PAS-C01 Practice Exam 60 — 20 Questions

Question 1

A company runs SAP ERP Central Component (ECC) on AWS and wants to reduce operational overhead by automating the start and stop of its non-production EC2 instances on a schedule. The instances are tagged with Environment=NonProduction. Which AWS service should they use to accomplish this with the least effort?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS Instance Scheduler. AWS Instance Scheduler is a pre-built solution that automates the start and stop of EC2 instances based on schedules and tags. It is designed for exactly this use case, requiring minimal setup and no custom code, making it the most efficient choice for automating non-production SAP instances.

Answer

AWS Systems Manager Maintenance Windows

Answer

Amazon EC2 Auto Scaling scheduled actions

Answer

AWS Lambda with a custom script triggered by Amazon EventBridge

Question 2

A company is migrating an SAP HANA database to AWS. The database will run on an Amazon EC2 instance with multiple Amazon EBS volumes. The company wants to ensure that the EBS volumes provide consistent performance and are optimized for SAP HANA. Which action should be taken when configuring the EBS volumes?

Accepted Answer

Stripe multiple EBS volumes together using RAID 0 for the data volume to increase IOPS and throughput.. To achieve the required IOPS and throughput for SAP HANA on AWS, multiple EBS volumes should be striped together using RAID 0 for the data volume. This aggregates performance and is a standard configuration. The log volume should also be on separate high-performance volumes. Encryption and single-volume configurations do not address performance, and magnetic volumes are too slow for HANA.

Answer

Use a single large EBS volume for all HANA data and log files to simplify management.

Answer

Enable EBS encryption on all volumes to improve I/O performance.

Answer

Use Amazon EBS magnetic volumes for the log volume to reduce costs.

Question 3

A company is migrating an SAP ERP Central Component (ECC) system to AWS. The database is Oracle on Amazon EC2, and the application servers run on separate EC2 instances. The company must ensure that the database can be recovered to any point in time within the last 35 days and that backups are stored durably. Which combination of actions should the solutions architect take?

Accepted Answer

Configure Oracle RMAN with archived redo log backups to Amazon S3, set the recovery window to 35 days, and use a recovery catalog stored in Amazon RDS for Oracle.. Point-in-time recovery for Oracle requires archived redo logs and a backup strategy that retains them for the desired window. Configuring RMAN to back up archived redo logs to Amazon S3 and setting a 35-day recovery window provides the ability to recover to any second within that period. A recovery catalog in Amazon RDS for Oracle centralizes metadata and supports the retention policy. Snapshots and AWS Backup alone cannot deliver PITR.

Answer

Enable automated backups on the EC2 instance using Amazon EBS snapshots with a 35-day retention policy.

Answer

Use AWS Backup to create daily backups of the EC2 instances and retain them for 35 days.

Answer

Configure Oracle RMAN to write backups to an Amazon S3 bucket and enable S3 Versioning and Object Lock.

Question 4

A company runs an SAP S/4HANA production system on AWS with the HANA database on an x1e.32xlarge EC2 instance and the application servers on c5.9xlarge instances. The company needs to ensure that the application servers can communicate with the HANA database with the lowest possible latency and highest throughput. The VPC has a single subnet in one Availability Zone. Which networking configuration should be implemented?

Accepted Answer

Place all instances in the same subnet and enable Enhanced Networking with the Elastic Network Adapter (ENA) on all instances.. For SAP workloads on AWS, network latency between application servers and the HANA database must be minimized. Keeping all instances in the same subnet within a single Availability Zone reduces network hops, and enabling ENA provides high throughput and low latency. This configuration is a best practice for SAP on AWS.

Answer

Place the HANA database in a private subnet and the application servers in a public subnet, and use an Internet Gateway for communication.

Answer

Place the HANA database and application servers in separate VPCs and use VPC peering to connect them.

Answer

Use AWS Direct Connect to connect the application servers to the HANA database.

Question 5

A company runs an SAP HANA database on an Amazon EC2 instance with 4 TB of memory. The database is used for a critical production system. The operations team needs to create a consistent backup of the HANA database to Amazon S3 with minimal impact on the running system. Which AWS service or feature should be used to achieve this?

Accepted Answer

AWS Backint Agent for SAP HANA. AWS Backint Agent for SAP HANA is the AWS-native solution for backing up HANA databases to Amazon S3. It uses SAP HANA's backint API to ensure application-consistent backups and streams data directly to S3, minimizing impact on the database. It supports full, differential, and log backups, and integrates with HANA's backup catalog. This makes it the ideal choice for consistent, low-impact backups to S3.

Answer

Amazon Elastic Block Store (EBS) snapshots

Answer

SAP HANA Studio backup to a file system mounted on Amazon FSx for Lustre

Answer

AWS Backup for SAP HANA

Question 6

A company is migrating their SAP ERP Central Component (ECC) system to AWS. The system uses an Oracle database and they plan to migrate to SAP HANA on Amazon EC2. The migration must be done with minimal downtime and they want to use SAP's Database Migration Option (DMO). Which prerequisite must be met before starting the DMO migration?

Accepted Answer

The source system must be on a supported SAP NetWeaver release and the database must be supported by DMO.. Before using DMO, the source SAP system must be on a supported release and the source database must be supported by DMO. The target HANA system is installed during the DMO process, and there is no requirement to upgrade to S/4HANA or pre-convert the database. These prerequisites are essential for a successful migration.

Answer

The target SAP HANA system must be installed and running before the DMO export begins.

Answer

The source database must be converted to SAP HANA before starting DMO.

Answer

The source system must be upgraded to SAP S/4HANA before running DMO.

Question 7

A company runs SAP Business Suite on AWS with an Oracle database on an EC2 instance. The database is experiencing performance issues due to high latency on the EBS volumes. The Oracle database uses a single 1-TB gp2 EBS volume for data and a separate 500-GB gp2 volume for redo logs. The company wants to improve I/O performance without changing the instance type. Which action should the SAP administrator take?

Accepted Answer

Replace the gp2 volumes with Provisioned IOPS SSD (io1 or io2) volumes and provision the required IOPS.. The high latency on EBS volumes for an Oracle database is best addressed by using Provisioned IOPS SSD volumes (io1 or io2), which provide consistent low latency and high IOPS. gp2 volumes have burst performance and may not meet the demands of a production Oracle database. Converting to gp3 or using RAID 0 with gp2 may improve performance but may not provide the required consistency. Changing the instance type is not allowed. Therefore, replacing the volumes with io1/io2 and provisioning appropriate IOPS is the correct action.

Answer

Enable EBS optimization on the EC2 instance and increase the EBS bandwidth by changing the instance type to a larger size.

Answer

Convert the gp2 volumes to gp3 volumes and provision additional IOPS and throughput.

Answer

Create a RAID 0 array using multiple gp2 volumes and move the Oracle data files to the array.

Question 8

A company is deploying a new SAP S/4HANA system on AWS. The SAP HANA database will run on a single Amazon EC2 instance with multiple EBS volumes. The company requires that the database can be recovered to any point in time within the last 14 days. Which backup configuration should be implemented to meet this requirement?

Accepted Answer

Use SAP HANA's native backup tools to perform full data backups and continuous log backups, storing them in Amazon S3 with a lifecycle policy for 14-day retention.. Point-in-time recovery for SAP HANA requires continuous transaction log backups in addition to regular full data backups. Only SAP HANA's native backup tools provide the necessary log stream and recovery catalog to restore to any point in time. Storing these backups in Amazon S3 with a lifecycle policy for retention ensures durability and cost-effective long-term storage. Other methods like snapshots or replication do not capture the transaction log continuously and therefore cannot meet the requirement.

Answer

Configure SAP HANA System Replication to a secondary EC2 instance in another Availability Zone, and use the secondary for point-in-time recovery.

Answer

Enable AWS Backup for the EC2 instance and create a daily backup plan with a 14-day retention period.

Answer

Schedule EBS snapshots of the HANA data and log volumes every hour, and retain them for 14 days.

Question 9

A company runs SAP HANA on a single EC2 instance in a private subnet. The database must be backed up every night to Amazon S3, and the backup must be crash-consistent with respect to the HANA in-memory database. The operations team wants to use AWS Backint Agent for SAP HANA. What must be configured to allow the agent to write backups to the S3 bucket?

Accepted Answer

An IAM role attached to the EC2 instance with permissions to the target S3 bucket, and the AWS Backint Agent installed and configured on the HANA host.. AWS Backint Agent is the SAP-supported integration that lets HANA back up directly to Amazon S3. It needs AWS credentials to sign S3 requests, and the recommended approach is an IAM role attached to the EC2 instance so no static keys reside on the host. The agent must also be installed and pointed at the correct bucket and prefix. Mounted file systems, anonymous policies, or gateway appliances do not provide the direct, authenticated S3 access the agent requires.

Answer

An S3 bucket policy that allows anonymous PutObject requests from the VPC endpoint, and the agent installed with default settings.

Answer

Amazon FSx for Lustre mounted at the HANA backup directory, with a data repository association to the S3 bucket.

Answer

AWS Storage Gateway file gateway mounted on the HANA host, with the agent configured to write to the mounted file share.

Question 10

A company is migrating its SAP ERP Central Component (ECC) system to AWS. The system runs on IBM AIX with an Oracle database. The company wants to replatform to SAP HANA on AWS. They plan to use the SAP Database Migration Option (DMO) with SUM (Software Update Manager). The migration must be completed with minimal downtime. Which of the following is a critical prerequisite for using DMO with SUM for this migration?

Accepted Answer

The source system must be on a supported SAP kernel release and database version that is compatible with SUM-DMO.. The critical prerequisite for using DMO with SUM is that the source system must meet the software requirements, including a supported SAP kernel and database version. The target HANA system must be on a certified instance, but the source does not need to be in the cloud. DMO does not require HANA system replication or a different SID. Meeting these prerequisites ensures a successful migration with minimal downtime.

Answer

The target HANA database must be on a different SAP SID than the source system.

Answer

The source system must be running on an SAP-certified cloud instance.

Answer

The migration must use SAP HANA system replication for the data transfer.

Question 11

A company is migrating an SAP ECC system to AWS. The SAP application servers run on Amazon EC2 instances and use Amazon Elastic File System (EFS) for shared storage of SAP transport files and interfaces. The company needs to ensure that the EFS file system provides the required performance for the SAP transport directory. Which EFS performance mode should be used?

Accepted Answer

General Purpose performance mode with Provisioned throughput.. SAP transport directories require low latency and consistent throughput to handle the I/O of transport files and interfaces. Amazon EFS General Purpose performance mode offers the lowest latency per operation, which is crucial for SAP. Provisioned throughput ensures that the file system has a dedicated amount of throughput regardless of its size, providing predictable performance. This combination is best suited for SAP shared storage on EFS.

Answer

Max I/O performance mode with Provisioned throughput.

Answer

Max I/O performance mode with Bursting throughput.

Answer

General Purpose performance mode with Bursting throughput.

Question 12

A company runs an SAP NetWeaver application server on Amazon EC2 instances behind an Application Load Balancer (ALB). Users connect via HTTPS to the ALB. The company wants to enable sticky sessions so that each user session remains on the same application server. Which ALB feature should they configure?

Accepted Answer

Configure a target group with the stickiness attribute enabled and set a duration.. Application Load Balancers provide session stickiness through target group attributes. When stickiness is enabled, the ALB generates a cookie that ties a client to a specific target for a configurable duration. This ensures that all requests from that client during the session are routed to the same SAP NetWeaver application server, preserving session state without relying on source IP or application changes.

Answer

Create a listener rule that forwards traffic based on the source IP address.

Answer

Enable cross-zone load balancing on the ALB.

Answer

Enable HTTP/2 support on the ALB and configure session affinity in the SAP application.

Question 13

An SAP Basis team runs SAP NetWeaver application servers on Amazon EC2 instances behind an Application Load Balancer (ALB). After a recent deployment, users report intermittent 502 Bad Gateway errors when accessing the SAP GUI via the ALB. The ALB health checks for the target group are configured with the default HTTP path '/'. Which action should the team take to resolve the issue?

Accepted Answer

Configure the ALB health check to use the SAP application server's HTTP port and a valid SAP-specific path such as '/sap/public/ping'.. The ALB health check must target a path that the SAP application server responds to with a successful HTTP status. The default '/' often does not return a valid response, causing the ALB to mark targets unhealthy and return 502 errors. Using an SAP-specific ping path ensures accurate health monitoring and resolves the intermittent failures.

Answer

Change the ALB to a Network Load Balancer (NLB) because ALB does not support SAP GUI traffic.

Answer

Increase the ALB idle timeout to 4000 seconds to match the SAP GUI session timeout.

Answer

Enable sticky sessions on the ALB target group to ensure SAP GUI sessions stick to the same instance.

Question 14

A company runs SAP NetWeaver on AWS and uses an Application Load Balancer (ALB) to distribute traffic to multiple SAP application servers. The operations team needs to ensure that the ALB routes traffic only to healthy application servers. The SAP application servers expose an HTTP endpoint at /sap/public/ping that returns HTTP 200 when the server is healthy. Which configuration should the team apply to the ALB target group?

Accepted Answer

Configure the target group health check to use the HTTP protocol, path /sap/public/ping, and a success code of 200.. The ALB target group health check should use HTTP with the path /sap/public/ping and expect a 200 response. This configuration aligns with SAP's standard health check endpoint and ensures that the ALB only routes traffic to application servers that are fully operational. It provides accurate health status at the application layer.

Answer

Configure the target group health check to use the HTTPS protocol, path /sap/public/ping, and a success code of 200.

Answer

Configure the target group health check to use the TCP protocol on port 3200 and rely on TCP connection success.

Answer

Configure the target group health check to use the HTTP protocol, path /sap/public/ping, and a success code of 301.

Question 15

A company runs an SAP NetWeaver ABAP system on AWS. The security team wants to detect if any SAP application servers are launched in a non-approved AWS Region or if any security group rules are changed to allow unrestricted SSH access. They need a centralized view and automatic notification. Which AWS service should they use?

Accepted Answer

AWS Config. AWS Config is designed for configuration compliance: it records resource states, evaluates them with managed or custom rules, and reports compliance centrally with SNS notifications. Trusted Advisor offers broad best-practice checks but not custom rules, GuardDuty detects threats rather than configuration drift, and CloudTrail logs API calls without evaluating compliance.

Answer

AWS CloudTrail

Answer

AWS Trusted Advisor

Answer

Amazon GuardDuty

Question 16

A company is migrating an SAP ERP system to AWS. The SAP application servers will run on Amazon EC2 instances in a private subnet. The SAP HANA database will run on a separate EC2 instance in another private subnet. The company needs to ensure that the application servers can resolve the database hostname and that the database is not accessible from the internet. Which AWS services should be used to meet these requirements?

Accepted Answer

Use Amazon Route 53 private hosted zone for DNS resolution, and place the database in a private subnet with a security group that allows traffic only from the application servers' security group.. Amazon Route 53 private hosted zones provide DNS resolution within a VPC without exposing records to the internet. Security groups can reference other security groups, allowing the database to accept traffic only from the application servers. This combination ensures that the application servers can resolve the database hostname and that the database remains inaccessible from the internet.

Answer

Use AWS Direct Connect to connect to the VPC, and configure a public hosted zone for DNS resolution.

Answer

Use an internet-facing Application Load Balancer to distribute traffic to the database, and use Amazon Route 53 public DNS for resolution.

Answer

Use AWS Transit Gateway to route traffic between subnets, and use Amazon Route 53 Resolver for DNS resolution.

Question 17

A company is deploying SAP S/4HANA on AWS and needs to ensure that the SAP HANA database can be recovered to a specific point in time. The database is running on an Amazon EC2 instance with Amazon EBS volumes. The backup strategy must include transaction log backups and data backups. Which AWS service or feature should be used to store the backups and enable point-in-time recovery?

Accepted Answer

Amazon S3 with SAP HANA backint integration using AWS Backint Agent for SAP HANA.. AWS Backint Agent for SAP HANA is the AWS-recommended solution for backing up SAP HANA databases to Amazon S3. It leverages SAP HANA's backint API to store both data and log backups in S3, enabling point-in-time recovery. This approach is fully supported by SAP and AWS, and it provides durable, scalable, and cost-effective storage for backups.

Answer

Amazon FSx for Windows File Server with Windows VSS snapshots.

Answer

AWS Storage Gateway volume gateway in cached mode.

Answer

Amazon EBS snapshots scheduled with Amazon Data Lifecycle Manager.

Question 18

A company runs an SAP NetWeaver application on AWS with an Oracle database on Amazon EC2. The database is experiencing I/O bottlenecks during peak load. The company wants to improve database performance without changing the instance type. Which AWS service or feature should be used to provide a high-performance, shared block storage solution for the Oracle database?

Accepted Answer

Amazon Elastic Block Store (EBS) io2 Block Express volumes with provisioned IOPS. To improve Oracle database performance on EC2 without changing the instance type, you should use high-performance block storage. Amazon EBS io2 Block Express volumes provide the required IOPS and low latency for database workloads. EFS, FSx for Windows File Server, and S3 are not suitable for Oracle database storage because they are file or object storage services and do not provide the block-level access needed. Thus, io2 Block Express is the correct choice.

Answer

Amazon Elastic File System (EFS) with General Purpose performance mode

Answer

Amazon Simple Storage Service (S3) with Transfer Acceleration

Answer

Amazon FSx for Windows File Server with SSD storage

Question 19

A company is planning to migrate its SAP NetWeaver Java system to AWS. The system consists of a central services instance, multiple dialog instances, and a database. The company wants to minimize administrative overhead and ensure that the SAP application servers can be automatically replaced if they fail. Which AWS service should be used to manage the SAP application server instances?

Accepted Answer

Amazon EC2 Auto Scaling. Amazon EC2 Auto Scaling is designed to maintain a desired number of healthy EC2 instances. By integrating with Elastic Load Balancing and health checks, it can detect and replace unhealthy SAP application servers automatically. You can also use lifecycle hooks to run scripts that register or deregister the application server with the SAP system, ensuring that the new instance is properly integrated. This reduces administrative overhead and improves the availability of the SAP NetWeaver Java system.

Answer

AWS OpsWorks for Chef Automate

Answer

AWS Elastic Beanstalk

Answer

AWS Systems Manager

Question 20

A company is planning to migrate an SAP S/4HANA system to AWS. The on-premises storage infrastructure is EMC VMAX, and the SAP database is 2 TB. The migration must complete within a single weekend maintenance window with minimal downtime. The company requires a block-level replication solution that is storage-agnostic. Which AWS service should be used to replicate the data?

Accepted Answer

AWS Application Migration Service (AWS MGN). AWS Application Migration Service (AWS MGN) is the correct choice because it provides block-level replication of on-premises servers to AWS, regardless of the storage vendor. It mirrors the entire server, including the SAP HANA database volumes, to a staging area and enables a quick cutover during a maintenance window. This minimizes downtime and ensures data consistency without requiring application-level changes.

Answer

AWS DataSync

Answer

AWS Storage Gateway Volume Gateway

Answer

AWS Database Migration Service (AWS DMS)