PAS-C01 Practice Test 16 — 15 Questions

Question 1

A company is migrating its SAP HANA database to AWS and needs to choose the most appropriate EC2 instance type. The workload requires high memory bandwidth and is CPU-intensive. Which instance family would best meet these requirements?

Accepted Answer

X1e instance family. The X1e instance family is purpose-built for high-memory, CPU-intensive SAP HANA workloads, offering up to 3.9 TB of memory and high memory bandwidth per vCPU. This aligns with SAP HANA's requirement for large in-memory databases and compute-intensive processing, making D the correct choice.

Answer

M5 instance family

Answer

I3 instance family

Answer

C5 instance family

Question 2

A company is running SAP HANA on AWS and wants to encrypt the EBS volumes at rest. They also need to manage the encryption keys themselves. Which solution should they use?

Accepted Answer

Use AWS KMS with a customer managed key (CMK). Option A is correct because AWS KMS with a customer managed key (CMK) allows the company to have full control over the encryption keys used for EBS volume encryption, including key rotation, access policies, and disabling or deleting the key. This meets the requirement to manage the encryption keys themselves while still leveraging AWS KMS for key management and auditing.

Answer

Enable EBS encryption with the default AWS managed KMS key

Answer

Use AWS CloudHSM to store keys

Answer

Use AWS Systems Manager Parameter Store

Question 3

During a SAP migration to AWS, the team needs to ensure that the SAP license is compliant. Which of the following is a requirement for running SAP production systems on AWS?

Accepted Answer

The EC2 instance must be SAP-certified and the number of SAPS must be licensed.. AWS requires that for running SAP production systems, the EC2 instance must be SAP-certified (listed in the SAP Certified and Supported Hardware Directory) and the customer must have licensed the appropriate number of SAP Application Performance Standard (SAPS) units for the instance type. This ensures the infrastructure meets SAP's performance and support requirements, and that the license covers the compute capacity used.

Answer

The company must use AWS Enterprise Support.

Answer

The company must notify SAP of the migration to AWS.

Answer

The company must use a specific AWS region.

Question 4

A company runs SAP Business Suite on AWS with Oracle Database. The system is experiencing high read latency on the database server. The current storage configuration uses EBS gp2 volumes. Which change would most effectively reduce read latency?

Accepted Answer

Migrate to io2 Block Express volumes with provisioned IOPS.. Option A is correct because io2 Block Express volumes provide consistent, high-performance IOPS with sub-millisecond latency, which directly addresses the high read latency issue. Unlike gp2, which relies on burst credits and has variable performance, io2 Block Express delivers provisioned IOPS up to 256,000 per volume, making it ideal for latency-sensitive SAP workloads with Oracle Database.

Answer

Increase the size of the EBS gp2 volumes to increase baseline IOPS.

Answer

Configure a RAID 0 stripe across multiple EBS volumes.

Answer

Use EBS st1 volumes for better throughput.

Question 5

A company is migrating SAP workloads to AWS and needs to choose storage for SAP HANA. Which two storage options are supported for SAP HANA data volumes? (Select TWO.)

Accepted Answer

Amazon EBS io2 Block Express volumes.. Amazon EBS io2 Block Express volumes are supported for SAP HANA data volumes because they provide high durability (99.999% durability) and sub-millisecond latency with up to 256,000 IOPS per volume, meeting SAP's performance requirements for production HANA workloads. Amazon EBS gp3 volumes are also supported for SAP HANA data volumes, offering a baseline of 3,000 IOPS and 125 MB/s throughput with the ability to scale independently, making them suitable for non-production or smaller production environments.

Answer

Amazon S3.

Answer

Amazon EFS.

Answer

Instance Store (NVMe SSD) volumes.

Question 6

A company is implementing SAP S/4HANA on AWS and wants to ensure that the system is backed up properly. They need to back up the HANA database and the application layer. Which approach is recommended for backing up the HANA database?

Accepted Answer

Use the AWS Backint agent to back up HANA to Amazon S3. Option B is correct because Backint is the SAP-certified interface for backing up HANA to Amazon S3 via AWS Backint agent. Option A is wrong because EBS snapshots are crash-consistent but not application-consistent for HANA without additional steps. Option C is wrong because AWS Backup can orchestrate snapshots but not Backint. Option D is wrong because S3 lifecycle policies are for storage management, not backups.

Answer

Use EBS snapshots for the HANA data volumes

Answer

Configure an S3 lifecycle policy to archive the HANA log files

Answer

Use AWS Backup with a backup plan that includes the HANA instance

Question 7

An SAP administrator configures SAP HANA backup using Backint as shown in the exhibit. The backup job fails with an error indicating that the bucket 'sap-hana-backup-prod' does not exist. The administrator confirms that the bucket name is correct. What is the most likely cause of the failure?

Accepted Answer

The bucket is in a different AWS region than the EC2 instance.. The SAP HANA Backint agent communicates with Amazon S3 using the AWS SDK, which resolves the bucket endpoint based on the region configured in the agent or the instance metadata. If the bucket 'sap-hana-backup-prod' exists in a different AWS region than the EC2 instance, the Backint agent will attempt to access the bucket using the wrong regional endpoint, resulting in a 'bucket does not exist' error. This is a common misconfiguration when the Backint parameter file does not explicitly set the correct region or when the instance's default region differs from the bucket's region.

Answer

The IAM role used by the instance does not have s3:PutObject permission.

Answer

The chunk size is too large for the bucket.

Answer

The bucket has a bucket policy that denies access.

Question 8

An SAP HANA database on AWS is using EBS io2 volumes. The company wants to monitor the read and write latency of the database volumes. Which CloudWatch metrics should be used?

Accepted Answer

VolumeReadLatency and VolumeWriteLatency.. Option B is correct because CloudWatch provides the `VolumeReadLatency` and `VolumeWriteLatency` metrics specifically to monitor the average time (in seconds) for read and write I/O operations on EBS volumes. For SAP HANA on io2 volumes, these metrics directly reflect storage performance and are critical for detecting latency issues that could impact database throughput and transaction response times.

Answer

VolumeIdleTime and VolumeTotalReadTime.

Answer

VolumeThroughputPercentage and VolumeConsumedReadWriteOps.

Answer

VolumeQueueLength and VolumeThroughput.

Question 9

An SAP system on AWS is experiencing high write latency on the database layer. The DB is running on an r5.8xlarge instance with EBS gp2 volumes. The SAP team notices that the EBS volume write queue depth is frequently above 16. What is the MOST likely cause and what change should be made?

Accepted Answer

The volume is too small for the workload. Increase the volume size to gain baseline IOPS.. The correct answer is C because gp2 volume baseline IOPS scales linearly with size (3 IOPS per GiB). An r5.8xlarge instance supports EBS optimization, so the bottleneck is not the instance. With a write queue depth frequently above 16, the gp2 volume is likely too small to provide sufficient baseline IOPS, causing the queue to back up. Increasing the volume size raises the baseline IOPS, reducing queue depth and write latency.

Answer

The instance type does not support EBS optimization. Switch to a network-optimized instance.

Answer

The EBS volume is not optimized for SAP. Use io1 with high provisioned IOPS.

Answer

The gp2 volume does not provide enough burst IOPS. Migrate to gp3.

Question 10

Which TWO AWS services can be used to monitor SAP system performance and send alerts? (Choose two.)

Accepted Answer

Amazon Simple Notification Service (SNS). Amazon CloudWatch is the primary AWS monitoring service that can collect metrics from SAP systems (e.g., via SAP Cloud Connector or custom scripts) and trigger alarms based on thresholds. Amazon SNS is the notification service that CloudWatch alarms use to send alerts via email, SMS, or HTTP endpoints. Together, they form the standard monitoring and alerting pipeline for SAP workloads on AWS.

Answer

Amazon Inspector

Answer

AWS Config

Answer

AWS Trusted Advisor

Question 11

A company is migrating an SAP S/4HANA system to AWS and needs to choose the storage for the HANA database. The database requires high IOPS and low latency. Which AWS storage solution is most suitable?

Accepted Answer

Amazon EBS io2 Block Express volumes. Amazon EBS io2 Block Express volumes are designed for mission-critical SAP HANA workloads, offering up to 256,000 IOPS per volume and sub-millisecond latency. They provide 99.999% durability and are the only EBS volume type certified by SAP for production HANA databases on AWS, meeting the high IOPS and low latency requirements.

Answer

Amazon EFS

Answer

Amazon S3

Answer

Amazon EBS st1 volumes

Question 12

Which THREE security best practices should be implemented for SAP systems on AWS? (Choose three.)

Accepted Answer

Use security groups to restrict inbound and outbound traffic to SAP systems.. Security groups act as a virtual firewall for EC2 instances, controlling inbound and outbound traffic at the instance level. For SAP systems, this is critical to restrict access to only necessary ports (e.g., 3200 for SAP Application Server, 36xx for SAProuter, 443 for HTTPS) and trusted IP ranges, reducing the attack surface. Unlike network ACLs, security groups are stateful, meaning return traffic is automatically allowed, simplifying rule management for SAP communication flows.

Answer

Disable SSH key pair access and use only password authentication.

Answer

Deploy all SAP systems in a single VPC for simplified management.

Question 13

An SAP Basis administrator notices that the SAP application server on an EC2 instance is experiencing intermittent high latency when writing to the SAP HANA database. The HANA database is on a separate EC2 instance in the same VPC and Availability Zone. Which configuration change is most likely to resolve the issue?

Accepted Answer

Enable Jumbo Frames on the network interfaces. The intermittent high latency when writing to SAP HANA is likely caused by network packet fragmentation. Enabling Jumbo Frames (MTU 9001) on the network interfaces of both the SAP application server and the HANA database EC2 instances reduces the number of packets required for large data transfers, lowers CPU overhead for packet processing, and improves throughput. This is a standard recommendation for SAP on AWS to optimize network performance between application and database layers.

Answer

Launch the instances in a cluster placement group

Answer

Enable EBS optimization on both instances

Answer

Change the Elastic Network Adapter (ENA) to SR-IOV

Question 14

A company is planning to migrate its SAP landscape to AWS. They want to use AWS services to reduce operational overhead. Which TWO services can help automate the deployment and configuration of SAP systems? (Choose two.)

Accepted Answer

AWS Launch Wizard for SAP. Option A and D are correct. Option B is wrong because Systems Manager is for management, not deployment. Option C is wrong because CloudWatch is for monitoring. Option E is wrong because WorkSpaces is a VDI service.

Answer

Amazon CloudWatch

Answer

AWS Systems Manager

Answer

Amazon WorkSpaces

Question 15

An SAP administrator wants to ensure that the SAP application server can communicate with the HANA database using the private IP address within the same VPC. What configuration is necessary?

Accepted Answer

Configure a security group rule allowing traffic on the HANA database port from the application server's security group.. Option D is correct because within the same VPC, AWS resources can communicate using private IP addresses without internet or VPN connectivity. The key requirement is that the security group attached to the HANA database must allow inbound traffic on the HANA database port (typically 31517 or 30015 for HANA) from the security group associated with the SAP application server. This ensures that only traffic originating from the application server is permitted, maintaining security while enabling private IP communication.

Answer

Attach an Internet Gateway to the VPC.

Answer

Set up a NAT Gateway for the database subnet.

Answer

Establish a VPN connection to the on-premises network.