PAS-C01 Practice Test 39 — 15 Questions

Question 1

An SAP administrator is migrating an SAP system to AWS and has launched an EC2 instance from an AMI. The administrator runs the command shown in the exhibit. Which statement is true about the root volume?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The root volume will be deleted when the instance is terminated.. The output of the command shows that the 'DeleteOnTermination' attribute is set to 'true' for the root volume, meaning the volume will be deleted when the EC2 instance is terminated. Option B is incorrect because the root volume is attached to the instance, not detached. Option C is incorrect because the output does not indicate that the root volume is encrypted; encryption is a separate attribute. Option D is incorrect because the root volume is an EBS volume, not an instance store volume.

Answer

The root volume is detached from the instance.

Answer

The root volume is encrypted.

Answer

The root volume is an instance store volume.

Question 2

A company is migrating its SAP NetWeaver system from on-premises to AWS. The system uses a central instance (ASCS) and multiple dialog instances. The migration must be completed with minimal downtime. Which approach should the company use?

Accepted Answer

Use SAP Software Provisioning Manager (SWPM) to perform a system copy into pre-provisioned EC2 instances with the same sizing.. Using SAP Software Provisioning Manager (SWPM) to perform a system copy into pre-provisioned EC2 instances with the same sizing allows for a controlled, minimal-downtime migration. SWPM handles SAP-specific consistency, enabling a homogeneous system copy that can be completed with minimal downtime by pre-loading data and then applying incremental changes. Option B is wrong because AWS CloudEndure Migration (replaced by AWS Application Migration Service) replicates at the block level, which may not maintain SAP application consistency without additional steps. Option C is wrong because uninstalling and performing a fresh installation requires significant downtime and reconfiguration. Option D is wrong because AWS Application Migration Service replicates at the block level and may not handle SAP application consistency optimally, potentially requiring additional validation and downtime.

Answer

Use AWS CloudEndure Migration to continuously replicate the SAP system.

Answer

Uninstall SAP from on-premises and perform a fresh installation on AWS, then restore the database backup.

Answer

Use AWS Application Migration Service (AWS MGN) to replicate the entire on-premises system to AWS.

Question 3

A company is migrating a large SAP ERP system to AWS. Which TWO AWS services are essential for high availability and disaster recovery? (Choose two.)

Accepted Answer

AWS Elastic Disaster Recovery (DRS). Correct options: D and E. AWS Elastic Disaster Recovery (DRS) provides continuous replication and recovery for SAP systems, ensuring disaster recovery. Amazon Route 53 enables DNS failover to route traffic to a secondary region or availability zone, supporting high availability. Option A (CloudWatch) is a monitoring service, not directly for HA/DR. Option B (DMS) is for database migration, not full system recovery. Option C (S3) is storage, not a core HA/DR service.

Answer

Amazon CloudWatch

Answer

AWS Database Migration Service

Answer

Amazon S3

Question 4

A company is running an SAP HANA database on an EC2 instance with a large amount of memory. The system is experiencing performance issues during peak loads. Which AWS service should be used to capture detailed performance metrics for analysis?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch is the correct service because it provides detailed, customizable performance metrics for EC2 instances, including memory utilization, CPU, disk I/O, and network throughput. For SAP HANA, which is memory-intensive, CloudWatch can capture custom metrics (e.g., via the CloudWatch Agent) to monitor memory pressure and identify bottlenecks during peak loads, enabling performance analysis and scaling decisions.

Answer

AWS Config

Answer

AWS CloudTrail

Answer

AWS X-Ray

Question 5

A company is migrating its SAP ERP system to AWS and needs to ensure that the SAP license is compliant. The company has a production license for SAP ERP. What should the company do for licensing on AWS?

Accepted Answer

Use the existing SAP license under the Bring Your Own License (BYOL) model.. AWS supports the Bring Your Own License (BYOL) model for SAP, allowing the company to use its existing SAP ERP license on AWS. Option A is incorrect because SAP does not offer a free license for AWS. Option B is incorrect because while subscription licenses are available, the company already has a production license, so BYOL is the appropriate choice. Option C is incorrect because purchasing a new license is unnecessary when the existing license can be reused under BYOL.

Answer

Request a free SAP license for AWS from SAP.

Answer

Use a subscription-based SAP license from the AWS Marketplace.

Answer

Purchase a new SAP license for AWS.

Question 6

A company is migrating its SAP landscape to AWS and has a requirement to use existing software licenses to reduce costs. Which AWS pricing model should be used?

Accepted Answer

Dedicated Hosts. Dedicated Hosts provide visibility into the underlying physical cores and sockets, enabling you to bring your own existing SAP licenses (e.g., per-core or per-socket) to AWS and reduce costs. Option B (Compute Savings Plans) offers discounts on compute usage but does not support license management. Option C (Reserved Instances) provides capacity reservation and cost savings but does not allow use of your own licenses. Option D (Dedicated Instances) offers instance isolation at the hardware level but does not expose the underlying physical server for license tracking.

Answer

Compute Savings Plans

Answer

Reserved Instances (RI)

Answer

Dedicated Instances

Question 7

An SAP system is experiencing high CPU utilization on the application server. The administrator wants to automatically scale the EC2 instance based on CPU usage. Which AWS service should be used?

Accepted Answer

AWS Auto Scaling. Auto Scaling with scaling policies based on CloudWatch alarms can automatically adjust the number of instances. Option B is correct. Option A is wrong because Elastic Load Balancing distributes traffic, not scaling. Option C is wrong because Lambda can be used but is not the primary service for EC2 scaling. Option D is wrong because CloudWatch monitors but does not scale.

Answer

Elastic Load Balancing

Answer

AWS Lambda

Answer

Amazon CloudWatch

Question 8

A company runs SAP on AWS and uses a shared Amazon EFS file system for /sapmnt and /usr/sap/trans. The administrator wants to control access to specific directories based on the source IP address of the SAP application servers. Which method should be used to achieve this?

Accepted Answer

Use Amazon EFS access points with IAM policies. Amazon EFS access points can be combined with IAM policies to enforce a specific POSIX user and directory path per application, and IAM conditions can restrict access based on the source IP address of the SAP application servers. This allows fine-grained control over which EC2 instances (by IP) can access specific subdirectories like /sapmnt or /usr/sap/trans without modifying the NFS client configuration.

Answer

Configure security group rules to allow only specific IP addresses

Answer

Use Amazon S3 bucket policies with IP conditions

Answer

Use network ACLs to restrict access by IP

Question 9

An SAP administrator needs to ensure that all EC2 instances in the SAP landscape have the correct patches and configurations. Which AWS service can be used to automate OS patch management?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager automates the patching of EC2 instances, making it the correct choice for OS patch management. Option A is wrong because AWS CloudFormation is used for infrastructure as code, not patching. Option C is wrong because AWS OpsWorks is for configuration management with Chef/Puppet. Option D is wrong because AWS Config is for compliance auditing, not patching.

Answer

AWS CloudFormation

Answer

AWS OpsWorks

Answer

AWS Config

Question 10

An SAP administrator created the IAM policy shown in the exhibit. When trying to terminate an EC2 instance with ID i-abc123 in us-west-2, the action fails. What is the reason?

Accepted Answer

The ec2:TerminateInstances action is restricted to instances in us-east-1 only.. The policy includes a condition that restricts the ec2:TerminateInstances action to the us-east-1 region using the ec2:Region condition key. Since the instance i-abc123 is in us-west-2, the condition is not satisfied, causing the action to fail. AWS IAM policies evaluate conditions before allowing an action, and if the condition is not met, the action is denied.

Answer

There is an implicit Deny for all actions not explicitly allowed.

Answer

The policy is missing a condition key to allow termination in us-west-2.

Answer

The ec2:StartInstances and ec2:StopInstances actions are not granted for the specific instance.

Question 11

A company is migrating a large SAP landscape to AWS. The migration plan includes using AWS CloudEndure Migration for the application servers. However, the SAP database requires a different approach. Which database migration method is recommended for an SAP HANA database?

Accepted Answer

Use SAP HANA System Replication (HSR).. The recommended method for migrating an SAP HANA database is SAP HANA System Replication (HSR). HSR provides a database-aware, block-level replication with near-zero downtime, making it ideal for SAP HANA migrations. Option A is incorrect because AWS Schema Conversion Tool (SCT) is used for converting schemas between different database engines (e.g., Oracle to Amazon RDS), not for HANA-to-HANA migration. Option B is incorrect because AWS CloudEndure Migration performs host-level replication and lacks database consistency features required for SAP HANA. Option C is incorrect because AWS DMS does not support SAP HANA as a target database; it is used for heterogeneous migrations to AWS database services.

Answer

Use AWS Schema Conversion Tool (SCT) to convert the HANA schema.

Answer

Use AWS CloudEndure Migration for both application and database servers.

Answer

Use AWS DMS with Oracle as a source and HANA as target.

Question 12

An SAP system on AWS uses an Application Load Balancer (ALB) to distribute traffic to multiple SAP application servers. The ALB is configured with a TCP listener. Users report that some sessions are terminated unexpectedly. What is the MOST likely cause?

Accepted Answer

The ALB idle timeout setting is shorter than the SAP session timeout.. The ALB's idle timeout setting controls how long the load balancer keeps a connection open without data transfer. If this timeout is shorter than the SAP session timeout, the ALB will close the connection prematurely, causing the user's session to be terminated unexpectedly. This is a common mismatch when long-running SAP transactions or background jobs do not send data within the ALB's idle timeout window.

Answer

The ALB is not configured with SSL termination.

Answer

The target group health check interval is set too low.

Answer

The ALB is configured with cross-zone load balancing disabled.

Question 13

A company is migrating a critical SAP HANA database from on-premises to AWS. The database is 6 TB, and the migration must be completed within a 4-hour downtime window. The network bandwidth between on-premises and AWS is 1 Gbps. Which approach should the company take to meet the downtime requirement?

Accepted Answer

Use AWS Snowball Edge to physically transfer the data, then use AWS DMS for ongoing replication.. AWS Snowball Edge enables physical transfer of the 6 TB data, which is feasible within the 4-hour window despite the 1 Gbps network constraint. After the initial load, AWS DMS can be used for ongoing CDC replication. Option A is wrong because converting schema with SCT and restoring after upload still requires the initial upload over the network, which would exceed the downtime window. Option B is wrong because AWS DMS with CDC over the existing network for the full load cannot transfer 6 TB in 4 hours at 1 Gbps. Option D is wrong because a direct online migration over the network cannot meet the downtime requirement due to bandwidth limitations.

Answer

Use AWS SCT to convert the schema, then export to Amazon S3 and restore into HANA on EC2.

Answer

Use AWS DMS with change data capture (CDC) and start with a full load over the network.

Answer

Perform a direct online migration using AWS DMS over the existing network.

Question 14

A company is planning to migrate its SAP NetWeaver system to AWS. Which TWO AWS services can be used to store the SAP transport directory?

Accepted Answer

Amazon EFS. Options B and C are correct. Amazon EFS provides a scalable NFS file system suitable for the SAP transport directory, while Amazon FSx for Windows File Server offers SMB file shares if needed. Option A is incorrect because Amazon S3 is object storage, not a file system. Option D is incorrect because Amazon RDS is a relational database service, not a shared file system. Option E is incorrect because Amazon EBS is block storage, which is not suitable for a shared transport directory across multiple instances.

Answer

Amazon S3

Answer

Amazon RDS

Answer

Amazon EBS

Question 15

An organization is planning to migrate its SAP landscape to AWS and needs to ensure high availability for the SAP Central Services (ASCS) instance. Which TWO AWS services can be used to implement a high-availability architecture for ASCS?

Accepted Answer

Amazon EC2 Auto Recovery. Options A and E are correct. Amazon EC2 Auto Recovery can automatically restart an ASCS instance if it fails due to underlying hardware issues, providing a basic level of high availability. Amazon Route 53 can be configured with DNS failover to route traffic to a standby ASCS instance in another Availability Zone, enabling multi-AZ resilience. Option B (CloudFront) is a content delivery network and not designed for SAP ASCS HA. Option C (DMS) is a database migration service, irrelevant for ASCS. Option D (ELB) is typically not used for ASCS because ASCS requires a single active node with a virtual IP or DNS name, not load-balanced traffic.

Answer

Amazon CloudFront

Answer

AWS Database Migration Service (DMS)

Answer

Elastic Load Balancing (ELB)