PAS-C01 Practice Exam 70 — 20 Questions

Question 1

A company runs SAP HANA on EC2 with a Multi-AZ deployment. The database uses EBS volumes for /hana/data and /hana/log. The operations team needs to implement a disaster recovery strategy with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. Which THREE actions should be taken? (Choose THREE.)

Accepted Answer

Take periodic EBS snapshots of the data and log volumes. Options A, C, and D are correct: Use HANA system replication for near-sync replication, EBS snapshots for additional backups, and CloudFormation for automated DR infrastructure. Option B (DMS) is for database migration, not replication. Option E (RDS) is not applicable for EC2-based HANA.

Answer

Migrate the database to Amazon RDS for SAP HANA

Answer

Use AWS Database Migration Service (DMS) for continuous replication

Question 2

A company is running SAP HANA on AWS and needs to ensure that the database can be recovered to a specific point in time within the last 24 hours. Which backup strategy should be used?

Accepted Answer

Full backups plus log backups every 5 minutes. Option D is correct because full plus log backups enable point-in-time recovery. Option A is wrong because single snapshot does not allow point-in-time. Option B is wrong because full backups only restore to backup time. Option C is wrong because incremental alone does not provide point-in-time.

Answer

Incremental backups using Backint

Answer

Daily full EBS snapshots

Answer

Daily SAP HANA full backups

Question 3

An SAP system running on AWS has a recurring issue where the SAP application server becomes unresponsive every evening at 8 PM. The administrator suspects a batch job causing high CPU usage. Which set of AWS services can best help identify the root cause?

Accepted Answer

Amazon CloudWatch and AWS Systems Manager Run Command. Option B (Amazon CloudWatch for metrics + AWS Systems Manager Run Command to collect OS-level logs) is correct because CloudWatch monitors CPU metrics and Run Command can execute commands on EC2 to collect application logs. Option A lacks log collection. Option C does not provide OS-level detail. Option D is overly complex and adds latency.

Answer

AWS X-Ray and Amazon CloudWatch

Answer

Amazon CloudWatch and AWS CloudTrail

Answer

Amazon CloudWatch and AWS Lambda

Question 4

Refer to the exhibit. An operations team uses an EC2 instance with this IAM policy to manage EBS snapshots for SAP HANA backups. The backup script calls the DeleteSnapshot API for snapshot snap-0abcdef1234567890. What will happen?

Accepted Answer

The DeleteSnapshot API call will be denied.. Option C is correct. The explicit Deny overrides the Allow, so the DeleteSnapshot will be denied for that specific snapshot. Option A is wrong because the Deny is explicit. Option B is wrong because the Deny applies to the specific snapshot. Option D is wrong because the policy is not malformed.

Answer

The snapshot will be deleted because the Deny applies only to other snapshots.

Answer

The snapshot will be deleted because the Allow statement grants permission.

Answer

The policy is invalid and will cause an error.

Question 5

A company runs SAP S/4HANA on AWS with a three-tier architecture. The operations team receives alerts that the application server's CPU utilization is consistently above 90%. The team wants to add an additional application server to distribute the load. Which AWS service should be used to register the new instance with the SAP system's load balancer?

Accepted Answer

Application Load Balancer (ALB). Option A is correct because ALB can register EC2 instances as targets. Option B is wrong because NLB is for TCP/UDP. Option C is wrong because CloudFront is for CDN. Option D is wrong because Route 53 is for DNS.

Answer

Amazon CloudFront

Answer

Network Load Balancer (NLB)

Answer

Amazon Route 53

Question 6

An SAP system administrator wants to automate the patching of SAP HANA database instances running on EC2. Which AWS service can schedule and execute patching workflows with approval gates?

Accepted Answer

AWS Systems Manager Maintenance Windows. Option A is correct because AWS Systems Manager Maintenance Windows allow scheduling of patching with optional approval workflows. Option B is wrong because AWS Config is for compliance, not patching. Option C is wrong because CloudWatch Events can trigger actions but lacks built-in approval gates. Option D is wrong because CloudFormation is for infrastructure provisioning, not patching.

Answer

AWS Config

Answer

AWS CloudFormation

Answer

Amazon CloudWatch Events

Question 7

An SAP system running on AWS experiences high latency when accessing data in Amazon S3. The operations team suspects network bandwidth limitations. Which AWS service can be used to monitor the network throughput between the EC2 instances and S3?

Accepted Answer

VPC Flow Logs. Option C is correct because VPC Flow Logs capture IP traffic information and can help analyze throughput. Option A is incorrect because CloudWatch metrics for S3 are request-level, not network. Option B is incorrect because Trusted Advisor provides best practice checks, not real-time monitoring. Option D is incorrect because Config records resource changes, not network performance.

Answer

Amazon CloudWatch S3 metrics

Answer

AWS Trusted Advisor

Answer

AWS Config

Question 8

An SAP administrator notices that the SAP application server is failing health checks in the Elastic Load Balancer (ELB) target group. The application server runs on an EC2 instance behind an Application Load Balancer. The health check path is /sap/public/ping. What is the most likely cause of the failure?

Accepted Answer

The SAP application (e.g., disp+work) is not running on the instance. Option C is correct because if the SAP application is not running, it cannot respond to the health check. Option A (security group) would cause connection timeout, not health check failure. Option B (wrong path) would return 404 but still be considered unhealthy. Option D (SAProuter) is not relevant to application health.

Answer

SAProuter is blocking the health check requests

Answer

The health check path is incorrectly configured in the target group

Answer

The EC2 instance security group does not allow inbound traffic from the ELB

Question 9

An SAP administrator is troubleshooting a performance issue on an SAP application server. The administrator wants to collect detailed metrics about the EC2 instance's memory usage. Which TWO AWS services can be used to collect memory metrics? (Choose TWO.)

Accepted Answer

Amazon CloudWatch Agent. Options A and B are correct: CloudWatch Agent can collect memory metrics, and Systems Manager can run scripts to collect and push custom metrics. Option C (CloudTrail) logs API calls, not memory. Option D (Config) is for configuration. Option E (X-Ray) is for tracing.

Answer

AWS CloudTrail

Answer

AWS X-Ray

Answer

AWS Config

Question 10

Which TWO actions should be taken to improve the performance of an SAP HANA database running on AWS? (Choose TWO.)

Accepted Answer

Increase the size of the HANA instance to allocate more memory.. Options A and C are correct because they improve I/O and memory respectively. Option B does not directly improve HANA performance. Option D is unrelated to database. Option E is unrelated to performance.

Answer

Enable termination protection on EC2 instances.

Answer

Use an Application Load Balancer to distribute traffic.

Answer

Enable detailed monitoring on EC2 instances.

Question 11

A company is migrating its SAP environment to AWS and wants to automate the installation of SAP software on EC2 instances. Which AWS service is best suited for this purpose?

Accepted Answer

AWS CloudFormation. Option B (AWS CloudFormation with SAP-specific resource providers) is correct because CloudFormation allows infrastructure as code and can use custom resource providers for SAP. Option A (AWS OpsWorks) is for Chef/Puppet automation but not SAP-specific. Option C (AWS Elastic Beanstalk) is for web apps. Option D (Amazon EC2 Launch Templates) only configures EC2 instances at launch, not full SAP installation.

Answer

AWS Elastic Beanstalk

Answer

Amazon EC2 Launch Templates

Answer

AWS OpsWorks

Question 12

A company runs SAP on AWS and uses a Multi-AZ RDS for Oracle as the database. They observe that the database failover took longer than expected during a recent test. What is the most likely cause of the increased failover time?

Accepted Answer

The primary instance had a high volume of ongoing transactions that needed to be completed or rolled back before failover could proceed.. Option D is correct because Multi-AZ failover time depends on the time to complete in-flight transactions and synchronize the standby. Option A is wrong because read replicas are not used in Multi-AZ. Option B is wrong because the CNAME record update is typically fast. Option C is wrong because synchronous replication does not cause a long failover; the issue is usually transaction completion.

Answer

The database had a large number of uncommitted transactions that needed to be rolled back.

Answer

The DNS TTL was set too high, causing delays in routing to the new primary.

Answer

The standby instance was not in sync because read replicas were used for reads.

Question 13

Refer to the exhibit. An operations team sees this log entry in CloudWatch Logs for an SAP system. What is the MOST likely cause?

Accepted Answer

The network connection between the ABAP application server and HANA is down.. Option B is correct. The error indicates an RFC communication failure, which is typically due to a network issue. Option A is wrong because there is no indication of HANA crash. Option C is wrong because the error is about communication, not authentication. Option D is wrong because the error is not about the ABAP program itself.

Answer

The HANA database has crashed.

Answer

The SAP system user password has expired.

Answer

The ABAP program Z_MONITOR has a bug.

Question 14

An SAP system on AWS uses Amazon RDS for its database. The operations team needs to perform a point-in-time recovery (PITR) to restore the database to a specific timestamp. Which AWS feature enables PITR for RDS?

Accepted Answer

Automated backups. Option B is correct because automatic backups enable PITR. Option A is wrong because manual snapshots are not for PITR. Option C is wrong because Multi-AZ is for high availability. Option D is wrong because Read Replicas are for read scaling.

Answer

Manual DB snapshots

Answer

Read Replicas

Answer

Multi-AZ deployment

Question 15

A company runs its SAP environment on AWS and needs to ensure that all changes to the SAP landscape are tracked for auditing. The environment includes EC2 instances, RDS databases, and Lambda functions. Which combination of AWS services provides the most comprehensive audit trail?

Accepted Answer

AWS CloudTrail and AWS Config. Option B is correct because CloudTrail logs API calls for all services, and AWS Config records resource configuration changes, together providing a complete audit trail. Option A is wrong because CloudWatch Logs and Metrics are for monitoring, not auditing changes. Option C is wrong because Systems Manager Inventory collects software inventory, not configuration changes. Option D is wrong because VPC Flow Logs capture network traffic, not configuration changes.

Answer

AWS Systems Manager Inventory and AWS Config

Answer

Amazon VPC Flow Logs and AWS CloudTrail

Answer

Amazon CloudWatch Logs and Amazon CloudWatch Metrics

Question 16

A company uses an SAP HANA database on AWS. The database administrator wants to back up the database using Backint integration with AWS. Which AWS service is the recommended target for Backint backups?

Accepted Answer

Amazon S3. Option A is correct because Amazon S3 is the standard target for SAP HANA Backint backups on AWS. Option B is incorrect because EBS is not directly used by Backint. Option C is incorrect because Glacier is not directly integrated with Backint. Option D is incorrect because EFS is not used for Backint.

Answer

Amazon EFS

Answer

Amazon EBS

Answer

Amazon S3 Glacier

Question 17

A company runs SAP ERP on AWS using a Multi-AZ RDS for SAP HANA database. The operations team needs to automate the rotation of the database master password. Which AWS service should be used to securely store and rotate the password?

Accepted Answer

AWS Secrets Manager. Option D is correct because AWS Secrets Manager can automatically rotate RDS database credentials. Option A (Systems Manager Parameter Store) can store secrets but does not support automatic rotation. Option B (IAM) does not manage database passwords. Option C (CloudHSM) is for hardware security modules, not password rotation.

Answer

AWS Systems Manager Parameter Store

Answer

AWS CloudHSM

Answer

AWS Identity and Access Management (IAM)

Question 18

A company runs an SAP HANA database on an EC2 instance with a large EBS volume. The operations team receives alerts that the volume's burst balance has dropped to 10%. Which action should be taken to prevent performance degradation?

Accepted Answer

Increase the volume size to increase the baseline IOPS.. Option B is correct because increasing the volume size increases the baseline IOPS and burst balance replenishment rate. Option A is wrong because gp3 volumes do not have burst balance. Option C is wrong because it does not address burst balance. Option D is wrong because it does not affect burst balance.

Answer

Change the volume type to io2 with provisioned IOPS.

Answer

Enable EBS optimization on the instance.

Answer

Convert the volume to gp3.

Question 19

Which THREE components are required to set up SAP HANA System Replication (HSR) on AWS for high availability? (Choose THREE.)

Accepted Answer

A dedicated replication network interface with low latency.. Options A, C, and E are correct. HSR requires two instances, replication network, and shared storage for log replication. Option B is not required; HSR uses its own replication. Option D is optional.

Answer

An Amazon S3 bucket for storing backup logs.

Answer

A Network Load Balancer to distribute database connections.

Question 20

A company runs SAP on AWS and needs to implement a disaster recovery (DR) strategy with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. The primary site is in us-east-1 and the DR site in us-west-2. The SAP HANA database is 5 TB. Which approach meets these requirements cost-effectively?

Accepted Answer

Configure HANA System Replication in async mode between the primary and DR instances over AWS Direct Connect.. Option C (Use HANA System Replication with async mode over AWS Direct Connect) is correct because it provides continuous replication with low RPO and fast RTO. Option A (S3 cross-region replication) has high RTO. Option B (EBS snapshots every 15 minutes) may not achieve RPO due to snapshot frequency limits. Option D (AWS DMS) is not designed for HANA replication.

Answer

Use Amazon S3 cross-region replication to copy database backups every 15 minutes.

Answer

Use AWS Database Migration Service (DMS) for ongoing replication to a HANA instance in us-west-2.

Answer

Take EBS snapshots of the data volume every 15 minutes and copy them to us-west-2.