PAS-C01 Practice Test 22 — 15 Questions

Question 1

An SAP system needs to send email notifications from the SAP application server running on EC2. Which AWS service should be used?

Accepted Answer

Amazon Simple Email Service (SES). Amazon Simple Email Service (SES) is the correct choice because it is a cloud-based email sending service designed specifically for sending transactional and notification emails from applications, including SAP systems running on EC2. SES supports SMTP and API-based integration, allowing the SAP application server to send outbound email notifications reliably without managing on-premises email infrastructure.

Answer

Amazon Pinpoint

Answer

Amazon Simple Queue Service (SQS)

Answer

Amazon Simple Notification Service (SNS)

Question 2

Which TWO actions should an operations team take to ensure high availability for SAP HANA in a single AWS Region?

Accepted Answer

Deploy SAP HANA in a Multi-AZ configuration using HANA System Replication.. Option B is correct because deploying SAP HANA across multiple Availability Zones within a single AWS Region using HANA System Replication provides the AZ-level fault tolerance required for high availability; if one AZ fails, the secondary HANA node in another AZ can take over. Option C is correct because HANA System Replication alone only keeps the secondary in sync—configuring automatic failover (e.g., via a cluster solution such as Pacemaker with a STONITH/fencing mechanism and an overlay IP) ensures the standby is promoted without manual intervention, which is essential for true high availability. Option A is not correct because read replicas are a read-scaling/reporting feature, not an HA failover mechanism for the primary HANA database. Option D is not correct because automated backups to Amazon S3 address durability and disaster recovery (RPO), not continuous availability or automatic failover. Option E is not correct because a single large EC2 instance in one Availability Zone is a single point of failure and provides no high availability at all.

Answer

Create read replicas of the HANA database.

Answer

Configure automated backups to Amazon S3.

Answer

Use a single large EC2 instance in one Availability Zone.

Question 3

An SAP system on AWS is experiencing intermittent connectivity issues between the application server and the HANA database. The application team confirms the database is healthy. Which AWS service should be used to analyze network traffic between the two instances?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture IP traffic information for network interfaces, allowing analysis of network traffic between the application server and HANA database to identify dropped packets or blocked traffic. AWS Config records resource configurations (not network traffic), CloudTrail logs API calls (not network flows), and CloudWatch Logs aggregates application and system logs (not network-level traffic).

Answer

AWS Config

Answer

AWS CloudTrail

Answer

Amazon CloudWatch Logs

Question 4

During an SAP migration to AWS, the migration team faces a challenge with the Transport Management System (TMS). The SAP system landscape includes development, quality assurance, and production systems running on separate EC2 instances. The TMS is configured with transport routes between these systems. After migration, transports fail with errors related to missing files on the transport directory. What should the team do to ensure the TMS works correctly?

Accepted Answer

Set up an Amazon EFS file system and mount it as the transport directory on all SAP instances.. SAP TMS requires a shared transport directory (/usr/sap/trans) accessible by all systems in the landscape, because transport files (data and cofiles) are written by the source system and read by target systems during import. Amazon EFS provides a POSIX-compliant, shared NFS file system that can be mounted on all EC2 instances across AZs, replicating the on-premises shared /sap/trans behavior.

Answer

Create an EBS volume for each SAP system and copy transport files manually.

Answer

Store the transport directory in an S3 bucket and mount it using S3FS.

Answer

Use AWS Storage Gateway with SMB file share to host the transport directory.

Question 5

An SAP system administrator is troubleshooting a performance issue on an SAP application server running on an EC2 instance. The /usr/sap directory is on an EBS volume. The administrator notices high I/O wait times. Which action should be taken to improve I/O performance?

Accepted Answer

Change the EBS volume type to io2 Block Express with provisioned IOPS. The io2 Block Express volume type provides up to 256,000 provisioned IOPS and sub-millisecond latency, which directly addresses high I/O wait times caused by insufficient IOPS on the EBS volume hosting /usr/sap. SAP application servers are sensitive to storage latency, and increasing provisioned IOPS reduces queue depth and wait times for database and log writes.

Answer

Migrate the /usr/sap directory to Amazon EFS

Answer

Move the /usr/sap directory to an instance store volume

Answer

Increase the instance size to a larger instance type

Question 6

A company is migrating its SAP BusinessObjects to AWS. The current on-premises deployment uses a Windows-based environment. Which AWS service should the company use to migrate the Windows servers?

Accepted Answer

AWS Application Migration Service (AWS MGN). AWS MGN is the recommended service for migrating Windows servers to AWS. Option A is wrong because AWS SCT is for schema conversion, not server migration. Option C is wrong because AWS DMS is for databases, not servers. Option D is wrong because AWS Server Migration Service (SMS) is deprecated.

Answer

AWS Schema Conversion Tool (AWS SCT)

Answer

AWS Database Migration Service (AWS DMS)

Answer

AWS Server Migration Service (AWS SMS)

Question 7

A company plans to migrate their SAP HANA database to AWS. They require the highest availability with automatic failover in case of an AZ failure. Which architecture should they use?

Accepted Answer

Multi-AZ with HANA System Replication in sync mode and automatic failover.. It meets the requirement for highest availability with automatic failover in case of an AZ failure. HANA System Replication (HSR) in synchronous mode ensures zero data loss (RPO=0) by committing transactions only after they are replicated to the standby, and when combined with Multi-AZ deployment, it provides automatic failover across Availability Zones. This architecture is the AWS-recommended pattern for SAP HANA high availability, leveraging the AWS Multi-AZ concept with HSR's built-in automatic takeover capability.

Answer

Single AZ with HANA System Replication to a standby in the same AZ.

Answer

Single AZ with daily backups to Amazon S3.

Answer

Multi-AZ with HANA System Replication in async mode and manual failover.

Question 8

Which TWO AWS services can be used to monitor the health of SAP systems and send notifications? (Select TWO.)

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch (B) is correct because it is the AWS monitoring service that collects metrics and logs from SAP systems (e.g., via the CloudWatch agent or SAP-specific metrics), evaluates them against thresholds using CloudWatch alarms, and can trigger notifications when health conditions are breached. Amazon Simple Notification Service (E) is correct because SNS is the pub/sub messaging service that delivers those alarm or event notifications to subscribers via email, SMS, HTTP/S endpoints, or Lambda, completing the monitor-and-notify workflow. AWS Config (A) is incorrect because it records and evaluates resource configuration compliance, not runtime system health or metric-based monitoring. AWS CloudTrail (C) is incorrect because it only logs API activity and account events for auditing, not SAP health metrics. Amazon Athena (D) is incorrect because it is an interactive query service for data in S3, with no role in health monitoring or alerting.

Answer

AWS Config

Answer

AWS CloudTrail

Answer

Amazon Athena

Question 9

Refer to the exhibit. A CloudFormation stack creation failed with the message 'WaitCondition received failed signal'. What is the most likely cause?

Accepted Answer

The script executed via cfn-signal failed to complete successfully. The `WaitCondition` resource in CloudFormation is designed to pause stack creation until it receives a success signal from a resource, typically an EC2 instance running a cfn-init script. The 'WaitCondition received failed signal' error indicates that the signal sent was explicitly a failure signal (e.g., via `cfn-signal --exit-code 1`), not that the signal was lost or blocked. This most commonly occurs when the script executed by cfn-init or a user-data script encounters an error and exits with a non-zero exit code, causing cfn-signal to send a failure signal to the WaitCondition.

Answer

The security group rules are blocking the cfn-signal communication

Answer

The stack creation timed out after 1 hour

Answer

The EC2 instance type is not supported in the region

Question 10

A company runs SAP Business Suite on AWS. They notice that their SAP application servers are not evenly distributing load across multiple instances. They have configured an Application Load Balancer (ALB) in front of the SAP Web Dispatchers. What is the MOST likely cause of uneven load distribution?

Accepted Answer

Sticky sessions (session stickiness) are enabled on the ALB.. When sticky sessions (session stickiness) are enabled on an Application Load Balancer, the ALB uses a cookie to bind a client's session to a specific target (SAP Web Dispatcher). This prevents the load balancer from distributing subsequent requests from that client to other healthy targets, causing an uneven distribution of load across the SAP application servers, especially if a few clients generate a disproportionate number of requests.

Answer

The ALB health check interval is too short.

Answer

Cross-zone load balancing is enabled.

Answer

The ALB is using the least outstanding requests routing algorithm.

Question 11

An SAP system administrator notices that the SAP Central Services (ASCS) instance on an EC2 instance has failed. The instance is still running, but the ASCS service is unresponsive. What is the MOST efficient way to restore the ASCS service without affecting the SAP application?

Accepted Answer

Restart the ASCS service using SAP MMC or sapcontrol.. The most efficient way to restore the ASCS service without affecting the SAP application is to restart the ASCS service using SAP MMC or sapcontrol (Option D). This action is quick and minimally disruptive, as it only restarts the service without impacting the underlying EC2 instance or requiring failover procedures. 
- Option A (fail over to secondary node) is less efficient because it requires a properly configured cluster environment and may take longer to orchestrate, and it may not be necessary if the primary node's service can be restarted.
- Option B (reboot the EC2 instance) is inefficient and disruptive because it restarts the entire instance, affecting all services and potentially causing downtime for the SAP application.
- Option C (restore from AMI backup) is the most time-consuming and resource-intensive approach, and is only appropriate if the instance or service is corrupt and cannot be recovered by restarting.

Answer

Manually fail over the ASCS to the secondary node in the cluster.

Answer

Reboot the EC2 instance hosting the ASCS.

Answer

Restore the ASCS instance from the most recent AMI backup.

Question 12

A company is migrating an SAP NetWeaver system to AWS. The system uses NFS for shared file systems. They want to minimize latency and maximize throughput for SAP profiles and transport directories. Which AWS storage service should they use?

Accepted Answer

Amazon FSx for NetApp ONTAP. Amazon FSx for NetApp ONTAP provides high-performance NFS file systems with low latency and high throughput, making it ideal for SAP NetWeaver shared file systems like profiles and transport directories. It supports NFS and SMB, and is certified for SAP. Other options like S3, EBS, and EFS do not meet the performance or protocol requirements as effectively.

Answer

Amazon Simple Storage Service (S3)

Answer

Amazon Elastic Block Store (EBS)

Answer

Amazon Elastic File System (EFS)

Question 13

An SAP administrator runs the AWS CLI command shown in the exhibit. The SAP HANA instance is running on an r5.4xlarge in us-east-1a. The administrator wants to change the instance type to r5.8xlarge to improve performance. What must the administrator do first?

Accepted Answer

Stop the instance from the AWS Management Console.. To change the instance type of an EC2 instance, the instance must first be stopped. While stopped, you can modify the instance type via the AWS Management Console, CLI, or SDK. After the instance is stopped, the administrator can change the type from r5.4xlarge to r5.8xlarge and then start the instance again.

Answer

Create an AMI of the instance and launch a new instance with the larger type.

Answer

Detach the EBS volumes and attach them to a new instance.

Answer

Modify the instance type in the instance settings while it is running.

Question 14

A company is running a mission-critical SAP S/4HANA system on AWS in the us-east-1 region. The system uses a two-tier architecture with the SAP application server and HANA database on the same EC2 instance. The instance type is an r5.24xlarge with 12 x 2 TB gp3 EBS volumes striped using LVM. The HANA data volume is 10 TB. The company has a disaster recovery (DR) requirement with an RPO of 15 minutes and an RTO of 4 hours. The DR site must be in us-west-2. The company currently takes daily EBS snapshots of the data volume and copies them to us-west-2. However, they are not meeting the RPO. The operations team is considering implementing SAP HANA System Replication (HSR) asynchronously to the DR region. However, network latency between us-east-1 and us-west-2 averages 60 ms. The SAP HANA database has a heavy write workload, with average log writes of 500 MB/sec. The team is concerned that the replication may fall behind and cause data loss. What should the team do to meet the DR requirements while minimizing data loss?

Accepted Answer

Implement HSR asynchronously and also enable HANA log backups to an S3 bucket in us-west-2.. Combining asynchronous HANA System Replication (HSR) with HANA log backups to an S3 bucket in us-west-2 provides a dual-layer protection strategy. Asynchronous HSR will replicate log changes in near real-time, but given the 60 ms latency and 500 MB/sec write workload, it may fall behind; the log backups act as a safety net to capture any log data that hasn't been replicated yet, allowing recovery with minimal data loss while still meeting the 15-minute RPO.

Answer

Switch to synchronous replication to ensure zero data loss.

Answer

Increase the HANA log buffer size to reduce the frequency of log flushes, so that less data is sent over the network.

Answer

Use HSR with multiple replicas in us-west-2 to improve replication speed.

Question 15

A company is running SAP on AWS and wants to use a custom AMI for SAP application servers. They need to ensure that the AMI is encrypted using AWS KMS. Which step is required to launch encrypted instances from this AMI?

Accepted Answer

Copy the AMI and specify a KMS key for encryption.. To launch encrypted instances from an unencrypted custom AMI, you must first copy the AMI and specify a KMS key for encryption during the copy process. This creates an encrypted AMI that can then be used to launch encrypted instances. AWS does not allow you to directly encrypt an existing AMI in place; the copy operation is the required mechanism.

Answer

Use an AWS Marketplace AMI that is already encrypted.

Answer

Use the AWS Management Console to modify the AMI to enable encryption.

Answer

Specify the KMS key ID in the run-instances command.