PAS-C01 Practice Test 46 — 15 Questions

Question 1

A company runs SAP HANA on AWS and wants to implement a backup strategy that ensures point-in-time recovery (PITR) with minimal data loss. Which TWO AWS services should be used?

Accepted Answer

AWS Backup. To implement point-in-time recovery (PITR) for SAP HANA on AWS with minimal data loss, you need both volume-level backups and automated management. Amazon EBS snapshots provide volume-level backups that can be used for PITR if taken frequently. AWS Backup centralizes and automates the scheduling and retention of these snapshots. Therefore, the correct combination is AWS Backup (option B) and Amazon EBS snapshots (option E). Note that Amazon S3 can store SAP HANA backups but does not directly provide PITR for volumes; AWS Storage Gateway is used for hybrid storage; and Amazon RDS is a managed database service, not applicable for SAP HANA. Thus, the correct answers are B and E.

Answer

Amazon S3

Answer

AWS Storage Gateway

Answer

Amazon RDS

Question 2

An SAP system on AWS is configured with a Multi-AZ deployment for high availability. During a failover test, the operations team notices that the secondary instance does not take over correctly. What is the most likely cause?

Accepted Answer

The route tables or security groups do not allow traffic to the secondary instance.. After a failover, the secondary instance becomes the active one, and if route tables or security groups do not permit traffic to it, clients cannot connect, causing the failover to appear ineffective. Option A is incorrect because the SAP application layer retry connections may affect user experience but not the failover mechanism itself. Option B is incorrect because CloudWatch alarms are monitoring thresholds and do not directly control failover behavior. Option D is incorrect because in a properly configured Multi-AZ setup, IP address changes are handled automatically (e.g., via Elastic IP or DNS updates), so this is less likely to be the root cause.

Answer

The SAP application layer is not configured to retry connections.

Answer

The CloudWatch alarm thresholds for failover are set too high.

Answer

The secondary instance's IP address is not automatically updated in DNS.

Question 3

A company has an SAP S/4HANA system running on AWS with a custom backup solution that uses AWS Backup. The backup policy includes daily backups with a retention of 30 days. The operations team notices that backup jobs for the SAP application server are failing intermittently. What should the team do to troubleshoot the issue?

Accepted Answer

Review the CloudWatch Logs for the backup job to identify error messages.. Amazon CloudWatch Logs capture detailed error messages from AWS Backup jobs, allowing the team to identify the root cause of intermittent failures. Option A is incorrect because while IAM permissions are necessary, intermittent failures are more likely due to transient issues detectable in logs. Option C is incorrect because switching to SAP HANA Studio does not leverage AWS Backup's integration and may not resolve underlying issues. Option D is incorrect because increasing backup frequency does not address the cause of failures and may increase load.

Answer

Verify that the IAM role used by AWS Backup has sufficient permissions.

Answer

Switch to using SAP HANA Studio for backups.

Answer

Increase the backup frequency to capture more recovery points.

Question 4

An operations team receives an alert that an SAP application server EC2 instance is unreachable. The team checks the AWS Management Console and sees that the instance status check shows "Instance reachability check failed". What is the most likely cause?

Accepted Answer

The operating system on the instance is not responding.. An instance reachability check failure typically indicates OS-level issues such as a crashed OS or kernel panic. Therefore, option A is correct. Option B is incorrect because security group issues would cause network connectivity failure but not necessarily a status check failure. Option C is incorrect because a stopped instance would show a different status. Option D is incorrect because EBS volume issues would be reported as a volume status check failure.

Answer

The security group associated with the instance is blocking all traffic.

Answer

The EBS root volume is detached from the instance.

Answer

The instance was stopped by an Auto Scaling group.

Question 5

An SAP system administrator needs to monitor the CPU and memory utilization of SAP EC2 instances. Which TWO AWS services can be used to collect and visualize these metrics? (Choose TWO.)

Accepted Answer

Amazon CloudWatch. The correct answers are B (Amazon CloudWatch) and D (Amazon Managed Service for Prometheus). Amazon CloudWatch can collect CPU and memory metrics from EC2 instances using the CloudWatch agent, and Amazon Managed Service for Prometheus can scrape and store metrics from those instances. Option A is incorrect because AWS Trusted Advisor provides best-practice checks, not granular metrics. Option C is incorrect because AWS CloudTrail records API activity. Option E is incorrect because AWS Config tracks configuration changes.

Answer

AWS Trusted Advisor

Answer

AWS CloudTrail

Answer

AWS Config

Question 6

Which THREE metrics should be monitored to ensure the health of an SAP NetWeaver application server? (Choose three.)

Accepted Answer

Memory utilization. Options A, C, and D are correct. Memory utilization, CPU utilization, and work process utilization are key indicators of SAP NetWeaver application server health. Option B is wrong because database connection count is a database-level metric, not directly indicative of application server health. Option E is wrong because network packet loss is an infrastructure metric that affects connectivity but is not a specific application server health metric.

Answer

Database connection count

Answer

Network packet loss

Question 7

Which THREE AWS services can be used to monitor the performance of an SAP HANA database running on EC2? (Choose 3)

Accepted Answer

Amazon CloudWatch Logs. Options B, C, and D are correct. Amazon CloudWatch can monitor EC2-level metrics like CPU, memory, and disk I/O, which are critical for SAP HANA performance. Amazon CloudWatch Logs can collect and analyze SAP HANA log files for deeper insights. SAP HANA built-in monitoring (e.g., SAP HANA Studio) provides detailed database performance metrics. Option A (AWS Config) is incorrect because it tracks resource configuration changes, not performance. Option E (AWS CloudTrail) is incorrect because it tracks API calls, not performance.

Answer

AWS Config

Answer

AWS CloudTrail

Question 8

A company uses AWS Systems Manager to automate patching of SAP EC2 instances. The patching fails for some instances with the error 'SSM Agent not running'. What should the administrator do to resolve this?

Accepted Answer

Verify that the SSM Agent is installed and running on the instances.. The error 'SSM Agent not running' indicates that the AWS Systems Manager Agent is not installed or not running on the instance. The correct action is to verify and ensure the SSM Agent is installed and running. Option A (rebooting) is incorrect because rebooting does not resolve a missing or stopped agent. Option B (installing CloudWatch Agent) is unrelated to Systems Manager patching. Option C (configuring a VPC endpoint) addresses connectivity but not the agent status. Therefore, D is the correct answer.

Answer

Reboot the instances.

Answer

Install the Amazon CloudWatch Agent on the instances.

Answer

Configure a VPC endpoint for Systems Manager.

Question 9

Which TWO actions should be taken to securely manage database credentials for an SAP system running on Amazon RDS for Oracle? (Choose 2)

Accepted Answer

Use IAM database authentication to manage access without passwords.. Options C and D are correct. IAM database authentication (C) allows you to use IAM users and roles to authenticate to your RDS database, eliminating the need for passwords. AWS Secrets Manager (D) securely stores and automatically rotates database credentials, which is a best practice for managing secrets. Option A is incorrect because storing credentials as an S3 object lacks native rotation and is less secure than dedicated secrets management services. Option B is incorrect: although Systems Manager Parameter Store can store secure strings, it does not natively rotate RDS credentials. Option E is incorrect because AWS CloudHSM is a hardware security module for key generation and encryption, not for storing and rotating passwords.

Answer

Store the credentials as an S3 object with server-side encryption.

Answer

Use AWS Systems Manager Parameter Store with a secure string parameter.

Answer

Store the credentials in AWS CloudHSM.

Question 10

An SAP system on AWS is experiencing high latency between the application server and the database server. Both servers are in the same VPC but in different Availability Zones. Which action should the administrator take to reduce latency?

Accepted Answer

Move the application and database servers to the same Availability Zone. Moving both servers to the same Availability Zone (Option B) reduces network latency because data does not have to traverse the AZ boundary, which adds extra network hops and latency. Creating a placement group (Option A) can help co-locate instances but does not guarantee they are in the same AZ unless specified, and even then, moving to the same AZ is simpler. Upgrading instance types (Option C) does not affect network latency. AWS Direct Connect (Option D) is for connecting on-premises networks to AWS, not for inter-instance communication within a VPC.

Answer

Create a placement group and launch both instances in it

Answer

Upgrade the instance types to compute-optimized instances

Answer

Use AWS Direct Connect to connect the servers

Question 11

An SAP system on AWS uses a shared file system for the SAP transport directory. The file system is hosted on an Amazon EFS file system. Recently, the operations team noticed that SAP transports are failing with errors indicating file locking issues. The EFS file system is mounted using the NFS client with default options. What is the most likely cause of the file locking issues?

Accepted Answer

The EFS file system is mounted using NFS version 3, which has limited locking support.. The default NFS client options typically use NFSv3, which has limited file locking support. SAP transport processes rely on robust file locking to coordinate access to the shared transport directory. NFSv4.1, which EFS recommends, provides proper locking with NFSv4.1 state management and lease-based locking. Option A is incorrect because insufficient throughput would manifest as performance degradation or timeouts, not file locking failures. Option B is incorrect because a security group blocking inbound traffic on port 2049 (NFS) would cause mount failures or accessibility issues, not specifically locking errors. Option C is incorrect because EFS access points do not affect locking; they manage file system paths and permissions, and restrictions would cause permission errors.

Answer

The EFS file system has insufficient throughput for the number of concurrent mounts.

Answer

The security group for the EFS mount targets does not allow inbound traffic on port 2049.

Answer

The EFS file system is using access points that restrict permissions.

Question 12

A company is running SAP on AWS and wants to implement a centralized logging solution for all SAP components. The solution must be scalable and cost-effective. Which TWO services should the company use? (Choose TWO.)

Accepted Answer

Amazon CloudWatch Logs. The correct answers are C and E. Amazon CloudWatch Logs can collect logs from EC2 instances and AWS services, centralizing real-time log data. Amazon S3 provides cost-effective long-term storage for archived logs. A is incorrect because Amazon Athena is a query service for data in S3, not a logging service. B is incorrect because Kinesis Data Firehose is for real-time streaming, but the question asks for a scalable and cost-effective centralized logging solution, and CloudWatch Logs plus S3 is simpler and more cost-effective. D is incorrect because EFS is a file system, not suitable for log aggregation.

Answer

Amazon Athena

Answer

Amazon Kinesis Data Firehose

Answer

Amazon Elastic File System (EFS)

Question 13

A company has an SAP HANA database running on an EC2 instance with EBS volumes. The operations team needs to ensure that database backups are stored in Amazon S3 and are automatically deleted after 90 days. What is the most efficient way to achieve this?

Accepted Answer

Configure an S3 Lifecycle policy to expire objects after 90 days.. S3 Lifecycle policies can automatically expire objects after a specified number of days, meeting the requirement for automated deletion after 90 days. Option A is incorrect because S3 Object Lock prevents deletion or modification, not automates it. Option B is incorrect because versioning alone does not delete objects; manual deletion would be needed. Option C is incorrect because a script is less efficient than a built-in lifecycle policy.

Answer

Use S3 Object Lock with a retention period of 90 days.

Answer

Enable S3 Versioning and delete old versions manually.

Answer

Write a script that runs daily to list backups older than 90 days and delete them.

Question 14

Refer to the exhibit. An SAP administrator has created this CloudFormation snippet to create a Route 53 record for an SAP system. The record is intended to point to an Application Load Balancer. What is a potential issue with this configuration?

Accepted Answer

Using a CNAME record for the root domain (zone apex) is not allowed.. DNS standards prohibit using a CNAME record at the zone apex (root domain, e.g., example.com) because it would conflict with the SOA and NS records required for the zone. Route 53 does not allow CNAME records for the root domain. Option B is incorrect because a TTL of 60 seconds is acceptable for dynamic environments. Option C is incorrect because an ALB endpoint is a DNS name, not an IP address, so an A record cannot be used; Route 53 supports alias records for ALBs, but the snippet uses a CNAME. Option D is incorrect because the ResourceRecords value for a CNAME record must be a DNS name, not an IP address.

Answer

The TTL value of 60 seconds is too low for production use.

Answer

The RecordSet type should be A instead of CNAME for an ALB.

Answer

The ResourceRecords value should be an IP address, not a DNS name.

Question 15

An SAP administrator notices that the sapstartsrv process on an EC2 instance is failing to start after a system reboot. The instance is running SUSE Linux Enterprise Server (SLES) for SAP Applications. Which of the following log files should be examined FIRST to diagnose the issue?

Accepted Answer

/usr/sap//SYS/global/sapstartsrv.log. The sapstartsrv process log is stored in /usr/sap//SYS/global/sapstartsrv.log (Option B). This log contains startup and error messages specific to the sapstartsrv process, making it the first place to check for failures after a reboot. Option A (/var/log/messages) is a general system log that may contain kernel or hardware messages but not SAP-specific process details. Option C (SAP HANA studio trace files) is used for database issues, not the sapstartsrv process. Option D (Amazon CloudWatch logs) requires prior configuration to capture local boot logs and would not be the first choice for a local SAP process failure.

Answer

/var/log/messages

Answer

SAP HANA studio trace files

Answer

Amazon CloudWatch logs for the instance