (ASCS) and the database are both critical. Which architecture should be used?

Accepted Answer

Deploy ASCS with a cluster across two AZs, and use HANA System Replication across two AZs.. SAP ASCS requires a cluster (e.g., Pacemaker with SBD fencing) across two AZs to provide failover for the central services, while HANA System Replication (HSR) synchronously replicates the database to a secondary AZ for automatic failover. This dual-cluster architecture ensures both critical components remain highly available, meeting SAP's certified HA patterns on AWS.

Answer

Use an Application Load Balancer to distribute traffic across AZs.

Answer

Place all components in a single AZ to avoid cross-AZ latency.

Answer

Use Amazon RDS Multi-AZ for the database and a single ASCS instance.