PAS-C01 Practice Test 40 — 15 Questions

Question 1

An SAP administrator notices that the SAP application performance has degraded over the past week. The system is running on Amazon EC2 with EBS volumes. Which AWS service should be used to analyze the performance impact of the EBS volumes?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Amazon CloudWatch. (Amazon CloudWatch) is correct because it provides metrics for EBS volumes like throughput, IOPS, and latency. Option A (Amazon Inspector) is for security assessment. Option B (AWS CloudTrail) logs API calls. Option D (AWS Trusted Advisor) provides best practices but not detailed performance analysis.

Answer

Amazon Inspector

Answer

AWS CloudTrail

Answer

AWS Trusted Advisor

Question 2

A company runs SAP on AWS and needs to monitor the performance of its SAP HANA database. The operations team wants to receive alerts when the CPU utilization exceeds 90% for more than 5 minutes. Which TWO steps should be taken to set up this monitoring and alerting?

Accepted Answer

Configure an Amazon SNS topic to send email or SMS notifications when the alarm state is reached.. Amazon SNS is the standard AWS service for distributing notifications from CloudWatch alarms. By configuring an SNS topic to send email or SMS, the operations team receives alerts when the CPU utilization alarm triggers. Option B is correct because a CloudWatch alarm can be created to monitor the EC2 instance's CPU utilization metric directly; no metric filter is needed. Option C is not required: CPU utilization is a pre-existing EC2 metric, not a log-based metric, so a metric filter is unnecessary. Option D is wrong because SAP application logs are not needed for CPU utilization monitoring. Option E is wrong because SAP Host Agent is not required for basic CloudWatch monitoring; CloudWatch and SNS provide a simpler native solution.

Answer

Create a CloudWatch metric filter on the HANA host's CPU utilization.

Answer

Enable CloudWatch Logs for the SAP application logs to detect performance issues.

Answer

Install the SAP Host Agent on the HANA instance and configure it to send metrics to SAP Solution Manager.

Question 3

A company is migrating its SAP systems to AWS and needs to ensure high availability for the SAP Central Services (ASCS) instance. Which AWS service can be used to implement a failover cluster for ASCS?

Accepted Answer

AWS using shared file system and DNS-based failover. For SAP ASCS failover, AWS recommends using a shared file system (e.g., Amazon EFS) combined with DNS-based failover via Route53. This provides high availability without requiring additional clustering software. Option C correctly describes this approach. Option A (Amazon S3) is object storage, not suitable for ASCS. Option B (Application Load Balancer) handles inbound traffic, not ASCS clustering. Option D (Amazon RDS Multi-AZ) is for database high availability, not ASCS.

Answer

Amazon S3

Answer

Application Load Balancer (ALB)

Answer

Amazon RDS Multi-AZ

Question 4

Which TWO AWS services can be used to migrate on-premises virtual machines to AWS without requiring agent installation? (Choose two.)

Accepted Answer

AWS Application Migration Service (MGN) agentless mode. AWS Application Migration Service (MGN) supports agentless replication for VMware vSphere VMs (Option D). AWS Server Migration Service (SMS) also provides agentless migration for VMware vCenter environments (Option E). Options A (CloudEndure Migration) and C (MGN with agent) are agent-based. Option B (DMS) is a database migration service typically requiring agents or specific configurations.

Answer

AWS CloudEndure Migration

Answer

AWS Database Migration Service (DMS)

Answer

AWS Application Migration Service (MGN) with agent

Question 5

A company is migrating SAP applications to AWS and needs to replicate data from on-premises Active Directory to AWS Managed Microsoft AD for authentication. Which AWS service should be used?

Accepted Answer

AWS Directory Service for Microsoft Active Directory. AWS Directory Service for Microsoft Active Directory is the correct service because it provides a managed Active Directory in AWS that can be configured with a forest trust to on-premises Active Directory, enabling replication of directory data. This allows authentication using on-premises credentials in AWS. Option A (AWS Transit Gateway) is for network connectivity, not directory replication. Option C (AWS Resource Access Manager) is used for sharing resources across accounts. Option D (AWS AD Connector) only proxies authentication requests and does not replicate data. Therefore, the best answer is AWS Directory Service for Microsoft Active Directory.

Answer

AWS Transit Gateway

Answer

AWS Resource Access Manager (RAM)

Answer

AWS AD Connector

Question 6

A company is migrating a large Oracle database to Amazon RDS for Oracle. They want to minimize downtime during the migration. Which AWS service should they use to replicate data in real time?

Accepted Answer

AWS Database Migration Service (DMS). AWS DMS (Database Migration Service) supports ongoing replication with minimal downtime, making it ideal for migrating large databases like Oracle to Amazon RDS for Oracle while keeping the source and target in sync. Option A (AWS SMS) is for server migration, not database replication. Option B (AWS SCT) is a schema conversion tool, not for real-time data replication. Option D (AWS DataSync) is for file-based data transfer, not database replication.

Answer

AWS Server Migration Service (SMS)

Answer

AWS Schema Conversion Tool (SCT)

Answer

AWS DataSync

Question 7

An SAP administrator is creating an IAM policy for an EC2 instance that performs SAP database backups to S3 and creates EBS snapshots. The policy as shown fails to allow the EC2 instance to perform backup operations. What is the most likely reason?

Accepted Answer

The policy does not include the 's3:ListBucket' action for the bucket itself.. The policy lacks the `s3:ListBucket` action for the bucket itself (ARN without `/*`). When an EC2 instance performs SAP database backups to S3, the AWS SDK or CLI first issues a `ListBucket` request to verify the bucket exists and to list objects before uploading. Without this permission, the backup operation fails at the initial listing step, even if `s3:PutObject` is allowed on the object ARN.

Answer

The S3 resource ARN is incorrect; it should be 'arn:aws:s3:::sap-backup-bucket' without the '/*'.

Answer

The S3 actions are too permissive; they should be restricted to specific prefixes.

Answer

The ec2:CreateSnapshot action must be restricted to specific volume ARNs.

Question 8

A company is migrating its SAP application from on-premises to AWS. The migration plan includes rehosting the SAP application servers and re-platforming the database to Amazon RDS for SAP. Which AWS service should the company use to automate the deployment of SAP application servers?

Accepted Answer

AWS Launch Wizard for SAP. AWS Launch Wizard for SAP (Option B) is a service that automates the deployment of SAP infrastructure, including application servers. Option A (AWS OpsWorks) is for configuration management with Chef/Puppet, not SAP-specific. Option C (Amazon EC2 Auto Scaling) handles scaling, not initial deployment. Option D (AWS CloudFormation) is a general infrastructure-as-code tool but lacks SAP-specific guidance.

Answer

AWS OpsWorks

Answer

Amazon EC2 Auto Scaling

Answer

AWS CloudFormation

Question 9

A company is migrating an SAP ERP system to AWS using the SAP Landscape Virtualization Management (LVM) tool. During the migration, the team encounters a timeout error when replicating the database. The source database is an SAP HANA multi-tenant database container (MDC) system. What is the most likely cause of the timeout?

Accepted Answer

The SSH session between LVM and the target server timed out due to a missing ServerAliveInterval setting. LVM uses SSH to communicate between the source and target servers. If the SSH session times out due to inactivity (e.g., a missing ServerAliveInterval setting in the SSH client configuration), the database replication process can fail with a timeout error. Option A is incorrect because the LVM agent's compatibility with the SAP HANA version is not the typical cause of a replication timeout; such version compatibility issues would likely surface earlier during configuration. Option B is incorrect because SAP HANA MDC (multi-tenant database container) is supported by LVM for migration; LVM can handle MDC systems properly. Option D is incorrect because the SAP Router is used for routing between SAP systems over a network, not for the direct SSH-based replication between source and target in an LVM migration; the timeout is due to SSH, not router misconfiguration.

Answer

The SAP Landscape Virtualization Management (LVM) agent is incompatible with the SAP HANA version

Answer

The SAP HANA multi-tenant database container (MDC) configuration is not supported by LVM

Answer

The SAP Router is not configured to forward traffic between the source and target

Question 10

A company is migrating its SAP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS). The solution must support automatic failover in the event of an instance failure. Which AWS architecture meets these requirements?

Accepted Answer

Deploy two EC2 instances in different Availability Zones with a shared Amazon EFS filesystem and use Route53 health checks for failover. SAP ASCS high availability on AWS requires a cluster spanning two Availability Zones with a shared filesystem for /sapmnt and /usr/sap/trans. AWS does not support cluster-based floating IPs, so Route53 health checks are used for failover. Option B is correct: it uses two EC2 instances in different AZs with Amazon EFS (shared filesystem) and Route53 health checks for automatic failover. Option A (Amazon RDS Multi-AZ) is for databases, not ASCS. Option C (AWS Global Accelerator) provides traffic routing and static IP but does not handle ASCS failover. Option D (single EC2) lacks high availability.

Answer

Deploy ASCS on Amazon RDS Multi-AZ

Answer

Use AWS Global Accelerator with a static IP

Answer

Deploy a single EC2 instance with a large EBS volume

Question 11

A multinational corporation is migrating its SAP S/4HANA system to AWS. The system consists of a production database (3 TB), a development database (500 GB), and multiple application servers. The migration plan is to use AWS Database Migration Service (DMS) for the databases and AWS Application Migration Service (MGN) for the application servers. The company has set up a test environment in AWS and has performed a test migration. During the test, the production database migration via DMS completed successfully, but the development database migration failed with an error indicating that the source database version is not supported by DMS. The development database is SAP HANA 2.0 SPS 04, while the production database is SAP HANA 2.0 SPS 05. The target for both is Amazon RDS for SAP HANA. The DMS source endpoint was created using the same settings for both databases. Which step should the administrator take to resolve the development database migration failure?

Accepted Answer

Upgrade the source development SAP HANA to a supported version (e.g., SPS 05).. DMS requires a supported SAP HANA version. The development database version (SPS 04) is not supported, so upgrading it to SPS 05 will allow the migration to proceed. Option A is incorrect because SAP HANA System Replication is not designed for migrating to RDS; it replicates between HANA instances. Option C is incorrect because downgrading the production database is unnecessary and risky. Option D is incorrect because AWS SMS is for server migration, not database migration.

Answer

Use SAP HANA System Replication to replicate the development database to RDS.

Answer

Downgrade the production database to match the development version.

Answer

Use AWS Server Migration Service (SMS) for the development database.

Question 12

An SAP application server repeatedly logs the error: "SQL statement not parsed before execution." The database is an Oracle RDS instance. What is the most likely cause of this error?

Accepted Answer

The database connection is not properly established, or the session is in a bad state.. The error about a SQL statement not being parsed before execution typically indicates a problem with the database connection or session state, which aligns with option B. Option A (misconfigured application server) would not directly cause this specific error. Option C (network connectivity) would manifest as timeout or connection failure, not a parsing error. Option D (out of memory) would cause different errors like ORA-04031. Therefore, the most likely cause is that the database connection is not properly established or the session is in a bad state.

Answer

The SAP application server is misconfigured.

Answer

There is a network connectivity issue between the application server and the database.

Answer

The Oracle database is out of memory.

Question 13

A company is planning to deploy SAP S/4HANA on AWS with high availability. Which action should be taken to achieve high availability for the SAP Central Services (ASCS/ERS) instance?

Accepted Answer

Deploy ASCS and ERS in different Availability Zones.. The correct action is to deploy ASCS and ERS in different Availability Zones (Option D). This ensures that if one AZ fails, the instance can fail over to the other AZ, providing high availability. Option E (using a cluster placement group) is incorrect because cluster placement groups are confined to a single AZ and cannot span multiple AZs, making them incompatible with the cross-AZ requirement. Options A, B, and C all violate HA principles by placing both instances in the same AZ or same instance. Therefore, only Option D is a valid action for achieving high availability.

Answer

Deploy ASCS and ERS in the same Availability Zone.

Answer

Run both ASCS and ERS on the same EC2 instance.

Answer

Place ASCS and ERS in the same subnet.

Answer

Use a cluster placement group for ASCS and ERS instances.

Question 14

A company is migrating a web application from an on-premises data center to AWS. The application uses a MySQL database that is 500 GB in size. The company wants to minimize downtime during the migration. Which approach should the company use?

Accepted Answer

Use AWS Database Migration Service (DMS) with ongoing replication. AWS Database Migration Service (DMS) with ongoing replication (change data capture, CDC) allows you to perform a live migration with minimal downtime. You can start a full load of the 500 GB MySQL database while the source remains operational, then enable CDC to replicate ongoing changes until you cut over to the target RDS instance, reducing the downtime window to seconds.

Answer

Use an RDS read replica and promote it

Answer

Stop the database, take a mysqldump, and restore to RDS

Answer

Use AWS Schema Conversion Tool (SCT) to migrate the schema and data

Question 15

Which TWO factors are most important to consider when planning the network connectivity for an SAP migration to AWS using AWS Direct Connect?

Accepted Answer

Latency and bandwidth requirements.. The two most important factors for planning Direct Connect connectivity in an SAP migration are latency/bandwidth requirements (C) and BGP routing configuration with failover (D). SAP applications are highly sensitive to latency and require consistent throughput, so ensuring sufficient bandwidth and low latency is critical. BGP routing and failover mechanisms guarantee high availability and resilience by enabling automatic failover to backup connections. Option A (VPC endpoints) is not a Direct Connect factor—endpoints provide private access to AWS services but are unrelated to Direct Connect planning. Option B (security group rules) controls instance-level traffic and is not a primary Direct Connect consideration. Option E (VPC subnet IP ranges) is important for VPC design but does not directly impact the Direct Connect connection itself.

Answer

Number of VPC endpoints required.

Answer

Security group rules for the SAP application.

Answer

IP address range for VPC subnets.