PAS-C01 Practice Test 23 — 15 Questions

Question 1

A company is using SAP HANA on AWS and needs to back up the database to Amazon S3. The backup must be encrypted at rest in S3. The company already uses AWS KMS for encryption. What is the MOST secure way to configure the backup?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use SSE-KMS with a customer managed key and restrict key usage with key policies.. Using SSE-KMS with a customer managed key allows you to enforce granular key policies, including restricting key usage to specific IAM roles or conditions, and enables audit trails via AWS CloudTrail. This provides the highest level of control and security for encrypting SAP HANA backups at rest in S3, meeting the requirement for the most secure configuration.

Answer

Use client-side encryption before uploading to S3.

Answer

Enable default S3 encryption with SSE-S3.

Answer

Use SSE-KMS with the AWS managed key for S3.

Question 2

A company is running SAP NetWeaver on AWS and wants to implement high availability for the ASCS instance. Which AWS service can be used to monitor and automatically restart the ASCS instance if it fails?

Accepted Answer

Amazon CloudWatch with EC2 Auto Recovery. Amazon CloudWatch with EC2 Auto Recovery is the correct choice because it monitors the health of an EC2 instance at the hypervisor level and can automatically recover a failed instance by restarting it on a new host. For SAP NetWeaver ASCS instances, which require persistent state and are typically tied to a single instance, Auto Recovery ensures the instance is restored with the same private IP, Elastic IP, and instance metadata, maintaining the SAP cluster quorum without manual intervention.

Answer

EC2 Auto Scaling group

Answer

AWS Lambda with a scheduled function

Answer

Elastic Load Balancing (ELB)

Question 3

A company is running SAP ERP on AWS and wants to implement a disaster recovery (DR) strategy with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. The primary site is in us-east-1, and the DR site is in us-west-2. Which TWO AWS features should be combined to achieve this? (Choose TWO.)

Accepted Answer

Amazon S3 Cross-Region Replication for database backups. Amazon S3 Cross-Region Replication (CRR) for database backups ensures that backup files are automatically replicated to the DR region within minutes, supporting an RPO of 15 minutes. EC2 AMI Copy allows you to copy pre-configured server images (including OS and SAP application layers) to the DR region, enabling rapid recovery of EC2 instances within the 2-hour RTO. Together, these two features provide a cost-effective, fully automated DR solution for SAP on AWS without requiring third-party tools.

Answer

Amazon RDS Multi-Region replication

Answer

AWS CloudEndure Disaster Recovery

Answer

Amazon EBS Multi-AZ snapshots

Question 4

A company is deploying SAP S/4HANA on AWS and needs to ensure that the system can survive a single Availability Zone failure. Which architecture meets this requirement?

Accepted Answer

Deploy an active-passive setup with the primary in one AZ and a standby in another AZ, using replication. An active-passive SAP HANA setup with the primary in one Availability Zone (AZ) and a standby in another AZ, using HANA System Replication (HSR) in synchronous mode, ensures zero data loss and automatic failover if a single AZ fails. This architecture meets the SAP S/4HANA requirement for high availability (HA) across AZs, as HSR replicates data at the database level, and the standby can take over within minutes.

Answer

Store the database files on Amazon S3 and mount them to the EC2 instance

Answer

Use Amazon RDS Multi-AZ for the SAP HANA database

Answer

Deploy a single EC2 instance in one Availability Zone with EBS snapshots

Question 5

A company is migrating an SAP HANA database to AWS. Which TWO configurations are required to ensure high availability for the SAP HANA database in a multi-AZ setup?

Accepted Answer

Deploy SAP HANA System Replication across two Availability Zones.. SAP HANA System Replication (HSR) is the native mechanism for replicating data between primary and secondary HANA instances across Availability Zones, ensuring synchronous or asynchronous data consistency. This is the foundational requirement for high availability in a multi-AZ setup, as it provides real-time data replication to a standby node in a different AZ.

Answer

Use a single EBS volume with synchronous replication to both nodes.

Answer

Configure EBS Multi-Attach to allow both HANA instances to share the same data volume.

Answer

Place an Application Load Balancer in front of the HANA database endpoints.

Question 6

Refer to the exhibit. An administrator runs the AWS CLI command shown and receives the output. The instance is running, but the SAP application on the instance is not accessible. Which additional AWS CLI command should the administrator run to troubleshoot the network connectivity?

Accepted Answer

aws ec2 describe-instances --instance-ids i-0abcd1234efgh5678 --query 'Reservations[0].Instances[0].NetworkInterfaces'. The correct command, `describe-instances` with a filter on `NetworkInterfaces`, retrieves the detailed network interface configuration attached to the specific instance, including the subnet ID, security group IDs, and public/private IP addresses. This allows the administrator to verify whether the instance is attached to the correct subnet and security groups, which are the most common causes of network connectivity issues for an SAP application. The other commands either do not filter to the specific instance or do not provide the necessary network interface details to diagnose the problem.

Answer

aws ec2 describe-subnets

Answer

aws ec2 describe-network-interfaces

Answer

aws ec2 describe-security-groups

Question 7

A company runs SAP on AWS and uses a shared file system for SAP transport files. The system must support concurrent access from multiple SAP application servers and provide strong consistency. The transport files are typically small (less than 1 MB) and are frequently read and written. Which file storage solution should be used?

Accepted Answer

Amazon EFS. Amazon EFS (Elastic File System) provides a fully managed, POSIX-compliant, shared file system that supports concurrent access from multiple EC2 instances (SAP application servers) with strong consistency. It uses the NFSv4.1 protocol, which ensures that read-after-write consistency is maintained across all clients, making it ideal for SAP transport files that are frequently read and written.

Answer

Amazon FSx for Windows File Server

Answer

Amazon S3

Answer

Amazon EC2 instance store

Question 8

An SAP application on AWS needs to be migrated to a new virtual private cloud (VPC). The SAP system uses SAProuter to connect to SAP support. Which THREE components must be updated or re-configured during the migration to ensure uninterrupted connectivity?

Accepted Answer

Update the Amazon Route 53 DNS records for the SAP application and database servers.. Updating Amazon Route 53 DNS records ensures that the SAP application and database servers can be reached using their new private or public IP addresses in the new VPC. Without this update, clients and SAP support connections via SAProuter would fail due to DNS resolution pointing to the old VPC's IPs, causing connectivity interruptions.

Answer

Adjust the S3 bucket policy to allow access from the new VPC.

Answer

Recreate IAM roles for the SAP application servers.

Question 9

A company is migrating an SAP ERP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). The solution must use a shared file system for the SAP transport directory. Which combination of AWS services should be used?

Accepted Answer

Amazon EFS for the transport directory and two EC2 instances with a floating IP. SAP ASCS and ERS require a highly available shared file system for the SAP transport directory, and Amazon EFS provides a fully managed NFS file system that can be mounted by multiple EC2 instances across Availability Zones. The floating IP (using AWS Elastic IP or a secondary private IP) allows the ASCS and ERS services to fail over transparently between the two EC2 instances, meeting the high availability requirements without relying on a single point of failure.

Answer

Amazon FSx for Windows File Server for the transport directory

Answer

Amazon S3 as the transport directory with two application servers

Answer

Amazon EBS volumes attached to both ASCS and ERS instances

Question 10

An SAP administrator runs the above CloudWatch Logs Insights query on an application log group. The query returns no results even though the administrator knows there are ERROR messages in the logs. What is the most likely cause?

Accepted Answer

The log events are not in plain text; they are in JSON format and the ERROR string is within a JSON field.. CloudWatch Logs Insights allows filtering log events using the @message field. When logs are in JSON format, the ERROR string may be embedded within a JSON field rather than appearing as plain text in @message. A simple pattern match like /ERROR/ on @message will not match if the @message contains the entire JSON object. To search JSON logs, parse the JSON fields and filter on the parsed fields. Option A is incorrect because CloudWatch Logs Insights supports regex patterns with the '/pattern/' syntax. Option B is incorrect because the correct filter syntax uses '/pattern/', not 'like' (which is not an operator in CloudWatch Logs Insights). Option C is incorrect because while the time range could exclude errors, the most likely cause given that errors are known to exist is the JSON structure. Therefore, Option D is the correct answer.

Answer

The query uses a regex pattern that is not supported by CloudWatch Logs Insights.

Answer

The query syntax is incorrect; the filter should use 'like' instead of '/.../'.

Answer

The time range is set to a period when no ERROR messages were logged.

Question 11

A company is setting up SAP HANA database backups to Amazon S3. Which TWO actions are required to ensure secure and efficient backup operations? (Choose TWO.)

Accepted Answer

Create an IAM role for the EC2 instance running SAP HANA with permissions to write to the S3 bucket.. The EC2 instance running SAP HANA must assume an IAM role that grants permissions to write backup files to the S3 bucket. This follows the principle of least privilege and avoids embedding long-term credentials in the instance, which is a security best practice for automated backup operations.

Answer

Enable S3 Transfer Acceleration on the backup bucket.

Answer

Enable server-side encryption with AWS KMS for the S3 bucket.

Answer

Set up an S3 Lifecycle policy to move older backups to Amazon Glacier.

Question 12

A company needs to automate the start and stop of SAP applications in non-production environments to reduce costs. The SAP systems run on multiple EC2 instances. Which AWS service can be used to schedule start and stop actions?

Accepted Answer

AWS Instance Scheduler. AWS Instance Scheduler is a purpose-built solution that automates the start and stop of EC2 instances based on a defined schedule, making it ideal for reducing costs in non-production SAP environments. It uses AWS CloudFormation to deploy a scheduler that triggers Lambda functions to stop and start instances at specified times, and it natively supports tagging to identify which instances to manage, without requiring custom code.

Answer

AWS OpsWorks

Answer

AWS Lambda with custom code

Answer

Amazon CloudWatch Events

Question 13

An SAP system administrator is troubleshooting a performance issue on an SAP application server running on an EC2 instance. The /usr/sap directory is on an EBS volume. The administrator notices high I/O wait times. Which action should be taken to improve I/O performance?

Accepted Answer

Change the EBS volume type to io2 Block Express with provisioned IOPS. The io2 Block Express volume type provides up to 256,000 provisioned IOPS and sub-millisecond latency, which directly addresses high I/O wait times caused by insufficient IOPS on the EBS volume hosting /usr/sap. SAP application servers are sensitive to storage latency, and increasing provisioned IOPS reduces queue depth and wait times for database and log writes.

Answer

Migrate the /usr/sap directory to Amazon EFS

Answer

Move the /usr/sap directory to an instance store volume

Answer

Increase the instance size to a larger instance type

Question 14

A company is running SAP HANA on an EC2 instance. The administrator needs to ensure that the instance is resilient to an Availability Zone failure. Which actions should the administrator take? (Choose TWO.)

Accepted Answer

Set up SAP HANA System Replication between instances in two Availability Zones.. SAP HANA System Replication (HSR) provides synchronous or asynchronous replication of the HANA database to a secondary instance in a different Availability Zone (AZ). This ensures that if the primary AZ fails, the secondary instance can be promoted to primary with minimal data loss, meeting the resilience requirement. HSR is the native SAP mechanism for disaster recovery across AZs and is fully supported on AWS.

Answer

Configure Auto Scaling to automatically launch a new instance in another AZ.

Answer

Use Amazon CloudWatch to monitor instance health and trigger a recovery.

Answer

Take daily EBS snapshots of the HANA data volume.

Question 15

An SAP system administrator needs to automate the creation of an SAP HANA database backup and copy it to another AWS Region for disaster recovery. The backup is stored in an Amazon S3 bucket. Which AWS service should be used to replicate the backup to another Region?

Accepted Answer

S3 Cross-Region Replication (CRR). S3 Cross-Region Replication (CRR) is the correct service because it automatically replicates objects from a source S3 bucket in one AWS Region to a destination bucket in another Region, meeting the requirement to copy the SAP HANA database backup to a different Region for disaster recovery. CRR operates asynchronously and can be configured with the appropriate IAM role to replicate existing and new objects, ensuring the backup is continuously available in the DR Region.

Answer

S3 Lifecycle Policies

Answer

S3 Batch Operations

Answer

S3 Transfer Acceleration