PAS-C01 Practice Exam 53 — 20 Questions

Question 1

Which TWO are required considerations when sizing an SAP HANA instance on AWS for a production environment? (Choose two.)

Accepted Answer

Ensure the instance has enough memory to hold the HANA data in memory (RAM:data ratio).. Option C is correct because SAP HANA is an in-memory database, so the production instance must have enough RAM to hold the entire data set in memory, and AWS sizing must respect SAP's certified RAM-to-data ratio for the workload. Option D is correct because HANA's data and log areas are stored on persistent storage in AWS, so EBS volumes must be provisioned with sufficient IOPS and throughput to meet SAP's certified storage KPIs for the production workload. Option A is not required because HANA data and log areas need persistent, durable storage, which instance store volumes do not provide since they are ephemeral. Option B is a cost-optimization choice, not a sizing requirement, and Option E is wrong because SAP HANA is not supported on Amazon RDS instance types.

Answer

Provision instance store volumes for HANA data and log areas.

Answer

Purchase Reserved Instances for the HANA server to reduce costs.

Answer

Select an RDS instance type that supports SAP HANA.

Question 2

A company runs SAP on AWS and wants to automate the monitoring of SAP system health. Which TWO AWS services can be used together to achieve this? (Choose TWO.)

Accepted Answer

AWS Lambda. Amazon CloudWatch [CORRECT] is right because it is the AWS monitoring service that collects metrics, logs, and events, and it can ingest SAP health data (e.g., via the CloudWatch agent or custom metrics) and trigger alarms based on thresholds. AWS Lambda [CORRECT] is right because it can be invoked by CloudWatch alarms or EventBridge events to run automation code that checks SAP system health, calls SAP APIs, or takes remediation actions, enabling serverless automated monitoring. Together, CloudWatch detects conditions and Lambda executes the response logic, which is the standard event-driven pattern for automating SAP health monitoring on AWS. AWS Config is for tracking resource configuration changes and compliance, not for runtime health monitoring or automation. Amazon EC2 Auto Scaling only adjusts EC2 capacity and does not monitor SAP application health. Amazon SQS is a message queuing service and provides no monitoring or automation capability by itself.

Answer

AWS Config

Answer

Amazon EC2 Auto Scaling

Answer

Amazon Simple Queue Service (SQS)

Question 3

A company is migrating an SAP system to AWS and needs to ensure that the target EC2 instances have the correct SAP kernel parameters. Which AWS service can be used to automate the configuration of these parameters?

Accepted Answer

AWS Systems Manager State Manager. AWS Systems Manager State Manager is designed to maintain EC2 instances in a defined state, including applying and enforcing configuration such as SAP kernel parameters via associations and documents. It can automate parameter changes across fleets, detect drift, and reapply the desired configuration, which is exactly what SAP kernel parameter management requires.

Answer

EC2 User Data scripts

Answer

AWS OpsWorks

Answer

AWS CloudFormation

Question 4

An SAP administrator is troubleshooting a failed backup of SAP HANA to Amazon S3. The backup is initiated by an SAP HANA BACKUP command using the S3 backint agent. The error log shows 'HTTP 403 Forbidden' when the agent tries to upload to the S3 bucket. The bucket policy allows s3:PutObject from the VPC endpoint. What is the most likely cause?

Accepted Answer

The VPC endpoint policy for S3 does not grant the required actions to the IAM role.. Even when the S3 bucket policy allows s3:PutObject from the VPC endpoint, traffic to S3 via a Gateway VPC Endpoint is also evaluated against the endpoint policy attached to that endpoint. If the endpoint policy does not permit s3:PutObject (or is restricted to a different resource/role), the request is denied with HTTP 403 before the bucket policy is even consulted.

Answer

The S3 bucket does not exist.

Answer

The S3 bucket is not in the same AWS Region as the EC2 instance.

Answer

The S3 bucket uses server-side encryption with AWS KMS (SSE-KMS) and the IAM role lacks kms:GenerateDataKey.

Question 5

Which THREE considerations are important when designing a disaster recovery (DR) strategy for SAP on AWS?

Accepted Answer

Copy Amazon Machine Images (AMIs) to the DR Region. Option B is correct because copying AMIs to the DR Region ensures that the golden images needed to launch SAP application and database instances are available in the target recovery Region, which is essential when the primary Region becomes unavailable. Option C is correct because RTO and RPO are the foundational business requirements that drive every DR design decision, determining acceptable downtime and data loss and thus the required replication, backup, and failover mechanisms. Option D is correct because cross-Region replication of SAP HANA database backups ensures that backup data survives a Regional failure and can be restored in the DR Region, directly supporting the RPO. Option A is not appropriate because EBS snapshots stored only in the same Region are unavailable if that Region fails, so they cannot serve as a DR mechanism. Option E is incorrect because concentrating all SAP resources in a single Region eliminates Regional redundancy and defeats the purpose of a DR strategy.

Answer

Use EBS snapshots in the same Region for recovery

Answer

Deploy all SAP resources in a single AWS Region

Question 6

A company is designing an SAP environment on AWS and needs to ensure high availability for SAP HANA. Which TWO AWS services or features are commonly used to achieve this? (Choose TWO.)

Accepted Answer

Amazon Route 53 with failover routing. Option C is correct because Amazon Route 53 failover routing policies let you define a primary and secondary endpoint (for example, an SAP HANA primary and standby node behind an overlay IP or a Network Load Balancer) and automatically redirect client connections to the healthy endpoint when health checks detect a failure, which is a standard component of SAP HANA high availability on AWS. Option D is correct because SAP HANA system replication (HSR) across Availability Zones is the SAP-native mechanism that continuously replicates data and logs from a primary HANA instance to a secondary instance in a different AZ, enabling fast takeover with minimal data loss (depending on replication mode such as SYNC or ASYNC). Option A is not appropriate because Amazon EFS is a shared NFS file system and is not supported for hosting SAP HANA data and log volumes, which require low-latency block storage such as Amazon EBS (e.g., gp3 or io2 Block Express). Option B does not belong because Amazon S3 cross-region replication is an object-storage durability/disaster-recovery feature and is not part of an SAP HANA HA failover architecture. Option E is not correct because AWS Global Accelerator with endpoint weights is used for global traffic distribution and performance, not for the in-region HANA failover that HSR and Route 53 failover routing provide.

Answer

Amazon EFS with Multi-AZ mount targets

Answer

Amazon S3 cross-region replication

Answer

AWS Global Accelerator with endpoint weights

Question 7

A company is running SAP Business Suite on AWS and wants to implement a disaster recovery (DR) strategy with a Recovery Time Objective (RTO) of less than 2 hours and a Recovery Point Objective (RPO) of less than 15 minutes. The primary and DR sites are in different AWS regions. Which solution meets these requirements?

Accepted Answer

Use SAP HANA System Replication in asynchronous mode across regions with EBS snapshots every 15 minutes. SAP HANA System Replication in asynchronous mode across regions meets the RPO of less than 15 minutes because it continuously replicates log data with minimal latency, and the RTO of less than 2 hours is achievable by taking over the replicated HANA database in the DR region. EBS snapshots every 15 minutes provide an additional layer for persistent storage consistency, but the primary mechanism for meeting the RPO is the asynchronous log replication, which typically achieves sub-minute RPO.

Answer

Use EBS snapshots replicated to the DR region with S3 cross-region replication

Answer

Use AWS Backup with continuous backups

Answer

Use SAP HANA System Replication in synchronous mode across regions

Question 8

An SAP administrator runs the df command on an SAP HANA server and sees the output above. The /hana/data filesystem is 96% full. Which action should be taken to prevent the database from running out of space?

Accepted Answer

Increase the size of the EBS volume and extend the filesystem. The correct action is to increase the size of the EBS volume and extend the filesystem because the /hana/data filesystem is 96% full, and SAP HANA requires sufficient free space for data growth and savepoint operations. Simply increasing the EBS volume size without extending the filesystem (e.g., using resize2fs or xfs_growfs) would not make the additional space available to the operating system. This approach directly addresses the capacity issue without unnecessary changes to performance or instance type.

Answer

Increase the IOPS of the EBS volume

Answer

Delete old database logs to free up space

Answer

Migrate the database to a larger instance type

Question 9

A company is planning to run SAP NetWeaver on AWS and needs to ensure that the architecture supports high availability for the application layer. Which TWO components are essential for an HA SAP NetWeaver application server setup? (Choose TWO.)

Accepted Answer

Multiple EC2 instances in different Availability Zones. Option B is correct because high availability for the SAP NetWeaver application layer requires running multiple EC2 instances across different Availability Zones, so that the failure of one AZ does not take down the application servers and a surviving node can continue serving users. Option D is correct because an Application Load Balancer (ALB) is needed to distribute incoming HTTP/HTTPS traffic across those multiple EC2 instances, perform health checks, and route requests only to healthy application servers, which is essential for an HA SAP NetWeaver application server setup. Option A is not essential because ElastiCache is a caching/session-store service and SAP NetWeaver application HA does not depend on it for the core application-layer redundancy described here. Option C is wrong because a single large EC2 instance is a single point of failure and provides no application-layer high availability. Option E is wrong because Amazon RDS addresses the database layer, not the application layer that the question specifically asks about.

Answer

Amazon ElastiCache for session management

Answer

A single large EC2 instance for all application servers

Answer

Amazon RDS for database layer

Question 10

A company is migrating an SAP Business Suite system to AWS. The system has a large database and requires high network throughput between the application and database tiers. Which Amazon EC2 placement group strategy should be used?

Accepted Answer

Cluster placement group. A cluster placement group is the correct choice because it provides low-latency, high-throughput networking by placing all instances in a single Availability Zone within the same logical rack. For SAP Business Suite with a large database, the application and database tiers require high network throughput (e.g., up to 100 Gbps for supported instance types) and minimal latency, which a cluster placement group delivers by ensuring all instances are in close physical proximity. In contrast, a spread placement group distributes instances across distinct hardware to reduce risk of simultaneous failure but does not optimize network performance. A partition placement group spreads instances across logical partitions to isolate failures but also lacks the high-bandwidth, low-latency benefits of a cluster group. Using no placement group may result in instances being placed on separate racks, increasing network latency and reducing throughput.

Answer

Spread placement group

Answer

Partition placement group

Answer

No placement group

Question 11

A company runs SAP HANA on AWS and needs to ensure that the database can survive a single Availability Zone failure without manual intervention. The SAP HANA system is currently deployed on a single EC2 instance. Which solution meets this requirement?

Accepted Answer

Configure SAP HANA System Replication with a secondary instance in a different Availability Zone and enable automatic takeover. SAP HANA System Replication (HSR) with automatic takeover provides synchronous or asynchronous data replication to a secondary instance in a different Availability Zone (AZ). When the primary fails, the secondary automatically becomes the new primary without manual intervention, ensuring database survival during a single AZ failure. This is the only option that meets the requirement for automatic failover across AZs.

Answer

Use an Auto Scaling group to launch a new SAP HANA instance if the current instance fails

Answer

Deploy the SAP HANA instance in a placement group within a single Availability Zone

Answer

Take daily EBS snapshots and copy them to another AWS Region

Question 12

A company runs SAP S/4HANA on AWS and needs to ensure that the system can automatically recover from an Availability Zone failure. The solution must use synchronous replication for zero data loss. Which AWS architecture meets these requirements?

Accepted Answer

SAP HANA System Replication with synchronous replication. SAP HANA System Replication with synchronous replication across Availability Zones ensures zero data loss and automatic failover. Option A is incorrect because EBS snapshots are asynchronous and do not provide zero data loss. Option B is incorrect because Multi-AZ RDS is not supported for HANA. Option C is incorrect because cluster placement groups are within a single AZ and do not provide cross-AZ failover.

Answer

EBS snapshots taken every 5 minutes

Answer

Multi-AZ RDS for SAP HANA

Answer

Cluster placement group spanning two AZs

Question 13

An SAP customer has deployed SAP HANA on AWS using an r5.12xlarge instance with 16 EBS io1 volumes for data and log. The system is running in production. The operations team receives an alert that one of the EBS volumes has failed (status check failed). The volume is part of the RAID 0 stripe for the data volume. What should they do to recover the system with minimal data loss?

Accepted Answer

Restore the HANA database from the latest backup to a new set of EBS volumes.. When an EBS volume in a RAID 0 stripe fails, the entire stripe is compromised because RAID 0 has no redundancy — data across all volumes is lost. The only reliable recovery with minimal data loss is to restore the HANA database from the latest backup (or use HANA storage snapshots if configured) onto a new set of EBS volumes. AWS cannot recover data from a failed EBS volume, and rebuilding the RAID array on the same volumes is impossible because the data is already gone.

Answer

Detach the failed volume, attach a new identical volume, and rebuild the RAID array.

Answer

Contact AWS Support to recover the data from the failed EBS volume.

Answer

Increase the size of the remaining volumes to compensate for the lost capacity.

Question 14

An SAP administrator is migrating an SAP Business Suite system from on-premises to AWS. The system uses an Oracle database that is 2 TB in size. The bandwidth between the on-premises data center and AWS is limited to 100 Mbps. The migration must be completed within a weekend (48 hours). The administrator decides to use AWS DMS for ongoing replication after an initial full load. However, the initial full load takes too long. What should the administrator do to accelerate the initial full load?

Accepted Answer

Use AWS Snowball Edge to physically transfer the database backup to AWS, then restore and use DMS for ongoing replication.. The 2 TB database over a 100 Mbps link would take approximately 47 hours just for the transfer (2 TB * 8 / 100 Mbps / 3600 seconds ≈ 47.6 hours), leaving no time for restore and validation. AWS Snowball Edge provides a physical shipping alternative that bypasses network bandwidth constraints entirely, allowing the full load to be completed within the weekend. After restoring the backup from Snowball, AWS DMS can be used for ongoing replication of changes.

Answer

Disable encryption on the database backup to reduce transfer overhead.

Answer

Increase the size of the DMS replication instance to the largest available.

Answer

Use Amazon S3 Transfer Acceleration to speed up the upload.

Question 15

A company is planning to migrate an SAP ERP system to AWS. They want to use an existing software license with no additional cost. Which AWS service allows them to bring their own SAP license?

Accepted Answer

AWS License Manager. AWS License Manager is the correct service for bring-your-own-license (BYOL) for SAP. Option A is wrong because AWS Organizations is for multi-account governance. Option C is wrong because AWS Systems Manager is for management, not licensing. Option D is wrong because AWS Service Catalog is for provisioning approved services.

Answer

AWS Organizations

Answer

AWS Systems Manager

Answer

AWS Service Catalog

Question 16

Which THREE factors should be considered when choosing an EC2 instance type for SAP HANA? (Choose three.)

Accepted Answer

The instance must have enough memory to fit the HANA database.. SAP HANA is an in-memory database that loads the entire dataset into RAM for processing. The EC2 instance must have sufficient memory to accommodate the HANA database size, including overhead for system tables and temporary data, as specified in the SAP HANA memory sizing guidelines.

Answer

The instance should have GPU accelerators for faster query processing.

Answer

The instance must have local instance store volumes for data persistence.

Question 17

An SAP administrator wants to automate the creation of a DR environment for SAP HANA on AWS. The DR site should be in a different region and must be started only during a disaster. Which AWS service should be used to orchestrate the DR process?

Accepted Answer

AWS Elastic Disaster Recovery (DRS) to replicate and orchestrate failover.. AWS Elastic Disaster Recovery (DRS) is the correct service because it provides continuous block-level replication for SAP HANA servers and includes built-in orchestration for failover and failback. This allows the DR environment to remain stopped until a disaster occurs, minimizing costs while ensuring rapid recovery.

Answer

AWS Systems Manager Automation to run DR scripts.

Answer

AWS CloudFormation StackSets to deploy the environment in the DR region.

Answer

Amazon S3 Cross-Region Replication to replicate SAP application data.

Question 18

A company is deploying SAP Business Suite on AWS. They need to ensure that the SAP system can handle a sudden increase in user load without manual intervention. Which AWS service should be used to automatically scale the SAP application servers?

Accepted Answer

AWS Auto Scaling. AWS Auto Scaling is the correct service because it automatically adjusts the number of SAP application server instances based on demand, using scaling policies tied to metrics like CPU utilization or memory. This ensures the SAP system can handle sudden user load spikes without manual intervention, which is a core requirement for elastic SAP deployments on AWS.

Answer

AWS Lambda

Answer

Amazon Elastic Container Service

Answer

Elastic Load Balancing

Question 19

A company is migrating an SAP NetWeaver system to AWS. The system uses an on-premises shared file system (NFS). Which TWO AWS services can provide a scalable, highly available NFS share for SAP transport directories?

Accepted Answer

Amazon Elastic File System (EFS). Amazon Elastic File System (EFS) (option C) is correct because it is a fully managed, elastic NFSv4 file system that scales automatically and is highly available across multiple Availability Zones, making it suitable for SAP transport directories. Amazon FSx for NetApp ONTAP (option E) is also correct because it provides a fully managed, highly available NFS file system with NetApp ONTAP features and multi-AZ deployment, which supports SAP transport directory requirements. Option A (AWS Storage Gateway File Gateway) is not correct because it presents SMB/NFS access to Amazon S3 but is primarily a hybrid caching gateway, not a native scalable, highly available NFS file system for SAP. Option B (Amazon EBS with a shared volume) is not correct because EBS volumes are block storage attached to a single EC2 instance and do not natively provide a shared NFS file system. Option D (Amazon S3 with S3 File Gateway) is not correct because S3 is object storage and S3 File Gateway is a file interface to S3, not a native NFS file system designed for SAP transport directories.

Answer

AWS Storage Gateway File Gateway

Answer

Amazon Elastic Block Store (EBS) with a shared volume

Answer

Amazon S3 with S3 File Gateway

Question 20

An SAP administrator needs to grant an external auditor read-only access to view SAP system logs stored in CloudWatch Logs. Which AWS identity-based policy should be used?

Accepted Answer

CloudWatchLogsReadOnlyAccess. The AWS managed policy CloudWatchLogsReadOnlyAccess grants read-only permissions specifically for CloudWatch Logs actions such as DescribeLogGroups, DescribeLogStreams, GetLogEvents, and FilterLogEvents. This is the least-privilege policy for an auditor who only needs to view log data, not modify or delete it. It does not grant access to other CloudWatch services like metrics or alarms, which are not required for log inspection.

Answer

AWSSupportAccess

Answer

AmazonS3ReadOnlyAccess

Answer

CloudWatchReadOnlyAccess