PAS-C01 Practice Exam 62 — 20 Questions

Question 1

A company is running SAP Business Suite on AWS using an Oracle database. They need to migrate the Oracle database to SAP HANA as part of an SAP S/4HANA conversion. The current Oracle database size is 5 TB and runs on an r5.8xlarge instance. The target HANA database will run on an r5.24xlarge instance. The company wants to minimize downtime. What is the best approach to migrate the data?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use SAP Software Update Manager (SUM) with the Database Migration Option (DMO) to migrate and upgrade in one step.. SAP provides the Software Update Manager (SUM) with DMO (Database Migration Option) to perform the migration and upgrade in one step, minimizing downtime. Option A (native Oracle export/import) is time-consuming. Option B (AWS DMS) is not fully supported for SAP HANA as target. Option C (SAP Landscape Transformation) is for data replication but not for a one-step migration with upgrade. Option D is correct.

Answer

Use AWS Database Migration Service (DMS) to continuously replicate data from Oracle to HANA, then switch over.

Answer

Use SAP Landscape Transformation (SLT) to replicate data in real-time from Oracle to HANA.

Answer

Use Oracle Data Pump to export the database and import into HANA using SAP HANA studio.

Question 2

A media company is migrating its on-premises video processing infrastructure to AWS. The current infrastructure uses a custom application that splits video files into segments, transcodes them using FFmpeg, and assembles the final output. The application runs on a single server with 64 vCPUs and 256 GB RAM. The migration plan is to use AWS Batch with EC2 instances for the transcoding jobs. The video files are stored on an on-premises NAS and will be migrated to Amazon S3. The company needs to minimize latency for file access during migration and reduce the time to transfer initial data. The company has a 1 Gbps AWS Direct Connect connection. The total data volume is 500 TB. The migration window is 30 days. Which approach should the team use to transfer the initial data to S3 with the lowest latency and within the migration window?

Accepted Answer

Use multiple AWS Snowball Edge devices to transfer the data in parallel, then copy from the devices to S3 using the Snowball client.. AWS Snowball Edge devices provide a physical, high-bandwidth transfer method that bypasses network constraints entirely. With 500 TB of data and a 1 Gbps Direct Connect link, the theoretical maximum transfer over the network in 30 days is only ~324 TB (1 Gbps * 30 days * 86400 seconds/day / 8 bits per byte), which is insufficient. Multiple Snowball Edge devices in parallel can transfer the full 500 TB within the migration window without saturating the Direct Connect link, and the Snowball client efficiently copies data to S3 after the devices are returned.

Answer

Use AWS DataSync to transfer data over the Direct Connect connection in multiple concurrent tasks.

Answer

Use a single AWS Snowball Edge device and copy data incrementally.

Answer

Use S3 Transfer Acceleration to speed up transfers over the internet.

Question 3

An administrator uses AWS Launch Wizard to deploy an SAP S/4HANA system with high availability. After deployment, they notice that only one database instance is created. What is the most likely reason?

Accepted Answer

The deployment encountered an error and only created one instance.. High availability for SAP HANA typically requires at least two nodes (primary and secondary). If only one is created, the HA configuration may have failed or the parameter was ignored. The backup retention and instance classes are correct.

Answer

The instance class r5.8xlarge is not certified for HANA.

Answer

The HighAvailability parameter was set to false.

Answer

The Launch Wizard does not support HA for HANA.

Question 4

An SAP administrator is trying to set up an AWS CLI script that queries EC2 instance metadata. The script runs on an EC2 instance with an IAM role attached. The IAM role has the following policy:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "ec2:DescribeInstances",
      "Resource": "*"
    }
  ]
}

What is the most likely cause of the error?

Accepted Answer

The instance does not have an IAM instance profile associated, or the profile name does not match the role name.. The most likely cause is that the EC2 instance does not have an IAM instance profile associated, or the profile name does not match the role name. Without a properly attached instance profile, the AWS CLI cannot obtain temporary credentials from the instance metadata service (IMDS), so any API call—including ec2:DescribeInstances—will fail with an access denied or credential error, regardless of the IAM policy being correctly configured.

Answer

The IAM policy does not specify a resource ARN.

Answer

The IAM role does not have the ec2:DescribeInstances action allowed.

Answer

The AWS CLI is not configured with the correct region.

Question 5

Which TWO steps are required to set up automated backups for an SAP HANA database running on EC2?

Accepted Answer

Install and configure the SAP HANA Backint agent for Amazon S3. The SAP HANA Backint agent for Amazon S3 is a certified integration that allows HANA to send backup data directly to S3 via the Backint API, which is the standard method for automated, HANA-aware backups to object storage. This replaces traditional file-based backups and enables seamless integration with AWS backup services without manual scripting.

Answer

Create an Amazon EBS snapshot of the HANA data volumes

Answer

Set up a lifecycle policy to transition backups to Amazon S3 Glacier

Answer

Enable automatic backups in the HANA Studio

Question 6

A company wants to use AWS Systems Manager to automate patching of SAP application servers. What is a prerequisite for Systems Manager to manage these EC2 instances?

Accepted Answer

Install the SSM Agent on the EC2 instances.. AWS Systems Manager requires the SSM Agent to be installed and running on EC2 instances to enable communication with the Systems Manager service for patching and other management tasks. Without the agent, Systems Manager cannot send commands, initiate patching workflows, or gather inventory data from the instances. The SSM Agent is pre-installed on many Amazon Linux and Windows AMIs but must be manually installed on custom or imported images.

Answer

Enable SSH access to the instances.

Answer

Assign a separate IAM role to each instance.

Answer

Ensure the instances have public IP addresses.

Question 7

An organization is migrating an SAP HANA database to AWS. They plan to use AWS DMS for ongoing replication from an on-premises Oracle database to an Amazon RDS for Oracle instance. Which THREE configurations are necessary for DMS to perform ongoing replication? (Choose THREE.)

Accepted Answer

A target endpoint for the Amazon RDS for Oracle instance. AWS DMS requires a source endpoint to connect to the on-premises Oracle database, a target endpoint for the Amazon RDS for Oracle instance, and a replication instance to perform the data migration and ongoing replication. Option A (SNS topic) is for notifications, not a requirement for DMS replication. Option C (CloudWatch dashboard) is for monitoring, not a requirement. Therefore, the three necessary configurations are the source endpoint (E), the target endpoint (B), and the replication instance (D).

Answer

An Amazon SNS topic for replication alerts

Answer

An Amazon CloudWatch dashboard to monitor replication

Question 8

A company is migrating its SAP environment to AWS using AWS Launch Wizard for SAP. Which TWO pieces of information does Launch Wizard require to deploy an SAP system? (Choose TWO.)

Accepted Answer

SAP product version (e.g., SAP S/4HANA 2020). AWS Launch Wizard for SAP requires the SAP product version (e.g., SAP S/4HANA 2020) to determine the appropriate deployment template. Option E is correct because the SAP system ID (SID) is required for system identification. Option B is incorrect because the number of SAP users is not a required input; it is used for sizing estimates but not mandatory for deployment. Option C is incorrect because on-premises IP addresses are not needed; Launch Wizard designs the network setup for AWS. Option D is incorrect because the AWS account ID is automatically retrieved from the AWS environment and does not need to be provided.

Answer

Number of SAP users

Answer

On-premises IP addresses

Answer

AWS account ID

Question 9

An organization is migrating a legacy application to AWS. The application requires a static IP address for client whitelisting. After migrating the application to an Application Load Balancer (ALB) with an Auto Scaling group, clients report connection failures. What should be done to resolve this issue?

Accepted Answer

Replace the ALB with a Network Load Balancer (NLB) and assign an Elastic IP.. The correct solution is to replace the ALB with a Network Load Balancer (NLB) and assign an Elastic IP. ALBs do not have static IP addresses; they use dynamic IPs that can change. NLBs support Elastic IPs, providing a fixed IP for client whitelisting. Option A is incorrect because adding an Nginx reverse proxy introduces unnecessary complexity and still requires a static IP. Option B is wrong because you cannot assign an Elastic IP to an ALB. Option C is incorrect because the routing algorithm does not affect the IP address; the ALB's IPs remain dynamic.

Answer

Place an Nginx reverse proxy in front of the ALB with an Elastic IP.

Answer

Assign an Elastic IP to the ALB.

Answer

Configure the ALB to use a round-robin routing algorithm.

Question 10

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database is 2 TB in size and has a high transaction rate. The migration must have minimal downtime. Which AWS service should be used for the migration?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) is the correct choice because it supports ongoing replication from the source Oracle database to Amazon RDS for Oracle, enabling minimal downtime during migration. Option A (AWS Snowball Edge) is incorrect because it is designed for large-scale offline data transfer, not for online replication with minimal downtime. Option B (AWS Server Migration Service) is for migrating on-premises servers to AWS, not databases. Option C (AWS DataSync) is used for file-based data transfers, not database migrations.

Answer

AWS Snowball Edge

Answer

AWS Server Migration Service (SMS)

Answer

AWS DataSync

Question 11

An SAP administrator wants to ensure that the SAP application server can communicate with the HANA database using the private IP address within the same VPC. What configuration is necessary?

Accepted Answer

Configure a security group rule allowing traffic on the HANA database port from the application server's security group.. Within the same VPC, AWS resources can communicate using private IP addresses without internet or VPN connectivity. The key requirement is that the security group attached to the HANA database must allow inbound traffic on the HANA database port (typically 31517 or 30015 for HANA) from the security group associated with the SAP application server. This ensures that only traffic originating from the application server is permitted, maintaining security while enabling private IP communication.

Answer

Attach an Internet Gateway to the VPC.

Answer

Set up a NAT Gateway for the database subnet.

Answer

Establish a VPN connection to the on-premises network.

Question 12

An SAP environment on AWS is using a single Availability Zone. The company wants to achieve high availability for SAP Central Services (ASCS) and Enqueue Replication Server (ERS). Which architecture should they implement?

Accepted Answer

Deploy ASCS and ERS in separate Availability Zones using AWS Launch Wizard for SAP.. Achieving high availability for SAP Central Services (ASCS) and Enqueue Replication Server (ERS) on AWS requires deploying them in separate Availability Zones (AZs) to protect against an entire AZ failure. AWS Launch Wizard for SAP automates the deployment of a multi-AZ SAP system, including the necessary infrastructure components like Elastic Load Balancing and Amazon EFS, ensuring that the ASCS and ERS instances are in different AZs with a replicated enqueue table. This architecture aligns with SAP's recommendation for a high-availability setup using a Pacemaker cluster with STONITH fencing, which is supported by AWS.

Answer

Deploy ASCS and ERS in the same Availability Zone with a second instance as passive.

Answer

Place ASCS and ERS on the same instance to reduce complexity.

Answer

Use Auto Scaling groups to automatically replace failed instances.

Question 13

A company is running SAP HANA on AWS and wants to encrypt the EBS volumes at rest. They also need to manage the encryption keys themselves. Which solution should they use?

Accepted Answer

Use AWS KMS with a customer managed key (CMK). AWS KMS with a customer managed key (CMK) allows the company to have full control over the encryption keys used for EBS volume encryption, including key rotation, access policies, and disabling or deleting the key. This meets the requirement to manage the encryption keys themselves while still leveraging AWS KMS for key management and auditing.

Answer

Enable EBS encryption with the default AWS managed KMS key

Answer

Use AWS CloudHSM to store keys

Answer

Use AWS Systems Manager Parameter Store

Question 14

A company is migrating its on-premises web application to AWS. The application consists of a stateless web tier and a stateful database tier running on a single server. The web tier uses session data stored in the local file system. The database tier runs on MySQL. The company wants to minimize changes to the application code during migration. They plan to use Amazon EC2 for the web server and Amazon RDS for MySQL for the database. After migrating the web server to an EC2 instance and the database to RDS, users report that they are being logged out of the application frequently. What is the most likely cause of this issue?

Accepted Answer

The web server's session data is stored locally and is lost when the EC2 instance is replaced or restarted.. The web tier stores session data in the local file system of the EC2 instance. When the instance is replaced or restarted (e.g., due to Auto Scaling, instance failure, or a maintenance event), that local session data is lost. Since the application code was not modified to use a shared session store (like ElastiCache or DynamoDB), users lose their sessions and are logged out. This is the most likely cause because the migration explicitly minimized code changes and did not address the stateless web tier requirement.

Answer

The RDS instance's backup window is causing database connections to drop.

Answer

The application's session timeout setting was reduced during migration.

Answer

The security group for the web server is blocking inbound session cookies.

Question 15

An administrator created the IAM policy shown in the exhibit for the operations team. The team needs to create snapshots of EBS volumes that have the tag 'Name' with a value starting with 'SAP-HANA-'. However, the policy is not working as expected. What is the most likely reason?

Accepted Answer

The 'ec2:CreateSnapshot' action does not support the 'ec2:ResourceTag' condition key.. The ec2:CreateSnapshot action does not support the ec2:ResourceTag condition key. Condition keys must be supported by the action. Option A is incorrect because the resource ARN is correct for volumes. Option B is incorrect because the action 'ec2:CreateSnapshot' is correct; the plural form is not valid. Option C is incorrect because 'ec2:ResourceTag' is the proper format for EC2 resource tags, but this condition key is not supported for the ec2:CreateSnapshot action.

Answer

The resource ARN is incorrect; it should specify the snapshot resource type.

Answer

The action 'ec2:CreateSnapshot' should be 'ec2:CreateSnapshots' (plural).

Answer

The condition key should be 'aws:ResourceTag' instead of 'ec2:ResourceTag'.

Question 16

Which TWO of the following are valid methods for migrating SAP systems to AWS? (Select TWO.)

Accepted Answer

System Copy (SAP). The correct answers are A and B. System Copy (SAP) is a standard SAP migration method that replicates an entire SAP system. SAP DMO with SUM is a dedicated migration tool for migrating to SAP HANA, including upgrades. Option C (AWS SMS) is a general server migration service that does not handle SAP-specific components. Option D (AWS DMS) is primarily a database migration tool and does not migrate the SAP application layer or its configurations, making it unsuitable for a complete SAP system migration. Option E (VM Import/Export) can move VM images but lacks SAP-specific migration capabilities and post-migration automation required for SAP systems.

Answer

AWS Server Migration Service (SMS)

Answer

AWS Database Migration Service (DMS)

Answer

VM Import/Export

Question 17

A company is migrating an SAP system to AWS. Which TWO AWS services can be used to monitor the migration progress and performance?

Accepted Answer

AWS DMS. AWS CloudWatch can monitor metrics and logs; AWS DMS provides CloudWatch metrics for migration tasks. AWS SCT does not monitor progress; AWS Config is for configuration; AWS Trusted Advisor is for optimization.

Answer

AWS Config

Answer

AWS Trusted Advisor

Answer

AWS Schema Conversion Tool (AWS SCT)

Question 18

An SAP system is running on an EC2 instance with a single Amazon EBS volume for data and log files. The database administrator wants to increase the IOPS performance without changing the instance type. Which action should be taken?

Accepted Answer

Modify the EBS volume to provisioned IOPS (io1/io2).. The correct action is to modify the EBS volume to use provisioned IOPS (io1 or io2), as this directly increases the IOPS performance of the volume without changing the instance type. The current single EBS volume is likely a gp2 or gp3 type, which has a baseline IOPS limit; switching to io1/io2 allows you to specify a higher, consistent IOPS level that meets the SAP database's performance requirements.

Answer

Enable EBS optimization on the EC2 instance.

Answer

Change the EC2 instance type to a larger size.

Answer

Migrate the data to an instance store volume.

Question 19

A company is running SAP ERP on AWS and wants to reduce costs by right-sizing the EC2 instances. The administrator has identified that the current instances are over-provisioned for CPU and memory. Which AWS service can provide recommendations for instance type changes based on historical usage?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer is the correct service because it uses machine learning to analyze historical utilization metrics (CPU, memory, I/O, network) from Amazon CloudWatch and provides actionable recommendations for right-sizing EC2 instances, including instance type changes. For SAP ERP workloads, it can identify over-provisioned instances by comparing actual usage patterns against the performance characteristics of different instance families, directly addressing the goal of reducing costs without compromising performance.

Answer

AWS Trusted Advisor

Answer

Amazon CloudWatch

Answer

AWS Cost Explorer

Question 20

A company is running a web application on EC2 instances behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group with a dynamic scaling policy based on average CPU utilization. During a flash sale, the application experiences a sudden spike in traffic, but the Auto Scaling group does not scale out quickly enough, causing some requests to fail. Which solution would improve the scaling responsiveness?

Accepted Answer

Add a scheduled scaling action to increase capacity before the flash sale.. A scheduled scaling action proactively increases capacity before the flash sale, eliminating the lag inherent in dynamic scaling policies. Dynamic scaling reacts to metrics like average CPU utilization, which can take minutes to trigger and propagate, causing request failures during sudden spikes. By pre-scaling, the Auto Scaling group has sufficient instances ready to handle the traffic surge immediately.

Answer

Increase the cooldown period for the dynamic scaling policy.

Answer

Decrease the cooldown period for the dynamic scaling policy.

Answer

Disable scale-in to prevent the Auto Scaling group from terminating instances during the sale.