PAS-C01 Practice Test 36 — 15 Questions

Question 1

Refer to the exhibit. An IAM policy is created for an automated script that starts and stops EC2 instances. The script is failing to stop an instance with the tag 'Environment: non-production'. What is the most likely cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The EC2 instance does not have the tag 'Environment' with value 'non-production'.. The IAM policy is configured with a condition that requires the EC2 instance to have the tag 'Environment' with value 'non-production' for both StartInstances and StopInstances actions. If the instance does not have this exact tag, the action is denied. Option B is incorrect because the policy likely includes the ec2:StopInstances action, but the condition is not met. Option C is incorrect because the policy does not require ec2:Describe* actions for the stop operation to work. Option D is incorrect because the condition is applied equally to both StartInstances and StopInstances.

Answer

The policy does not include ec2:StopInstances action.

Answer

The policy does not allow ec2:Describe* actions for instances.

Answer

The condition is applied to the ec2:StartInstances action but not ec2:StopInstances.

Question 2

A company is migrating an SAP S/4HANA system to AWS. The system uses SAP HANA database with a primary and a secondary instance for high availability. The company wants to ensure that the SAP HANA database is highly available across two Availability Zones. Which AWS service or feature should be used to automatically fail over the SAP HANA database in case of an AZ failure?

Accepted Answer

SAP HANA System Replication with a Pacemaker cluster and an overlay IP address. For automatic failover of SAP HANA across Availability Zones on AWS, the combination of SAP HANA System Replication with a Pacemaker cluster is the standard solution. Pacemaker monitors the replication and performs automatic failover, while an overlay IP address allows the SAP application to reconnect seamlessly. Other options either lack automatic failover or are not applicable to SAP HANA.

Answer

AWS Cluster Placement Group with SAP HANA System Replication

Answer

Amazon RDS for SAP HANA with Multi-AZ deployment

Answer

SAP HANA System Replication with an overlay IP address managed by Amazon Route 53

Question 3

A company is migrating its SAP ERP system to AWS and needs to ensure that the SAP license is compliant. The company has a production license for SAP ERP. What should the company do for licensing on AWS?

Accepted Answer

Use the existing SAP license under the Bring Your Own License (BYOL) model.. SAP licensing on AWS follows the Bring Your Own License (BYOL) model, where the customer uses their existing SAP license on AWS infrastructure. Since the company already has a production license for SAP ERP, it can continue using that license on AWS under BYOL, provided the underlying infrastructure meets SAP's certification and sizing requirements. This avoids purchasing a new license or switching to a subscription model.

Answer

Request a free SAP license for AWS from SAP.

Answer

Use a subscription-based SAP license from the AWS Marketplace.

Answer

Purchase a new SAP license for AWS.

Question 4

A company is migrating an SAP S/4HANA system to AWS using a lift-and-shift approach with AWS Application Migration Service for the application servers and native SAP HANA backup/restore for the database. Before the cutover, the team must validate that the target environment can support the production workload. Which three validation activities should the SAP solution architect include in the cutover runbook? (Choose three.)

Accepted Answer

Verify that the target EC2 instances have the SAP-supported instance types and that the operating system, kernel, and SAP HANA revision match the supported combinations in the SAP Product Availability Matrix.. Cutover validation for a lift-and-shift SAP migration must cover three layers: SAP-level health and supportability, functional correctness, and support matrix compliance. Running EarlyWatch Alert against a baseline, executing regression tests with production-like data, and confirming instance type, OS, kernel, and HANA revision against the SAP Product Availability Matrix together give confidence that the target can carry production traffic. Logging must remain enabled to support troubleshooting.

Answer

Disable AWS CloudTrail and Amazon CloudWatch logging on the target accounts to eliminate logging overhead during the performance test.

Answer

Perform a full SAP HANA database consistency check with hdbcons and compare checksums with the source database to verify the restore.

Question 5

A company is migrating a small SAP NetWeaver ABAP development system to AWS. The system is not business critical, and the team wants to minimize cost while keeping the migration simple. The database is SAP HANA and the application server runs on Linux. Which AWS service should the team use to host the SAP HANA database for this non-production system?

Accepted Answer

SAP HANA on an Amazon EC2 instance using a memory-optimized instance type. SAP HANA on AWS runs on Amazon EC2 with SAP-certified memory-optimized instance types; there is no managed RDS engine for HANA. For a non-production development system, selecting a smaller certified instance controls cost while keeping the deployment supported. DynamoDB and Aurora do not provide SAP HANA, and RDS for SAP HANA does not exist.

Answer

Amazon Aurora PostgreSQL with the SAP HANA compatibility extension enabled

Answer

Amazon DynamoDB with a compatibility layer for SAP HANA SQL

Answer

Amazon RDS for SAP HANA

Question 6

An SAP Basis team is migrating an SAP S/4HANA system to AWS using SAP HANA System Replication for the cutover. The source is on-premises and the target is an Amazon EC2 instance in a private subnet. The team wants to minimize the final cutover downtime and ensure the replication link survives the migration. Which combination of steps should they take before the final takeover?

Accepted Answer

Configure SAP HANA System Replication over a VPN or AWS Direct Connect, perform a full data initialization, then keep the secondary in sync and execute the takeover on the target during the change window.. SAP HANA System Replication over a VPN or AWS Direct Connect, followed by a full data initialization and continuous log shipping, is the standard way to migrate HANA to EC2 with minimal downtime. The secondary stays synchronized so the takeover applies only the remaining delta. Snapshot or file-copy approaches cannot provide the same low-downtime, consistent cutover.

Answer

Enable SAP HANA System Replication in asynchronous mode only, skip the initial data initialization, and let the target build its own data from redo logs at takeover.

Answer

Create an Amazon EBS snapshot of the on-premises SAP HANA volumes, register the snapshot as an AMI, and launch the target EC2 instance from that AMI during the change window.

Answer

Use AWS DataSync to copy the SAP HANA data and log volumes to Amazon EBS, then start SAP HANA on the target and point the application servers at the new host.

Question 7

An SAP system is deployed on EC2 instances across multiple Availability Zones. Which AWS service should be used to automatically distribute incoming traffic across the SAP application servers?

Accepted Answer

Application Load Balancer. An Application Load Balancer (ALB) operates at the application layer (Layer 7) and is ideal for distributing HTTP/HTTPS traffic to SAP application servers, supporting advanced routing based on content. It integrates with Auto Scaling and provides health checks to ensure traffic only goes to healthy instances.

Answer

Amazon Route 53

Answer

Network Load Balancer

Answer

Amazon CloudFront

Question 8

An SAP team runs a mission-critical SAP HANA database on an Amazon EC2 X1 instance. The database must be backed up to Amazon S3 with a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 2 hours. They want to use AWS Backint Agent for SAP HANA to perform the backups. Which configuration should they use to meet the RPO?

Accepted Answer

Use SAP HANA's built-in continuous log backups with AWS Backint Agent to write redo logs to S3 every 15 minutes.. To achieve a 15-minute RPO for SAP HANA, the most effective method is to use SAP HANA's continuous redo log backups. AWS Backint Agent allows these log backups to be written directly to Amazon S3. Configuring log backups every 15 minutes ensures that all transactions since the last log backup are captured, meeting the RPO. Data backups can be scheduled less frequently. The other options either are impractical, do not integrate with HANA's backup API, or do not control backup frequency.

Answer

Schedule SAP HANA data backups with AWS Backint Agent every 15 minutes to an S3 bucket.

Answer

Use AWS Storage Gateway to create a cached volume and take snapshots every 15 minutes.

Answer

Enable Amazon S3 Cross-Region Replication on the backup bucket to replicate data every 15 minutes.

Question 9

A company is migrating an SAP Business Warehouse system running on SAP HANA to AWS. The database is 4 TB and the company wants to minimize the amount of data transferred over its 200 Mbps internet connection during the migration. The company has no existing AWS Direct Connect connection and the migration window starts in two weeks. Which approach should the SAP solution architect recommend for the initial data transfer?

Accepted Answer

Order an AWS Snowball Edge Storage Optimized device, copy the SAP HANA database backup to it, ship it to AWS, and import the data into Amazon S3.. When a large dataset must move to AWS and the available internet bandwidth would make the transfer slow or disruptive, an AWS Snowball Edge device is the appropriate choice. The backup is written to the device on-premises, shipped to AWS, and imported into Amazon S3, after which the target SAP HANA system can restore from it. This avoids saturating the 200 Mbps link and fits the two-week timeline.

Answer

Use AWS Transfer Family with SFTP to upload the backup files to Amazon S3 from the on-premises system.

Answer

Use AWS Storage Gateway in cached mode to present the on-premises backup as an S3 bucket and let the target system read directly from the gateway.

Answer

Use AWS DataSync over the 200 Mbps internet connection to copy the backup to Amazon S3 before the migration window.

Question 10

A company is migrating a small SAP NetWeaver Java system to AWS. The system uses an Oracle database that will be migrated to Amazon RDS for Oracle. The database is 300 GB and the company can afford a maintenance window of several hours. The team wants the simplest, most reliable migration with minimal licensing complexity. Which approach should the team use?

Accepted Answer

Use Oracle Data Pump to export the schema from the on-premises database, transfer the dump file to Amazon S3, and import it into Amazon RDS for Oracle using the RDS-provided Data Pump utility.. Oracle Data Pump export and import through Amazon S3 is the simplest and most reliable way to move a small Oracle database into Amazon RDS for Oracle. The managed service supports Data Pump imports from S3, and with a several-hour window and no near-zero-downtime requirement, this logical method avoids the added complexity of replication tools and unsupported physical restore options.

Answer

Configure Oracle Active Data Guard between the on-premises database and Amazon RDS for Oracle, then perform a switchover during the maintenance window.

Answer

Use AWS Database Migration Service (AWS DMS) with a full-load and change-data-capture task to replicate the Oracle schema into Amazon RDS for Oracle.

Answer

Take a physical backup of the on-premises Oracle database, copy the backup pieces to Amazon S3, and restore them directly into Amazon RDS for Oracle.

Question 11

A company is migrating an SAP HANA database to AWS. The database is currently on-premises and uses SAP HANA System Replication for high availability. The company plans to use Amazon EC2 instances with Amazon EBS for storage. The migration must ensure that the SAP HANA system replication continues to work in AWS with minimal latency. Which storage configuration should be used for the SAP HANA data and log volumes to achieve this?

Accepted Answer

Use Amazon EBS io2 Block Express volumes for data and log, and configure them according to SAP HANA on AWS best practices.. SAP HANA requires high-performance, low-latency block storage. Amazon EBS io2 Block Express volumes deliver the necessary IOPS and sub-millisecond latency, and when configured per SAP HANA on AWS best practices, they ensure optimal performance for both data and log volumes. This configuration supports SAP HANA system replication with minimal latency.

Answer

Use Amazon EFS for data and log volumes to enable shared storage across multiple EC2 instances.

Answer

Use Amazon EBS io1 volumes for data and log, and place them in a RAID 0 configuration for increased performance.

Answer

Use Amazon EBS gp2 volumes for data and log, and enable EBS Multi-Attach for the log volume.

Question 12

A company runs SAP HANA on an Amazon EC2 instance with multiple EBS volumes. The operations team needs to implement a solution to automatically recover from an EC2 instance failure by relaunching the instance on new hardware while preserving the same private IP address, Elastic IP, and instance metadata. The solution should minimize downtime and require no manual intervention. Which approach should the team use?

Accepted Answer

Enable EC2 auto recovery for the instance by configuring a CloudWatch alarm that triggers the recover action.. EC2 auto recovery is a feature that automatically recovers an instance when it becomes impaired due to an underlying hardware failure or a system status check failure. It preserves the instance's private IP, Elastic IP, and metadata, and the instance retains its instance ID. By configuring a CloudWatch alarm for the status check and setting the action to recover, the instance is recovered on new hardware without manual intervention, minimizing downtime.

Answer

Configure an Auto Scaling group with a launch template that specifies the same network interface and Elastic IP.

Answer

Use AWS Elastic Disaster Recovery to replicate the instance to a staging area and fail over automatically.

Answer

Create an Amazon Machine Image (AMI) of the instance and use a Lambda function to launch a new instance with the same network settings.

Question 13

A company runs SAP S/4HANA on AWS with a primary site in eu-west-1 and a disaster recovery (DR) site in eu-central-1. The DR strategy uses pilot light with a small EC2 instance for the SAP HANA database, which is continuously replicated using SAP HANA System Replication. During a recent DR test, the operations team discovered that the DR HANA instance had a different SAP HANA revision level than the primary. The team needs to ensure that the DR environment is always ready for a failover. Which action should be taken to prevent this configuration drift?

Accepted Answer

Implement a CI/CD pipeline that deploys SAP HANA updates to both primary and DR instances in a coordinated manner, with automated validation.. A CI/CD pipeline that deploys updates to both primary and DR instances in a coordinated manner ensures that the SAP HANA revision level remains consistent. Automated validation steps can verify that the DR instance is updated correctly and ready for failover. This prevents drift caused by manual updates or missed steps, which is critical for maintaining a reliable DR strategy.

Answer

Configure SAP HANA System Replication to automatically synchronize the SAP HANA revision level from the primary to the secondary.

Answer

Include the SAP HANA software update in the DR runbook and perform it manually on both sites simultaneously.

Answer

Use AWS Systems Manager State Manager to enforce a specific SAP HANA revision level on the DR instance.

Question 14

A company is migrating its SAP landscape to AWS and wants to use SAP HSR (System Replication) for high availability. Which AWS feature is required to support SAP HSR?

Accepted Answer

Both instances in the same VPC with private IP connectivity. SAP HSR (System Replication) requires low-latency, reliable connectivity between the primary and secondary instances to synchronize data in real-time. Placing both instances in the same VPC enables them to communicate using private IP addresses, which are internal to the VPC and typically have lower latency and higher throughput compared to public IPs. This setup is essential for meeting the RPO and RTO requirements of SAP HSR. Options A (Elastic IP), B (Internet Gateway), and D (NAT Gateway) are not necessary for HSR and may introduce additional complexity or security risks.

Answer

Elastic IP addresses for each instance

Answer

Internet Gateway attached to the VPC

Answer

NAT Gateway for outbound traffic

Question 15

A company is migrating its SAP ERP Central Component (ECC) system to AWS. The system runs on IBM AIX with an Oracle database. The company wants to move to a Linux-based environment on AWS with SAP HANA as the database. Which migration strategy does this scenario describe?

Accepted Answer

Re-platform. The scenario describes a change in the underlying platform: from IBM AIX with Oracle to Linux with SAP HANA. This is a re-platform migration strategy, as it involves altering the platform components while retaining the SAP application. It is not a lift-and-shift because of the OS and database change, nor is it re-architecting or repurchasing.

Answer

Re-architect

Answer

Lift and shift

Answer

Repurchase