PAS-C01 Practice Test 12 — 15 Questions

Question 1

An SAP system on AWS is experiencing high latency for disk I/O. The system uses Amazon EBS gp2 volumes. The operations team notices that the volume queue depth is consistently high. Which change is most likely to reduce latency?

Accepted Answer

Migrate from gp2 to gp3 volumes and increase IOPS.. The correct answer is B because gp3 volumes offer a baseline performance that is higher than gp2 for a given size, and they allow you to independently increase IOPS without needing to provision more storage. Since the volume queue depth is consistently high, the bottleneck is likely due to insufficient IOPS, and migrating to gp3 with increased IOPS directly addresses this by providing more I/O capacity, reducing latency.

Answer

Increase the EC2 instance size to get more EBS bandwidth.

Answer

Configure RAID 0 across multiple EBS volumes.

Answer

Increase the block size of the file system.

Question 2

A company is migrating a legacy on-premises application to AWS. The application requires static IP addresses for its clients to whitelist. The migration strategy includes using an Application Load Balancer (ALB) to distribute traffic across multiple EC2 instances in an Auto Scaling group. The clients require a fixed set of IP addresses to whitelist. Which solution meets the requirement?

Accepted Answer

Use a Network Load Balancer with Elastic IP addresses.. Option C is correct because a Network Load Balancer (NLB) supports static IP addresses via Elastic IP (EIP) assignment per Availability Zone, which allows clients to whitelist a fixed set of IPs. The ALB, by contrast, does not support static IP assignment; its DNS name resolves to dynamic IPs that can change. Using an NLB with EIPs meets the requirement for a fixed whitelist while still distributing traffic to the ALB or directly to EC2 instances.

Answer

Use AWS Global Accelerator with the Application Load Balancer as an endpoint.

Answer

Use an Application Load Balancer and assign Elastic IP addresses to it.

Answer

Launch EC2 instances with Elastic IPs and place them behind a NAT Gateway.

Question 3

A company has a CloudFormation stack that creates an EC2 instance with a custom AMI. The stack fails with the error 'Resource creation cancelled' during creation. The engineer checks the stack events and sees that the EC2 instance creation succeeded, but the subsequent creation of an EBS volume failed. What is the MOST likely reason for the failure?

Accepted Answer

The EBS volume creation failed, causing the stack to roll back and cancel the instance. Option C is correct because when an EBS volume creation fails in a CloudFormation stack, the stack initiates a rollback of all previously created resources, including the EC2 instance. The 'Resource creation cancelled' error appears for the EC2 instance because its creation was successful but then undone during the rollback, not because it failed initially.

Answer

The EC2 instance creation failed and then was cancelled

Answer

The EC2 instance had a DeletionPolicy of Retain, which prevented rollback

Answer

The EC2 instance depended on the EBS volume, and the dependency caused a timeout

Question 4

A company uses AWS CloudTrail to log API calls. The security team wants to detect unauthorized attempts to modify security group rules and send real-time alerts. Which TWO AWS services should be used together to achieve this?

Accepted Answer

Amazon Simple Notification Service (SNS). Amazon CloudWatch Events (or EventBridge) can capture CloudTrail API calls related to security group modifications (e.g., AuthorizeSecurityGroupIngress, RevokeSecurityGroupEgress) and route them to an SNS topic. SNS then sends real-time alerts (e.g., email, SMS) to the security team. This combination provides event-driven, near-instantaneous notification without polling or custom code.

Answer

AWS Lambda

Answer

AWS Config

Answer

Amazon GuardDuty

Question 5

A company is designing a disaster recovery plan for a critical application running on EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). The application uses an RDS Multi-AZ database. Which TWO actions should the operations team take to minimize recovery time and data loss?

Accepted Answer

Configure automated EBS snapshots for EC2 instances and copy them to a secondary region.. Option A is correct because automated EBS snapshots, when copied to a secondary region, provide a mechanism to restore EC2 instances and their data in the event of a regional failure. This minimizes recovery time by having the snapshots available in the DR region, and minimizes data loss by ensuring point-in-time backups are replicated off-site. The snapshots can be used to launch new instances or create AMIs in the secondary region, supporting the recovery of the Auto Scaling group.

Answer

Create an AMI from a running instance and share it with the secondary region.

Answer

Use Route53 health checks to automatically failover traffic to a standby environment.

Question 6

Which THREE of the following are valid strategies for disaster recovery (DR) of SAP workloads on AWS? (Select THREE.)

Accepted Answer

Pilot light environment with replicated data volumes that can be attached to EC2 instances in DR.. Option B is correct because a pilot light DR strategy for SAP on AWS involves replicating data volumes (e.g., using EBS snapshots or storage replication) to a secondary region and keeping a minimal set of core services running. In a disaster, EC2 instances are launched and the replicated volumes are attached, allowing the SAP application stack to be started quickly. This approach balances cost and recovery time by avoiding a fully scaled environment during normal operations.

Answer

Warm standby with a fully scaled-down environment that is manually scaled up during DR.

Answer

Multi-site active-active with real-time replication and automatic failover.

Question 7

Which THREE AWS services can be used to automate the patching of SAP application servers on EC2? (Choose 3).

Accepted Answer

AWS OpsWorks. AWS OpsWorks is correct because it provides a configuration management service that uses Chef or Puppet to automate the patching and lifecycle management of SAP application servers on EC2. You can define custom recipes or manifests to apply OS and application patches consistently across your SAP infrastructure, ensuring compliance and reducing manual effort.

Answer

AWS Auto Scaling

Answer

AWS CloudFormation

Question 8

A company wants to migrate its on-premises VMware virtual machines to AWS. They need to retain the current operating system and applications. Which AWS service should they use?

Accepted Answer

AWS Server Migration Service (SMS). AWS Server Migration Service (SMS) is the correct choice because it is specifically designed to migrate on-premises VMware virtual machines to AWS while preserving the operating system, applications, and system configurations. It uses agentless replication via the VMware vCenter connector to create Amazon Machine Images (AMIs) from the source VMs, enabling a lift-and-shift migration without reinstallation or reconfiguration.

Answer

AWS Application Migration Service (MGN)

Answer

AWS Database Migration Service (DMS)

Answer

AWS DataSync

Question 9

A company is migrating its SAP ERP system from an on-premises environment to AWS. The database is SAP HANA. The migration must minimize downtime. Which TWO approaches should the company consider?

Accepted Answer

Use AWS DMS with full load and ongoing change data capture (CDC).. Option D is correct because AWS DMS with full load and ongoing change data capture (CDC) enables a near-zero-downtime migration by continuously replicating changes from the source SAP HANA database to the target on AWS after the initial full load, allowing the cutover to occur with minimal disruption. Option E is correct because SAP HANA System Replication provides a native, asynchronous or synchronous replication mechanism that can be configured between the on-premises HANA database and an AWS-hosted HANA instance, supporting a controlled switchover with very low downtime.

Answer

Use AWS Database Migration Service (DMS) with full load only.

Answer

Use VM Import/Export to migrate the entire on-premises virtual machine to AWS.

Answer

Use the SAP Software Provisioning Manager (SWPM) to perform a homogeneous system copy over the network.

Question 10

Which TWO AWS services can be used to migrate on-premises SAP systems to AWS? (Choose 2.)

Accepted Answer

AWS Server Migration Service (SMS). AWS Server Migration Service (SMS) is correct because it automates the replication of live on-premises servers, including SAP application servers, to AWS as Amazon Machine Images (AMIs). This allows you to migrate the entire SAP server stack (OS, SAP binaries, configurations) without needing to reinstall or reconfigure the SAP software, making it ideal for lift-and-shift migrations.

Answer

AWS Schema Conversion Tool (SCT)

Answer

AWS Direct Connect

Answer

Amazon CloudFront

Question 11

A company is migrating an SAP system to AWS using the SAP Landscape Reorganization (LaMa) tool. Which TWO actions can LaMa perform during the migration?

Accepted Answer

Migrate SAP systems from on-premises to AWS with minimal downtime.. LaMa is designed to orchestrate system migrations with minimal downtime by automating the cloning and replication process. It uses storage-level snapshots or database replication to keep the source system running until the final cutover, which is why Option B is correct.

Answer

Perform a heterogeneous system copy.

Answer

Convert the source database from Oracle to SAP HANA.

Answer

Automatically update DNS records after migration.

Question 12

Which TWO are required considerations when sizing an SAP HANA instance on AWS for a production environment? (Choose two.)

Accepted Answer

Ensure the instance has enough memory to hold the HANA data in memory (RAM:data ratio).. Option C is correct because SAP HANA is an in-memory database that requires all active data to reside in RAM. The RAM:data ratio must be carefully sized to ensure the instance has enough memory to hold the HANA data and log volumes in memory, typically with a 1:4 or 1:8 ratio depending on compression and workload. AWS provides specific instance types (e.g., x1e, u-6tb1) certified for SAP HANA that meet these memory requirements.

Answer

Provision instance store volumes for HANA data and log areas.

Answer

Purchase Reserved Instances for the HANA server to reduce costs.

Answer

Select an RDS instance type that supports SAP HANA.

Question 13

A company is migrating an SAP system to AWS and needs to retain the same hostname for the SAP application server after migration. Which configuration should the company use?

Accepted Answer

Create a private hosted zone in Amazon Route 53 with an A record. Option B is correct because a private hosted zone in Amazon Route 53 allows you to create an A record that maps a custom hostname to the private IP address of an EC2 instance. This ensures that the SAP application server retains the same hostname after migration, as DNS resolution within the VPC will consistently return the instance's private IP, regardless of instance changes or restarts.

Answer

Assign an Elastic IP to the EC2 instance and update the /etc/hosts file

Answer

Create a CNAME record in a public hosted zone pointing to the EC2 instance

Answer

Use a public hosted zone in Route 53 with an A record

Question 14

An SAP landscape on AWS includes several instances in a VPC. The administrator needs to ensure that SAProuter can connect to the SAP system from the internet securely. Which networking component should be used?

Accepted Answer

AWS VPN connection to the customer's network. Option D is correct because an AWS VPN connection establishes an encrypted tunnel over the internet between the customer's on-premises network and the VPC, allowing SAProuter to connect securely to the SAP system without exposing any instance to the public internet. This aligns with the requirement for secure, authenticated connectivity from the internet while maintaining network isolation.

Answer

AWS Direct Connect with a public VIF

Answer

Internet Gateway with a public IP on the SAProuter instance

Answer

AWS CloudFront with a security group

Question 15

An SAP administrator needs to set up disaster recovery for an SAP system on AWS. Which TWO AWS services can be used to replicate data across regions?

Accepted Answer

Amazon EBS snapshots copied to another region. Amazon EBS snapshots can be copied to another AWS region, providing a reliable mechanism for disaster recovery of SAP systems by creating point-in-time backups of critical volumes. This allows the SAP administrator to restore the system in a different region if the primary region fails, ensuring data durability and recoverability.

Answer

Amazon CloudFront

Answer

Amazon EFS replication

Answer

Amazon RDS read replicas in another region