PAS-C01 Practice Exam 53 — 20 Questions

Question 1

An SAP ERP system on AWS is experiencing intermittent connectivity issues between the SAP application servers and the database server. Both are in the same VPC, but in different subnets. The security group for the database allows traffic from the application security group. Network ACLs are default (allow all). Despite this, some application servers cannot connect during peak loads. What is the most likely cause?

Accepted Answer

The connection tracking table for the database security group is full, dropping new connections.. Option D is correct because security groups have a limit on the number of connections they can track, and during peak loads, the connection tracking table can become full, causing new connections to be dropped. Option A is wrong because if there are multiple subnets, a single NAT gateway is not relevant for internal traffic. Option B is wrong because VPC endpoints are for AWS services, not for database connectivity. Option C is wrong because security group rules are stateful and do not have a rule evaluation limit in this context.

Answer

The security group inbound rule for the database has reached its rule evaluation limit.

Answer

The application servers are using a single NAT Gateway for outbound traffic, causing a bottleneck.

Answer

The database is accessed through a VPC Endpoint, which is rate-limiting connections.

Question 2

Your company is running SAP Business Suite on Oracle on AWS. The database is hosted on an EC2 instance with EBS volumes configured as RAID 0 for performance. You are planning to migrate to SAP HANA on AWS. The new HANA database will be hosted on a single EC2 instance with EBS io2 volumes. You need to ensure minimal downtime during the migration. Which approach should you take?

Accepted Answer

Use SAP HANA System Replication (HSR) with DMO to replicate data while the source is running, then perform a final cutover.. Option C is correct because using SAP HANA System Replication with a DMO migration allows near-zero downtime by replicating data while the source system is running. Option A (cold migration) causes extended downtime. Option B (AWS DMS) is not suitable for migrating from Oracle to HANA as it does not support HANA as a target. Option D (SAP LaMa) can assist but does not directly provide near-zero downtime migration.

Answer

Use AWS Database Migration Service (DMS) to continuously replicate from Oracle to HANA.

Answer

Use SAP Landscape Management (LaMa) to automate the migration with minimal downtime.

Answer

Perform a classic migration using SAP Software Update Manager (SUM) with database migration option (DMO) in a single step, stopping the source system.

Question 3

A company runs its SAP HANA database on a single EC2 instance with EBS storage. The database is critical and the company needs to ensure data durability and recoverability in case of a disaster. Which TWO actions should the company take?

Accepted Answer

Configure automated backups of the HANA database to Amazon S3.. Option A is correct because backups to S3 provide durable storage. Option C is correct because HANA System Replication to a secondary instance in another AZ provides high availability. Option B is wrong because EBS snapshots are stored in the same region and not sufficient for disaster recovery. Option D is wrong because Multi-AZ for RDS is for RDS, not EC2. Option E is wrong because Cross-Region Replication is for S3, not for live database replication.

Answer

Enable Multi-AZ deployment for the HANA database on RDS.

Answer

Take periodic EBS snapshots and copy them to another region.

Answer

Use Cross-Region Replication for the EBS volumes.

Question 4

A company runs its SAP ERP system on AWS. The SAP application servers are in an Auto Scaling group across two Availability Zones. The SAP HANA database runs on a single EC2 instance in us-east-1a. The database instance has an Elastic IP and uses EBS io1 volumes with 5000 provisioned IOPS. During a recent deployment, the company experienced a complete outage when the Availability Zone us-east-1a became unavailable due to a power failure. The database was unavailable for 6 hours until the zone recovered. The company wants to implement a highly available architecture that can automatically recover from an AZ failure with minimal data loss. The Recovery Point Objective (RPO) is 15 minutes and Recovery Time Objective (RTO) is 30 minutes. What should the company do?

Accepted Answer

Set up HANA System Replication with synchronous replication to a secondary instance in us-east-1b and configure automatic takeover.. Option D is correct because HANA System Replication in sync mode with automatic takeover meets the RPO and RTO. Option A is wrong because a single AZ still has the same risk. Option B is wrong because Multi-AZ for RDS is not applicable to HANA on EC2. Option C is wrong because EBS snapshots have an RPO of hours, not 15 minutes.

Answer

Take EBS snapshots every 15 minutes and copy them to another region.

Answer

Move the HANA database to a larger instance in the same Availability Zone and increase IOPS to 10000.

Answer

Migrate the HANA database to Amazon RDS for SAP HANA with Multi-AZ enabled.

Question 5

An SAP customer is running SAP HANA on AWS using m5.8xlarge instances. They want to implement a disaster recovery (DR) strategy using a secondary region with a standby HANA instance. Which TWO options should they consider to replicate the HANA data to the DR region? (Select TWO.)

Accepted Answer

Use Amazon EBS Snapshots and copy them to the DR region for periodic restore.. Options B and C are correct. SAP HANA System Replication is the standard method for replicating data between HANA instances across regions. Amazon EBS Snapshots can be copied to another region and used to restore volumes. Option A (EFS) is not suitable for HANA data volumes. Option D (S3 Transfer Acceleration) is not a replication method for HANA. Option E (DMS) is for database migrations, not ongoing replication.

Answer

Use AWS Database Migration Service (DMS) to continuously replicate HANA to the DR region.

Answer

Use Amazon EFS to replicate the HANA data directory to the DR region.

Answer

Use AWS S3 Transfer Acceleration to continuously upload HANA log files to the DR region.

Question 6

A company is running SAP HANA on AWS with a single Availability Zone (AZ). They want to improve high availability (HA) by deploying across multiple AZs. Which THREE components must be configured to support a multi-AZ SAP HANA HA setup? (Select THREE.)

Accepted Answer

Elastic Load Balancer (ALB or NLB) for the SAP application tier. Options A, C, and D are correct. SAP HANA System Replication is required for database HA across AZs. A load balancer (like ELB) is needed to distribute traffic to application servers. EBS Multi-Attach volumes are not supported; instead, shared storage like FSx or EFS is used. Option B (CloudFront) is not relevant. Option E (Route 53) is for DNS but not a core HA component.

Answer

Amazon Route 53 health checks for automatic failover

Answer

Amazon CloudFront distribution in front of the application servers

Question 7

A company is deploying a new SAP S/4HANA system on AWS. The system will be used by 500 concurrent users. The SAP application server and the HANA database will run on separate EC2 instances. The company needs to ensure that the database instance has enough memory for the HANA database, which requires 512 GB of RAM. The application server requires 32 vCPUs and 128 GB of RAM. The company wants to minimize costs while meeting these requirements. Which combination of EC2 instance types should the company choose?

Accepted Answer

Use an r5.24xlarge for the database and an r5.8xlarge for the application server.. Option B is correct because an x1e.4xlarge has 122 GB memory, too low; x1e.8xlarge has 244 GB; x1e.16xlarge has 488 GB; x1e.32xlarge has 976 GB. For 512 GB, the x1e.32xlarge is overkill; but x1e.16xlarge has 488 GB, which is insufficient. Actually, the correct instance for 512 GB is x1e.16xlarge (488 GB) is not enough; x1e.32xlarge (976 GB) is too large. Better: use an r5.24xlarge with 768 GB. Among options, D: r5.24xlarge (768 GB) for DB and r5.8xlarge (32 vCPU, 256 GB) for app. That fits. Option A: x1e.32xlarge is expensive. Option B: x1e.8xlarge (244 GB) insufficient. Option C: r5.12xlarge (384 GB) insufficient. So D is correct.

Answer

Use an r5.12xlarge for the database and an m5.4xlarge for the application server.

Answer

Use an x1e.8xlarge for the database and an r5.8xlarge for the application server.

Answer

Use an x1e.32xlarge for the database and an m5.8xlarge for the application server.

Question 8

A company is running an SAP S/4HANA system on AWS. The SAP application is deployed on EC2 instances in a Multi-AZ setup with a shared /sapmnt directory using Amazon EFS. The database is running on Amazon RDS for SAP ASE. Performance monitoring reveals that the /sapmnt volume is experiencing high read latency during peak hours. Which action would most effectively reduce latency?

Accepted Answer

Migrate /sapmnt to Amazon FSx for NetApp ONTAP.. Option B is correct because switching to Amazon FSx for NetApp ONTAP provides a high-performance shared file system with low-latency access and is fully supported for SAP /sapmnt. Option A (increase EFS throughput) may help but is less effective than using FSx. Option C (ElastiCache) does not replace the file system. Option D (increase instance size) addresses compute, not storage latency.

Answer

Use Amazon ElastiCache for Redis to cache /sapmnt data.

Answer

Increase the provisioned throughput on the EFS file system.

Answer

Increase the size of the EC2 instances running SAP.

Question 9

An SAP system on AWS is using a shared /usr/sap/trans directory mounted on an NFS file server. The file server is an EC2 instance with a standard gp2 EBS volume. During SAP transports, users experience slow response times and occasional timeouts. The system administrator suspects the file server is the bottleneck. Which solution would provide a fully managed, highly available, and performant file share for SAP transport files?

Accepted Answer

Migrate /usr/sap/trans to Amazon FSx for NetApp ONTAP with Multi-AZ deployment.. Option A is correct because Amazon FSx for NetApp ONTAP is a fully managed, high-performance NFS file system that supports multi-AZ and is SAP-certified for /usr/sap/trans. Option B (EFS) can be used but may not provide the same level of performance and features as FSx ONTAP for this use case. Option C (increase EBS size) does not address the single point of failure. Option D (multiple file servers) adds complexity and is not fully managed.

Answer

Configure multiple EC2 file servers with a load balancer.

Answer

Replace the EC2 file server with Amazon EFS.

Answer

Increase the EBS volume size of the file server to improve throughput.

Question 10

An SAP customer has deployed SAP HANA on AWS using an r5.12xlarge instance with 16 EBS io1 volumes for data and log. The system is running in production. The operations team receives an alert that one of the EBS volumes has failed (status check failed). The volume is part of the RAID 0 stripe for the data volume. What should they do to recover the system with minimal data loss?

Accepted Answer

Restore the HANA database from the latest backup to a new set of EBS volumes.. Option D is correct because since the failed volume is part of a RAID 0 stripe, the entire stripe is compromised. Restoring from the most recent backup is the safest way to recover with minimal data loss. Option A (replace volume and rebuild RAID) may not work because RAID 0 has no redundancy. Option B (AWS Support) may help but not recover data directly. Option C (increase volume size) does not fix the failed volume.

Answer

Detach the failed volume, attach a new identical volume, and rebuild the RAID array.

Answer

Contact AWS Support to recover the data from the failed EBS volume.

Answer

Increase the size of the remaining volumes to compensate for the lost capacity.

Question 11

A company is migrating an on-premises SAP HANA database to AWS. The database size is 2 TB and the network bandwidth is 100 Mbps. The migration must minimize downtime and support incremental data synchronization. Which AWS service should the company use?

Accepted Answer

AWS Database Migration Service (DMS). AWS DMS supports ongoing replication and can migrate large databases with minimal downtime. Option A (AWS Snowball) is for offline data transfer, not incremental sync. Option B (S3 Transfer Acceleration) speeds up uploads but does not handle database replication. Option D (Direct Connect) provides dedicated network but is not a migration service.

Answer

AWS Direct Connect

Answer

AWS Snowball

Answer

Amazon S3 Transfer Acceleration

Question 12

An organization is planning to migrate an SAP ERP system from on-premises to AWS. The system uses a custom ABAP application that has a hardcoded IP address for RFC connections. The migration strategy must minimize changes to the application. What is the MOST effective approach?

Accepted Answer

Assign an Elastic IP address to the SAP instance. Using an Elastic IP ensures the public IP remains the same after migration, avoiding application changes. Option A (DNS) would require application changes. Option C (NAT Gateway) is for outbound traffic. Option D (VPC Peering) does not provide a fixed IP.

Answer

Use a NAT Gateway to provide a fixed IP

Answer

Use VPC Peering to connect on-premises to AWS

Answer

Use a DNS name and update the application to use the DNS name

Question 13

During a migration of an SAP system to AWS, the SAP application team reports that batch jobs are failing with an error 'RFC connection refused'. The on-premises system and AWS are connected via a VPN. What is the MOST likely cause?

Accepted Answer

The security group attached to the SAP instance does not allow inbound RFC traffic. Security groups act as a virtual firewall for EC2 instances. If inbound RFC ports are not allowed, connections will be refused. Option A (NACL) operates at subnet level, but SG is more common for instance-level. Option C (Route table) is for routing, not security. Option D (Bandwidth) would cause timeouts, not immediate refusal.

Answer

The VPN bandwidth is insufficient causing timeouts

Answer

The network ACLs are blocking the RFC ports

Answer

The route table does not have a route to the on-premises network

Question 14

A company is migrating an SAP BusinessObjects environment to AWS. They need to ensure high availability for the web tier and have a requirement to use a single DNS name for end users. Which AWS service should they use to distribute traffic across multiple web servers?

Accepted Answer

Application Load Balancer. Application Load Balancer operates at Layer 7 and can distribute HTTP/HTTPS traffic. Option A (NLB) is Layer 4, not ideal for web applications. Option B (CloudFront) is a CDN, not a load balancer. Option D (Route 53 weighted routing) distributes traffic but does not provide health checks like a load balancer.

Answer

Amazon CloudFront

Answer

Network Load Balancer

Answer

Amazon Route 53 weighted routing policy

Question 15

A company is migrating a large SAP HANA database to AWS. They plan to use AWS DMS for ongoing replication. The source database is Oracle. During the full load phase, DMS reports an error: 'Failed to add supplemental logging for table'. What is the MOST likely cause?

Accepted Answer

The source database does not have supplemental logging enabled. DMS requires supplemental logging on the source Oracle database to capture changes. Option A (Memory) would cause performance issues, not this error. Option B (Network) would cause connectivity issues. Option D (Target storage) would cause target-side errors.

Answer

The target database storage is insufficient

Answer

The network latency between source and target is too high

Answer

The source database does not have enough memory for DMS

Question 16

An organization is migrating an SAP HANA database to AWS. They plan to use AWS DMS for ongoing replication from an on-premises Oracle database to an Amazon RDS for Oracle instance. Which THREE configurations are necessary for DMS to perform ongoing replication? (Choose THREE.)

Accepted Answer

A target endpoint for the Amazon RDS for Oracle instance. DMS needs a source endpoint (Oracle), a target endpoint (RDS Oracle), and a replication instance. Option D (CloudWatch) is for monitoring, not required. Option E (SNS) is for notifications.

Answer

An Amazon SNS topic for replication alerts

Answer

An Amazon CloudWatch dashboard to monitor replication

Question 17

A company is migrating an SAP system to AWS. They want to use an AWS service to automate the deployment of SAP applications according to best practices. Which TWO services can be used for this purpose? (Choose TWO.)

Accepted Answer

AWS CloudFormation. AWS Launch Wizard and AWS CloudFormation can automate SAP deployments. Option B (Elastic Beanstalk) is not designed for SAP. Option C (CodeDeploy) is for application deployment, not infrastructure. Option E (OpsWorks) is for configuration management.

Answer

AWS OpsWorks

Answer

AWS Elastic Beanstalk

Answer

AWS CodeDeploy

Question 18

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database is 2 TB in size and has a high transaction rate. The migration must have minimal downtime. Which AWS service should be used for the migration?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) supports ongoing replication to minimize downtime during migration. Option A is wrong because AWS Server Migration Service is for server migrations, not databases. Option C is wrong because AWS DataSync is for file-based data transfers. Option D is wrong because AWS Snowball is for large-scale offline data transfer, not suitable for minimal downtime scenarios.

Answer

AWS Snowball Edge

Answer

AWS Server Migration Service (SMS)

Answer

AWS DataSync

Question 19

An organization is migrating a legacy application to AWS. The application requires a static IP address for client whitelisting. After migrating the application to an Application Load Balancer (ALB) with an Auto Scaling group, clients report connection failures. What should be done to resolve this issue?

Accepted Answer

Replace the ALB with a Network Load Balancer (NLB) and assign an Elastic IP.. Option C is correct because an ALB does not have a static IP; using a Network Load Balancer (NLB) with an Elastic IP provides a static IP for whitelisting. Option A is wrong because an ALB cannot be assigned an Elastic IP. Option B is wrong because an ALB already distributes traffic. Option D is wrong because an Nginx proxy adds complexity and still requires a static IP.

Answer

Place an Nginx reverse proxy in front of the ALB with an Elastic IP.

Answer

Assign an Elastic IP to the ALB.

Answer

Configure the ALB to use a round-robin routing algorithm.

Question 20

A company is migrating a SAP system to AWS and wants to use AWS Systems Manager for patching. Which TWO prerequisites are required to use AWS Systems Manager Patch Manager?

Accepted Answer

The AWS Systems Manager Agent (SSM Agent) must be installed on the EC2 instance.. Correct options are A and D. The SSM Agent must be installed and running on the EC2 instances, and the instances must have an IAM role that grants Systems Manager permissions. Option B is wrong because Patch Manager does not require the instance to be in a public subnet. Option C is wrong because Patch Manager works with both Amazon Linux and Windows. Option E is wrong because Patch Manager does not require a reboot schedule.

Answer

The EC2 instance must be in a public subnet.

Answer

The EC2 instance must be running Amazon Linux 2.

Answer

A maintenance window must be configured with a reboot option.