PAS-C01 Practice Test 39 — 15 Questions

Question 1

An SAP administrator needs to migrate an on-premises SAP ERP system to AWS. The current system runs on a single Windows Server with SQL Server and uses 2 TB of storage. The migration must minimize downtime and use native AWS tools. Which service should be used to replicate the on-premises server to AWS?

Accepted Answer

AWS Server Migration Service (SMS). Option B is correct: AWS Server Migration Service (SMS) is designed to replicate on-premises servers to AWS, supporting Windows and SQL Server. Option A is wrong: AWS CloudFormation is for infrastructure as code, not replication. Option C is wrong: AWS DMS is for database migration, but doesn't replicate the full server. Option D is wrong: AWS Snowball is for offline data transfer, not continuous replication.

Answer

AWS CloudFormation

Answer

AWS Snowball

Answer

AWS Database Migration Service (DMS)

Question 2

A company is deploying SAP NetWeaver on AWS and needs to configure high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). The solution must use AWS native services. Which TWO actions should be taken?

Accepted Answer

Associate an Elastic IP address with the active ASCS instance using a script.. Options B and D are correct: Use Amazon Route 53 with health checks for failover DNS routing; use an Elastic IP address for the virtual IP address that moves between instances. Option A is wrong: ELB is for HTTP/HTTPS; ASCS uses proprietary protocols. Option C is wrong: AWS Global Accelerator is for traffic routing, but not typically used for ASCS/ERS failover. Option E is wrong: AWS Direct Connect is for private connectivity, not high availability.

Answer

Place an Application Load Balancer in front of the ASCS instances.

Answer

Set up AWS Direct Connect for redundant connectivity.

Answer

Deploy AWS Global Accelerator for failover.

Question 3

An SAP system on AWS needs to be highly available across two Availability Zones. The application tier runs on EC2 instances behind an Application Load Balancer. The database tier uses an RDS Multi-AZ deployment. What additional step is REQUIRED to ensure complete high availability for the application tier?

Accepted Answer

Launch EC2 instances in at least two different Availability Zones.. Option B is correct because EC2 instances must be deployed in multiple AZs to survive an AZ outage. Option A is wrong because Auto Scaling handles scaling, not HA. Option C is wrong because instance size does not affect HA. Option D is wrong because EBS Multi-Attach is not used for HA of application servers.

Answer

Use a larger EC2 instance type.

Answer

Enable EBS Multi-Attach for the root volumes.

Answer

Configure an Auto Scaling group with a dynamic scaling policy.

Question 4

An SAP system on AWS is experiencing high latency between the application server and the database server. Both are in the same VPC but different subnets. What is the most effective way to reduce latency?

Accepted Answer

Place both instances in a placement group in the same Availability Zone.. Option C is correct because placing both servers in the same placement group ensures low-latency network connectivity. Option A is wrong because increasing instance size may improve performance but not necessarily reduce latency. Option B is wrong because using a VPN adds overhead. Option D is wrong because moving to different AZs typically increases latency.

Answer

Move the database to a different Availability Zone.

Answer

Use a VPN connection between subnets.

Answer

Increase the instance size of both servers.

Question 5

A company is running SAP ERP on AWS and wants to implement a disaster recovery (DR) strategy with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. The primary site is in us-east-1, and the DR site is in us-west-2. Which TWO AWS features should be combined to achieve this? (Choose TWO.)

Accepted Answer

Amazon S3 Cross-Region Replication for database backups. Options A and C are correct: S3 Cross-Region Replication provides asynchronous replication of backups, and EC2 AMI Copy can be used to copy AMIs to the DR region. Option B is wrong because EBS snapshots are not automatically cross-region; they need to be copied. Option D is wrong because CloudEndure may not meet RPO/RTO. Option E is wrong because RDS is not used for SAP.

Answer

Amazon RDS Multi-Region replication

Answer

AWS CloudEndure Disaster Recovery

Answer

Amazon EBS Multi-AZ snapshots

Question 6

A company is migrating its SAP ERP system to AWS and wants to use SAP HANA as the database. Which AWS service can be used to automate the installation and configuration of SAP HANA?

Accepted Answer

AWS Systems Manager. Option A is correct: AWS Systems Manager can automate installation and configuration using runbooks. Option B is wrong because AWS OpsWorks is for Chef/Puppet. Option C is wrong because AWS CloudFormation is for infrastructure provisioning, not software installation. Option D is wrong because AWS CodePipeline is for CI/CD.

Answer

AWS CodePipeline

Answer

AWS CloudFormation

Answer

AWS OpsWorks

Question 7

A company is deploying a new SAP S/4HANA system on AWS and needs to ensure that the application servers can communicate with the database servers securely and with low latency. The application servers and database servers are in different VPCs. Which AWS service should be used to connect these VPCs?

Accepted Answer

VPC Peering. Option D is correct because VPC Peering allows direct network connectivity between VPCs with low latency. Option A is wrong because AWS Direct Connect is for on-premises to AWS. Option B is wrong because AWS VPN is for encrypted tunnels over the internet. Option C is wrong because Amazon API Gateway is for APIs.

Answer

AWS VPN

Answer

Amazon API Gateway

Answer

AWS Direct Connect

Question 8

An SAP administrator created the IAM policy shown in the exhibit for a team managing SAP HANA instances. What is the effective permission for the team regarding an EC2 instance with the tag 'Environment=Production'?

Accepted Answer

The team can start and stop the instance, but cannot terminate it.. Option B is correct: Even though the first statement allows TerminateInstances, the second Deny statement explicitly denies the same action for the same condition. An explicit Deny overrides any Allow. Options A, C, D are incorrect because the Deny prohibits termination; start and stop remain allowed.

Answer

The team can start, stop, and terminate the instance.

Answer

The team cannot start, stop, or terminate the instance.

Answer

The team can only describe the instance.

Question 9

A company is running SAP BusinessObjects on AWS. The application servers are behind an Application Load Balancer (ALB). The ALB is configured to use a single target group. The company wants to deploy a new version of the application with zero downtime. Which deployment strategy should be used?

Accepted Answer

Implement a blue/green deployment by creating a new target group and updating the ALB listener.. Option D is correct: Blue/green deployment creates a new target group with new instances, then updates the ALB listener rule to route traffic to the new group, enabling zero downtime. Option A is wrong: Rolling update with in-place replacement can cause downtime. Option B is wrong: Canary releases are for gradual rollout, not necessarily zero downtime. Option C is wrong: Creating a new ALB and updating DNS can cause DNS propagation delays.

Answer

Perform a rolling update by terminating one instance at a time and launching a new one.

Answer

Create a new ALB and update the DNS record to point to the new ALB.

Answer

Use a canary release by routing 10% of traffic to the new version.

Question 10

An SAP system on AWS is experiencing slow performance for batch jobs. The jobs are I/O intensive and write large amounts of data to EBS volumes. CloudWatch metrics show that the EBS volumes are reaching their throughput limits. Which action will MOST effectively improve performance?

Accepted Answer

Increase the size of the EBS volumes to improve baseline throughput.. Option C is correct because increasing the volume size of gp2/gp3 increases baseline throughput. Option A is wrong because instance store is ephemeral and not suitable for persistent data. Option B is wrong because read replicas do not help with write throughput. Option D is wrong because Multi-AZ does not increase throughput.

Answer

Add read replicas to offload read traffic.

Answer

Use Multi-AZ for the database.

Answer

Move the data to instance store volumes.

Question 11

A company needs to set up a disaster recovery solution for SAP on AWS with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. Which strategy is most appropriate?

Accepted Answer

Use cross-region backup and restore with AWS Backup.. Option B is correct because using backups to S3 and restoring in another region can meet the RPO and RTO with proper planning. Option A is wrong because a single region cannot provide DR if the region fails. Option C is wrong because Multi-AZ is for HA, not DR across regions. Option D is wrong because pilot light with replication can meet RPO/RTO but is more complex; however, backup/restore is simpler and can meet the targets if automated.

Answer

Deploy all SAP components in a single AWS Region.

Answer

Use Multi-AZ deployment for the database.

Answer

Set up a pilot light environment with database replication.

Question 12

An SAP system running on AWS is experiencing intermittent connectivity issues between the SAP application servers and the database server. Both are in the same VPC but different subnets. The security groups and network ACLs are correctly configured. The issue occurs only during peak hours. Which of the following is the most likely cause?

Accepted Answer

Network ACLs do not have rules to allow ephemeral ports for return traffic.. Option D is correct because network ACLs are stateless and require explicit rules for both inbound and outbound traffic, and ephemeral ports are often missed. Option A is wrong because NACL rules are evaluated before security groups. Option B is wrong because VPC peering is not mentioned. Option C is wrong because security groups are stateful and would not cause asymmetric traffic issues.

Answer

Security group outbound rules are blocking return traffic.

Answer

The VPC peering connection is throttling traffic.

Answer

Security group inbound rules are misconfigured.

Question 13

An organization runs SAP on AWS and wants to encrypt all data at rest for the SAP HANA database. The encryption keys must be managed by the customer and rotated annually. Which THREE AWS services can be used together to meet these requirements? (Choose THREE.)

Accepted Answer

Amazon EBS encryption. Options A, B, and C are correct: AWS KMS manages customer master keys, CloudHSM provides hardware security module, and EBS encryption uses KMS. Option D is wrong because S3 encryption can use KMS but not directly for EBS. Option E is wrong because ACM is for SSL/TLS certificates.

Answer

Amazon S3 server-side encryption

Answer

AWS Certificate Manager (ACM)

Question 14

Which TWO options are valid strategies for backing up an SAP HANA database running on Amazon EC2? (Choose two.)

Accepted Answer

Use SAP HANA Backint to back up to Amazon S3.. Option A is correct: AWS Backup can back up EBS volumes, which can be used for HANA. Option C is correct: SAP HANA Backint integration with Amazon S3 is a supported backup method. Option B is wrong because RDS does not support SAP HANA. Option D is wrong because S3 Lifecycle policies are for object management, not database backup. Option E is wrong because EC2 instance store is ephemeral and not for backup.

Answer

Use Amazon RDS automated backups for SAP HANA.

Answer

Use Amazon S3 Lifecycle policies to transition HANA backups to Glacier.

Answer

Use EC2 instance store to copy HANA data files.

Question 15

Which THREE AWS services are commonly used to implement high availability for SAP HANA databases on AWS? (Choose three.)

Accepted Answer

Amazon EC2 Auto Recovery. Options A, B, and E are correct. Amazon EC2 Auto Recovery automatically recovers instances in case of failure. Multi-AZ deployment of SAP HANA uses multiple Availability Zones. Elastic Load Balancing distributes traffic across healthy instances. Options C and D are incorrect: AWS Global Accelerator is for global traffic, Amazon Route 53 is for DNS, but both can be used for HA but are not as common for HANA HA.

Answer

AWS Global Accelerator

Answer

Amazon Route 53