PAS-C01 Practice Exam 51 — 20 Questions

Question 1

A company is designing a disaster recovery plan for SAP S/4HANA on AWS. The plan must have a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 2 hours. Which solutions can meet these requirements? (Choose TWO.)

Accepted Answer

Synchronous storage-level replication using EBS snapshots every 15 minutes and automated restore. SAP HANA system replication with synchronous replication can achieve RPO of seconds and RTO of minutes. Storage-level replication with EBS snapshots scheduled every 15 minutes can achieve RPO of 15 minutes, but RTO may be longer due to restore time. However, with pre-warmed instances and automation, RTO of 2 hours is achievable. Log shipping to S3 may not meet RPO. Cross-Region Amazon S3 backup and restore is slower. Multi-AZ deployment in one region does not protect against region failure.

Answer

Multi-AZ deployment of SAP HANA within the same region

Answer

SAP HANA log shipping to Amazon S3 every 15 minutes and restore in another region

Answer

Cross-Region Amazon S3 backup and restore using AWS Backup

Question 2

An SAP HANA database is running on an EC2 instance with EBS volumes. The operations team needs to take nightly backups of the database. Which AWS service provides the most cost-effective backup solution for long-term retention?

Accepted Answer

Amazon S3 Glacier Deep Archive. Amazon S3 Glacier Deep Archive is the most cost-effective storage class for long-term retention of backups that are accessed infrequently. Amazon EBS Snapshots are stored in S3 but cost more for long-term retention. AWS Backup is a service but does not change storage class. Amazon S3 Standard is expensive for long-term.

Answer

Amazon EBS Snapshots

Answer

Amazon S3 Standard

Answer

AWS Backup

Question 3

An SAP workload on AWS uses a Multi-AZ RDS for Oracle instance for its database. The application team reports that a recent batch job caused a spike in database connections and CPU utilization, leading to performance degradation. The database administrator wants to be notified when CPU utilization exceeds 80% for 5 minutes. Which combination of AWS services should be used to set up this monitoring and notification?

Accepted Answer

Amazon CloudWatch with an Amazon CloudWatch Alarm and Amazon SNS. Option B is correct: CloudWatch can monitor RDS CPU utilization, and with a metric alarm, it can trigger an SNS notification. Option A is incorrect because Inspector is for security assessments. Option C is incorrect because Trusted Advisor is for best practices, not real-time metrics. Option D is incorrect because EventBridge would require custom events.

Answer

Amazon EventBridge with AWS Lambda

Answer

AWS Trusted Advisor with Amazon Simple Email Service (SES)

Answer

Amazon Inspector with Amazon Simple Notification Service (SNS)

Question 4

A company runs its SAP HANA database on an EC2 instance with EBS volumes. The database requires consistent high IOPS and low latency. The system is currently using EBS gp2 volumes, but performance is inconsistent during peak loads. Which TWO steps should the administrator take to improve storage performance? (Choose 2)

Accepted Answer

Configure multiple EBS volumes in a RAID 0 stripe set.. Options B and D are correct. B: io2 Block Express provides consistent high IOPS. D: Configuring multiple EBS volumes in a RAID 0 striping can increase throughput. A is incorrect because increasing gp2 size only increases baseline IOPS but not consistently. C is incorrect because EBS-optimized instances are enabled by default for current generation. E is incorrect because snapshots degrade performance during creation.

Answer

Increase the size of the existing gp2 volumes to increase baseline IOPS.

Answer

Take regular EBS snapshots to improve performance.

Answer

Enable EBS-optimized on the EC2 instance.

Question 5

An SAP system running on AWS uses a shared file system via Amazon EFS for transport directories. The system administrator notices that file operations are slow across multiple application servers. The EFS file system is configured with Bursting Throughput mode. What is the most effective way to improve performance?

Accepted Answer

Switch the file system to Provisioned Throughput mode and set a higher throughput value.. Option B is correct because EFS Provisioned Throughput mode can provide consistent higher throughput. Option A (increase burst credit) is not directly configurable. Option C (multiple mount targets) does not increase throughput. Option D (EFS Access Points) does not affect performance.

Answer

Use EFS Access Points to enforce a different UID/GID for each application server.

Answer

Increase the burst credit balance by reducing file operations during off-peak hours.

Answer

Create additional mount targets in each Availability Zone to distribute load.

Question 6

An SAP administrator has created the IAM policy shown in the exhibit and attached it to an IAM role used by an EC2 instance running SAP HANA. The instance needs to download backup files from the S3 bucket 'sap-backup-bucket' and then stop itself after the backup is complete. However, the backup script fails with an access denied error when trying to list the bucket. What is the most likely cause? (Note: This question is reused from above but with correct exhibit now. I need to change the exhibit to have a mistake. Let me fix: remove the bucket ARN from the Resource list for S3 actions, so only the object ARN is present. That will cause the list operation to fail.)

Accepted Answer

The policy does not allow the s3:ListBucket action on the bucket ARN

Answer

The S3 bucket is encrypted and the policy does not allow kms:Decrypt

Answer

The instance does not have an internet gateway to reach S3

Answer

The policy does not include the ec2:StopInstances permission

Question 7

Refer to the exhibit. An SAP administrator checks the configuration of an EBS volume. The volume is attached to an SAP HANA instance. What is the potential performance bottleneck?

Accepted Answer

The IOPS and throughput are too low for SAP HANA. The volume type is gp3 with 3000 IOPS and 125 MB/s throughput. SAP HANA requires high IOPS and throughput. With only 3000 IOPS and 125 MB/s, this volume may be a bottleneck for production HANA workloads. The DeleteOnTermination setting is not a performance issue. The size and snapshot are not immediate concerns.

Answer

The volume is attached to an instance in a different Availability Zone

Answer

The DeleteOnTermination flag is set to false

Answer

The volume is not encrypted

Question 8

An SAP administrator needs to ensure that an Amazon RDS for SAP ASE database is automatically backed up daily and the backups are retained for 30 days. The database is currently in a Multi-AZ deployment. What is the simplest way to achieve this?

Accepted Answer

Configure automated backups with a retention period of 30 days in the RDS instance settings.. Option B is correct: Automated backups are enabled by default with a retention period of up to 35 days. Option A is incorrect because manual snapshots are not automated. Option C is incorrect because the default backup window is sufficient. Option D is incorrect because Multi-AZ does not replace backups.

Answer

Create a manual snapshot every day using AWS Backup.

Answer

Enable Multi-AZ, which automatically backs up the database.

Answer

Set up a scheduled Lambda function to create snapshots.

Question 9

An IAM policy is attached to a user who manages SAP HANA volumes. The policy is shown in the exhibit. What is the effect of this policy?

Accepted Answer

The user can attach and detach volumes that have the tag Environment=production, but cannot delete any volume.. Option D is correct: The first statement allows AttachVolume and DetachVolume only if the volume has tag Environment=production. The second statement denies DeleteVolume for all volumes. However, the Deny statement is not conditional, so it applies to all volumes. Option A is incorrect because AttachVolume is allowed with the condition. Option B is incorrect because DeleteVolume is denied for all volumes. Option C is incorrect because the Allow statement has a condition.

Answer

The user can attach and detach any volume regardless of tags.

Answer

The user can delete any volume.

Answer

The user can attach and detach any volume in the production environment.

Question 10

An SAP Basis administrator needs to apply an SAP kernel patch to the SAP Central Services (ASCS) instance running on an EC2 instance in a Multi-AZ deployment. The ASCS instance is configured with a floating IP address using Elastic IP. The administrator wants to minimize downtime during the patching process. Which approach should the administrator take?

Accepted Answer

Create a new EC2 instance with the patched kernel, associate the Elastic IP to the new instance, and terminate the old one.. Option A is correct because a blue/green deployment allows testing the patch on a new instance and then switching traffic with minimal downtime. Option B is wrong because stopping the instance causes downtime. Option C is wrong because modifying the launch configuration and performing a rolling update is for Auto Scaling groups, not for a single instance. Option D is wrong because adding the instance to an ALB would require application changes and may not be compatible with ASCS floating IP.

Answer

Stop the ASCS instance, apply the patch, and start the instance.

Answer

Add the ASCS instance to an Application Load Balancer and then perform the patch.

Answer

Use an Auto Scaling group with a rolling update to apply the patch.

Question 11

A company is planning to migrate its SAP HANA database to AWS. The database size is 3 TB, and they need high I/O performance with low latency. The SAP workload is critical and requires high availability. Which AWS storage solution should they choose for the HANA data volume?

Accepted Answer

Amazon EBS io2 Block Express volumes.. Option C is correct because AWS strongly recommends using io2 Block Express volumes for SAP HANA due to their high performance, durability, and ability to meet SAP's high availability requirements. Option A (EFS) is a file system, not block storage. Option B (gp3) is cost-effective but may not provide the consistent low latency needed for HANA. Option D (Instance Store) provides low latency but is ephemeral and not suitable for persistent data.

Answer

Amazon EBS gp3 volumes.

Answer

EC2 Instance Store volumes.

Answer

Amazon EFS with Provisioned Throughput.

Question 12

A company is migrating a SAP system to AWS and needs to ensure that the SAP license is compliant. The current license is based on the number of users. What is the correct approach for SAP licensing on AWS?

Accepted Answer

Bring your own SAP license to AWS and ensure compliance with the user-based metric.. Option C is correct because SAP licensing on AWS follows the same model as on-premises; the customer must license the SAP software based on users or engine size. Option A is wrong because AWS does not offer bring-your-own-license for all SAP products, but it is allowed. Option B is wrong because AWS does not include SAP licenses. Option D is wrong because AWS does not provide SAP licenses.

Answer

Purchase a SAP license through AWS Marketplace that is included in the EC2 instance cost.

Answer

Use AWS License Manager to track the number of vCPUs and report to SAP.

Answer

Use AWS License Manager to convert the user-based license to a processor-based license.

Question 13

An SAP administrator runs the AWS CLI command shown in the exhibit to describe an EBS volume attached to an EC2 instance running SAP HANA. The instance is in the us-east-1a Availability Zone. The administrator needs to create a volume in us-east-1b and copy the data from the existing volume. What is the most efficient way to achieve this?

Accepted Answer

Create a snapshot of the volume and then create a new volume in us-east-1b from the snapshot. Creating a snapshot of the existing volume is the most efficient way to copy data across Availability Zones. Then, create a new volume in us-east-1b from that snapshot. Detaching the volume and attaching it to an instance in us-east-1b is not possible because the volume is tied to its AZ. Creating an AMI is unnecessary overhead. Using rsync over the network would require an instance in the same AZ and network bandwidth.

Answer

Use rsync to copy data from the instance to a new volume in us-east-1b over the network

Answer

Detach the volume from the instance and attach it to an instance in us-east-1b

Answer

Create an AMI from the instance and launch a new instance in us-east-1b

Question 14

A company is designing an SAP HANA disaster recovery solution using SAP HANA System Replication. Which TWO AWS services are required to enable automatic failover across AWS Regions?

Accepted Answer

AWS Elastic Load Balancing (NLB). AWS Route 53 provides DNS-based failover routing to redirect traffic to the DR region. AWS Elastic Load Balancing (NLB) is used to distribute traffic to the HANA instances and can be used with a floating IP. AWS Direct Connect is not required. AWS CloudFormation is not needed for automatic failover. AWS Shield is for DDoS protection.

Answer

AWS Direct Connect

Answer

AWS CloudFormation

Answer

AWS Shield

Question 15

A company is migrating an SAP NetWeaver system to AWS. The system uses a shared file system for central transport directories and logs. Which AWS storage service should be used to provide a scalable, highly available, and shared file system that can be mounted by multiple EC2 instances across different Availability Zones?

Accepted Answer

Amazon EFS. Option C is correct: Amazon EFS provides a scalable, shared NFS file system accessible from multiple AZs. Option A is incorrect because EBS cannot be attached to multiple instances simultaneously. Option B is incorrect because S3 is object storage, not a file system. Option D is incorrect because Instance Store is ephemeral and not shared.

Answer

Amazon EBS with Multi-Attach enabled

Answer

EC2 Instance Store

Answer

Amazon S3 with S3 File Gateway

Question 16

An SAP administrator runs the AWS CLI command shown in the exhibit. What does the output indicate about the RDS instance my-sap-db?

Accepted Answer

The database CPU utilization spiked to 85.3% at 00:10 UTC.. Option C is correct: The data points show CPU utilization averages over 5-minute intervals. The second point shows 85.3%, indicating a spike. Option A is incorrect because the command does not show memory metrics. Option B is incorrect because the command does not show connections. Option D is incorrect because the data shows CPU utilization, not database activity.

Answer

The database is idle because CPU utilization is low.

Answer

The database experienced high memory usage.

Answer

The database had a high number of connections.

Question 17

A company is migrating its on-premises SAP HANA database to AWS. The database size is 2 TB, and the acceptable downtime is 4 hours. The company needs to ensure minimal data loss during the migration. Which AWS service should be used for the initial data transfer?

Accepted Answer

AWS Snowball Edge. AWS Snowball Edge is designed for large data transfers where network bandwidth is limited or downtime is constrained. It can transfer 2 TB within the required time frame. AWS Direct Connect requires setup time and may not meet the 4-hour downtime. AWS DataSync is for smaller transfers over the network. AWS Storage Gateway is not optimized for initial large-scale migrations.

Answer

AWS Storage Gateway

Answer

AWS Direct Connect

Answer

AWS DataSync

Question 18

An SAP system is running on AWS with a Multi-AZ deployment. The system uses an Amazon RDS for SAP HANA database. Which TWO actions should be taken to ensure high availability?

Accepted Answer

Configure automated backups with a retention period. Enabling Multi-AZ on RDS automatically provisions a standby in a different AZ and handles failover. Configuring automated backups allows point-in-time recovery. Read replicas are for read scaling, not HA. Manual snapshots are not automatic. Using a single AZ does not provide HA.

Answer

Create a read replica in a different region

Answer

Deploy the RDS instance in a single Availability Zone

Answer

Take manual snapshots every hour

Question 19

An SAP HANA database is running on an EC2 instance with 16 EBS volumes in a striped RAID 0 configuration. The system administrator notices that one of the volumes is degraded in the RAID array. How can the administrator recover the array with minimal downtime?

Accepted Answer

Detach the degraded volume, create a new volume of the same size and type, attach it to the instance, and add it to the RAID array.. Option C is correct: Detach the degraded volume, replace it with a new volume, and re-add it to the RAID array. Option A is incorrect because you cannot repair a physical volume. Option B is incorrect because you cannot replace an attached volume. Option D is incorrect because snapshots are not needed for a degraded volume.

Answer

Detach the degraded volume and attach a new volume with the same device name.

Answer

Take a snapshot of the degraded volume and restore it to a new volume.

Answer

Run a filesystem repair on the degraded volume while it is still attached.

Question 20

An SAP administrator runs the commands above to inspect the volumes attached to an EC2 instance that hosts an SAP HANA database. The database log files are stored on /dev/sdf. What is a potential issue with this configuration?

Accepted Answer

The log volume uses gp3, which may not provide enough IOPS for HANA log writes.. Option C is correct because HANA log volumes require high IOPS and low latency; gp3 may not provide sufficient performance. Options A (encryption) is not shown. Option B (DeleteOnTermination) is false, which is fine for data persistence. Option D (device name) is not an issue.

Answer

The log volume is attached as /dev/sdf, which is not a standard device name for HANA.

Answer

The root volume will be deleted on termination, causing data loss.

Answer

The log volume is not encrypted.