PAS-C01 Practice Exam 52 — 20 Questions

Question 1

An SAP system uses AWS Direct Connect to connect to on-premises networks. The SAP application servers are in a private subnet with a NAT gateway for outbound internet. The SAProuter instance is behind an Internet-facing Network Load Balancer (NLB). Connections from SAP support to the SAProuter timeout. What is the likely cause?

Accepted Answer

The security group for the SAProuter instance does not allow inbound traffic from the NLB.. Option D is correct because SAProuter requires TCP port 3298 to be open. Option A (NAT gateway) is for outbound traffic. Option B (Direct Connect) is for on-premises. Option C (security group) is important but not the most specific cause.

Answer

The NLB target group is configured with the wrong protocol or port for SAProuter.

Answer

The Direct Connect virtual interface is not advertising the SAProuter's IP address.

Answer

The NAT gateway does not allow inbound traffic from the internet.

Question 2

An SAP administrator is troubleshooting a performance issue on an SAP HANA database running on AWS. The HANA data volume is an EBS io1 volume with 10,000 provisioned IOPS. The administrator notices that the average queue length is consistently above 10, and the average latency is 20 ms. Which TWO actions will most likely improve performance?

Accepted Answer

Increase the provisioned IOPS on the io1 volume to 20,000.. Option A and Option D are correct. Increasing IOPS (A) directly addresses the queue. Using a larger instance with higher EBS bandwidth (D) can improve throughput. Option B (NVMe) requires instance store, not EBS. Option C (gp3) may not provide enough IOPS. Option E (Multiple volumes) adds complexity and may not help if the bottleneck is IOPS.

Answer

Migrate the volume to an instance with NVMe instance store.

Answer

Configure multiple EBS volumes in a RAID 0 stripe to increase IOPS.

Answer

Change the volume type to gp3 with 10,000 IOPS.

Question 3

A company is migrating a SAP BusinessObjects environment to AWS. Which AWS service can be used to automate the deployment of the SAP BusinessObjects components?

Accepted Answer

AWS CloudFormation. Option D is correct because AWS CloudFormation allows infrastructure as code to automate the deployment of SAP BusinessObjects. Option A is wrong because AWS OpsWorks is for Chef/Puppet, not directly for SAP. Option B is wrong because AWS Elastic Beanstalk is for web applications, not SAP. Option C is wrong because AWS CodePipeline is for CI/CD, not infrastructure deployment.

Answer

AWS OpsWorks

Answer

AWS Elastic Beanstalk

Answer

AWS CodePipeline

Question 4

A company is designing a disaster recovery (DR) strategy for its SAP system on AWS. The primary site is in us-east-1, and the DR site is in us-west-2. The system uses SAP HANA as the database. Which THREE components must be configured to enable a successful DR failover?

Accepted Answer

SAP HANA system replication across regions.. Options A, C, and D are correct. Cross-region replication for HANA (A) ensures data consistency. Route53 (C) provides DNS failover. AWS Backup cross-region copy (D) ensures backups are available. Option B (S3 CRR) is not needed for HANA replication. Option E (AWS Transit Gateway) is for network connectivity, not DR failover.

Answer

S3 Cross-Region Replication for SAP transport files.

Answer

AWS Transit Gateway peering between the two regions.

Question 5

An SAP system is running on AWS with a production HANA database. The database administrator wants to ensure that backups are consistent and can be restored. Which TWO approaches should be used together for a robust backup strategy?

Accepted Answer

AWS Backup with a backup plan that includes both EBS snapshots and Backint.. Options A and D are correct. EBS snapshots (A) provide crash-consistent backups, and Backint (D) provides application-consistent backups. Option B (AWS Backup) can orchestrate both. Option C (Auto Scaling) is not backup. Option E (Database Migration Service) is for migration.

Answer

Regular EBS snapshots of the data volume.

Answer

Amazon EC2 Auto Scaling to create backup instances.

Answer

AWS Database Migration Service (DMS) for continuous replication.

Question 6

A company is migrating its SAP environment to AWS and wants to use SAP HANA as a Service on AWS (HANA database on AWS). The SAP application tier will run on EC2 instances behind an Application Load Balancer. The company requires high availability for the database with automatic failover in case of an AZ failure. Which architecture should the company implement?

Accepted Answer

Set up HANA System Replication between two EC2 instances in different AZs with automatic failover.. Option B is correct because HANA System Replication with automatic failover in a multi-AZ setup provides high availability; using a secondary instance in a different AZ allows failover. Option A is wrong because a single AZ is not resilient. Option C is wrong because a standby instance in the same AZ does not protect against AZ failure. Option D is wrong because HANA replication to S3 is not supported for automatic failover.

Answer

Configure HANA replication to Amazon S3 for point-in-time recovery.

Answer

Use HANA System Replication with a synchronous secondary in the same AZ.

Answer

Deploy a single HANA database on a large EC2 instance in one AZ with regular backups to S3.

Question 7

During an SAP migration to AWS, the migration team faces a challenge with the Transport Management System (TMS). The SAP system landscape includes development, quality assurance, and production systems running on separate EC2 instances. The TMS is configured with transport routes between these systems. After migration, transports fail with errors related to missing files on the transport directory. What should the team do to ensure the TMS works correctly?

Accepted Answer

Set up an Amazon EFS file system and mount it as the transport directory on all SAP instances.. Option D is correct because TMS relies on a shared transport directory; using EFS with NFS provides a shared file system accessible by all instances. Option A is wrong because S3 is object storage and not compatible as a transport directory. Option B is wrong because EBS volumes are block storage and cannot be shared across multiple instances. Option C is wrong because SMB on AWS is not a standard solution for TMS.

Answer

Create an EBS volume for each SAP system and copy transport files manually.

Answer

Store the transport directory in an S3 bucket and mount it using S3FS.

Answer

Use AWS Storage Gateway with SMB file share to host the transport directory.

Question 8

An SAP on AWS deployment uses an Auto Scaling group for the SAP application tier. The application is stateless and can scale out and in based on CPU utilization. Which scaling policy should be used to add new instances during peak load and remove them when the load decreases?

Accepted Answer

Target tracking scaling policy with a target CPU utilization of 70%.. Option B is correct because a target tracking scaling policy is the simplest and most automated way to maintain a target CPU utilization. Option A is wrong because simple scaling does not adjust dynamically. Option C is wrong because scheduled scaling is for predictable loads, not dynamic. Option D is wrong because step scaling requires manual configuration of steps.

Answer

Simple scaling policy based on CPU utilization.

Answer

Step scaling policy with multiple steps for different CPU thresholds.

Answer

Scheduled scaling policy to add instances during business hours.

Question 9

A company is using AWS Systems Manager to automate patching of SAP application servers. The patching process should run during a maintenance window every Sunday at 2 AM. Which Systems Manager capability should be used to schedule the patching?

Accepted Answer

Maintenance Windows. Option D is correct because Maintenance Windows allow scheduling of patching operations. Option A is wrong because State Manager is for configuration management. Option B is wrong because Patch Manager is for patching but needs a schedule; Maintenance Window triggers it. Option C is wrong because Automation is for runbooks.

Answer

Automation

Answer

Patch Manager

Answer

State Manager

Question 10

An SAP system on AWS is experiencing performance issues during peak hours. The system includes SAP application servers and a HANA database. The CloudWatch metrics show high CPU utilization on the application servers and high disk read latency on the database EBS volumes. Which THREE actions should be taken to improve performance?

Accepted Answer

Increase the provisioned IOPS on the EBS volumes attached to the HANA database.. Option A is correct because adding more application servers distributes load. Option C is correct because provisioning higher IOPS reduces disk latency. Option E is correct because scaling up the instance provides more CPU. Option B is wrong because a NAT Gateway does not affect performance. Option D is wrong because a read replica does not help with write-heavy workloads or disk latency.

Answer

Add a NAT Gateway to the VPC to improve network performance.

Answer

Deploy a read replica for the HANA database.

Question 11

A company is migrating its SAP ECC system to SAP S/4HANA on AWS. The current database is running on Oracle. They want to minimize downtime during the migration. Which THREE services or features should they consider to achieve a near-zero downtime migration? (Select THREE.)

Accepted Answer

Use SAP HANA System Replication (HSR) for the final synchronization.. Options A, C, and D are correct. AWS DMS can replicate data from Oracle to SAP HANA with minimal downtime. SAP HANA System Replication can be used for the final sync. EBS Snapshots provide a backup and restore option but are not for zero downtime. Option B (Snowball) is for large data transfer, not for ongoing replication. Option E (EC2 Hibernate) is not applicable for database migration.

Answer

Use AWS Snowball to transfer the initial Oracle data dump to AWS.

Answer

Use Amazon EBS Snapshots for point-in-time recovery and replication.

Question 12

A company runs an SAP HANA database on an EC2 instance with a 2 TB EBS gp3 volume. The instance type is r5.8xlarge. To improve disk performance for high-throughput write operations, the SAP administrator wants to increase IOPS. Which TWO actions should the administrator take to achieve the required IOPS? (Choose two.)

Accepted Answer

Modify the volume to provision additional IOPS up to 16,000.. Option A (increase volume size) is correct because gp3 volumes have a baseline IOPS-to-GiB ratio of 3 IOPS/GiB; increasing size increases baseline IOPS. Option E (modify IOPS) is correct because gp3 allows provisioning up to 16,000 IOPS independently of size. Option B is wrong because switching to st1 is for throughput-optimized workloads, not for high IOPS. Option C is wrong because EBS optimization is enabled by default on r5 instances. Option D is wrong because Nitro T2 credits are not related to EBS performance.

Answer

Configure the instance to use T2 unlimited credits.

Answer

Change the volume type to st1 (throughput optimized HDD).

Answer

Enable EBS optimization on the EC2 instance.

Question 13

A company runs a critical SAP HANA database on an m5.24xlarge EC2 instance. The database has high transaction volume and requires low latency storage. The current setup uses EBS gp2 volumes with 10,000 IOPS. During peak hours, the database performance degrades due to IOPS burst balance depletion. Which storage solution should the company use to maintain consistent performance?

Accepted Answer

Provision EBS io2 Block Express volumes with 10,000 provisioned IOPS.. Option C is correct because EBS io2 Block Express volumes provide consistent IOPS performance without bursting and support higher IOPS than gp2. Option A is wrong because gp3 provides baseline 3000 IOPS and burst, but may not guarantee the required 10,000 IOPS. Option B is wrong because Instance Store provides ephemeral storage, which is not persistent and may cause data loss on instance stop. Option D is wrong because EFS is a file system, not suitable for high-performance database block storage.

Answer

Migrate to EBS gp3 volumes with provisioned IOPS of 10,000.

Answer

Use EC2 Instance Store (NVMe SSD) for the database data and logs.

Answer

Move the database to Amazon EFS with provisioned throughput.

Question 14

An SAP administrator needs to monitor the memory usage of an SAP HANA database running on an EC2 instance. The administrator wants to receive alerts when memory usage exceeds 90% for more than 5 minutes. Which AWS service should be used to set up this monitoring and alerting?

Accepted Answer

Amazon CloudWatch with custom metrics. Option B is correct because CloudWatch can collect custom metrics from the HANA instance and trigger alarms. Option A is wrong because AWS Config is for configuration compliance, not monitoring. Option C is wrong because Trusted Advisor provides best practice checks, not custom monitoring. Option D is wrong because CloudTrail is for API auditing.

Answer

AWS Trusted Advisor

Answer

AWS Config

Answer

AWS CloudTrail

Question 15

A company runs its SAP application on EC2 instances in a private subnet. The SAP application needs to access an on-premises database through a VPN connection. The company wants to improve network performance and reduce latency between the SAP application and the on-premises database. Which action should the company take?

Accepted Answer

Set up AWS Direct Connect between the VPC and on-premises data center.. Option C is correct because AWS Direct Connect provides a dedicated network connection with lower latency and higher throughput than VPN. Option A is wrong because a NAT Gateway is for outbound internet access, not for on-premises connectivity. Option B is wrong because VPC Peering is for connecting VPCs, not on-premises. Option D is wrong because increasing VPN tunnel bandwidth may help but still has higher latency than Direct Connect.

Answer

Increase the VPN tunnel bandwidth to 10 Gbps.

Answer

Create a VPC Peering connection to the on-premises network.

Answer

Add a NAT Gateway to the private subnet.

Question 16

A company is planning to migrate its SAP environment to AWS. The SAP landscape includes development, test, and production systems. The company wants to ensure data security and compliance. Which THREE AWS services should the company use to achieve this?

Accepted Answer

AWS Key Management Service (KMS) for encryption of EBS volumes and S3 buckets.. Option A is correct because KMS encrypts data at rest. Option C is correct because CloudTrail logs API calls for auditing. Option D is correct because IAM manages access control. Option B is wrong because Direct Connect is for connectivity, not security. Option E is wrong because Elastic Load Balancing is for traffic distribution.

Answer

AWS Direct Connect for dedicated network connection.

Answer

Elastic Load Balancing for distributing traffic.

Question 17

An SAP system on AWS is experiencing performance issues. The operations team wants to set up monitoring to identify bottlenecks. Which TWO AWS services should they use to collect and analyze SAP performance metrics? (Select TWO.)

Accepted Answer

Amazon CloudWatch. Options A and D are correct. Amazon CloudWatch can collect custom metrics from SAP and EC2. AWS CloudTrail logs API calls for auditing. Option B (X-Ray) is for tracing microservices, not SAP. Option C (Config) is for resource compliance. Option E (Trusted Advisor) provides recommendations but not granular monitoring.

Answer

AWS Config

Answer

AWS X-Ray

Answer

AWS Trusted Advisor

Question 18

An SAP customer is planning to use AWS for their SAP HANA environment. They need to ensure that the chosen EC2 instance types are certified by SAP for HANA. Which THREE sources can they use to verify SAP HANA certification for AWS instance types? (Select THREE.)

Accepted Answer

AWS documentation on SAP HANA certified instances. Options A, B, and D are correct. The SAP HANA Hardware Directory lists certified instances. The SAP Cloud Appliance Library provides pre-configured HANA images. AWS documentation also lists certified instances. Option C (AWS Pricing Calculator) does not provide certification info. Option E (AWS Support) can assist but is not a direct source for certification lists.

Answer

AWS Support Center

Answer

AWS Pricing Calculator

Question 19

A company runs SAP S/4HANA on AWS using a multi-ABAP application server setup with a central services instance (ASCS) and enqueue replication. After a recent OS patching, the secondary application server fails to start, with errors indicating it cannot connect to the enqueue replication server (ERS). The ERS process is running on the ASCS instance. The network team confirms that security groups and NACLs are properly configured. Which THREE steps should be taken to resolve this issue? (Choose three.)

Accepted Answer

Check the SAP instance profile for the enqueue replication parameters (e.g., rdisp/enq_repl_server).. Option A is correct because the hostname resolution for the ERS instance may have changed after patching. Option C is correct because the SAP profile must contain the correct enqueue replication parameters. Option E is correct because the ERS service must be running and reachable. Option B is wrong because kernel compatibility is not typically affected by OS patching. Option D is wrong because changing the instance type is not a troubleshooting step for connectivity.

Answer

Change the secondary application server instance type to a larger size.

Answer

Update the SAP kernel on the secondary application server to the latest version.

Question 20

A company runs SAP on AWS and uses AWS KMS for encryption of EBS volumes. The security team requires that the EBS volumes used for SAP HANA data and log files be encrypted with a customer-managed key. They also want to ensure that the key cannot be deleted. What should the security team do to protect the KMS key?

Accepted Answer

Set a key policy that prevents the kms:ScheduleKeyDeletion action.. Option B is correct because enabling key rotation does not prevent deletion; the correct approach is to use a multi-Region key (not relevant) or implement deletion protection via a resource-based policy, but the simplest is to enable deletion protection by setting a key policy that denies deletion. However, among the options, 'Enable automatic key rotation' is a best practice but does not prevent deletion. The actual method to prevent deletion is to set a key policy that denies the kms:ScheduleKeyDeletion action. Since that is not an option, the closest is to set a key policy to prevent deletion, but it's not listed. Given the choices, option B is the only one that helps with key management but not deletion prevention. The question is flawed; I'll correct: The correct answer is to set a key policy that denies deletion. None of the options directly say that, so I'll adjust the options. Revised:

Answer

Use an AWS managed key instead of a customer-managed key.

Answer

Store the key in AWS Secrets Manager.

Answer

Enable automatic key rotation.