PAS-C01 Practice Test 38 — 15 Questions

Question 1

Which TWO factors are most important to consider when planning the network connectivity for an SAP migration to AWS using AWS Direct Connect?

Accepted Answer

Latency and bandwidth requirements.. The two most important factors for planning Direct Connect connectivity in an SAP migration are latency/bandwidth requirements (C) and BGP routing configuration with failover (D). SAP applications are highly sensitive to latency and require consistent throughput, so ensuring sufficient bandwidth and low latency is critical. BGP routing and failover mechanisms guarantee high availability and resilience by enabling automatic failover to backup connections. Option A (VPC endpoints) is not a Direct Connect factor—endpoints provide private access to AWS services but are unrelated to Direct Connect planning. Option B (security group rules) controls instance-level traffic and is not a primary Direct Connect consideration. Option E (VPC subnet IP ranges) is important for VPC design but does not directly impact the Direct Connect connection itself.

Answer

Number of VPC endpoints required.

Answer

Security group rules for the SAP application.

Answer

IP address range for VPC subnets.

Question 2

A company runs SAP HANA on AWS and needs to ensure high availability across Availability Zones. The operations team is configuring a two-node HANA scale-out cluster with synchronous replication. Which TWO actions should be taken to meet the HA requirements? (Choose two.)

Accepted Answer

Configure an overlay IP address using a Linux cluster solution such as Pacemaker with a virtual IP that can move between nodes.. For SAP HANA HA across AZs, the nodes must be in separate AZs for fault isolation, and a Pacemaker-managed overlay IP enables seamless client failover. Synchronous replication ensures no data loss. The other options are invalid because S3 cannot serve as block storage, asynchronous replication does not meet zero-RPO, and sharing EBS volumes across instances is not supported for HANA.

Answer

Attach the same Amazon EBS volume to both HANA nodes simultaneously to share data.

Answer

Enable HANA system replication in asynchronous mode to reduce network latency between AZs.

Answer

Use Amazon S3 for the HANA data and log volumes to enable cross-AZ replication.

Question 3

A company is migrating its SAP ERP system to AWS. The system includes an SAP Central Services (ASCS) instance and an SAP application server. Which TWO of the following are required for high availability? (Choose TWO.)

Accepted Answer

Enqueue replication server (ERS) must be set up for the ASCS cluster. Option B is correct because SAP high availability for the ASCS requires an Enqueue Replication Server (ERS) instance to replicate the lock table from the ASCS enqueue server, so that if the ASCS fails, the ERS can take over and preserve the enqueue service without losing lock data. Option D is correct because the ASCS must be configured as a failover cluster using AWS cluster management tools (such as Pacemaker/Corosync with the AWS overlay agent, or SIOS DataKeeper) to detect failure and move the ASCS and its virtual IP to another node. Option A is not required because /sapmnt is typically shared via NFS or Amazon EFS, and EBS Multi-Attach is not a supported or recommended solution for SAP shared filesystems. Option C is not required because an Elastic Load Balancer does not provide the cluster failover and enqueue replication needed for ASCS high availability. Option E is not required because while multiple application servers improve availability, the question specifically asks for the two requirements for ASCS high availability, and application servers are not part of the ASCS HA cluster.

Answer

Use an EBS Multi-Attach volume for shared /sapmnt

Answer

Configure an Elastic Load Balancer for ASCS

Answer

Deploy at least two application servers in different Availability Zones

Question 4

A company operates an SAP NetWeaver ABAP system on AWS with a single Amazon EC2 instance running both the SAP Central Services (SCS) and the primary application server. The operations team wants to enable automatic recovery of the EC2 instance if it fails a status check. Which AWS feature should they configure?

Accepted Answer

EC2 Auto Recovery. The requirement is to automatically recover a single EC2 instance if it fails a status check. EC2 Auto Recovery, configured via a CloudWatch alarm on the StatusCheckFailed_System metric, recovers the instance on new hardware while preserving its configuration, including instance ID, private IP, and Elastic IP. Auto Scaling, DRS, and hibernate do not provide this in-place automatic recovery for a stateful SAP system.

Answer

EC2 Auto Scaling group with a minimum capacity of 1

Answer

AWS Elastic Disaster Recovery (DRS)

Answer

EC2 hibernate

Question 5

A company runs SAP on AWS and uses a distributed deployment with multiple application servers in an Auto Scaling group. They want to ensure that when a new instance is launched, it is automatically registered with the SAP Central Services instance. Which approach should they use?

Accepted Answer

Use an Auto Scaling lifecycle hook that triggers a Lambda function to perform the registration when the instance enters the 'InService' state.. Auto Scaling lifecycle hooks allow you to pause an instance during launch and perform custom actions, such as invoking a Lambda function to register the instance with SAP Central Services, before the instance is placed in service. Option A is incorrect because user data runs at boot but does not integrate with the Auto Scaling lifecycle to ensure registration completes before the instance becomes healthy. Option B is incorrect because CloudFormation is used for infrastructure provisioning and not for per-instance registration triggered by scaling events. Option C is incorrect because AWS Systems Manager Run Command is not automatically triggered during Auto Scaling launches; it requires manual or scheduled execution.

Answer

Configure the user data script to run the registration command on instance boot.

Answer

Use an AWS CloudFormation template to create the instance and include the registration in the template.

Answer

Use AWS Systems Manager Run Command to register the instance after it launches.

Question 6

A company runs SAP HANA on AWS using multiple EC2 instances in a scale-out configuration. The operations team needs to monitor the health of the HANA database and the underlying AWS infrastructure. They want to receive alerts when specific metrics exceed thresholds. Which TWO actions should they take to meet these requirements? (Choose two.)

Accepted Answer

Install the AWS CloudWatch agent on each EC2 instance to collect SAP HANA metrics and publish them as custom metrics.. To monitor SAP HANA health and AWS infrastructure, you need to collect both system and application metrics. Installing the CloudWatch agent allows collection of custom HANA metrics, and setting CloudWatch alarms on those metrics with SNS notifications provides the required alerting. Detailed monitoring only covers EC2-level metrics, CloudTrail is for API auditing, and Trusted Advisor is not for performance monitoring.

Answer

Configure AWS Trusted Advisor to monitor SAP HANA performance and send alerts.

Answer

Use AWS CloudTrail to log all API calls and analyze them for HANA performance issues.

Answer

Enable detailed monitoring for the EC2 instances to get 1-minute metric granularity.

Question 7

An SAP system uses a Multi-AZ RDS for Oracle instance. During a recent failover, the application experienced a long outage because the SAP application server did not automatically reconnect to the new database endpoint. What is the most efficient way to resolve this issue?

Accepted Answer

Reduce the DNS TTL for the RDS endpoint and ensure the application re-resolves DNS on connection failure.. Multi-AZ RDS failover works by promoting the standby and repointing the DNS CNAME of the DB endpoint to the new primary. Because the endpoint name stays the same but the resolved IP changes, the application must re-resolve DNS and reconnect. Lowering the DNS TTL and ensuring the client re-resolves on connection failure is the efficient, application-side fix that lets SAP reconnect automatically without manual intervention.

Answer

Reboot the application server after every failover.

Answer

Deploy an Application Load Balancer in front of the RDS instance.

Answer

Modify the application connection string to use the standby instance IP directly.

Question 8

A company runs a critical SAP ERP system on AWS with an SAP HANA database on an Amazon EC2 X1 instance. The database uses Amazon EBS volumes with io1 volume type for high IOPS. The operations team notices that during peak loads, the database performance degrades due to insufficient IOPS. They need to increase the provisioned IOPS of the EBS volumes without downtime. What should they do?

Accepted Answer

Modify the EBS volumes to increase the provisioned IOPS using the Elastic Volumes feature.. The Elastic Volumes feature allows online modification of EBS volume attributes, including increasing provisioned IOPS for io1/io2 volumes. This avoids downtime and meets the requirement. Migrating data with DataSync is not applicable, EBS optimization does not increase volume IOPS, and switching to gp2 would reduce performance.

Answer

Change the volume type to gp2 and rely on burst credits for higher IOPS.

Answer

Enable EBS optimization on the EC2 instance to increase IOPS.

Answer

Create a new EBS volume with higher IOPS and migrate the data using AWS DataSync.

Question 9

A company is running SAP NetWeaver on AWS. The SAP application server instances need to be distributed within a single Availability Zone for low-latency connectivity. Which AWS feature should be used to ensure low-latency connectivity between these instances?

Accepted Answer

Placement Group (cluster). A cluster placement group places instances into a low-latency, high-bandwidth network within a single Availability Zone. This is ideal for SAP application servers that require these characteristics. For multi-AZ high availability, a separate placement group per AZ or spread placement groups may be considered, but for the requirement stated in this question, the cluster placement group (Option B) is correct.

Answer

Network ACL

Answer

Internet Gateway

Answer

VPC Peering

Question 10

A SAP administrator wants to monitor the CPU utilization of an SAP application server running on an EC2 instance. Which AWS service should be used to set up an alarm when CPU utilization exceeds 90% for 5 minutes?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch is the correct service for monitoring CPU utilization and setting alarms. CloudWatch collects metrics like CPUUtilization from EC2 instances, and you can create a CloudWatch Alarm that triggers when the metric exceeds a threshold (e.g., 90%) for a specified duration (e.g., 5 minutes). The other options are incorrect: AWS CloudTrail logs API calls for auditing, not metrics; AWS Trusted Advisor provides best practice recommendations; and AWS Config tracks resource configuration changes. Therefore, CloudWatch (Option C) is the correct choice.

Answer

AWS CloudTrail

Answer

AWS Trusted Advisor

Answer

AWS Config

Question 11

A company is migrating an on-premises SAP ERP system to AWS. The system uses a large Oracle database. The migration must minimize downtime. Which AWS service should be used for the database migration?

Accepted Answer

AWS Database Migration Service (DMS). AWS DMS can migrate databases with minimal downtime by using ongoing replication. Option A is incorrect because AWS SMS is designed for server migration, not database migration. Option B is incorrect because AWS Application Migration Service (MGN) is also for server migration. Option C is incorrect because AWS Schema Conversion Tool (SCT) assists with schema and code conversion but is not a full database migration service. Option D is correct because AWS Database Migration Service (DMS) can migrate Oracle databases to AWS with minimal downtime using continuous replication.

Answer

AWS Server Migration Service (SMS)

Answer

AWS Application Migration Service (MGN)

Answer

AWS Schema Conversion Tool (SCT)

Question 12

A company runs an SAP HANA database on AWS. The operations team wants to automate the monitoring of HANA alert logs and send notifications when critical alerts occur. Which AWS service should they use to collect and analyze the logs?

Accepted Answer

Amazon CloudWatch Logs with metric filters and alarms. Amazon CloudWatch Logs can ingest HANA alert logs via the CloudWatch agent and trigger alarms based on metric filters. CloudTrail records API activity, not application logs. S3 Event Notifications do not analyze log content. Lambda alone does not provide log collection.

Answer

AWS CloudTrail

Answer

Amazon S3 Event Notifications

Answer

AWS Lambda scheduled functions

Question 13

An SAP system administrator needs to apply an operating system patch to an Amazon EC2 instance running SAP NetWeaver. The instance is part of an Auto Scaling group. What is the BEST approach to minimize downtime?

Accepted Answer

Use a rolling update by updating the launch configuration and performing an instance refresh.. An instance refresh in an Auto Scaling group allows you to apply a new launch configuration (which includes the patched AMI or user data) to all instances in a rolling, controlled manner. This minimizes downtime by replacing instances one at a time or in batches, ensuring the SAP NetWeaver application remains available throughout the process. Detaching, stopping, or terminating individual instances would cause unnecessary disruption or require manual reattachment, which is not optimal for high-availability SAP landscapes.

Answer

Detach the instance from the Auto Scaling group, apply the patch, and reattach.

Answer

Stop the instance, apply the patch, and start it.

Answer

Terminate the instance and let Auto Scaling launch a new one with the patch.

Question 14

A company is running SAP on AWS and needs to automate OS-level patching for their SAP application servers. Which AWS service should they use to schedule and apply patches?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager automates the process of patching operating systems and applications across EC2 instances, including SAP application servers. It uses patch baselines and maintenance windows to schedule and apply patches at scale, with compliance reporting. This is the purpose-built AWS service for OS-level patch automation.

Answer

Amazon CloudWatch Events

Answer

AWS OpsWorks

Answer

Amazon EC2 Auto Scaling

Question 15

A large enterprise is migrating its SAP S/4HANA system to AWS. The system includes a production SAP HANA database (4 TB) and a development SAP HANA database (1 TB). The migration strategy is to use SAP HANA System Replication (HSR) for both databases to EC2 instances in the same AWS region. The company has a compliance requirement that the production database must be in a different AWS account than the development database. The network between on-premises and AWS uses AWS Direct Connect with 10 Gbps bandwidth. During the test migration, the HSR replication for the development database works, but the production database fails to establish replication. The error log shows: "HSR connection timed out." The security groups and network ACLs for the production target EC2 instance allow inbound traffic on port 30101 from the on-premises source IP. What is the most likely cause of the failure?

Accepted Answer

The production target EC2 instance is in a different AWS account, and there is no VPC peering or Transit Gateway between the accounts to allow connectivity.. HSR requires communication between the source and target HANA instances. If the target is in a different account, VPC peering or Transit Gateway is needed for cross-account connectivity. Option A is correct because cross-account communication requires VPC peering or Transit Gateway. Option B is wrong because the port is correct. Option C is wrong because HSR does not use port 443. Option D is wrong because the source is on-premises, not in another AWS account.

Answer

The production source HANA instance is not configured to replicate to a different AWS account.

Answer

The production target EC2 instance is using the wrong port for HSR.

Answer

The security group on the production target EC2 instance does not allow inbound traffic on port 443.