PAS-C01 Practice Test 31 — 15 Questions

Question 1

A company is using AWS Systems Manager to manage their SAP environment. They want to ensure that only specific users can run automation documents on production SAP instances. Which IAM policy action should be used to control access to executing automation documents?

Accepted Answer

ssm:StartAutomationExecution. Option B is correct because the ssm:StartAutomationExecution action allows starting an automation execution. Option A is for running commands (not automations). Option C is for getting parameters. Option D is for listing documents.

Answer

ssm:SendCommand

Answer

ssm:GetParameter

Answer

ssm:ListDocuments

Question 2

An SAP administrator is configuring high availability for SAP HANA on AWS. Which TWO components are essential for a Pacemaker-based cluster?

Accepted Answer

A quorum device (e.g., STONITH). A and B are correct. A quorum device (like STONITH) is required to avoid split-brain, and a virtual IP (VIP) is needed for client failover. C and D are not required for Pacemaker. E (CloudWatch) is optional for monitoring.

Answer

An Application Load Balancer

Answer

Amazon Route 53 health checks

Answer

Amazon CloudWatch alarms

Question 3

A company is deploying SAP S/4HANA on AWS and needs to choose instance types that are certified by SAP. Which THREE instance families are SAP-certified for production SAP HANA workloads?

Accepted Answer

R5. A, B, and D are SAP-certified for HANA. C (T3) is burstable and not certified for production HANA. E (P3) is GPU-optimized and not certified for HANA.

Answer

T3

Answer

P3

Question 4

A company is running an SAP HANA database on an Amazon EC2 instance. The instance type is r5.4xlarge with 16 vCPUs and 128 GiB of memory. The storage is configured with a single 400 GB gp2 EBS volume for /hana/data and a separate 100 GB gp2 volume for /hana/log. The database experiences high latency during peak loads. Which change will most likely improve performance?

Accepted Answer

Change the EBS volumes to io2 Block Express volumes with provisioned IOPS.. Option A is correct because SAP HANA requires low latency I/O. io2 Block Express volumes provide higher IOPS and lower latency compared to gp2. Option B is incorrect because increasing instance size may help but does not address the storage bottleneck directly. Option C is incorrect because RAID 0 on gp2 volumes can improve throughput but not as effectively as io2. Option D is incorrect because disabling caching does not improve performance.

Answer

Increase the instance size to r5.8xlarge.

Answer

Disable the EBS volume caching.

Answer

Create a RAID 0 stripe of multiple gp2 volumes.

Question 5

An organization uses AWS Systems Manager to run automation documents on their SAP EC2 instances. Recently, some automation runbooks have failed because the EC2 instances did not have the required SSM Agent version. The operations team wants to ensure all existing and future instances automatically have the latest SSM Agent. Which solution meets this requirement?

Accepted Answer

Create an AWS Systems Manager State Manager association that runs the AWS-UpdateSSMAgent document on the instances.. Option B is correct because the AWS-UpdateSSMAgent document can be used as a step in State Manager associations to update the agent on targeted instances. Option A is incorrect because running the document manually does not provide automation. Option C is incorrect because the SSM Agent is automatically updated by default only for new instances in certain regions, but not guaranteed. Option D is incorrect because patching is for OS updates, not SSM Agent.

Answer

Use an automation document to update the SSM Agent and schedule it via a cron job on each instance.

Answer

Enable the 'Auto-update SSM Agent' option in the EC2 launch settings for all instances.

Answer

Configure AWS Systems Manager Patch Manager to update the SSM Agent.

Question 6

A company wants to migrate its on-premises SAP system to AWS. The system consists of an SAP NetWeaver application server and an SAP HANA database. The database requires ultra-low latency storage. Which AWS storage solution is most suitable for the SAP HANA data volume?

Accepted Answer

Amazon EBS io2 Block Express volumes. Option A is correct because io2 Block Express volumes are designed for high-performance databases like SAP HANA, offering sub-millisecond latency and high IOPS. Option B is incorrect because EFS is a shared file system, not block storage. Option C is incorrect because S3 is object storage with higher latency. Option D is incorrect because Instance Store is ephemeral, which is not suitable for persistent database data.

Answer

EC2 Instance Store

Answer

Amazon S3

Answer

Amazon EFS file system

Question 7

A company runs SAP on AWS and wants to automate the failover of their SAP HANA database across Availability Zones using a multi-AZ setup. They are using Pacemaker and STONITH fencing. Which AWS resource is commonly used as a fencing device for SAP HANA multi-AZ clusters?

Accepted Answer

Amazon CloudWatch alarm and EC2 API. Option A is correct because AWS provides a STONITH agent that uses EC2 API to stop/fence instances (e.g., via CloudWatch alarm). Option B is incorrect because SQS is a queue service, not a fencing mechanism. Option C is incorrect because RDS is a managed database service, not used for EC2 fencing. Option D is incorrect because SNS is a notification service.

Answer

Amazon Simple Notification Service (SNS)

Answer

Amazon Simple Queue Service (SQS)

Answer

Amazon RDS

Question 8

An SAP Basis administrator needs to monitor the performance of their SAP HANA database running on an EC2 instance. The administrator wants to visualize key metrics such as CPU utilization, memory usage, and disk I/O in a single dashboard. Which AWS service should be used to create this dashboard?

Accepted Answer

Amazon CloudWatch Dashboards. Option B is correct because CloudWatch Dashboards can display metrics from EC2, EBS, and other services. Option A is incorrect because CloudTrail is for auditing API calls. Option C is incorrect because Config is for resource compliance. Option D is incorrect because Trusted Advisor provides best practice checks, not customizable dashboards.

Answer

AWS Config

Answer

AWS Trusted Advisor

Answer

AWS CloudTrail

Question 9

A company is deploying SAP NetWeaver on AWS and needs to ensure high availability for the ASCS instance. They plan to use a shared file system for the transport directory. Which AWS storage service is most appropriate for this shared file system?

Accepted Answer

Amazon EFS. Option C is correct because Amazon EFS is a managed NFS file system that can be mounted on multiple EC2 instances across AZs, suitable for shared storage like the SAP transport directory. Option A is incorrect because EBS volumes can only be attached to one instance at a time (unless using multi-attach, which is limited). Option B is incorrect because S3 is object storage, not a file system. Option D is incorrect because Instance Store is ephemeral.

Answer

Amazon EBS volumes with multi-attach

Answer

EC2 Instance Store

Answer

Amazon S3

Question 10

An administrator needs to back up an SAP HANA database running on an EC2 instance. The backup must be stored in a durable, cost-effective storage solution. Which AWS service is best suited for storing the backup files?

Accepted Answer

Amazon S3. Option A is correct because Amazon S3 is designed for durable, cost-effective object storage, ideal for backups. Option B is incorrect because EBS snapshots are stored in S3 but are not directly accessible as files. Option C is incorrect because EFS is a file system, not optimized for backup storage. Option D is incorrect because Glacier is a lower-cost archival storage, but S3 is more appropriate for general backups with faster retrieval.

Answer

Amazon S3 Glacier

Answer

Amazon EFS

Answer

Amazon EBS snapshots

Question 11

A company is planning to migrate its SAP ERP system to AWS. The system uses Oracle Database as its backend. The company wants to minimize licensing costs and administrative overhead. Which AWS database service is most suitable for this migration?

Accepted Answer

Amazon RDS for Oracle. Option A is correct because Amazon RDS for Oracle supports Oracle Database with automated administration and can be used for SAP ERP. Option B is incorrect because Aurora is a MySQL/PostgreSQL-compatible database, not Oracle. Option C is incorrect because DynamoDB is NoSQL. Option D is incorrect because Redshift is a data warehouse.

Answer

Amazon Redshift

Answer

Amazon DynamoDB

Answer

Amazon Aurora

Question 12

An SAP system running on AWS is experiencing intermittent network connectivity issues between the application server and the database server. Both servers are in the same VPC but in different Availability Zones. The network ACLs and security groups are properly configured. What is the most likely cause and solution?

Accepted Answer

The route tables are not correctly configured for cross-AZ traffic; verify and update route tables. Option B is correct because an AWS Transit Gateway is not needed; the issue is likely due to missing route table entries for cross-AZ traffic. Option A is incorrect because NACL changes are not needed if properly configured. Option C is incorrect because security groups are stateful. Option D is incorrect because VPC Peering is not needed within the same VPC.

Answer

The security groups are stateful and blocking return traffic; use network ACLs instead

Answer

Use AWS Transit Gateway to connect the subnets in different AZs

Answer

The network ACLs are blocking traffic between Availability Zones; update the NACLs

Question 13

An SAP system administrator is troubleshooting a high CPU usage issue on an SAP application server (AS) running on an EC2 instance. The administrator suspects that a specific ABAP report is consuming excessive resources. Which AWS service can provide detailed CPU utilization metrics at the process level to confirm the suspicion?

Accepted Answer

Amazon CloudWatch agent with the 'procstat' plugin. Option B is correct because CloudWatch Agent can collect custom metrics, including per-process CPU utilization, and send them to CloudWatch. Option A (CloudTrail) logs API calls, not OS metrics. Option C (Systems Manager Inventory) collects software inventory, not real-time CPU metrics. Option D (Compute Optimizer) provides recommendations but not per-process metrics.

Answer

AWS CloudTrail

Answer

AWS Systems Manager Inventory

Answer

AWS Compute Optimizer

Question 14

A company is running an SAP NetWeaver system on AWS. The system includes a primary application server (PAS) and a dialog instance. The administrator wants to monitor the SAP system health using Amazon CloudWatch. Which THREE metrics should be monitored to proactively detect performance issues? (Choose THREE.)

Accepted Answer

EBS Volume Queue Length. Options A, C, and E are correct. Option A (EC2 CPU utilization) helps detect compute bottlenecks. Option C (EBS volume queue length) indicates I/O pressure. Option E (SAP work process usage) shows application-level saturation. Option B (NetworkIn) is less critical for health. Option D (SwapUsage) is important but not a standard CloudWatch metric; it requires custom agent.

Answer

EC2 SwapUsage (as custom metric)

Answer

EC2 NetworkIn

Question 15

Which TWO of the following are valid strategies to improve the availability of an SAP HANA database on AWS?

Accepted Answer

Implement automatic failover using SAP HANA System Replication.. Option A is correct: Multi-AZ HSR provides synchronous replication for failover. Option C is correct: Automatic failover with HSR in same region is a high availability pattern. Option B is wrong because HANA doesn't support Multi-AZ on RDS. Option D is wrong because backup is for disaster recovery, not high availability. Option E is wrong because large instance does not provide availability.

Answer

Use Amazon RDS for HANA with Multi-AZ deployment.

Answer

Take daily snapshots of the HANA data volume.

Answer

Use a larger EC2 instance type for the HANA server.