PAS-C01 Practice Test 39 — 15 Questions

Question 1

An SAP system running on AWS is experiencing performance issues. The operations team suspects that the Amazon EBS volumes attached to the SAP application server are not providing sufficient IOPS. Which AWS service should be used to monitor the IOPS performance of the EBS volumes?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch provides detailed monitoring metrics for Amazon EBS volumes, including `VolumeReadOps` and `VolumeWriteOps`, which directly measure IOPS performance. By using CloudWatch metrics, the operations team can track the actual IOPS delivered to the SAP application server and identify whether the volumes are throttled or under-provisioned.

Answer

AWS Config

Answer

AWS CloudTrail

Answer

Amazon Inspector

Question 2

A company is planning to migrate its SAP HANA database to AWS. They require high availability with automatic failover in less than 30 seconds. Which AWS service should be used to meet this requirement?

Accepted Answer

Amazon Route 53. Amazon Route 53 can be configured with health checks and DNS failover to automatically redirect traffic to a standby SAP HANA database in a different Availability Zone or region when the primary fails. With a low TTL (e.g., 5 seconds) and active-passive routing, failover can occur in under 30 seconds, meeting the high availability requirement.

Answer

Elastic Load Balancing

Answer

AWS Direct Connect

Answer

AWS Global Accelerator

Question 3

The exhibit shows the block device mapping of an EC2 instance running SAP HANA. The root volume (/dev/xvda) has DeleteOnTermination set to true, and the data volume (/dev/sdf) has DeleteOnTermination set to false. If the instance is terminated, what happens to the data volume?

Accepted Answer

Only the root volume is deleted; the data volume remains.. The DeleteOnTermination attribute controls whether a volume is deleted when its associated EC2 instance is terminated. For the root volume (/dev/xvda), this attribute is set to true, so it will be deleted upon termination. For the data volume (/dev/sdf), it is set to false, meaning the volume will be detached from the instance and preserved in your AWS account, allowing you to reattach it to another instance or take snapshots. Therefore, only the root volume is deleted, and the data volume remains.

Answer

Only the data volume is deleted; the root volume remains.

Answer

Both volumes are detached and moved to Amazon S3.

Answer

Both volumes are deleted.

Question 4

A company is planning to run SAP S/4HANA on AWS. The architect needs to ensure that the EC2 instances are SAP certified for the specific SAP HANA version. Where should the architect verify the instance certification?

Accepted Answer

SAP Certified and Supported SAP HANA Hardware Directory. The SAP Certified and Supported SAP HANA Hardware Directory is the authoritative source maintained by SAP that lists all certified hardware configurations, including specific AWS EC2 instance types and their supported SAP HANA versions. This directory is the only place where SAP officially validates that an EC2 instance meets the exact hardware and firmware requirements for a given SAP HANA release, ensuring compliance with SAP's certification standards.

Answer

SAP Support Portal

Answer

AWS Management Console under EC2 instance types

Answer

AWS documentation for SAP on AWS

Question 5

A company is deploying SAP S/4HANA on AWS and needs to ensure high availability for the database layer. Which TWO actions should the company take?

Accepted Answer

Configure SAP HANA System Replication across two Availability Zones. Option B is correct because SAP HANA System Replication (HSR) is the native SAP high-availability mechanism that continuously replicates data and redo logs from a primary to a secondary HANA node, and placing the two nodes in separate Availability Zones provides resilience against an AZ-level failure with automatic or manual takeover. Option D is correct because HANA's data and log volumes demand very high, consistent IOPS and low latency, and Amazon EBS io2 Block Express volumes deliver up to 256,000 IOPS and sub-millisecond latency with high durability, making them the recommended storage for production HANA on AWS. Option A is not a high-availability action for the database layer; S3 Standard-IA is a backup/archival storage class and does not provide failover or continuous availability. Option C is wrong because Amazon EFS is a shared NFS file system not certified or performant enough for HANA data volumes, which require block storage. Option E is wrong because EC2 Auto Scaling is designed for stateless, horizontally scalable workloads and cannot be used to fail over a stateful, vertically scaled HANA database instance.

Answer

Store HANA backups in Amazon S3 Standard-IA

Answer

Use Amazon EFS as the data volume for HANA

Answer

Enable EC2 Auto Scaling for the HANA instance

Question 6

A company is running SAP HANA on AWS and needs to back up the database to Amazon S3. Which approach provides the most efficient and cost-effective backup strategy?

Accepted Answer

Use SAP HANA Backint agent to back up directly to S3.. The SAP HANA Backint agent is the native, certified integration for backing up SAP HANA directly to Amazon S3. It leverages the SAP HANA backup API to stream data directly to S3 without intermediate storage, providing the most efficient path with minimal overhead and cost, as you only pay for S3 storage and API calls.

Answer

Use AWS Storage Gateway with tapes.

Answer

Take EBS snapshots of the HANA data volumes.

Answer

Copy HANA data files to EC2 instance store.

Question 7

A company wants to automate the deployment of SAP environments on AWS. Which AWS service should the company use to define the infrastructure as code?

Accepted Answer

AWS CloudFormation. AWS CloudFormation is the correct choice because it allows you to define your entire SAP infrastructure—including EC2 instances, VPCs, security groups, and storage—as code using JSON or YAML templates. This enables repeatable, version-controlled, and automated deployments of SAP environments, which is essential for infrastructure as code (IaC) practices.

Answer

AWS OpsWorks

Answer

AWS CodeDeploy

Answer

AWS Elastic Beanstalk

Question 8

A company runs SAP Business Warehouse (BW) on AWS. The system uses an SAP HANA database that is also used for other SAP systems. The company wants to set up monitoring to ensure that the HANA database is performing optimally. They have installed the AWS CloudWatch agent on the HANA server to collect operating system metrics. However, they also need to collect HANA-specific metrics such as memory usage and SQL execution times. Which additional step should the company take to collect these metrics?

Accepted Answer

Install and configure the SAP HANA CloudWatch agent on the HANA server.. The AWS-provided SAP HANA CloudWatch agent is specifically designed to collect HANA-specific metrics such as memory usage, SQL execution times, and other database-level performance counters. It connects to the HANA database using the SQLDBC protocol and pushes the metrics directly to CloudWatch, complementing the OS-level metrics collected by the standard CloudWatch agent. This is the only option that directly addresses the requirement to gather HANA-specific metrics without additional custom development.

Answer

Set up SAP Solution Manager to send metrics to CloudWatch via an API.

Answer

Use Amazon CloudWatch Logs to capture HANA trace files and create metric filters.

Answer

Enable AWS CloudTrail to log HANA database API calls.

Question 9

A company is planning to migrate their SAP system to AWS. They need to ensure that the SAP application servers and database servers are in the same AWS Region but in different Availability Zones for high availability. The network latency between Availability Zones must be minimal. Which AWS service should be used to connect the instances?

Accepted Answer

Use the default VPC network within the same VPC spanning multiple Availability Zones. A single VPC can span multiple Availability Zones within the same AWS Region, and by default, instances in different AZs within the same VPC communicate over the AWS private network with low latency, typically under 1-2 ms. This meets the requirement for minimal latency between SAP application and database servers while keeping them in the same Region for high availability.

Answer

Set up VPC Peering between the Availability Zones

Answer

Establish an AWS Direct Connect connection

Answer

Use AWS Transit Gateway to connect the subnets

Question 10

A customer runs SAP HANA on an AWS Multi-AZ deployment with a primary and secondary instance. They want to ensure automatic failover in case of instance failure. What is the recommended approach?

Accepted Answer

Implement SAP HANA System Replication in a multi-AZ configuration with automatic failover using AWS services.. SAP HANA System Replication (HSR) in a multi-AZ configuration, combined with AWS services like Amazon Route 53 health checks and custom scripts for automatic failover, provides the recommended approach for ensuring automatic failover upon instance failure. HSR replicates data synchronously or asynchronously between primary and secondary HANA instances, and when integrated with AWS, you can automate the failover process without manual intervention, meeting the requirement for high availability.

Answer

Set up a Route 53 health check to redirect traffic to the secondary instance manually.

Answer

Use Amazon RDS for SAP HANA with Multi-AZ enabled.

Answer

Configure an Auto Scaling group with a lifecycle hook to launch a new HANA instance.

Question 11

An organization is planning a migration of SAP applications to AWS. Which AWS service should be used to track and manage the migration project's tasks and milestones?

Accepted Answer

AWS Migration Hub. AWS Migration Hub is the correct service because it provides a single location to track the progress of application migrations across multiple AWS and partner migration tools. It helps manage tasks and milestones by aggregating migration status and providing a dashboard. It is specifically designed for migration project tracking.

Answer

AWS Config

Answer

AWS Systems Manager

Answer

AWS CloudFormation

Question 12

A company wants to implement a backup strategy for SAP HANA on AWS. The backup must be stored securely and be accessible for restore to a different AWS Region. Which combination of AWS services should be used?

Accepted Answer

Use AWS Backup with cross-region backup copy. AWS Backup with cross-region backup copy is the correct choice because it provides a fully managed, policy-driven backup service that natively supports SAP HANA on Amazon EC2, including automated cross-region copy for disaster recovery. This ensures backups are stored securely (encrypted at rest and in transit) and can be restored in a different AWS Region without manual intervention.

Answer

Take EBS snapshots and copy them to another region

Answer

Store HANA backups in Amazon S3 Standard-IA

Answer

Use Amazon S3 Glacier Deep Archive

Question 13

Which TWO of the following are best practices for securing an SAP system on AWS? (Choose two.)

Accepted Answer

Use security groups to restrict inbound traffic to SAP application ports. Option C is correct because security groups act as stateful virtual firewalls at the instance/ENI level, and restricting inbound rules to only the specific SAP ports required (for example, SAP GUI 3200-3299, SAP dispatcher 3200, or HTTPS 443 for Fiori/Web Dispatcher) follows the principle of least privilege and minimizes the attack surface. Option E is correct because encrypting data in transit with TLS/SSL certificates protects SAP application traffic (such as SAP GUI, RFC, HTTP/HTTPS, and database connections) from eavesdropping and man-in-the-middle attacks, which is a core AWS Well-Architected and SAP security best practice. Option A is wrong because storing database credentials in plaintext in configuration files exposes secrets to anyone with file access; AWS Secrets Manager or Systems Manager Parameter Store with encryption should be used instead. Option B is wrong because disabling AWS CloudTrail removes API activity auditing and breaks compliance and forensic capabilities; CloudTrail should be enabled across all regions. Option D is wrong because allowing all inbound traffic from 0.0.0.0/0 exposes SAP systems to the internet and violates least-privilege network access.

Answer

Store database credentials in plaintext in application configuration files

Answer

Disable AWS CloudTrail to reduce logs

Answer

Allow all inbound traffic from 0.0.0.0/0 for easy access

Question 14

An SAP Basis administrator needs to monitor the performance of their SAP HANA database running on an EC2 instance. The administrator wants to visualize key metrics such as CPU utilization, memory usage, and disk I/O in a single dashboard. Which AWS service should be used to create this dashboard?

Accepted Answer

Amazon CloudWatch Dashboards. Amazon CloudWatch Dashboards is the correct service because it allows you to create custom, single-pane-of-glass views that aggregate metrics from multiple sources, including EC2 instances. For SAP HANA on EC2, you can pull CPU utilization, memory usage, and disk I/O metrics from CloudWatch (enabled via the CloudWatch Agent or EC2 detailed monitoring) and display them together on one dashboard for real-time performance monitoring.

Answer

AWS Config

Answer

AWS Trusted Advisor

Answer

AWS CloudTrail

Question 15

An organization wants to ensure that its SAP HANA database backups are stored in a separate AWS Region for disaster recovery. The backups are currently stored in Amazon S3 in the primary Region. Which AWS service should be used to replicate the backups to another Region automatically?

Accepted Answer

Amazon S3 Cross-Region Replication (CRR).. Amazon S3 Cross-Region Replication (CRR) is the correct choice because it automatically replicates objects from an S3 bucket in one AWS Region to a bucket in another Region, meeting the requirement for storing SAP HANA database backups in a separate Region for disaster recovery. CRR operates asynchronously at the object level, ensuring that backups are continuously copied without manual intervention, and it supports the same storage classes and encryption mechanisms as the source bucket.

Answer

AWS Storage Gateway with volume gateway.

Answer

AWS Backup with a cross-region backup plan.

Answer

Amazon S3 Transfer Acceleration.