PAS-C01 Practice Test 34 — 15 Questions

Question 1

A company plans to migrate its SAP ERP system from an on-premises environment to AWS. The system uses an Oracle database. Which AWS service provides the most cost-effective and high-performance storage for the Oracle data files?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Amazon EBS io2 Block Express volumes. Amazon EBS io2 Block Express volumes provide the highest performance and durability for Oracle database workloads on AWS, offering up to 256,000 IOPS per volume and sub-millisecond latency. They are the most cost-effective choice for SAP ERP Oracle data files because they deliver consistent, high-throughput performance required for SAP's demanding I/O patterns, while allowing you to pay only for provisioned capacity without upfront costs. io2 volumes also support multi-attach and are designed for mission-critical databases, making them the optimal storage for Oracle data files in SAP on AWS.

Answer

EC2 Instance Store

Answer

Amazon EFS

Answer

Amazon S3

Question 2

A company is planning to run SAP applications on AWS. The security team requires that all data transmitted between the SAP application servers and the SAP HANA database be encrypted in transit. The SAP HANA database is on an EC2 instance in the same VPC. The application servers are also in the same VPC. Which configuration should the company implement to meet the encryption requirement with minimal impact on performance?

Accepted Answer

Enable SAP HANA TLS/SSL encryption for the database connections. Enabling SAP HANA TLS/SSL encryption encrypts data in transit between application and database servers directly, with minimal performance impact as it is built into the SAP HANA client-server protocol. Option A is incorrect: AWS PrivateLink is used for private connectivity to services across VPCs or to AWS services, not for encrypting internal traffic within the same VPC, and introduces unnecessary complexity. Option C is incorrect: VPC peering connects separate VPCs but does not encrypt traffic by default; it also is not needed when both servers are in the same VPC. Option D is incorrect: a VPN connection adds network overhead and is designed for connectivity across networks or the internet, which is unnecessary and suboptimal for same-VPC communication.

Answer

Use AWS PrivateLink to connect the application to the database

Answer

Use VPC peering between the application and database subnets

Answer

Set up a VPN connection between the application and database servers

Question 3

An SAP application server on an EC2 instance is unable to connect to the SAP HANA database on another EC2 instance. Both instances are in the same VPC and security groups allow traffic. What is the most likely cause?

Accepted Answer

The security group for the database instance does not allow inbound traffic on the HANA port. The most likely cause is that the security group attached to the SAP HANA database instance does not have an inbound rule allowing traffic on the SAP HANA database port (typically 30015 for HANA system DB or 3NN13 for tenant DBs). Even if the security group for the application server allows outbound traffic, the database security group must explicitly permit inbound TCP traffic from the application server's security group or IP address on the correct HANA port. Without this rule, the database will reject the connection at the instance level.

Answer

The VPC does not have an Internet Gateway

Answer

Network ACLs are blocking traffic

Answer

The route table does not have a local route

Question 4

A company is planning to migrate an SAP HANA database to AWS. They need to ensure that the instance type supports the required amount of memory and that the storage can handle high IOPS. Which AWS service can help determine the appropriate instance type and storage configuration based on the SAP workload requirements?

Accepted Answer

AWS Pricing Calculator. AWS Pricing Calculator is the correct choice because it allows you to input specific SAP HANA workload requirements, such as memory size and expected IOPS, and then outputs a list of compatible EC2 instance types (e.g., x1e.32xlarge or u-6tb1.metal) and corresponding EBS or instance store configurations. It directly maps SAP-certified instance families and storage options to the required performance metrics, ensuring compliance with SAP's memory and IOPS guidelines.

Answer

Amazon Inspector

Answer

AWS Config

Answer

AWS Trusted Advisor

Question 5

Which TWO AWS services can be used to store SAP backup data? (Choose two.)

Accepted Answer

Amazon S3. Amazon S3 is correct because it provides a highly durable, scalable, and cost-effective object storage service that can be used to store SAP backup data, such as database backups from SAP HANA or SAP ASE, via native integration or third-party backup tools. SAP-certified backup solutions, including the SAP HANA Backup & Recovery tool, can directly write backups to S3 buckets using the S3 API, supporting standard storage classes for frequent access.

Answer

Amazon RDS

Answer

Amazon DynamoDB

Answer

Amazon EBS

Question 6

Which TWO of the following are valid options for implementing high availability for SAP NetWeaver on AWS?

Accepted Answer

Deploy two EC2 instances across Availability Zones with a shared file system (EFS) and a cluster manager.. Deploying two EC2 instances across Availability Zones with a shared file system (Amazon EFS) and a cluster manager (e.g., Pacemaker for Linux or Windows Server Failover Cluster) provides the high-availability architecture required for SAP NetWeaver. The cluster manager monitors the SAP Central Services (ASCS/ERS) and automatically fails over to the standby instance if the primary fails, while EFS provides a shared, highly available file system that both instances can access. This setup meets SAP's HA guidelines for a multi-AZ deployment on AWS.

Answer

Use Amazon RDS Multi-AZ for SAP Central Services.

Answer

Use Amazon S3 for shared storage and configure manual failover.

Answer

Run SAP Central Services on a single large EC2 instance.

Question 7

Refer to the exhibit. An administrator runs the CLI command to check the status of SAP application instances. The output shows two instances. The administrator needs to stop the running instance and start the stopped instance for a planned migration. Which command should they run?

Accepted Answer

aws ec2 start-instances --instance-ids i-0abcd1234efgh5678 && aws ec2 stop-instances --instance-ids i-0dcba4321hgfe8765. They need to start i-0abcd1234efgh5678 (stopped) and then stop i-0dcba4321hgfe8765 (running). Option A is wrong because the order is reversed. Option C is wrong because they start the wrong instance. Option D is wrong because they stop the wrong instance.

Answer

aws ec2 start-instances --instance-ids i-0dcba4321hgfe8765 && aws ec2 stop-instances --instance-ids i-0abcd1234efgh5678

Answer

aws ec2 start-instances --instance-ids i-0abcd1234efgh5678 && aws ec2 stop-instances --instance-ids i-0abcd1234efgh5678

Answer

aws ec2 stop-instances --instance-ids i-0dcba4321hgfe8765 && aws ec2 start-instances --instance-ids i-0dcba4321hgfe8765

Question 8

A company has an SAP system running on AWS with a production database on an RDS for SAP ASE instance. The operations team needs to perform a minor version upgrade of the database engine. The upgrade must be applied with minimal downtime. The team has a maintenance window scheduled for the upcoming weekend. Which action should the team take to apply the upgrade?

Accepted Answer

Enable auto minor version upgrade on the DB instance and let the upgrade occur during the maintenance window.. Setting the AutoMinorVersionUpgrade flag to true allows RDS to apply minor upgrades automatically during the maintenance window with minimal downtime. Option B is wrong because manual upgrade via the console can cause downtime if not done during a maintenance window. Option C is wrong because modifying the DB instance to a new version immediately can cause downtime. Option D is wrong because creating a new instance and migrating requires additional setup and downtime.

Answer

Manually upgrade the DB instance using the AWS Management Console immediately.

Answer

Modify the DB instance to specify the new engine version and apply immediately.

Answer

Create a new DB instance with the new version and migrate the data.

Question 9

A company is migrating an SAP HANA database from on-premises to AWS. The database is 5 TB and the network link is 500 Mbps. The company has a tight window of 24 hours for the migration. Which TWO methods can be used to transfer the initial data load within the time constraint?

Accepted Answer

Use AWS Snowball Edge to transfer the database backup files to AWS.. The correct answers are Option C (AWS Snowball Edge) and Option D (AWS DataSync over Direct Connect with compression). Snowball Edge allows physical shipment of the 5 TB database, bypassing the 500 Mbps network bottleneck entirely. DataSync with compression over Direct Connect can accelerate the transfer, potentially completing within 24 hours. Option A (AWS DMS) over 500 Mbps for 5 TB would take approximately 23 hours theoretically, but with overhead and potential retries, it may exceed the 24-hour window. Option B (AWS Site-to-Site VPN) is slower than Direct Connect and also limited by the 500 Mbps link. Option E (Amazon S3 multipart upload) faces the same network speed limitation as DMS and would likely exceed the time constraint.

Answer

Use AWS DMS to perform a full load directly over the network.

Answer

Use AWS Site-to-Site VPN with jumbo frames enabled.

Answer

Use Amazon S3 multipart upload to upload backup files directly from on-premises.

Question 10

A company is migrating an SAP ERP system to AWS and needs to minimize downtime during the cutover. The database is SAP ASE. Which migration strategy is most appropriate?

Accepted Answer

Use SAP ASE replication to replicate data to an EC2 instance running ASE, then cut over.. SAP ASE native replication (via Sybase Replication Server) allows continuous, real-time data synchronization from the on-premises ASE database to an EC2 instance running ASE in AWS. While AWS DMS supports SAP ASE as a source, it typically performs a full load followed by ongoing replication, which can introduce higher latency and longer cutover windows. In contrast, native replication minimizes downtime by keeping the target closely synchronized, requiring only a brief pause to apply final transactions and redirect clients.

Answer

Create a nightly backup of the on-premises database, copy to AWS, and restore.

Answer

Perform a full database export from on-premises and import into Amazon RDS for ASE.

Answer

Use AWS Database Migration Service (DMS) with ongoing replication.

Question 11

An SAP administrator notices that the SAP application server on AWS is experiencing high latency when connecting to the SAP HANA database. The database is on a separate EC2 instance in the same VPC. What is the MOST likely cause?

Accepted Answer

Enhanced Networking is not enabled on the EC2 instances.. High latency between an SAP application server and a SAP HANA database in the same VPC is most likely caused by Enhanced Networking not being enabled on the EC2 instances. Enhanced Networking uses the Elastic Network Adapter (ENA) to provide higher bandwidth, higher packet-per-second performance, and consistently lower inter-instance latencies. Without it, network traffic is handled by the Xen or Nitro hypervisor's default driver, which introduces additional overhead and latency, especially under the high-throughput, low-latency requirements of SAP HANA communication.

Answer

EBS optimization is not enabled on the application server.

Answer

The HANA database is using a public IP address.

Answer

The instances are not in a placement group.

Question 12

A company is migrating a SAP HANA database to AWS. Which storage configuration is recommended for SAP HANA to meet performance requirements?

Accepted Answer

Amazon EBS io2 Block Express volumes. Amazon EBS io2 Block Express volumes are the recommended storage configuration for SAP HANA on AWS because they provide up to 4,000 MB/s throughput per volume and 256,000 IOPS, with 99.999% durability. This meets the high-performance, low-latency requirements of SAP HANA, which demands consistent sub-millisecond latency for its columnar in-memory database operations. io2 Block Express volumes also support multi-attach for SAP HANA scale-out configurations and are the only EBS volume type validated by SAP for production HANA workloads.

Answer

Amazon EC2 instance store volumes

Answer

Amazon S3 as a block device

Answer

Amazon EBS gp2 volumes

Question 13

A company is migrating its SAP BusinessObjects to AWS. They want to use a managed service to reduce operational overhead. Which AWS service is most suitable?

Accepted Answer

Amazon QuickSight. Amazon QuickSight is a fully managed business analytics service that can replace SAP BusinessObjects for reporting and dashboards, reducing operational overhead. Option A (QuickSight) is correct. Option B (EMR) is for big data processing. Option C (Redshift) is a data warehouse. Option D (RDS) is a relational database service.

Answer

Amazon EMR

Answer

Amazon Redshift

Answer

Amazon RDS

Question 14

A company is migrating its on-premises Oracle database to Amazon RDS for Oracle. They need to minimize downtime and ensure data consistency. Which AWS service should they use for the initial data load and ongoing replication?

Accepted Answer

AWS Database Migration Service (DMS). **Option A (AWS Snowball Edge):** Incorrect because Snowball Edge is designed for offline data transfer, not for ongoing replication with minimal downtime. It could be used for initial data load but does not support continuous replication.

**Option B (AWS DMS):** Correct. AWS Database Migration Service can perform a full load of the source Oracle database to Amazon RDS for Oracle and then continuously replicate changes using Change Data Capture (CDC) to minimize downtime and ensure consistency.

**Option C (AWS DataSync):** Incorrect because DataSync is used for file-based data transfers (e.g., NFS/SMB shares), not for database replication.

**Option D (AWS SCT):** Incorrect because the Schema Conversion Tool only converts database schemas and code; it does not handle data migration or replication.

Answer

AWS Snowball Edge

Answer

AWS DataSync

Answer

AWS Schema Conversion Tool (SCT)

Question 15

A company is migrating a legacy application to AWS. The application requires a static IP address that must not change after migration. Which networking component should be used to ensure the application's public IP remains consistent?

Accepted Answer

Elastic IP address. An Elastic IP address is a static public IPv4 address that can be associated with an EC2 instance or a Network Load Balancer, ensuring the application's public IP remains consistent. Option B (Internet Gateway) is used for VPC internet access but does not provide a static IP. Option C (VPC Peering) is for connecting VPCs. Option D (NAT Gateway) is for outbound traffic.

Answer

Internet Gateway

Answer

VPC Peering

Answer

NAT Gateway