PAS-C01 Practice Test 15 — 15 Questions

Question 1

A company is planning to migrate their SAP ECC system to AWS. They want to minimize downtime and use an automated approach. Which AWS service should be used for the migration?

Accepted Answer

AWS Launch Wizard. AWS Launch Wizard for SAP is the correct choice because it provides a guided, automated deployment of SAP ECC on AWS, including infrastructure provisioning, OS configuration, and SAP installation. It minimizes downtime by automating the entire migration process, from sizing to deployment, using predefined best practices.

Answer

AWS Application Discovery Service

Answer

AWS CloudFormation

Answer

AWS Server Migration Service

Question 2

A company is migrating an SAP ERP system to AWS and needs to ensure that the SAP application servers can scale automatically based on CPU utilization. Which AWS service should be used to achieve this?

Accepted Answer

AWS Auto Scaling. AWS Auto Scaling can automatically adjust the number of EC2 instances based on CloudWatch alarms for CPU utilization, making it suitable for scaling SAP application servers. Option A is wrong because Elastic Load Balancing distributes traffic but does not scale instances. Option B is wrong because AWS Lambda is for serverless compute, not for running SAP application servers. Option C is wrong because AWS CloudFormation is an infrastructure-as-code service, not for automatic scaling.

Answer

AWS Elastic Load Balancing (ELB)

Answer

AWS Lambda

Answer

AWS CloudFormation

Question 3

An SAP on AWS environment uses a shared file system with Amazon EFS. The operations team reports slow performance during peak hours. Which configuration change would most likely improve throughput?

Accepted Answer

Increase provisioned throughput. Increasing provisioned throughput on Amazon EFS is a direct configuration change that raises the throughput limit, which most reliably improves performance during peak hours. Bursting throughput is the default mode and cannot be 'enabled' as a change; it automatically allows bursting based on stored data, but during sustained peak usage, provisioned throughput is needed to guarantee higher throughput. Option A (encryption at rest) does not affect performance. Option C (Enable Bursting Throughput) is misleading because bursting is already enabled by default and cannot be turned on as a new configuration; it also does not provide sustained throughput improvement. Option D (Max I/O performance mode) optimizes for high I/O operations but does not directly increase throughput.

Answer

Enable encryption at rest

Answer

Enable Bursting Throughput

Answer

Change the performance mode to Max I/O

Question 4

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database is 2 TB and has a 4-hour maintenance window. Which AWS service should be used to minimize downtime during the migration?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) supports ongoing replication with minimal downtime by using change data capture (CDC) to synchronize source and target databases continuously. Option B, AWS Server Migration Service (SMS), is designed for migrating entire server volumes, not databases. Option C, AWS Application Migration Service (MGN), automates server migration but is not optimized for database replication. Option D, AWS DataSync, is for transferring large file sets to or from AWS storage services, not for live database replication.

Answer

AWS Server Migration Service (SMS)

Answer

AWS Application Migration Service (MGN)

Answer

AWS DataSync

Question 5

A company is designing a disaster recovery (DR) strategy for its SAP landscape on AWS. The DR site must be in a different AWS Region. Which TWO options can be used to replicate the SAP HANA database to the DR Region? (Choose TWO.)

Accepted Answer

AWS Database Migration Service (DMS) with ongoing replication. AWS DMS with ongoing replication can continuously replicate SAP HANA database changes to a target HANA instance in another Region using change data capture (CDC), enabling near-real-time synchronization for DR purposes. Option D is correct because SAP HANA System Replication can be configured across AWS Regions to replicate the HANA database synchronously or asynchronously, providing a native disaster recovery solution. Both methods are valid for replicating SAP HANA to a different AWS Region.

Answer

Amazon RDS Multi-Region replica

Answer

Amazon S3 Cross-Region Replication for HANA backup files

Answer

Amazon EBS snapshot copy to the DR Region

Question 6

An SAP system on AWS is experiencing intermittent connectivity issues between the application server and the HANA database. The application team confirms the database is healthy. Which AWS service should be used to analyze network traffic between the two instances?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture IP traffic information for network interfaces, allowing analysis of network traffic between the application server and HANA database to identify dropped packets or blocked traffic. AWS Config records resource configurations (not network traffic), CloudTrail logs API calls (not network flows), and CloudWatch Logs aggregates application and system logs (not network-level traffic).

Answer

AWS Config

Answer

AWS CloudTrail

Answer

Amazon CloudWatch Logs

Question 7

A company is migrating an on-premises SAP HANA database to AWS. The database is 2 TB in size, and the network link has a bandwidth of 1 Gbps with an average utilization of 40% during the migration window. They need to minimize the migration time. Which approach should they use?

Accepted Answer

Use AWS Snowball Edge to transfer the data physically.. AWS Snowball Edge is the most efficient approach for large data transfers (2 TB) over a constrained network (1 Gbps at 40% utilization ≈ 400 Mbps). It physically ships the data, avoiding network bottlenecks entirely. Option A is correct. Option B is wrong because requesting a bandwidth increase is impractical and may not be feasible. Option C is wrong: AWS DMS with ongoing replication minimizes downtime for incremental changes, but the initial full load would still be slow over the constrained network, increasing total migration time. Option D is wrong: Amazon S3 Transfer Acceleration only speeds up uploads to S3, not to SAP HANA directly, and it still relies on the network link.

Answer

Request a temporary bandwidth increase from the ISP.

Answer

Use AWS Database Migration Service (DMS) with ongoing replication to minimize downtime.

Answer

Use Amazon S3 Transfer Acceleration to speed up the transfer.

Question 8

A company runs SAP S/4HANA on AWS and needs to back up the SAP HANA database to Amazon S3. They want to automate backups and ensure they are encrypted at rest. Which solution should they use?

Accepted Answer

Configure SAP HANA Backint agent to back up directly to S3 with SSE-S3 encryption. SAP HANA Backint is the native, certified method for integrating SAP HANA backups directly with Amazon S3. The Backint agent handles automated backup scheduling and, when configured with SSE-S3, ensures data is encrypted at rest using Amazon S3's server-side encryption, meeting both automation and encryption requirements without additional infrastructure.

Answer

Use AWS Backup to schedule backups to S3

Answer

Use an S3 lifecycle policy to transition backups to S3

Answer

Use AWS KMS to encrypt backups and store them manually

Question 9

A company is running an SAP HANA database on an EC2 instance with Amazon EBS volumes. The database is experiencing high write latency. The storage is configured as two gp2 volumes in a RAID 0 stripe. Which change is most likely to improve write performance?

Accepted Answer

Replace gp2 volumes with io1 volumes provisioned with sufficient IOPS for the workload.. SAP HANA is an I/O-intensive application that requires predictable, low-latency storage performance. gp2 volumes use a burst-bucket model that can lead to performance degradation under sustained high write loads, whereas io1 volumes allow you to provision a specific number of IOPS independently of volume size, ensuring consistent throughput. By provisioning sufficient IOPS for the workload, you eliminate the write latency caused by gp2's burst credit exhaustion.

Answer

Migrate to a RAID 0+1 configuration with four volumes.

Answer

Increase the volume size of each gp2 volume to 1 TB to increase baseline IOPS.

Answer

Move the data to instance store volumes attached to the EC2 instance.

Question 10

A company is planning to run SAP NetWeaver on AWS and wants to use Auto Scaling for the application server tier. Which consideration is critical when implementing Auto Scaling for SAP application servers?

Accepted Answer

Automatically register new instances with the SAP Central Services instance.. SAP application servers must be registered with the SAP Central Services instance (ASCS/SCS) to be recognized as part of the SAP system. Auto Scaling can launch new instances, but without automatic registration via sapstartsrv or the SAP Host Agent, the new instances will not be able to communicate with the Central Services instance, and the SAP system will not utilize them for workload.

Answer

Ensure the database can scale automatically with the application tier.

Answer

Enable termination protection on all Auto Scaling instances.

Answer

Use encrypted EBS volumes for all instances.

Question 11

An SAP Basis administrator is setting up an SAP HANA database in a Multi-AZ deployment on AWS. They need to ensure that the database remains available during an Availability Zone failure. Which AWS services should be used together to achieve this?

Accepted Answer

SAP HANA System Replication and Amazon Route 53. SAP HANA System Replication (HSR) provides synchronous or asynchronous replication of HANA databases across Availability Zones, ensuring data consistency and failover capability. Amazon Route 53 with health checks and DNS failover routing automatically redirects client traffic to the standby HANA instance in the secondary AZ when the primary fails, together achieving Multi-AZ high availability for SAP HANA.

Answer

AWS CloudWatch alarms and AWS Lambda

Answer

Auto Scaling groups and Elastic Load Balancer

Answer

Amazon RDS Multi-AZ and Route 53

Question 12

A company is migrating its SAP ERP system running on Oracle Database to SAP HANA on AWS. The current on-premises environment has a 5 TB Oracle database with high transaction volume. The migration must be completed within a 4-hour downtime window. The target environment on AWS uses an SAP-certified instance with 1 TB of RAM. The company has a 1 Gbps AWS Direct Connect connection. The migration team is considering using SAP DMO with SUM. However, during a test run, the database export took 6 hours, exceeding the downtime window. What should the migration team do to meet the 4-hour downtime window?

Accepted Answer

Use the SAP HANA Database Migration Option (DMO) with the 'load and move' method. Using the SAP HANA Database Migration Option (DMO) with the 'load and move' method allows the initial data load to be performed during the preparation phase before the downtime window, and only a delta transfer (incremental data) during the actual downtime. This significantly reduces the downtime required compared to the standard DMO method that does the full export and import during downtime. Option A is wrong because performing a system copy to Oracle on AWS first does not directly migrate to SAP HANA and adds unnecessary steps and time. Option C is wrong because upgrading to a larger EC2 instance may improve processing speed but does not address the bottleneck of the 1 Gbps network bandwidth; the export time is limited by network speed. Option D is wrong because AWS Snowball Edge introduces additional time for shipping and data transfer, which would likely exceed the 4-hour window, and it is not optimized for the delta sync required for such a short downtime.

Answer

Perform a system copy to an Oracle database on AWS first, then migrate to HANA

Answer

Upgrade to a larger EC2 instance type with more CPU and memory for the HANA database

Answer

Use AWS Snowball Edge to transfer the initial data and then perform a delta sync

Question 13

A company is migrating a file server to AWS and needs a scalable, highly available file storage solution that supports the SMB protocol. Which AWS service should be used?

Accepted Answer

Amazon FSx for Windows File Server. Amazon FSx for Windows File Server supports SMB protocol and provides fully managed Windows file servers. Option A (Amazon EFS) supports NFS, not SMB. Option B (Amazon S3) is object storage. Option D (AWS Storage Gateway) can present file shares but is not a fully managed file server.

Answer

Amazon Elastic File System (EFS)

Answer

AWS Storage Gateway

Answer

Amazon Simple Storage Service (S3)

Question 14

A company is migrating an SAP system to AWS and needs to ensure backup compliance. The SAP database is SAP HANA. Which TWO AWS services can be used to back up SAP HANA databases?

Accepted Answer

Backint agent for SAP HANA. AWS Backup (option E) provides a fully managed backup service that can automate and centrally manage backups of SAP HANA databases. The Backint agent for SAP HANA (option A) is an SAP-certified backup integration that allows HANA to directly stream backups to Amazon S3, and it integrates with AWS Backup for scheduling and retention. Option B (Amazon S3 lifecycle policies) is a storage management feature, not a backup service. Option C (AWS Storage Gateway) enables hybrid cloud storage but does not provide native backup capabilities for SAP HANA. Option D (AWS Database Migration Service) is used for database migrations, not backups.

Answer

Amazon S3 lifecycle policies

Answer

AWS Storage Gateway

Answer

AWS Database Migration Service (DMS)

Question 15

A company uses Amazon CloudWatch Logs to store SAP application logs. The Security team requires that logs be encrypted at rest using a customer-managed KMS key (CMK). How can this be achieved?

Accepted Answer

Associate the KMS key with the CloudWatch Logs log group.. CloudWatch Logs supports encryption at rest using a customer-managed KMS key (CMK) by associating the key with the log group. This encrypts all log data stored in the log group. Option B is incorrect because S3 default encryption applies only to data stored in S3, not to CloudWatch Logs data that is not exported. Option C is incorrect because encrypting the EBS volume of EC2 instances does not encrypt the logs after they are sent to CloudWatch Logs. Option D is incorrect because encryption is configured at the log group level, not the log stream level.

Answer

Enable default encryption on the S3 bucket where logs are exported.

Answer

Use an encrypted EBS volume for the EC2 instances generating the logs.

Answer

Enable encryption on the CloudWatch Logs log stream.