PAS-C01 Practice Exam 52 — 20 Questions

Question 1

A company runs SAP on AWS and wants to implement a high-availability (HA) solution for SAP Central Services (ASCS/ERS) using Amazon EC2 instances. Which AWS service is essential for managing the virtual IP address (VIP) required for the HA cluster?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Amazon Route 53. Amazon Route 53 is essential for managing the virtual IP address (VIP) required for the SAP Central Services (ASCS/ERS) HA cluster because it provides DNS-based failover. When the active ASCS instance fails, the HA cluster updates a Route 53 DNS record to point to the standby instance's IP address, effectively migrating the VIP. This allows clients to reconnect using the same DNS name without needing an elastic IP or a network-level VIP, which is not natively supported in AWS for this use case.

Answer

AWS Global Accelerator

Answer

AWS WAF

Answer

Application Load Balancer

Question 2

A company is running SAP on AWS and uses an Application Load Balancer (ALB) to distribute traffic to SAP Web Dispatchers. The operations team notices that some requests are failing with 502 errors. Which THREE actions should be taken to troubleshoot the issue?

Accepted Answer

Review the ALB access logs to identify the target response codes.. Options C, D, and E are correct actions to troubleshoot 502 errors. Option C: Reviewing ALB access logs helps identify the target response codes, which can indicate why requests are failing. Option D: Verifying security group rules ensures that the ALB and target instances can communicate properly. Option E: Checking the health check configuration and target group health status can reveal if targets are unhealthy, causing 502 errors. Option A is incorrect because disabling cross-zone load balancing does not directly address 502 errors. Option B is incorrect because increasing the idle timeout is not a typical solution for 502 errors; idle timeouts usually affect 504 errors.

Answer

Disable cross-zone load balancing to isolate the issue.

Answer

Increase the idle timeout setting on the ALB.

Question 3

A company runs SAP HANA on an m5.24xlarge EC2 instance. The instance has an EBS-optimized attachment and a high-performance EBS volume for data. The database team reports that write latency to the data volume is consistently above 5 ms during peak hours. Which action would most effectively reduce write latency?

Accepted Answer

Provision the data volume as an io2 Block Express volume with higher IOPS.. Io2 Block Express volumes are designed for high-performance workloads requiring low latency and high IOPS, which directly addresses the write latency issue. Option B is incorrect because EFA is for HPC and does not affect EBS latency. Option C is incorrect because gp3 volumes have lower performance than io2 for high-write workloads. Option D is incorrect because the m5.24xlarge instance already supports EBS optimization, and enabling it would not reduce latency further.

Answer

Use an Elastic Fabric Adapter (EFA) for storage traffic.

Answer

Change the data volume type to gp3.

Answer

Enable EBS optimization on the instance.

Question 4

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database is 2 TB in size and has a 24-hour maintenance window. The migration must minimize downtime and support ongoing replication during the cutover. Which AWS service should be used for the migration?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) supports ongoing replication from on-premises to RDS with minimal downtime, using change data capture (CDC) for continuous sync. Option A (AWS Snowball Edge) is for large data transfer but does not support ongoing replication. Option C (Amazon S3 Transfer Acceleration) speeds up uploads to S3 but does not directly migrate databases. Option D (AWS Server Migration Service) is for server-level migrations, not database-specific replication.

Answer

AWS Snowball Edge

Answer

Amazon S3 Transfer Acceleration

Answer

AWS Server Migration Service (SMS)

Question 5

Which TWO AWS services can be used to monitor the health of SAP application servers? (Choose 2)

Accepted Answer

Amazon CloudWatch. The correct answers are D (Amazon CloudWatch) and E (AWS Systems Manager). CloudWatch can monitor EC2 CPU/memory metrics and SAP application-specific metrics via custom metrics or the SAP Host Agent integration. Systems Manager can run custom scripts for health checks, such as checking SAP service status, and can be used with Automation or Run Command to perform health checks across multiple instances. Option A (Route 53) is for DNS routing and basic IP health checks, not application-level SAP monitoring. Option B (S3) is object storage, not for monitoring. Option C (CloudTrail) is for API auditing, not real-time health monitoring.

Answer

Amazon Route 53

Answer

Amazon S3

Answer

AWS CloudTrail

Question 6

A company is migrating an SAP Business Warehouse (BW) system running on an on-premises HANA database to AWS. The migration must be completed with less than 1 hour of downtime. The source database is 3 TB. The company has established a 10 Gbps AWS Direct Connect connection. The SAP system uses a custom ABAP program that must be migrated as well. The company wants to minimize manual intervention. Which approach should be taken?

Accepted Answer

Set up SAP HANA System Replication (HSR) to replicate the database to AWS, then perform a takeover.. The correct approach is to use SAP HANA System Replication (HSR) to set up continuous replication from the on-premises HANA database to an SAP HANA database running on Amazon EC2. Once the systems are synchronized, a takeover can be performed with minimal downtime (seconds), meeting the <1 hour requirement. AWS DMS does not support SAP HANA as a source for ongoing replication without schema conversion, and Amazon RDS for HANA is not a supported target. Exporting and importing the database would require significant downtime due to the 3 TB data transfer and import time. AWS Application Migration Service (MGN) replicates the entire server, but for an SAP HANA database, HSR is a more appropriate and optimized method for database migration with minimal downtime.

Answer

Use AWS DMS to replicate the HANA database to Amazon RDS for HANA.

Answer

Export the HANA database to files, transfer via Direct Connect, and import on EC2.

Answer

Use AWS Application Migration Service (MGN) to replicate the entire server.

Question 7

Refer to the exhibit. An SAP administrator runs the AWS CLI command and receives the output shown. The SAP application server (instance i-0abcd1234) is in 'running' state, but the SAP application is not reachable. The security group allows inbound traffic on port 3200. What is the MOST likely cause of the issue?

Accepted Answer

The operating system firewall on the instance is blocking port 3200.. The instance is in 'running' state and the security group allows inbound traffic on port 3200, yet the SAP application is unreachable. This indicates a host-level firewall (e.g., iptables, firewalld, or Windows Firewall) on the SAP application server is blocking inbound connections to port 3200, which operates independently of AWS security groups and network ACLs.

Answer

The network ACL for the subnet is blocking outbound traffic.

Answer

The instance is in a stopped state.

Answer

The security group inbound rule for port 3200 is not applied to the instance.

Question 8

An SAP Basis administrator is troubleshooting a slow-performing SAP ERP system on AWS. The system uses Amazon EBS volumes with Provisioned IOPS (PIOPS) for database storage. Which metric in Amazon CloudWatch would best indicate whether the EBS volume is experiencing a performance bottleneck?

Accepted Answer

VolumeQueueLength. VolumeQueueLength measures the number of pending I/O requests waiting to be serviced by the EBS volume. A sustained high queue length (e.g., consistently above 1 per optimized IOPS) indicates that the volume is saturated and cannot keep up with the workload, which directly causes performance bottlenecks for SAP ERP database operations. This metric is the most direct indicator of a bottleneck because it reflects backpressure from the storage subsystem.

Answer

VolumeIdleTime

Answer

VolumeReadOps

Answer

VolumeThroughputPercentage

Question 9

An organization runs SAP on AWS and wants to encrypt all data at rest for the SAP HANA database. The encryption keys must be managed by the customer and rotated annually. Which THREE AWS services can be used together to meet these requirements? (Choose THREE.)

Accepted Answer

Amazon EBS encryption. Amazon EBS encryption is correct because SAP HANA databases on AWS typically store data on EBS volumes, and enabling EBS encryption ensures data at rest is encrypted using AWS KMS keys. This directly meets the requirement for encrypting the SAP HANA database storage.

Answer

Amazon S3 server-side encryption

Answer

AWS Certificate Manager (ACM)

Question 10

Which THREE of the following are valid disaster recovery strategies for SAP on AWS? (Choose 3)

Accepted Answer

SAP backup to Amazon S3 with cross-region replication. SAP backup to Amazon S3 with cross-region replication is a valid disaster recovery strategy. By backing up SAP data (e.g., database backups, log files) to S3 and enabling cross-region replication (CRR), you automatically replicate backups to a secondary AWS Region. This ensures that backup data is available in another Region for recovery in the event of a regional disaster, providing a durable and cost-effective DR solution without requiring a running standby system.

Answer

Maintain a cold standby environment in another Region

Answer

AWS RDS Multi-AZ deployment for SAP HANA

Question 11

A company is migrating an SAP ERP system running on an on-premises IBM AIX server to AWS. The server hosts both the SAP application and the DB2 database. The company has a tight deadline and wants to minimize the migration effort. The current system uses a storage area network (SAN) with 2 TB of data. The company wants to use AWS native services and avoid re-architecting. What is the BEST migration strategy?

Accepted Answer

Use AWS Application Migration Service (MGN) to replicate the entire server to AWS.. AWS MGN supports migration of IBM AIX servers with block-level replication. Option B (manual install) is wrong because manual installation is more effort and not leveraging AWS services. Option C is wrong because AWS Snowball would require downtime and is not real-time. Option D is wrong because AWS DMS does not support DB2 on AIX as a source.

Answer

Manually install SAP and DB2 on EC2 and restore from backup.

Answer

Use AWS Snowball Edge to transfer the data offline and then launch EC2 instances.

Answer

Use AWS DMS to migrate the DB2 database to Amazon RDS for DB2.

Question 12

A company is migrating a legacy application to AWS. The application requires a static IP address that does not change during instance stop/start. The application also needs to be highly available across two Availability Zones. Which THREE actions should the company take to meet these requirements?

Accepted Answer

Use a Network Load Balancer with an Elastic IP address. A Network Load Balancer (NLB) supports static IP addresses by allowing you to associate an Elastic IP address with each of its Availability Zone subnets. This provides a fixed entry point that does not change when backend instances are stopped or started, meeting the requirement for a static IP. Combined with an Auto Scaling group spanning two Availability Zones, the NLB ensures high availability by distributing traffic across healthy instances in both zones.

Answer

Place the instances in a placement group to ensure high availability

Answer

Use an Application Load Balancer to distribute traffic to the instances

Question 13

An SAP system is deployed on EC2 instances with EBS volumes. The operations team needs to implement a backup strategy that provides point-in-time recovery for the EBS volumes with minimal downtime. Which AWS service should they use?

Accepted Answer

Amazon EBS Snapshots. Amazon EBS Snapshots are the correct service for point-in-time recovery of EBS volumes with minimal downtime. They capture the volume data at a specific point in time and can be taken while the volume is attached and in use, with minimal performance impact (by taking snapshots during low usage). Option A, AWS Storage Gateway, is used for hybrid cloud storage, not for direct EBS backups. Option B, AWS Backup, is a centralized backup service that can automate EBS snapshots, but the question asks which service provides point-in-time recovery for EBS volumes directly; EBS Snapshots are the underlying mechanism. Option D, Amazon S3, is object storage and not directly for EBS volume backups.

Answer

AWS Storage Gateway

Answer

AWS Backup

Answer

Amazon S3

Question 14

An SAP application running on an EC2 instance is experiencing high latency during peak hours. The instance is in a private subnet with a NAT Gateway for outbound internet. Which action would most effectively reduce latency for SAP users?

Accepted Answer

Increase the EC2 instance size to a larger type with more CPU and memory.. Increasing the EC2 instance size to a larger type with more CPU and memory directly addresses the root cause of high latency during peak hours for an SAP application: resource contention. SAP is compute and memory-intensive; when the instance's vCPUs and RAM are saturated, request queuing and processing delays occur. A larger instance type provides more dedicated resources, reducing processing time per transaction and thus lowering latency for users.

Answer

Move the instance to a public subnet and assign a public IP address.

Answer

Replace the NAT Gateway with an Internet Gateway.

Answer

Enable EBS optimization on the instance.

Question 15

An SAP application running on AWS is experiencing high latency for database write operations. The system uses SAP ASE on Amazon EC2 with gp2 EBS volumes. Which change is most likely to improve write performance?

Accepted Answer

Migrate to io1/io2 EBS volumes with provisioned IOPS.. SAP ASE on Amazon EC2 with gp2 EBS volumes is experiencing high latency for database write operations. gp2 volumes use a burst-bucket model that can exhaust IOPS credits under sustained heavy writes, causing throttled performance. Migrating to io1 or io2 EBS volumes with provisioned IOPS guarantees consistent, low-latency write throughput, which directly addresses the bottleneck for database write workloads.

Answer

Move database write logs to Amazon S3 for better throughput.

Answer

Migrate to gp3 EBS volumes with higher baseline performance.

Answer

Use instance store volumes for database data files.

Question 16

A company runs SAP Business Suite on AWS. The SAP system frequently crashes with a 'JAVA out of memory' error. The application server is an EC2 instance with 32 GB RAM. Which solution should be implemented to prevent this issue?

Accepted Answer

Configure Amazon CloudWatch alarms to trigger EC2 Auto Scaling based on memory utilization. By configuring Amazon CloudWatch alarms to trigger EC2 Auto Scaling based on memory utilization, the system can automatically add more application server instances when memory usage is high. This distributes the load and prevents any single instance from running out of Java heap space. Option A is incorrect because manually increasing the EC2 instance memory is a temporary workaround that does not scale automatically. Option B is incorrect as reducing the Java heap size would increase the likelihood of out-of-memory errors. Option C is incorrect because increasing swap space can cause severe performance degradation and does not resolve the underlying memory shortage.

Answer

Increase the EC2 instance memory to 64 GB

Answer

Reduce the Java heap size in the SAP system

Answer

Increase the swap space on the EC2 instance

Question 17

A company is migrating an SAP BusinessObjects environment to AWS. They need to ensure that the business intelligence reports continue to run without interruption. Which migration strategy should they use?

Accepted Answer

Use a phased migration, moving reports gradually using AWS DataSync. A phased migration using AWS DataSync allows the company to gradually move SAP BusinessObjects reports while maintaining continuous operations. DataSync efficiently transfers large volumes of data over the network with built-in validation and incremental sync capabilities, ensuring that the BI environment remains available during the migration. This approach minimizes disruption by avoiding a full cutover and allows for testing and rollback if needed.

Answer

Rehost using AWS Server Migration Service (SMS) in a single wave

Answer

Replatform to Amazon QuickSight

Answer

Lift-and-shift all servers at once during a maintenance window

Question 18

A company is migrating its SAP BusinessObjects to AWS. The current on-premises deployment uses a Windows-based environment. Which AWS service should the company use to migrate the Windows servers?

Accepted Answer

AWS Application Migration Service (AWS MGN). AWS MGN is the recommended service for migrating Windows servers to AWS. Option A is wrong because AWS SCT is for schema conversion, not server migration. Option C is wrong because AWS DMS is for databases, not servers. Option D is wrong because AWS Server Migration Service (SMS) is deprecated.

Answer

AWS Schema Conversion Tool (AWS SCT)

Answer

AWS Database Migration Service (AWS DMS)

Answer

AWS Server Migration Service (AWS SMS)

Question 19

An SAP system on AWS uses a Multi-AZ DB instance for its database. The operations team notices that during a recent Availability Zone outage, the database failover did not occur automatically. What is the MOST likely cause?

Accepted Answer

The secondary DB instance is in the same Availability Zone as the primary.. In a Multi-AZ DB instance deployment, AWS automatically provisions and maintains a standby DB instance in a different Availability Zone (AZ). If the primary DB instance fails or the AZ becomes unavailable, Amazon RDS automatically fails over to the standby. If the secondary DB instance is in the same AZ as the primary, a failure of that AZ will affect both instances, preventing automatic failover. This is the most likely cause because the Multi-AZ architecture relies on physical separation of AZs to provide high availability.

Answer

The database is configured with asynchronous replication.

Answer

The Multi-AZ option is not supported for this database engine.

Answer

The database is configured as a read replica.

Question 20

A company is migrating a critical SAP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). Which AWS service can be used to manage the virtual IP address required for the SAP high availability setup?

Accepted Answer

Elastic Load Balancer (ELB). For SAP high availability on AWS, the virtual IP (VIP) for ASCS/ERS is typically managed using a Network Load Balancer (NLB), which provides a static IP address that can be used as the VIP. NLB supports health checks and automatic failover between active and passive instances. Amazon Route 53 Application Recovery Controller is designed for multi-region recovery and DNS-level failover, not for managing a VIP within a single region. AWS Transit Gateway handles network connectivity between VPCs, and AWS Global Accelerator provides static IPs for global traffic optimization, not for SAP HA VIP management.

Answer

AWS Transit Gateway

Answer

Amazon Route 53 Application Recovery Controller

Answer

AWS Global Accelerator