PAS-C01 Practice Test 21 — 15 Questions

Question 1

A company plans to migrate 50 TB of archived data from on-premises tape storage to Amazon S3 Glacier Deep Archive. The data is rarely accessed. Which migration method is most cost-effective and suitable for the data volume?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS Snowball Edge. AWS Snowball Edge is a physical device that can transfer large amounts of data offline, avoiding high network costs. For 50 TB, Snowball Edge is cost-effective and efficient. Option C is correct. Option A (AWS DataSync) is for network-based transfers, which may be slow and costly for 50 TB. Option B (AWS CLI with multipart upload) would require significant network bandwidth and time. Option D (AWS Database Migration Service) is for database migration.

Answer

AWS DataSync

Answer

AWS CLI with multipart upload

Answer

AWS Database Migration Service (DMS)

Question 2

A company is migrating SAP applications to AWS and uses the CloudFormation template snippet shown in the exhibit. The SAP ASCS instance requires a shared file system for the transport directory. However, the template does not create any shared storage. Which AWS resource should be added to the template to provide a shared file system?

Accepted Answer

Amazon EFS file system. Amazon EFS provides a shared, POSIX-compliant NFS file system that can be mounted simultaneously by multiple EC2 instances, which is exactly what SAP ASCS requires for its transport directory (/usr/sap/trans). EFS is the standard AWS shared storage solution for SAP central services in multi-instance or high-availability deployments.

Answer

Instance Store

Answer

Additional Amazon EBS volume

Answer

Amazon S3 bucket

Question 3

A company is migrating a legacy SAP ERP system with a large ABAP codebase to AWS. They want to use the same SAP version without re-implementation. Which migration strategy should they adopt?

Accepted Answer

Rehost (Lift-and-shift). Rehost (lift-and-shift) involves moving the application to AWS without making changes to the code or architecture. Since the company wants to use the same SAP version without re-implementation, rehosting is the correct strategy. It minimizes modifications and is the fastest migration path for legacy SAP ERP systems.

Answer

Refactor / Re-architect

Answer

Retire

Answer

Replatform (Lift, tinker, and shift)

Question 4

A company is running SAP on AWS and wants to ensure high availability for SAP Central Services (ASCS) and Enqueue Replication Server (ERS). Which architecture meets this requirement?

Accepted Answer

Deploy ASCS and ERS on separate EC2 instances in different Availability Zones, with a Network Load Balancer.. SAP Central Services (ASCS) and Enqueue Replication Server (ERS) must run on separate EC2 instances in different Availability Zones to achieve high availability. A Network Load Balancer (NLB) is used to distribute traffic and provide a single endpoint, while the enqueue replication mechanism (enrep) synchronizes the lock table between the two instances, enabling automatic failover without data loss.

Answer

Deploy ASCS and ERS on the same EC2 instance with S3 replication.

Answer

Configure Route 53 health checks to switch between two instances in the same AZ.

Answer

Use a single EC2 instance with an S3 bucket for shared storage and Lambda for failover.

Question 5

A company is migrating a multi-tier application to AWS. The application includes a web tier, application tier, and database tier. To ensure security, the database tier must not be accessible from the internet. Which VPC configuration should be used?

Accepted Answer

Place the database tier in private subnets. Placing the database tier in private subnets ensures it is not directly accessible from the internet. Option A (subnets with a NAT Gateway) provides outbound internet access only, not inbound. Option B (subnets with an Internet Gateway) would allow direct internet access. Option C (all tiers in public subnets) would expose all tiers to the internet. Only option D correctly restricts internet access to the database tier by placing it in private subnets.

Answer

Place the database tier in subnets with a NAT Gateway

Answer

Place the database tier in subnets with an Internet Gateway

Answer

Place all tiers in public subnets

Question 6

Drag and drop the steps to set up an SAP HANA system replication in AWS using the SAP HANA Cockpit into the correct order.

Accepted Answer

Configure network connectivity between primary and secondary SAP HANA instances, then enable system replication on the primary, then register the secondary system, then start replication.. SAP HANA system replication requires two instances, network connectivity, enabling replication on primary, registering secondary, and then starting replication.

Answer

Enable system replication on the primary, then configure network connectivity, then register the secondary, then start replication.

Answer

Configure network connectivity, then register the secondary, then enable system replication on the primary, then start replication.

Answer

Configure network connectivity, then enable system replication on the primary, then start replication, then register the secondary.

Question 7

An SAP system is deployed on AWS using a shared account structure. The security team requires that all changes to SAP security groups be logged and alerted. Which combination of AWS services should be used?

Accepted Answer

AWS CloudTrail with Amazon CloudWatch Events. AWS CloudTrail logs all API calls, including changes to security groups (AuthorizeSecurityGroupIngress, RevokeSecurityGroupIngress, etc.). Amazon CloudWatch Events (now EventBridge) can then match those CloudTrail events using an event pattern and trigger alerts via SNS or Lambda. This combination provides both logging and alerting for security group changes, meeting the security team's requirement.

Answer

AWS Config with an SNS topic

Answer

Amazon Inspector with Amazon SNS

Answer

Amazon GuardDuty with Amazon SNS

Question 8

An SAP system administrator is configuring an SAP HANA database on an EC2 instance with multiple EBS volumes. The administrator wants to ensure that the data volumes are mirrored to protect against volume failure. Which RAID configuration should the administrator use for the HANA data volumes?

Accepted Answer

RAID 10. SAP HANA data volumes require high IOPS and redundancy against volume failure; RAID 10 combines mirroring (RAID 1) and striping (RAID 0), providing both fault tolerance and performance. SAP officially recommends RAID 10 for HANA data volumes on EBS, and it supports the low-latency, high-throughput I/O profile HANA demands. RAID 10 can tolerate multiple disk failures as long as they are not in the same mirrored pair.

Answer

RAID 5

Answer

RAID 0

Answer

RAID 6

Question 9

A company is running SAP Business Suite on AWS. The SAP application servers are behind an Application Load Balancer (ALB). Users are experiencing session timeouts because the ALB is distributing requests to different application servers. What should the company configure on the ALB to maintain session stickiness?

Accepted Answer

Enable sticky sessions using the ALB-generated cookie.. Enabling sticky sessions (session affinity) on an Application Load Balancer using the ALB-generated cookie (AWSALB) ensures that all requests from a user session are routed to the same target (SAP application server). This prevents session timeouts caused by requests being distributed to different servers, which would lose in-memory session state. The ALB-generated cookie is the simplest and most appropriate method for SAP Business Suite, as it does not require custom application code.

Answer

Use a Network Load Balancer instead of an Application Load Balancer.

Answer

Enable cross-zone load balancing on the ALB.

Answer

Enable path-based routing to route all requests from a user to the same server.

Question 10

A company is running SAP Business Suite on AWS and needs to back up the SAP HANA database daily. Which AWS service can be used to automate HANA backups to Amazon S3?

Accepted Answer

AWS Backup. AWS Backup is the correct service because it provides a fully managed, policy-based backup solution that natively supports SAP HANA databases running on Amazon EC2. It automates the creation, retention, and deletion of HANA backups directly to Amazon S3 using the Backint agent, eliminating the need for custom scripts or manual intervention.

Answer

AWS Storage Gateway

Answer

Amazon EBS snapshots

Answer

AWS DataSync

Question 11

A company is using AWS DMS to migrate an SAP database. The full load is complete, but the CDC latency is high. Which step should the company take to reduce latency?

Accepted Answer

Increase the compute capacity of the DMS replication instance.. Increasing the compute capacity of the DMS replication instance can reduce CDC latency by providing more CPU and memory resources to process changes more quickly. High CDC latency often indicates the replication instance is under-resourced.

Answer

Increase the size of the target database instance.

Answer

Restart the DMS replication task.

Answer

Disable change data capture (CDC) on the source database.

Question 12

A company is running SAP on AWS and needs to back up their SAP HANA database daily. The backup must be stored cost-effectively and retained for 7 years for compliance. Which AWS service should be used for long-term backup storage?

Accepted Answer

Amazon S3 Glacier Deep Archive. Amazon S3 Glacier Deep Archive is the correct choice because it provides the lowest-cost storage for long-term archival data, with retrieval times ranging from 12 to 48 hours, which is acceptable for a daily backup retained for 7 years. This service is specifically designed for compliance and regulatory retention where infrequent access is expected, making it the most cost-effective option for the given requirements.

Answer

Amazon S3 One Zone-IA

Answer

Amazon S3 Standard

Answer

Amazon EBS Snapshots

Question 13

A company is designing a disaster recovery strategy for SAP S/4HANA. The primary site is in us-east-1 and the DR site is in us-west-2. The RPO must be less than 30 minutes and RTO less than 2 hours. Which approach meets these requirements?

Accepted Answer

Configure HANA System Replication in asynchronous mode with automatic takeover. HANA System Replication in asynchronous mode with automatic takeover meets the RPO of less than 30 minutes and RTO of less than 2 hours. Asynchronous replication provides near-real-time data transfer across AWS regions with minimal impact on primary performance, and automatic takeover enables fast failover to the DR instance, satisfying the RTO requirement.

Answer

Configure HANA System Replication in synchronous mode across regions

Answer

Take nightly backups to S3 and restore in DR

Answer

Use AWS Backup to copy daily snapshots to DR region

Question 14

An SAP system running on AWS experiences a significant performance degradation after a patching activity. The SAP application (PAS) and database (HANA) run on separate EC2 instances. The network throughput between the two instances has dropped. What is the MOST likely cause?

Accepted Answer

The instances were moved out of a cluster placement group, reducing network throughput.. A cluster placement group provides low-latency, high-bandwidth network connectivity between instances by placing them in the same high-speed, non-blocking rack. Moving instances out of a cluster placement group removes this benefit, reducing network throughput between the SAP PAS and HANA instances, which directly causes performance degradation.

Answer

The EBS-optimization feature was disabled on the database instance.

Answer

The security group rules were modified during patching, restricting traffic.

Answer

The route tables were updated, causing traffic to traverse a NAT gateway.

Question 15

An SAP administrator notices that the SAP application performance has degraded over the past week. The system is running on Amazon EC2 with EBS volumes. Which AWS service should be used to analyze the performance impact of the EBS volumes?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch provides EBS metrics such as VolumeReadOps, VolumeWriteOps, VolumeQueueLength, BurstBalance, and VolumeThroughputPercentage, which are essential for diagnosing performance degradation on EBS-backed EC2 instances. CloudWatch also supports detailed monitoring, alarms, and metric math to correlate EBS latency with application slowdowns. This makes it the correct service for analyzing EBS performance impact.

Answer

Amazon Inspector

Answer

AWS CloudTrail

Answer

AWS Trusted Advisor