PAS-C01 Practice Test 43 — 15 Questions

Question 1

A company is migrating SAP applications to AWS and needs to ensure that the migration complies with regulatory requirements for data encryption. Which TWO AWS services can be used to encrypt data at rest? (Choose TWO.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Amazon EBS encryption. Amazon EBS encryption provides at-rest encryption for EBS volumes (Option C). AWS KMS (Key Management Service) manages the encryption keys used by EBS encryption and other AWS services (Option E). Options A and D are incorrect: AWS WAF is a web application firewall, not for data encryption; AWS CloudHSM provides hardware security modules for key storage but is not a direct service for encrypting data at rest. Option B (AWS Certificate Manager) is for SSL/TLS certificates, not data at rest encryption.

Answer

AWS WAF

Answer

AWS Certificate Manager (ACM)

Answer

AWS CloudHSM

Question 2

A company is migrating an SAP system to AWS and needs to ensure that the target EC2 instances have the correct SAP kernel parameters. Which AWS service can be used to automate the configuration of these parameters?

Accepted Answer

AWS Systems Manager State Manager. AWS Systems Manager State Manager is correct because it allows you to define and enforce a configuration policy for EC2 instances, including SAP kernel parameters. Option A (EC2 User Data) runs only once at launch and cannot enforce ongoing changes. Option B (AWS OpsWorks) is a configuration management service but is not the best fit for this specific task. Option C (AWS CloudFormation) is designed for infrastructure provisioning, not for in-guest OS configuration.

Answer

EC2 User Data scripts

Answer

AWS OpsWorks

Answer

AWS CloudFormation

Question 3

A company is migrating a large SAP HANA database to AWS. They want to use SAP HANA Backup and Recovery with AWS storage. Which THREE options can be used as backup targets? (Choose THREE.)

Accepted Answer

Amazon S3. SAP HANA backups can be stored on Amazon S3 (Option A) as a backup target using Backint, on Amazon FSx for NetApp ONTAP (Option C) as a file system mount, and on Amazon EBS volumes (Option D) attached to the HANA instance. Option B (Amazon EFS) is not supported as a backup target because SAP HANA requires block storage or specific file system features like snapshots that EFS does not provide. Option E (Amazon S3 Glacier) is not directly supported; while S3 is correct, Glacier is a cold storage class not suitable for direct backup targets.

Answer

Amazon EFS

Answer

Amazon S3 Glacier

Question 4

The exhibit shows the output of the describe-replication-tasks command for an ongoing migration from SAP HANA to Amazon RDS for MySQL. The task status is 'running' but no data has been transferred after 2 hours. What is the most likely cause?

Accepted Answer

The source endpoint is not accessible from the replication instance. When the replication task status is 'running' but no data has been transferred after a significant period, it often indicates that the task is stuck in a preliminary validation phase. The most common reason is that the source endpoint is not accessible from the replication instance. The task may attempt to connect repeatedly without failing, hence the 'running' status. Insufficient memory (A) would typically cause performance degradation or errors, not a complete lack of transfer. A wrong target endpoint (C) would likely result in immediate task failure. Configuring HANA as a target (D) is irrelevant because HANA is the source in this migration.

Answer

The replication instance has insufficient memory

Answer

The target endpoint is pointing to the wrong database

Answer

The HANA database is not configured as a target

Question 5

A company is migrating an SAP Business Suite system on Oracle to SAP S/4HANA on AWS. The migration involves a near-zero downtime requirement. The current system uses SAP Oracle on Linux. Which combination of tools should the company use?

Accepted Answer

Use SAP Software Update Manager (SUM) with the Database Migration Option (DMO) and the near-zero downtime option.. For migrating an SAP Business Suite on Oracle to SAP S/4HANA with near-zero downtime, the recommended tool is SAP Software Update Manager (SUM) with the Database Migration Option (DMO) and the near-zero downtime (NZDT) option. This allows for a combined system upgrade and database migration with minimal downtime. Option A is incorrect because AWS SCT is not designed for SAP HANA migrations. Option B is incorrect because AWS DMS does not support SAP HANA as a target. Option C is incorrect because SLT is used for data replication, not for system conversion or migration.

Answer

Use AWS Schema Conversion Tool (AWS SCT) and AWS Database Migration Service (AWS DMS) with ongoing replication.

Answer

Use AWS Database Migration Service (AWS DMS) to migrate the Oracle database to Amazon RDS for SAP HANA.

Answer

Use SAP Landscape Transformation (SLT) to replicate data to SAP HANA, then switch applications.

Question 6

Refer to the exhibit. An SAP administrator is creating an IAM policy for a migration user who will use AWS DMS to migrate an SAP database to Amazon RDS. The migration also requires reading from an S3 bucket containing source database export files and writing the DMS logs to another S3 bucket. The policy above is attached. Which required permission is MISSING from this policy?

Accepted Answer

dms:CreateEndpoint. The policy includes dms:CreateReplicationTask and permissions for S3 and RDS, but it lacks dms:CreateEndpoint, which is required to create source and target endpoints for DMS migrations. Without this permission, the migration user cannot set up the endpoints necessary for the replication process.

- Option A (dms:TestConnection): This permission is used to test endpoint connectivity, but it is not essential for creating a replication task; the missing permission is for creating endpoints.
- Option B (s3:ListBucket): While s3:ListBucket might be useful for browsing S3 objects, it is not strictly required because DMS can access objects by key if the path is provided.
- Option C (rds:ModifyDBInstance): This permission is not needed for DMS to perform migration; DMS uses the RDS instance as a target but does not require modification rights.
- Option D (dms:CreateEndpoint): Correct. Without this permission, the user cannot create the source or target endpoints, which are prerequisites for running a DMS task.

Answer

dms:TestConnection

Answer

s3:ListBucket

Answer

rds:ModifyDBInstance

Question 7

A company is migrating SAP to AWS and needs to set up connectivity between on-premises and AWS VPC with high bandwidth and low latency. Which TWO AWS services should be used? (Choose TWO.)

Accepted Answer

AWS Transit Gateway. AWS Direct Connect provides a dedicated network connection with high bandwidth and low latency, ideal for SAP migration. AWS Transit Gateway allows central management of connectivity between multiple VPCs and on-premises networks, simplifying network architecture. Options B, C, and D are incorrect: AWS Client VPN is for remote user access, not site-to-site; AWS VPN CloudHub connects multiple VPN connections but lacks dedicated bandwidth; AWS Site-to-Site VPN uses the public internet, which cannot guarantee the low latency and high bandwidth required for SAP workloads.

Answer

AWS Client VPN

Answer

AWS VPN CloudHub

Answer

AWS Site-to-Site VPN

Question 8

A company is migrating its SAP HANA database from on-premises to AWS. The current system uses 6 TB of memory and the company wants to minimize downtime. The company has established a 10 Gbps AWS Direct Connect connection. Which migration method is MOST suitable?

Accepted Answer

Perform a full SAP HANA backup to the on-premises storage, copy the backup files to Amazon S3 using AWS Direct Connect, and restore on AWS.. SAP HANA backup and restore is a suitable method for migrating large databases like this 6 TB system. Using AWS Direct Connect at 10 Gbps provides high throughput for transferring backup files to Amazon S3, minimizing downtime. Option B (SAP HANA system replication) requires low latency and is typically used for high availability, not one-time migrations. Option C (AWS DMS) does not support SAP HANA as a source. Option D (AWS Snowball Edge) introduces logistical complexity and potential delays compared to a direct network transfer.

Answer

Set up SAP HANA system replication between on-premises and AWS, then perform a takeover.

Answer

Use AWS Database Migration Service (AWS DMS) with full load plus ongoing replication.

Answer

Use AWS Snowball Edge to physically transport the backup files to AWS and then restore.

Question 9

A company is migrating a fleet of 200 on-premises Windows servers to AWS. The servers run a mix of custom applications and Microsoft SQL Server databases. The migration plan includes using AWS Server Migration Service (SMS) for the servers and AWS Database Migration Service (DMS) for the databases. During the initial replication, several servers fail with the error 'Unable to create AMI: Insufficient permissions'. The IAM role used by SMS has the following policy: {"Version":"2012-10-17","Statement":[{"Effect":"Allow","Action":["ec2:Describe*","ec2:CreateImage","ec2:RegisterImage","s3:PutObject","s3:GetObject","s3:ListBucket"],"Resource":"*"}]}. Which change should be made to resolve the error?

Accepted Answer

Add ec2:CreateSnapshot action to the policy. SMS requires the ec2:CreateSnapshot permission to create snapshots of volumes before creating AMIs. The error 'Unable to create AMI: Insufficient permissions' indicates that this permission is missing from the IAM policy. Option A is incorrect because removing s3:PutObject would not resolve the error; the issue is about EC2 permissions, not S3. Option B is incorrect because the error is not related to network connectivity; a VPC endpoint for EC2 would not grant the necessary permissions. Option D is incorrect because ec2:ImportImage is used for importing virtual machine images, not for creating AMIs from existing instances via SMS.

Answer

Remove the s3:PutObject action from the policy

Answer

Configure a VPC endpoint for EC2

Answer

Add ec2:ImportImage action to the policy

Question 10

A company is migrating a legacy SAP ECC 6.0 system running on IBM AIX with DB2 to SAP S/4HANA on AWS. The current DB2 database is 4 TB and has extensive use of stored procedures and triggers. The migration window is 48 hours. Which migration strategy is MOST appropriate?

Accepted Answer

Use SAP Software Update Manager (SUM) with Database Migration Option (DMO) to migrate and convert to SAP HANA.. For migrating SAP ECC to S/4HANA with a database migration, SAP's Software Update Manager (SUM) with Database Migration Option (DMO) is the recommended tool. DMO performs both the software update (to S/4HANA) and the database migration (from DB2 to HANA) in a single process. Option B (AWS SMS) only replicates the server, not the database conversion. Option C (SLT) is for ongoing replication, not one-time migration. Option D (AWS DMS) does not support SAP-specific database objects like stored procedures and triggers.

Answer

Use AWS Server Migration Service (AWS SMS) to replicate the entire AIX server to AWS, then install SAP HANA.

Answer

Use SAP Landscape Transformation (SLT) to replicate data to SAP HANA in real time and then cut over.

Answer

Use AWS Database Migration Service (AWS DMS) with ongoing replication to migrate the database to SAP HANA.

Question 11

A company is migrating a large SAP HANA database (5 TB) from on-premises to AWS. The migration must have minimal downtime and use AWS DMS for ongoing replication. Which TWO actions should be taken to ensure the migration completes successfully? (Choose 2.)

Accepted Answer

Use Amazon S3 as an intermediate target for initial load. Options B and C are correct. Option B: Using Amazon S3 as an intermediate target for the initial full load helps reduce the load on the source and accelerates the initial data transfer, which is critical for a 5 TB database. Option C: Provisioning a large EC2 instance for the DMS replication instance (e.g., x1e.32xlarge) provides the necessary memory and compute to handle large data volumes and ongoing replication with minimal downtime. Option D is incorrect because Amazon RDS does not support SAP HANA as a database engine; SAP HANA must be deployed on Amazon EC2, so Multi-AZ on RDS is not applicable. Option A is incorrect because a t2.large instance lacks sufficient resources for a 5 TB migration. Option E is incorrect because disabling backup retention is not a best practice during migration and could lead to data loss.

Answer

Use a t2.large instance for the DMS replication instance to reduce cost

Answer

Enable Multi-AZ on the target RDS instance

Answer

Disable automatic backup retention on the target database

Question 12

A company is running SAP HANA on AWS and needs to ensure that the database can be recovered to a specific point in time within the last 24 hours. Which backup strategy should be used?

Accepted Answer

Full backups plus log backups every 5 minutes. Full plus log backups enable point-in-time recovery. Option A is wrong because single snapshot does not allow point-in-time. Option B is wrong because full backups only restore to backup time. Option C is wrong because daily full backups only restore to the time of the backup, not point-in-time.

Answer

Incremental backups using Backint

Answer

Daily full EBS snapshots

Answer

Daily SAP HANA full backups

Question 13

An SAP administrator is reviewing a CloudFormation template that defines an Auto Scaling group for SAP application servers. The exhibit shows the relevant section. The group currently has 2 instances running. The administrator wants to ensure that during a rolling update, at least one instance remains available. Which property should be added?

Accepted Answer

UpdatePolicy attribute with AutoScalingRollingUpdate and MinInstancesInService set to 1.. Adding an UpdatePolicy with AutoScalingRollingUpdate and MinInstancesInService set to 1 ensures that during a rolling update, at least one instance remains available, preventing complete downtime. Option B is wrong because setting MaxSize to 1 would limit the maximum number of instances to 1, which could cause issues if the current count is 2 and a rolling update is performed; it does not guarantee availability during updates. Option C is wrong because increasing DesiredCapacity to 3 would add more instances but does not control the rolling update behavior to maintain at least one running instance. Option D is wrong because HealthCheckGracePeriod only defines a grace period for health checks after an instance launches; it does not enforce availability during a rolling update.

Answer

Set MaxSize to 1.

Answer

Set DesiredCapacity to 3.

Answer

Add a HealthCheckGracePeriod of 300 seconds.

Question 14

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. They need to minimize downtime and ensure data consistency. Which AWS service or feature should they use?

Accepted Answer

AWS Database Migration Service (AWS DMS) with ongoing replication. (AWS DMS with ongoing replication) is correct because it supports a full load followed by continuous change data capture (CDC) replication, enabling minimal downtime and data consistency during migration from on-premises Oracle to Amazon RDS for Oracle. Option B (RDS Read Replica) is wrong because it is used for scaling read traffic, not for migrating data. Option C (VPC Peering) is a networking feature that connects VPCs but does not perform data migration. Option D (AWS SCT) is wrong because it only converts database schemas and code, not the actual data.

Answer

RDS Read Replica

Answer

VPC Peering

Answer

AWS Schema Conversion Tool (AWS SCT)

Question 15

A company runs SAP HANA on AWS. The operations team needs to automate the creation of AMI backups for the HANA database server. Which AWS service should they use to schedule and manage these backups?

Accepted Answer

AWS Backup. AWS Backup (option B) is the correct service for scheduling and managing AMI backups for SAP HANA on AWS. Option A (Amazon S3 Lifecycle policies) manages object lifecycles in S3, not AMI creation. Option C (AWS Systems Manager) can automate operational tasks but is not specialized for backup scheduling; AWS Backup provides a centralized backup solution. Option D (Amazon CloudWatch Events) can trigger actions based on events but is not a backup service.

Answer

Amazon S3 Lifecycle policies

Answer

AWS Systems Manager

Answer

Amazon CloudWatch Events