PAS-C01 Practice Exam 56 — 20 Questions

Question 1

A company is migrating its SAP system to AWS and needs to transfer a large amount of data (10 TB) from the on-premises data center to AWS. Which TWO AWS services can be used for this data transfer?

Accepted Answer

AWS DataSync. AWS DataSync (B) is correct because it is a purpose-built online data transfer service that automates and accelerates moving large datasets (including multi-terabyte volumes like this 10 TB SAP migration) between on-premises storage and AWS over the network, using a deployed agent and optimized transfer protocols. AWS Snowball (D) is correct because it is a physical petabyte-scale data transport device designed for large offline migrations, making it ideal for moving 10 TB when network bandwidth is limited or when a secure, shippable appliance is preferred. Amazon S3 Transfer Acceleration (A) is not among the marked answers because it only speeds up transfers into S3 buckets over the public internet via edge locations and is not a standalone migration service for on-premises SAP data. AWS CloudFormation (C) is an infrastructure-as-code provisioning service and does not transfer data. AWS DMS (E) is for migrating and replicating databases, not for bulk file or system data transfer of this kind.

Answer

Amazon S3 Transfer Acceleration

Answer

AWS CloudFormation

Answer

AWS Database Migration Service (DMS)

Question 2

A company is migrating a web application from an on-premises data center to AWS. The application uses a MySQL database that is 500 GB in size. The company wants to minimize downtime during the migration. Which approach should the company use?

Accepted Answer

Use AWS Database Migration Service (DMS) with ongoing replication. AWS Database Migration Service (DMS) with ongoing replication (change data capture, CDC) allows you to perform a live migration with minimal downtime. You can start a full load of the 500 GB MySQL database while the source remains operational, then enable CDC to replicate ongoing changes until you cut over to the target RDS instance, reducing the downtime window to seconds.

Answer

Use an RDS read replica and promote it

Answer

Stop the database, take a mysqldump, and restore to RDS

Answer

Use AWS Schema Conversion Tool (SCT) to migrate the schema and data

Question 3

A company is planning to run SAP NetWeaver on AWS. Which TWO services are recommended for monitoring the SAP system? (Choose TWO.)

Accepted Answer

Amazon CloudWatch with SAP monitoring agent. Amazon CloudWatch with the SAP monitoring agent (option A) is correct because AWS recommends installing the CloudWatch agent on SAP NetWeaver instances to collect OS-level metrics (CPU, memory, disk, swap) and custom SAP metrics, which are then published to CloudWatch for alarms and dashboards. SAP Solution Manager (option D) is correct because it is SAP's own application lifecycle and monitoring platform, and AWS documentation recommends it for end-to-end monitoring of the SAP NetWeaver stack, including ABAP and Java stacks, alongside CloudWatch. Amazon Inspector (option B) is a vulnerability management service for EC2 workloads, not an SAP application monitoring tool, so it does not fit. AWS Trusted Advisor (option C) provides best-practice checks across cost, security, and limits, but it does not monitor SAP NetWeaver components. AWS Config (option E) tracks resource configuration changes and compliance, which is unrelated to SAP system health monitoring.

Answer

Amazon Inspector

Answer

AWS Trusted Advisor

Answer

AWS Config

Question 4

A customer is running SAP NetWeaver on AWS and wants to use Amazon EFS for shared file storage for the SAP transport directory. Which access option should be used to secure the file system?

Accepted Answer

Security group. Amazon EFS uses security groups as a stateful firewall to control NFS traffic (port 2049) at the network level. For SAP transport directories, security groups allow you to restrict access to specific EC2 instances or other AWS resources that need to mount the EFS file system, providing granular network-layer security without managing individual IP addresses.

Answer

Network ACLs

Answer

IAM role

Answer

S3 bucket policy

Question 5

A company has a production AWS account that contains an Amazon RDS for MySQL DB instance. The database is critical and must have automated backups enabled with a retention period of 30 days. The company also requires point-in-time recovery to any second within the retention period. The operations team has configured automated backups with a retention period of 30 days, but they notice that the automated backups are not being taken consistently. The DB instance is in a Multi-AZ deployment and has a storage size of 500 GB. The team checks the backup window and finds that it is set to 02:00-03:00 UTC. The backup window is non-overlapping with the maintenance window. The DB instance is actively used during the backup window with heavy write traffic. Which of the following is the MOST likely reason for the inconsistent automated backups?

Accepted Answer

The heavy write traffic during the backup window causes I/O suspension and backup failures.. The heavy write traffic during the backup window causes I/O suspension, which can lead to backup failures. When an RDS for MySQL DB instance experiences high write activity during a backup, the backup process may be delayed or fail due to I/O suspension, especially if the instance is under heavy load. This is because automated backups require a consistent snapshot, and excessive write I/O can prevent the snapshot from completing within the backup window.

Answer

The storage size of 500 GB exceeds the maximum backup size limit.

Answer

The Multi-AZ deployment does not support automated backups.

Answer

The backup window overlaps with the maintenance window.

Question 6

An SAP system on AWS is experiencing high latency between the application server and the database server. Both are in the same VPC but different subnets. What is the most effective way to reduce latency?

Accepted Answer

Place both instances in a placement group in the same Availability Zone.. Placing both the SAP application server and database server in a placement group within the same Availability Zone ensures they are in close physical proximity, often on the same rack or within the same cluster. This minimizes network hops and reduces latency to single-digit microseconds, which is critical for SAP's high-throughput, low-latency communication between application and database layers.

Answer

Move the database to a different Availability Zone.

Answer

Use a VPN connection between subnets.

Answer

Increase the instance size of both servers.

Question 7

A company is running SAP ERP on AWS. The SAP application servers are in private subnets, and the database is in a separate private subnet. The company needs to allow the application servers to communicate with the database. Which AWS networking component should be configured to allow this traffic?

Accepted Answer

Security Group rules allowing traffic between the security groups.. Security groups act as a virtual firewall for instances, and you can reference another security group as a source in inbound rules. This allows the application servers' security group to be specified as the source for the database security group's inbound rule, enabling traffic between the subnets without exposing the database to the entire subnet. This is the most secure and AWS-recommended method for controlling traffic between instances within the same VPC.

Answer

VPC Peering connection between subnets.

Answer

Internet Gateway

Answer

Network ACL with inbound rules for the database subnet.

Question 8

An SAP administrator notices that the /hana/data filesystem on an SAP HANA database is approaching 95% utilization. The HANA instance uses EBS gp3 volumes. What is the MOST efficient way to increase storage without downtime?

Accepted Answer

Modify the existing EBS volume to increase its size.. EBS gp3 volumes support online resizing without downtime. You can increase the volume size while the instance is running, and then extend the filesystem and logical volume (if using LVM) to utilize the additional space. This avoids any disruption to the SAP HANA database.

Answer

Add a new EBS volume and extend the logical volume.

Answer

Migrate the database to a new instance with larger volumes.

Answer

Create a snapshot, create a larger volume, and restore.

Question 9

A company wants to automate the backup of SAP HANA databases running on EC2 instances. The backups must be stored in Amazon S3 for long-term retention. Which AWS service can be used to schedule and manage these backups?

Accepted Answer

AWS Backup. AWS Backup (Option C) is the correct service for automating backups of SAP HANA databases on EC2, supporting application-consistent backups via pre- and post-scripts and storing them in S3 for long-term retention. Option A (Storage Gateway) is for hybrid storage integration, not backup automation. Option B (DMS) is for database migration, not backup. Option D (S3 Lifecycle policies) manage object lifecycle, not scheduling backups.

Answer

AWS Storage Gateway

Answer

AWS Database Migration Service (DMS)

Answer

Amazon S3 Lifecycle policies

Question 10

A company is running SAP HANA on AWS. The HANA database is deployed on an r5.8xlarge instance. The company notices high CPU utilization on the instance during peak loads. The SAP team confirms that the HANA workload requires more CPU capacity. What is the most cost-effective way to increase CPU capacity without changing the instance family?

Accepted Answer

Resize the instance to a larger instance type in the r5 family.. Resizing the instance to a larger type within the r5 family (e.g., r5.12xlarge or r5.16xlarge) directly increases vCPU and memory capacity without changing the instance family, which is the most cost-effective approach for a single-node SAP HANA deployment. This avoids the complexity, licensing costs, and network latency of scale-out configurations while meeting the CPU demand.

Answer

Add more EBS volumes with higher IOPS to offload CPU.

Answer

Launch additional r5.8xlarge instances and configure HANA scale-out.

Answer

Configure Auto Scaling to add instances during peak load.

Question 11

A company is running SAP ERP on AWS and is experiencing high costs due to underutilized EC2 instances. The SAP system is non-production and can tolerate interruptions. Which approach would most cost-effectively reduce costs without compromising the ability to resume operations quickly?

Accepted Answer

Use EC2 Spot Instances for the application servers and configure them to be terminated gracefully. EC2 Spot Instances offer significant cost savings (up to 90% compared to On-Demand) for fault-tolerant, non-production SAP workloads. By configuring graceful termination (e.g., using lifecycle hooks or AWS Systems Manager to drain SAP application server connections before the instance is interrupted), the system can resume quickly when capacity becomes available again, meeting the requirement for cost reduction without compromising rapid recovery.

Answer

Purchase Reserved Instances for the current usage to get a discount

Answer

Increase the instance size to improve performance and reduce runtime

Answer

Use Dedicated Hosts to reduce licensing costs

Question 12

A company runs its SAP HANA database on an EC2 instance in a single Availability Zone. The system is critical and requires high availability. The current setup uses an EBS volume for data storage. During a recent failure simulation, the database took 45 minutes to recover because the EBS volume had to be reattached and the database had to replay logs. The operations team wants to reduce recovery time to less than 15 minutes. Which solution should they implement?

Accepted Answer

Deploy a second EC2 instance in a different Availability Zone and configure SAP HANA system replication.. Deploying a second EC2 instance in a different Availability Zone with SAP HANA system replication (synchronous replication) provides a standby database that can be promoted quickly, reducing recovery time to minutes. Option B is incorrect because more frequent snapshots still require restoring and log replay, which takes longer. Option C is incorrect because increasing provisioned IOPS improves performance but does not affect recovery time during failure. Option D is incorrect because Amazon S3 is an object storage service not suitable for low-latency database operations like SAP HANA.

Answer

Use AWS Backup to create more frequent snapshots.

Answer

Increase the provisioned IOPS of the EBS volume.

Answer

Move the database to Amazon S3 for faster access.

Question 13

An SAP administrator is restoring an SAP HANA database from a backup stored in Amazon S3. The restore fails with an error indicating that the backup file is corrupt. The backup was created using the SAP HANA BACKUP command with the S3 backint agent. What could cause the backup file to be corrupt?

Accepted Answer

The multipart upload of the backup file was interrupted and not completed.. When using the SAP HANA backint agent to back up to S3, the backup file is uploaded via multipart upload. If this multipart upload is interrupted and not completed, the resulting object in S3 will be incomplete, causing it to appear corrupt when attempting to restore. Option A is incorrect because S3 Transfer Acceleration improves transfer speed but does not affect file integrity. Option C is incorrect because S3 Versioning creates multiple versions of the same object but does not corrupt data. Option D is incorrect because S3 Cross-Region Replication creates identical copies of the object, so it would not introduce corruption.

Answer

S3 Transfer Acceleration was used during backup.

Answer

The S3 bucket has versioning enabled.

Answer

The backup was replicated to another AWS Region using S3 Cross-Region Replication.

Question 14

Which TWO components are required to set up SAP HANA System Replication (HSR) on AWS for high availability? (Choose TWO.)

Accepted Answer

A dedicated replication network interface with low latency.. Option A is correct because SAP HANA System Replication requires a dedicated, low-latency network path between the primary and secondary nodes for continuously shipping redo log entries; on AWS this is typically achieved with a separate ENI/subnet (often in a cluster placement group) so replication traffic is isolated from client and other traffic. Option B is correct because HSR for high availability requires a primary and a secondary HANA node, and placing the two EC2 instances in different Availability Zones provides AZ-level fault tolerance so the secondary can take over if the primary AZ fails. Option C is not required because an S3 bucket is only used for backing up redo log/backup files (e.g., via BACKINT), not for HSR log replication itself. Option D is not required because HSR replicates redo logs over the network to the secondary node's local storage; shared storage such as Amazon EFS is not used for HSR log replication (and is not supported for HANA data/log volumes). Option E is not required because HSR failover is handled by the HANA cluster/pacemaker and virtual IP or DNS, not by an NLB distributing database connections.

Answer

An Amazon S3 bucket for storing backup logs.

Answer

Shared storage (e.g., Amazon EFS) for log replication.

Answer

A Network Load Balancer to distribute database connections.

Question 15

An SAP administrator needs to back up the SAP HANA database daily to Amazon S3 using the Backint agent. What is the prerequisite for this integration?

Accepted Answer

Install the AWS Systems Manager Agent (SSM Agent) on the HANA host.. The AWS Backint agent for SAP HANA requires the AWS Systems Manager Agent (SSM Agent) to be installed on the HANA host. The Backint agent uses SSM Agent to securely communicate with AWS Systems Manager, which orchestrates the backup workflow and enables the agent to write backup data directly to Amazon S3. Without the SSM Agent, the Backint agent cannot authenticate or transfer data to S3, making it a mandatory prerequisite.

Answer

Create a backup vault in AWS Backup.

Answer

Mount an Amazon EFS file system to the HANA host for backup storage.

Answer

Configure AWS Database Migration Service (DMS) to replicate data to S3.

Question 16

A company is migrating an on-premises data center to AWS. The company needs to transfer 50 TB of data to Amazon S3. Which TWO AWS services can be used for this data transfer?

Accepted Answer

AWS Snowball Edge. AWS Snowball Edge is a petabyte-scale data transport solution that uses secure physical devices to transfer large amounts of data into and out of AWS. For a 50 TB migration, Snowball Edge provides a faster and more reliable option than internet-based transfers, as it avoids bandwidth limitations and long transfer times. The device is shipped to the customer, data is copied locally, and then returned to AWS for ingestion into Amazon S3.

Answer

AWS Application Migration Service (MGN)

Answer

AWS CloudFormation

Answer

AWS Database Migration Service (DMS)

Question 17

A company is migrating a custom CRM application to AWS. The application uses a PostgreSQL database. Which migration approach minimizes downtime?

Accepted Answer

Use AWS Database Migration Service (DMS) with ongoing replication (CDC).. AWS Database Migration Service (DMS) with ongoing change data capture (CDC) enables near-zero downtime migration by continuously replicating changes from the source to the target until cutover. Options B, C, and D all require taking the source database offline for backup or export, resulting in significant downtime.

Answer

Use AWS Backup to create a snapshot and restore to RDS.

Answer

Take a full backup of the source database, restore to RDS for PostgreSQL, and then cut over.

Answer

Use pg_dump to export the database and pg_restore to import into RDS.

Question 18

Which TWO of the following are valid options for implementing high availability for SAP NetWeaver on AWS?

Accepted Answer

Deploy two EC2 instances across Availability Zones with a shared file system (EFS) and a cluster manager.. SAP NetWeaver high availability on AWS is typically implemented by deploying two EC2 instances in separate Availability Zones, using Amazon EFS as the shared file system for SAP global and transport files, and a cluster manager such as Pacemaker/Corosync (Linux) or SIOS (Windows) to orchestrate failover of the ASCS/ERS or SCS instances. Option E is also correct because for Windows-based SAP NetWeaver, a Windows Server Failover Cluster (WSFC) provides the clustering layer, and Amazon FSx for Windows File Server supplies the required SMB-based shared storage for SAP Central Services and cluster quorum, which is the AWS-validated HA pattern. Option A is not correct because Amazon RDS Multi-AZ is a managed relational database HA feature and cannot host SAP Central Services (ASCS/SCS), which must run on EC2 instances. Option B is not correct because Amazon S3 is object storage and cannot serve as a POSIX/SMB shared file system for SAP, and manual failover does not provide the automatic high availability required. Option D is not correct because running SAP Central Services on a single large EC2 instance is a single point of failure and therefore does not implement high availability.

Answer

Use Amazon RDS Multi-AZ for SAP Central Services.

Answer

Use Amazon S3 for shared storage and configure manual failover.

Answer

Run SAP Central Services on a single large EC2 instance.

Question 19

Which THREE considerations are important when designing a SAP workload for high availability on AWS? (Select three.)

Accepted Answer

Deploy the SAP application across multiple Availability Zones. Option B is correct because deploying the SAP application across multiple Availability Zones provides fault isolation, so an AZ-level failure does not take down the entire SAP landscape. Option D is correct because Amazon S3 offers durable, scalable, and cost-effective storage for long-term backups and can be used with lifecycle policies and cross-region replication for disaster recovery. Option E is correct because SAP HANA System Replication continuously replicates data from a primary to a standby HANA instance, enabling fast failover and minimal data loss in a high-availability architecture. Option A is not appropriate because EBS Multi-Attach is limited to specific Nitro instances and cluster-aware file systems, and it is not a supported or recommended mechanism for sharing SAP data volumes across instances. Option C is not a high-availability design because running the SAP system on a single large instance creates a single point of failure with no redundancy.

Answer

Use EBS Multi-Attach to share volumes between two EC2 instances

Answer

Run the SAP system on a single large instance

Question 20

An SAP system on AWS uses a large memory instance (x1e.32xlarge) for HANA. The administrator notices that the system is experiencing high swap usage. The HANA memory usage is at 90% of physical RAM. The instance has 4 TB of RAM, and the HANA data size is 3.8 TB. The administrator wants to avoid swap usage to maintain performance. Which solution should be implemented?

Accepted Answer

Migrate to a larger instance type, such as u-6tb1, with more RAM.. The x1e.32xlarge instance has 4 TB of RAM, and with HANA using 90% (3.6 TB) and the data size at 3.8 TB, the memory is insufficient to hold the entire dataset, causing swap usage. Migrating to a u-6tb1 instance with 6 TB of RAM provides enough physical memory to accommodate the full HANA data footprint, eliminating the need for swap and maintaining performance.

Answer

Enable swap space on the instance store volumes to offload memory pressure.

Answer

Optimize HANA column store compression to reduce memory footprint.

Answer

Increase the provisioned IOPS on the EBS volumes to reduce I/O latency.