PAS-C01 Practice Exam 59 — 20 Questions

Question 1

An SAP system administrator needs to monitor the CPU and memory utilization of SAP EC2 instances. Which TWO AWS services can be used to collect and visualize these metrics? (Choose TWO.)

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch (B) is correct because it natively collects EC2 metrics such as CPUUtilization and, via the CloudWatch agent, memory metrics like mem_used_percent, and it can visualize them in dashboards and trigger alarms. Amazon Managed Service for Prometheus (D) is correct because it is a managed, Prometheus-compatible monitoring service that can scrape and store EC2 CPU/memory metrics (e.g., via node_exporter) and visualize them with Grafana. AWS Trusted Advisor (A) is not correct because it provides best-practice checks and recommendations, not time-series metric collection or visualization. AWS CloudTrail (C) is not correct because it records API activity and audit events, not resource utilization metrics. AWS Config (E) is not correct because it tracks resource configuration changes and compliance, not CPU or memory performance data.

Answer

AWS Trusted Advisor

Answer

AWS CloudTrail

Answer

AWS Config

Question 2

Which THREE are valid strategies for backing up an SAP HANA database on AWS? (Choose three.)

Accepted Answer

Use Amazon EBS snapshots of the HANA data volumes.. Option A is correct because Amazon EBS snapshots provide crash-consistent, point-in-time backups of the EBS volumes hosting the SAP HANA data and log files, and AWS supports snapshotting HANA volumes (ideally with the HANA filesystem quiesced or via the AWS-provided script) as a valid storage-level backup strategy. Option B is correct because AWS Backup can centrally schedule, manage, and retain backups of supported AWS resources including EBS volumes used by SAP HANA, giving policy-driven backup plans with lifecycle and cross-region/cross-account copy. Option C is correct because SAP HANA's Backint interface is supported on AWS through the SAP-certified backint agent for Amazon S3, allowing HANA to write full, differential, and log backups directly to S3 as a native database backup strategy. Option D is not valid because Amazon RDS does not offer an SAP HANA engine, so no RDS for SAP HANA read replica exists. Option E is not valid as a backup strategy because an S3 lifecycle policy only transitions existing objects between storage classes; it does not create backups, and moving backups immediately to Glacier would also break HANA's restore/backint requirements.

Answer

Set up an Amazon RDS for SAP HANA read replica.

Answer

Configure a lifecycle policy to move backups to Amazon S3 Glacier immediately.

Question 3

A company is designing a multi-zone SAP system on AWS. They want to minimize network latency between SAP application servers and the SAP HANA database. What is the best practice for deploying these components?

Accepted Answer

Deploy application servers and HANA in the same AZ and same VPC.. Deploying both the SAP application servers and the SAP HANA database in the same Availability Zone (AZ) and the same VPC minimizes network latency because traffic stays within a single data center, using low-latency, high-bandwidth links. SAP HANA is latency-sensitive, and even single-digit millisecond increases can degrade performance; co-location in the same AZ ensures the lowest possible round-trip time (RTT) for SQL queries and data transfers.

Answer

Deploy in different VPCs and use VPC peering.

Answer

Deploy in different AWS Regions.

Answer

Deploy application servers in one AZ and HANA in another AZ.

Question 4

A company is deploying SAP S/4HANA on AWS. They need to choose the appropriate storage for the database volume to meet high IOPS and low latency requirements. Which AWS storage service should they use?

Accepted Answer

Amazon EBS io2 Block Express volumes. Amazon EBS io2 Block Express volumes are designed for mission-critical SAP HANA workloads, offering up to 256,000 IOPS per volume and sub-millisecond latency. They provide 99.999% durability and meet the high-performance requirements for SAP S/4HANA database volumes on AWS.

Answer

Amazon EFS

Answer

Amazon S3

Answer

Amazon EBS gp3 volumes

Question 5

A company is migrating its SAP ERP system to AWS using a heterogeneous migration where the source database is Oracle and the target is SAP HANA. Which AWS service is essential for converting the Oracle schema to SAP HANA schema?

Accepted Answer

AWS Schema Conversion Tool (SCT). AWS Schema Conversion Tool (SCT) is designed to convert database schemas from one engine to another, including Oracle to SAP HANA. Option C is the correct choice. Option A (AWS DMS) migrates data but does not convert schema. Option B (AWS DataSync) is for file transfer. Option D (AWS SMS) is for server migration.

Answer

AWS Database Migration Service (DMS)

Answer

AWS DataSync

Answer

AWS Server Migration Service (SMS)

Question 6

Which TWO of the following are best practices for running SAP HANA on AWS? (Select TWO.)

Accepted Answer

Use EBS Snapshots for backup of HANA data volumes.. EBS Snapshots provide a consistent, crash-consistent backup mechanism for HANA data volumes when used with application-consistent procedures (e.g., pre-freeze/post-thaw scripts via AWS Backup or custom automation). Snapshots are block-level, incremental, and can be automated for point-in-time recovery, aligning with SAP HANA backup best practices on AWS.

Answer

Use Amazon EFS as the storage layer for HANA data files.

Answer

Use T3 instances for production to save costs.

Answer

Use Amazon RDS Multi-AZ for HANA database replication.

Question 7

A company is migrating its SAP landscape to AWS and wants to automate the deployment of SAP applications using infrastructure as code. Which AWS service should the company use to define and provision the AWS infrastructure?

Accepted Answer

AWS CloudFormation. AWS CloudFormation allows defining and provisioning AWS infrastructure as code. Option A (Elastic Beanstalk) is wrong because it is a platform-as-a-service (PaaS) for deploying web applications, not for defining infrastructure. Option C (CodeDeploy) is wrong because it automates code deployments to running instances, not infrastructure provisioning. Option D (OpsWorks) is wrong because it is a configuration management service using Chef/Puppet, not a general-purpose IaC tool.

Answer

AWS Elastic Beanstalk

Answer

AWS CodeDeploy

Answer

AWS OpsWorks

Question 8

A company is migrating its on-premises SAP landscape to AWS. The SAP system uses Oracle Database. The migration must minimize downtime. Which AWS service should be used for the database migration?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) is the correct choice because it supports ongoing replication from Oracle to a target database (e.g., Amazon RDS for Oracle or Amazon Aurora) with minimal downtime. DMS can perform a full load followed by continuous change data capture (CDC) using Oracle LogMiner or binary reader to keep the source and target synchronized until cutover.

Answer

AWS Snowball Edge

Answer

AWS CloudEndure Migration

Answer

Amazon S3 Transfer Acceleration

Question 9

A company is migrating an SAP environment to AWS using a heterogeneous database migration from Oracle to SAP HANA. The migration tool must convert the database schema and data types. Which AWS service or feature should be used?

Accepted Answer

AWS Database Migration Service (DMS) with AWS Schema Conversion Tool (SCT). AWS Database Migration Service (DMS) combined with the AWS Schema Conversion Tool (SCT) is the correct choice because SCT performs the heterogeneous schema and data-type conversion from Oracle to SAP HANA, while DMS handles the actual data migration with minimal downtime. This pairing is specifically designed for cross-engine migrations where the source and target database platforms differ. AWS Server Migration Service is for migrating on-premises servers/VMs to EC2, not for database schema conversion. AWS Data Pipeline is an orchestration service for data workflows and does not convert schemas or data types. SAP HANA Studio is a client administration/development tool, not a migration service for converting Oracle schemas.

Answer

AWS Server Migration Service

Answer

AWS Data Pipeline

Answer

SAP HANA Studio

Question 10

A company is using AWS Systems Manager to automate patching of SAP application servers. The patching process should run during a maintenance window every Sunday at 2 AM. Which Systems Manager capability should be used to schedule the patching?

Accepted Answer

Maintenance Windows. Maintenance Windows (option D) is the correct capability because it is the Systems Manager feature specifically designed to schedule recurring operational tasks, such as patching, at defined times like every Sunday at 2 AM. It lets you register targets and tasks (for example, running Patch Manager or Automation documents) and executes them only within the specified window. Patch Manager (B) performs the actual patching but does not itself provide the cron-style scheduling; Automation (A) runs runbooks but is not the scheduling mechanism; and State Manager (C) enforces a persistent desired state on instances rather than scheduling time-bound maintenance tasks.

Answer

Automation

Answer

Patch Manager

Answer

State Manager

Question 11

A company is migrating an SAP S/4HANA system to AWS. The system uses SAP HANA database with a high availability setup using SAP HANA System Replication (HSR) in a scale-up configuration. The company wants to use Amazon EC2 instances with Amazon EBS volumes. Which of the following must be configured to ensure that the HSR secondary instance can automatically take over in case of a failure of the primary instance?

Accepted Answer

A cluster solution such as Pacemaker with a STONITH mechanism and a virtual IP address.. Automatic failover for SAP HANA System Replication requires a cluster solution like Pacemaker that can monitor the replication, promote the secondary, and fence the failed node. A virtual IP ensures seamless client reconnection. Other options like load balancers or DNS failover do not manage the HANA replication state or perform the necessary takeover operations.

Answer

Amazon EBS Multi-Attach enabled volumes for both primary and secondary instances.

Answer

Amazon Route 53 health checks with DNS failover to the secondary instance's IP address.

Answer

AWS Elastic Load Balancer with a Network Load Balancer targeting both instances.

Question 12

An operations team is responsible for patching the operating system of SAP EC2 instances. They want to automate the patching process while minimizing downtime. Which approach should they use?

Accepted Answer

Use AWS Systems Manager Patch Manager with a maintenance window and a patch baseline.. The correct option is B: AWS Systems Manager Patch Manager with a maintenance window and a patch baseline. Patch Manager automates OS patching across EC2 instances using defined patch baselines (which specify approved patches and auto-approval rules), while maintenance windows schedule the patching during controlled timeframes to minimize downtime; it also supports SAP instances via SSM Agent and can use pre/post scripts for stop/start orchestration. Option A is not ideal because AWS OpsWorks is a configuration management service (Chef/Puppet) and is not the purpose-built patching automation tool, adding unnecessary complexity. Option C is manual and error-prone, contradicting the automation goal. Option D replaces instances via a baked AMI but does not automate ongoing OS patching and can cause disruption for stateful SAP workloads.

Answer

Deploy a configuration management tool like AWS OpsWorks to apply patches.

Answer

Schedule a weekly maintenance window and manually apply patches via RDP/SSH.

Answer

Create an Auto Scaling group with a custom AMI that includes the latest patches.

Question 13

An SAP administrator needs to receive alerts when the CPU utilization of an SAP application server exceeds 90% for 5 minutes. Which AWS service should be used to set up the alert?

Accepted Answer

Amazon CloudWatch Alarms. Amazon CloudWatch Alarms (option B) is correct because CloudWatch collects CPU utilization metrics from EC2 instances and can trigger an alarm when a metric breaches a threshold, such as CPUUtilization > 90% for a 5-minute period, using the Average statistic and a 5-minute period with the appropriate evaluation periods. VPC Flow Logs (option A) capture IP traffic metadata for network interfaces and have nothing to do with CPU metrics. AWS CloudTrail (option C) records API activity and management events for auditing, not performance metrics. AWS Config (option D) evaluates resource configuration compliance against rules, not real-time CPU utilization thresholds.

Answer

VPC Flow Logs

Answer

AWS CloudTrail

Answer

AWS Config

Question 14

A company is moving their SAP Business One application from an on-premises data center to AWS. The application runs on Windows Server and uses Microsoft SQL Server. They want to use Amazon EC2 for the application and Amazon RDS for SQL Server for the database. They have already used AWS SCT to assess the database schema and found that it is compatible. What should they do next to migrate the database with minimal downtime?

Accepted Answer

Use AWS DMS to perform a full load and then enable ongoing replication. Option C is correct because AWS DMS can perform a full load of the existing SQL Server database into Amazon RDS for SQL Server and then enable ongoing replication (change data capture) to keep the target synchronized, allowing the cutover to happen with minimal downtime. Since the schema is already assessed as compatible, no schema conversion is needed, so DMS alone handles both the initial data copy and continuous changes. Option A is wrong because exporting to flat files and importing via S3 is a manual, offline process that cannot keep the target in sync and would require significant downtime. Option B is wrong because AWS SCT is unnecessary here—the schema is already compatible—and adding SCT conversion does not address continuous replication. Option D is wrong because a native backup/restore to RDS is a one-time operation that does not provide ongoing replication, so changes made after the backup would be lost or require downtime to reconcile.

Answer

Export the database to flat files and upload to S3, then import into RDS

Answer

Use AWS SCT to convert the schema and then use AWS DMS

Answer

Take a full backup of the on-premises SQL Server, upload it to Amazon S3, and restore to RDS

Question 15

A company is migrating a large SAP HANA database to AWS. The database is 10 TB in size and must be migrated with minimal downtime. The company has a 1 Gbps AWS Direct Connect connection. They want to use AWS DataSync to transfer the data from an on-premises NFS server to Amazon EFS, and then restore the HANA database on an EC2 instance. Which of the following is the MOST significant limitation of this approach?

Accepted Answer

Amazon EFS is not supported as a destination for SAP HANA database files.. The most significant limitation is that Amazon EFS is not suitable for SAP HANA database files. SAP HANA requires block storage (Amazon EBS) with provisioned IOPS and throughput, and EFS does not meet the performance or certification requirements. Therefore, even if DataSync can transfer the data, the destination is invalid for HANA. The other options are either false or less critical.

Answer

The 1 Gbps Direct Connect connection is too slow for a 10 TB transfer within a reasonable maintenance window.

Answer

AWS DataSync does not support NFS servers as a source location.

Answer

AWS DataSync cannot transfer more than 5 TB of data in a single task.

Question 16

A company runs SAP ERP Central Component (ECC) on AWS with an Oracle database on Amazon RDS for Oracle. The operations team needs to apply a critical patch to the Oracle database with minimal downtime. The database is in a Multi-AZ deployment. Which approach should they take?

Accepted Answer

Modify the RDS instance to apply the patch during the next maintenance window, which will automatically fail over to the standby and back with minimal downtime.. Amazon RDS for Oracle Multi-AZ deployments are designed to minimize downtime during maintenance, including patching. When you initiate a patch, RDS applies it to the standby first, then performs a failover, and finally patches the old primary. The failover typically causes less than a minute of downtime, which is acceptable for a critical patch.

Answer

Use Oracle Data Guard to create a standby database on a separate RDS instance, apply the patch to the standby, and then switch over.

Answer

Take a snapshot of the RDS instance, restore it to a new instance with the patch applied, and then update the SAP application to point to the new instance.

Answer

Create a new RDS instance with the patched engine version, then use AWS Database Migration Service (DMS) to migrate the data with minimal downtime.

Question 17

A company runs a critical SAP ERP system on AWS. The system consists of a single EC2 instance running SAP NetWeaver with an Oracle database on the same instance. The instance type is r5.4xlarge with 500 GB gp2 EBS volume for the database. The operations team receives a CloudWatch alarm that the EBS volume's 'BurstBalance' metric has dropped to 0%. Consequently, the database performance degrades significantly. The team needs to resolve the issue and prevent recurrence. The SAP system cannot tolerate more than 10 minutes of downtime. The budget is limited. Which action should the team take?

Accepted Answer

Change the EBS volume type from gp2 to gp3 and increase the IOPS and throughput settings as needed.. The correct action is C: change the EBS volume type from gp2 to gp3 and increase the IOPS and throughput settings as needed. The BurstBalance dropping to 0% indicates the gp2 volume has exhausted its burst credits, so performance is now limited to its baseline IOPS; gp3 provides independently provisioned baseline IOPS and throughput without relying on burst credits, and it can be modified in place with no downtime beyond the short volume modification window, fitting the 10-minute tolerance and limited budget. Option A (io2 Block Express) would resolve performance but is significantly more expensive and unnecessary for this workload. Option B (RAID 0 striping) adds complexity and cost and does not directly address the gp2 burst-credit exhaustion. Option D (resizing to 1000 GB) would raise gp2 baseline IOPS and credits, but it is a larger, costlier change than switching to gp3 with provisioned performance.

Answer

Migrate the database to an io2 Block Express volume with provisioned IOPS.

Answer

Add additional EBS volumes and configure RAID 0 striping to increase IOPS.

Answer

Increase the volume size to 1000 GB to increase baseline IOPS and burst credits.

Question 18

A company is migrating an SAP ERP Central Component (ECC) system to AWS. The system uses an Oracle database on-premises. The company wants to use a managed database service on AWS but needs to keep the Oracle database engine. Which AWS service should they use?

Accepted Answer

Amazon RDS for Oracle. Amazon RDS for Oracle is the correct service because it provides a managed Oracle database that is certified for SAP ECC. It allows the company to keep the Oracle engine while reducing administrative tasks. Other options either use different database engines or are not relational, so they do not meet the requirement to maintain Oracle.

Answer

Amazon RDS for SQL Server

Answer

Amazon DynamoDB

Answer

Amazon Aurora

Question 19

A SAP administrator needs to grant an IAM user permission to start and stop EC2 instances that are part of an SAP environment. The administrator wants to follow the principle of least privilege. Which IAM policy action should be included?

Accepted Answer

ec2:StartInstances and ec2:StopInstances. ec2:StartInstances and ec2:StopInstances, because these are the exact IAM actions that authorize starting and stopping existing EC2 instances, which matches the administrator's requirement while adhering to least privilege. ec2:TerminateInstances (A) is wrong because it permanently deletes instances, a more destructive permission than needed. ec2:RunInstances (B) is wrong because it launches new instances rather than controlling the power state of existing ones. ec2:RebootInstances (D) is wrong because it only reboots an instance, not starts or stops it.

Answer

ec2:TerminateInstances

Answer

ec2:RunInstances

Answer

ec2:RebootInstances

Question 20

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. They want to minimize downtime. Which AWS service should they use for the initial data load and ongoing replication?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) is the correct choice because it is purpose-built to migrate databases to AWS with minimal downtime, supporting both the initial full data load and ongoing change data capture (CDC) replication from an on-premises Oracle source to Amazon RDS for Oracle. DMS uses a replication instance and endpoints to continuously apply changes, keeping the target in sync until cutover. AWS SCT only converts schema and code between engines, not data replication. AWS Snowball is for bulk physical data transfer and does not provide ongoing replication. AWS DataSync is for file/object data movement, not database replication.

Answer

AWS Schema Conversion Tool (SCT)

Answer

AWS Snowball

Answer

AWS DataSync