PAS-C01 Mock Exam 71 — 25 Questions

Question 1

An SAP system is deployed on EC2 instances with EBS volumes. The operations team needs to implement a backup strategy that provides point-in-time recovery for the EBS volumes with minimal downtime. Which AWS service should they use?

Accepted Answer

Amazon EBS Snapshots. Option A is correct because EBS Snapshots provide point-in-time backups and can be taken while the volume is attached and in use (with some performance impact). Option B is wrong because AWS Backup can orchestrate snapshots but is not the service that directly creates them. Option C is wrong because S3 is object storage, not for EBS backups. Option D is wrong because Storage Gateway is for hybrid storage, not for backing up EBS volumes.

Answer

AWS Storage Gateway

Answer

AWS Backup

Answer

Amazon S3

Question 2

An SAP administrator needs to monitor the CPU utilization of an EC2 instance running SAP HANA. Which AWS service should be used to set an alarm when CPU utilization exceeds 90% for 5 minutes?

Accepted Answer

Amazon CloudWatch. Option C is correct because CloudWatch alarms can be set on EC2 metrics like CPUUtilization. Option A is wrong because CloudTrail is for API logging. Option B is wrong because Config is for resource compliance. Option D is wrong because Trusted Advisor provides recommendations, not monitoring.

Answer

AWS CloudTrail

Answer

AWS Trusted Advisor

Answer

AWS Config

Question 3

Refer to the exhibit. An operations team uses this CloudFormation template to launch SAP application servers. After deployment, the application server fails to join the SAP system. The team verified that the security group allows outbound traffic to the SAP system. What is the MOST likely cause?

Accepted Answer

The `LatestAmiId` parameter is not defined in the template.. Option D is correct. The template uses `!Ref LatestAmiId` which does not exist as a parameter; it should be a parameter or a mapping. Option A is wrong because the instance type is parameterized. Option B is wrong because the security group is referenced correctly. Option C is wrong because the user data script is base64 encoded correctly.

Answer

The instance type is not specified correctly.

Answer

The security group ID is not properly referenced.

Answer

The user data script is not base64 encoded correctly.

Question 4

Which TWO AWS services can be used to monitor the performance of SAP HANA on AWS and set alarms? (Select TWO.)

Accepted Answer

Amazon CloudWatch. Option A and C are correct. CloudWatch is for monitoring and alarms. Systems Manager can run scripts to collect metrics. Option B is wrong because Config is for configuration. Option D is wrong because CloudTrail is for API logging. Option E is wrong because Trusted Advisor is for best practices.

Answer

AWS CloudTrail

Answer

AWS Config

Answer

AWS Trusted Advisor

Question 5

An SAP administrator is restoring an SAP HANA database from a backup stored in Amazon S3. The restore fails with an error indicating that the backup file is corrupt. The backup was created using the SAP HANA BACKUP command with the S3 backint agent. What could cause the backup file to be corrupt?

Accepted Answer

The multipart upload of the backup file was interrupted and not completed.. Option D is correct because multipart upload failures can result in incomplete objects that appear corrupt. Option A is wrong because S3 Versioning does not affect file integrity. Option B is wrong because S3 Transfer Acceleration improves speed, not integrity. Option C is wrong because cross-region replication results in identical copies.

Answer

S3 Transfer Acceleration was used during backup.

Answer

The S3 bucket has versioning enabled.

Answer

The backup was replicated to another AWS Region using S3 Cross-Region Replication.

Question 6

An SAP on AWS environment includes multiple instances across Availability Zones. The operations team needs to automatically replace an unhealthy EC2 instance that is part of an SAP application cluster. Which AWS service can automatically detect and replace the instance based on health checks?

Accepted Answer

Auto Scaling group. Option B is correct because an Auto Scaling group with health checks can automatically replace unhealthy instances. Option A is incorrect because ELB only distributes traffic, does not replace instances. Option C is incorrect because CloudWatch alarms only notify. Option D is incorrect because Systems Manager automates tasks but does not replace instances automatically.

Answer

Elastic Load Balancing

Answer

AWS Systems Manager Automation

Answer

Amazon CloudWatch alarms

Question 7

An SAP Basis administrator is monitoring the health of an SAP HANA database on AWS. The administrator wants to receive alerts when the CPU utilization of the HANA instance exceeds 90% for 5 consecutive minutes. Which combination of AWS services should be used?

Accepted Answer

Amazon CloudWatch metrics and CloudWatch Alarms with Amazon SNS. Option A is correct: CloudWatch collects metrics and Alarms trigger notifications via SNS. Option B (Lambda) is not needed for simple alarm. Option C (Config) is for compliance. Option D (X-Ray) is for tracing.

Answer

AWS X-Ray and Amazon CloudWatch Logs

Answer

AWS CloudTrail and AWS Lambda

Answer

AWS Config and Amazon Simple Email Service (SES)

Question 8

A company is using SAP HANA on AWS and needs to restore a backup to a new HANA instance. Which AWS service should be used to automate the backup and restore process?

Accepted Answer

AWS Backup. Option C is correct because AWS Backup can automate backups of SAP HANA databases using Backint. Option A is wrong because S3 is storage, not automation. Option B is wrong because DLM manages EBS snapshots, not HANA backups. Option D is wrong because CloudFormation is for infrastructure provisioning.

Answer

Amazon Data Lifecycle Manager (DLM)

Answer

AWS CloudFormation

Answer

Amazon S3

Question 9

Which TWO AWS services can be used to monitor SAP HANA database performance metrics? (Choose TWO.)

Accepted Answer

SAP HANA Studio / SAP HANA Cockpit. Options B and D are correct. CloudWatch can collect custom metrics, and SAP HANA has its own monitoring tools. Option A is for API auditing. Option C is for configuration. Option E is for web app monitoring.

Answer

AWS CloudTrail

Answer

AWS Config

Answer

AWS X-Ray

Question 10

An administrator needs to apply a critical OS security patch to multiple SAP application servers in an Auto Scaling group without disrupting ongoing operations. Which strategy should be used?

Accepted Answer

Use AWS CloudFormation with a rolling update policy to gradually replace instances in the Auto Scaling group.. Option D (Use a rolling update via AWS CloudFormation with UpdatePolicy) is correct because it allows gradual replacement of instances. Option A (Stop all instances, apply patch, restart) causes downtime. Option B (Use AWS Systems Manager Patch Manager) is good but may not handle Auto Scaling gracefully. Option C (Create new AMI, update Auto Scaling group) is a blue/green approach but may be slower.

Answer

Stop all instances, apply the patch using AWS Systems Manager, then restart all instances.

Answer

Use AWS Systems Manager Patch Manager to patch instances at the next maintenance window.

Answer

Create a new Amazon Machine Image (AMI) with the patch, update the Auto Scaling group's launch configuration, and terminate all instances.

Question 11

A company runs SAP on AWS and uses a distributed deployment with multiple application servers in an Auto Scaling group. They want to ensure that when a new instance is launched, it is automatically registered with the SAP Central Services instance. Which approach should they use?

Accepted Answer

Use an Auto Scaling lifecycle hook that triggers a Lambda function to perform the registration when the instance enters the 'InService' state.. Option C is correct because using a lifecycle hook with a custom Lambda function allows running custom actions at instance launch, such as registration with Central Services. Option A is wrong because user data runs at boot but does not wait for the instance to be fully ready for service registration. Option B is wrong because CloudFormation is for stack creation, not for ongoing Auto Scaling events. Option D is wrong because SSM Run Command is manual or scheduled, not automated at launch.

Answer

Configure the user data script to run the registration command on instance boot.

Answer

Use an AWS CloudFormation template to create the instance and include the registration in the template.

Answer

Use AWS Systems Manager Run Command to register the instance after it launches.

Question 12

A company runs SAP on AWS and uses a multi-AZ deployment for SAP HANA. The operations team notices that the secondary HANA node in the standby replica is not automatically taking over during a planned failover test. What is the most likely cause?

Accepted Answer

HANA system replication is not configured with 'PRIMARY' and 'SECONDARY' roles.. Option B is correct because automatic failover requires the HANA system replication to be configured with the correct mode. Option A is wrong because EBS volumes are replicated across AZs. Option C is wrong because HANA usually runs on the same instance type. Option D is wrong because Security Groups do not affect failover.

Answer

Security Groups are blocking replication traffic.

Answer

The secondary instance is launched in a different instance family.

Answer

The EBS volumes are not configured for replication across AZs.

Question 13

Which THREE factors should be considered when designing an SAP HANA backup strategy on AWS? (Select THREE.)

Accepted Answer

Encryption of backup data at rest and in transit. Option A, B, and E are correct. Backup frequency affects RPO. Cross-region replication provides DR. Encryption ensures security. Option C is wrong because instance type is for compute. Option D is wrong because Security Groups are for network.

Answer

Security Group rules for backup traffic

Answer

EC2 instance type for backup server

Question 14

An SAP system administrator needs to restart a critical SAP application server EC2 instance that is part of a cluster. Which approach minimizes downtime?

Accepted Answer

Reboot the instance from the AWS Management Console.. Option A is correct because a reboot does not change the underlying host, and the instance retains its public and private IP addresses. Option B is wrong because stop/start changes the underlying host and may take longer. Option C is wrong because terminating and launching a new instance loses all data on instance store volumes. Option D is wrong because modifying instance type requires stop/start.

Answer

Modify the instance type in the AWS Management Console.

Answer

Stop and start the instance from the AWS Management Console.

Answer

Terminate the instance and launch a new one with the same AMI.

Question 15

A company runs SAP on AWS and needs to patch the operating system of multiple EC2 instances on a schedule. The instances are part of an Auto Scaling group. Which AWS service can be used to apply patches without disrupting the Auto Scaling group's desired capacity?

Accepted Answer

AWS Systems Manager Patch Manager. Option C is correct because Systems Manager Patch Manager can patch instances on a schedule, and with instance refresh, can maintain capacity. Option A is incorrect because EC2 Auto Scaling does not apply OS patches. Option B is incorrect because CloudFormation is for infrastructure provisioning. Option D is incorrect because CodeDeploy deploys applications, not OS patches.

Answer

Amazon EC2 Auto Scaling

Answer

AWS CloudFormation

Answer

AWS CodeDeploy

Question 16

An SAP system on AWS is experiencing slow performance. The operations team suspects a memory bottleneck on the SAP HANA database. Which CloudWatch metric should be monitored to confirm memory pressure?

Accepted Answer

SwapUsage (custom metric from HANA). Option C is correct because SAP HANA uses swap space when memory is full; high swap usage indicates memory pressure. Option A (CPU) is not memory. Option B (Disk) is storage. Option D (Network) is network.

Answer

CPUUtilization

Answer

DiskReadOps

Answer

NetworkIn

Question 17

An SAP administrator notices that the SAP application server is experiencing high memory utilization. The system uses a cluster of EC2 instances. What is the most cost-effective solution to automatically add an additional application server when memory exceeds 80%?

Accepted Answer

Configure an Auto Scaling group with a scaling policy based on a custom CloudWatch metric for memory utilization.. Option B is correct because Auto Scaling with a custom metric (memory utilization) can scale out based on the threshold. Option A is wrong because CloudWatch alarms alone do not add instances. Option C is wrong because it does not automatically scale. Option D is wrong because scaling based on CPU does not address memory.

Answer

Create a CloudWatch alarm that sends an email to the administrator to manually launch a new instance.

Answer

Use an Auto Scaling group with a scaling policy based on CPU utilization.

Answer

Use AWS Elastic Beanstalk to deploy the application server.

Question 18

An SAP administrator is troubleshooting an issue where an AWS Lambda function is unable to start an EC2 instance. The Lambda execution role has the IAM policy shown in the exhibit. What is the likely cause of the failure?

Accepted Answer

The Lambda function is not configured with the correct VPC subnet or security group to reach the EC2 instance.. Option C is correct because the policy allows ec2:StartInstances on all resources, but if the instance is in a different account or region, or if there is a resource policy issue, it may fail. However, the most common issue is that the Lambda function does not have the correct region specified. Option A is wrong because the policy allows s3:GetObject. Option B is wrong because the policy allows ec2:StartInstances. Option D is wrong because the policy allows ec2:DescribeInstances.

Answer

The policy does not allow ec2:DescribeInstances.

Answer

The policy does not allow ec2:StartInstances.

Answer

The policy does not allow s3:GetObject on the specific backup object.

Question 19

A company is running SAP on AWS and needs to ensure that all changes to the SAP infrastructure are logged for audit purposes. Which AWS service should be enabled to record API calls?

Accepted Answer

AWS CloudTrail. Option B (AWS CloudTrail) is correct because it records all API activity in the AWS account. Option A (Amazon CloudWatch) monitors performance. Option C (AWS Config) evaluates resource configurations. Option D (Amazon GuardDuty) detects threats.

Answer

Amazon GuardDuty

Answer

Amazon CloudWatch

Answer

AWS Config

Question 20

An administrator needs to monitor the CPU utilization of an SAP HANA database running on an EC2 instance. The monitoring data must be stored for 15 months. Which AWS service should be used to meet this requirement?

Accepted Answer

Amazon CloudWatch Metrics. Option B is correct because CloudWatch Logs is for log data, not metrics; CloudWatch Metrics can store data for up to 15 months for custom metrics. Option A is wrong because CloudWatch Logs stores logs, not metrics. Option C is wrong because S3 can store data but is not designed for metrics retention. Option D is wrong because CloudTrail records API calls, not performance metrics.

Answer

Amazon S3

Answer

AWS CloudTrail

Answer

Amazon CloudWatch Logs