PAS-C01 Mock Exam 71 — 25 Questions

Question 1

A company is migrating an SAP NetWeaver system to AWS. The system uses NFS for shared file systems. They want to minimize latency and maximize throughput for SAP profiles and transport directories. Which AWS storage service should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Amazon FSx for NetApp ONTAP. Amazon FSx for NetApp ONTAP provides a fully managed NFS solution with low latency and high throughput, ideal for SAP NetWeaver shared file systems like profiles and transport directories. Option A (S3) is object storage, not NFS. Option C (EBS) is block storage, not a shared file system. Option D (EFS) is NFS but lacks the performance optimization and enterprise features of FSx for NetApp ONTAP for SAP workloads.

Answer

Amazon Simple Storage Service (S3)

Answer

Amazon Elastic Block Store (EBS)

Answer

Amazon Elastic File System (EFS)

Question 2

An IAM policy for a migration team is shown in the exhibit. The team is unable to start a DMS replication task. What is the most likely missing permission?

Accepted Answer

ec2:CreateNetworkInterface. To start a DMS replication task, the IAM policy must include permissions for DMS to create network interfaces in the VPC. The ec2:CreateNetworkInterface permission is required because DMS dynamically creates an elastic network interface for the replication instance when the task starts. The other options are not the most likely missing permission: dms:CreateReplicationInstance and dms:CreateEndpoint are needed for creating resources, not for starting an existing task; s3:ListBucket is unrelated; kms:Decrypt is only needed if using encrypted endpoints, which is not indicated.

Answer

dms:CreateReplicationInstance and dms:CreateEndpoint

Answer

s3:ListBucket

Answer

kms:Decrypt

Question 3

Which TWO considerations are critical when migrating an SAP HANA database to AWS using backup and restore? (Choose two.)

Accepted Answer

Compatibility of SAP HANA version between source and target. The correct answers are A and B. Compatibility of SAP HANA versions (A) is critical because the backup can only be restored to a target system running a compatible HANA version. Network bandwidth (B) directly affects the time required to transfer the backup files, which is especially important for large databases. Option C is incorrect because SAP HANA on AWS is typically deployed on EC2 instances, not Amazon RDS; there is no Amazon RDS for SAP HANA. Option D is incorrect because encryption settings for EBS volumes are not a critical consideration during backup and restore; encryption can be applied at rest but does not prevent the restore process. Option E is incorrect because network latency is not a major factor for offline backup transfer; it is more relevant for real-time replication.

Answer

Amazon RDS for SAP HANA instance class

Answer

Encryption settings for Amazon EBS volumes

Answer

Network latency between on-premises and AWS

Question 4

A company is migrating an SAP ERP system to AWS. Which AWS service should they use to set up a highly available SAP HANA database?

Accepted Answer

Amazon EFS. Only Amazon EFS is correct for setting up a highly available SAP HANA database. Amazon EFS provides the shared storage (e.g., for /hana/shared) required for SAP HANA multi-node or scale-out configurations, which support high availability. AWS Elastic Disaster Recovery (DRS) is a disaster recovery service that enables replication and recovery to a different region or account, but it does not provide automatic failover for high availability within a single region. Amazon Redshift is a data warehouse and cannot host SAP HANA. Amazon DynamoDB is a NoSQL database and cannot run SAP HANA. Amazon S3 is object storage, not designed for the low-latency, high-throughput requirements of SAP HANA.

Answer

AWS Elastic Disaster Recovery (DRS)

Answer

Amazon Redshift

Answer

Amazon DynamoDB

Answer

Amazon S3

Question 5

A company is migrating a large-scale SAP HANA workload to AWS. The system requires high memory and low latency. Which EC2 instance type is most suitable for this migration?

Accepted Answer

x1e.32xlarge. The x1e.32xlarge is purpose-built for high-memory, SAP HANA workloads, offering up to 3,904 GiB of memory and high-speed NVMe SSD storage with low-latency networking. It is certified by SAP for running production HANA environments, making it the most suitable choice for this migration.

Answer

m5.24xlarge

Answer

c5.18xlarge

Answer

r5.24xlarge

Question 6

A company runs SAP on AWS. During a maintenance window, the SAP application team needs to apply a kernel update that requires a reboot of the SAP application servers. The environment uses an Auto Scaling group for the application tier. What is the BEST approach to minimize downtime?

Accepted Answer

Terminate instances one at a time, allowing the Auto Scaling group to launch new instances with the updated configuration.. The best approach to minimize downtime is to terminate instances one at a time, allowing the Auto Scaling group to launch new instances with the updated configuration. This method ensures that the desired capacity is maintained at all times, as the Auto Scaling group automatically replaces each terminated instance. Option A is wrong because stopping instances does not trigger the Auto Scaling group to launch new ones; it only suspends billing. Option B is wrong because detaching instances removes them from the group, requiring manual reattachment and risking capacity gaps. Option C might minimize downtime but incurs additional costs by running extra instances and is not as efficient as the rolling replacement in option D.

Answer

Stop all instances in the Auto Scaling group, apply the update, and start them again.

Answer

Detach all instances from the Auto Scaling group, apply the update, and reattach them.

Answer

Double the desired capacity of the Auto Scaling group, wait for new instances, then terminate old instances.

Question 7

An SAP system on AWS is experiencing intermittent connectivity issues between the application servers and the HANA database. The network team has confirmed that the VPC and subnets are configured correctly. What should the operations team check NEXT?

Accepted Answer

Security group rules on the database server.. Intermittent connectivity issues between application servers and HANA database often point to security group rules. Security groups act as virtual firewalls for EC2 instances. If the security group on the database server does not allow inbound traffic from the application servers on the required ports (e.g., 3xx41 for HANA), connections may fail intermittently. While route tables and NACLs could affect connectivity, they are typically stable and less likely to cause intermittent problems. DNS resolution issues would be more consistent. Therefore, the operations team should first check the security group rules on the database server.

Answer

DNS resolution for the database endpoint.

Answer

VPC route tables for the application subnet.

Answer

Network ACLs on the database subnet.

Question 8

A company runs SAP ERP on AWS with a DR strategy using cross-region replication for SAP HANA. During a DR drill, the team discovers that the HANA database is not starting on the DR instance. Which configuration is most likely missing?

Accepted Answer

HANA system replication configuration with the correct 'PRIMARY' and 'SECONDARY' roles.. HANA system replication requires proper configuration of primary and secondary roles. Without the correct HSR configuration, the HANA database will not start on the DR instance. Option A is incorrect because IAM roles for S3 access are not necessary for HANA startup. Option B is incorrect because EBS encryption does not affect HANA startup. Option D is incorrect because CloudWatch agent is for monitoring, not for HANA startup.

Answer

IAM roles for the DR instance to access S3.

Answer

EBS encryption on the DR volumes.

Answer

CloudWatch agent for logging.

Question 9

A company is migrating a SAP system to AWS and needs to ensure that the database migration from SAP ASE to Amazon Aurora is successful with minimal downtime. Which AWS service should be used?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) is the correct choice because it supports heterogeneous migrations from SAP ASE (Sybase) to Amazon Aurora with minimal downtime. DMS can continuously replicate ongoing changes from the source database to the target using change data capture (CDC), allowing the source system to remain operational during the migration and enabling a cutover with only a brief outage.

Answer

AWS Snowball Edge

Answer

AWS Server Migration Service (SMS)

Answer

AWS DataSync

Question 10

An SAP system administrator notices that nightly SAP HANA backups to Amazon S3 are failing intermittently with 'Access Denied' errors. The backups are initiated by an AWS Lambda function that uses an IAM role. The role has a policy that grants s3:PutObject on the backup bucket. Which additional IAM action is most likely required to resolve the issue?

Accepted Answer

s3:PutObjectAcl. s3:PutObjectAcl is required when the bucket owner and the object uploader are different, or when the bucket policy requires the uploader to set ACLs to give the bucket owner full control. In this scenario, the Lambda function's IAM role likely needs this permission to successfully write objects to the S3 bucket, especially if the bucket is owned by a different AWS account or has a bucket policy that enforces specific ACLs. Without s3:PutObjectAcl, the upload may fail with 'Access Denied' when the bucket policy requires the uploader to grant the bucket owner full control. Option A (s3:ListBucket) is for listing objects, not uploading. Option C (s3:DeleteObject) is for deleting, not uploading. Option D (s3:GetObject) is for reading, not writing.

Answer

s3:ListBucket

Answer

s3:DeleteObject

Answer

s3:GetObject

Question 11

Which TWO AWS services can be used to automate the patching of SAP application servers?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager (Option B) is correct because it provides a fully managed service specifically designed to automate the process of patching operating systems and applications, including SAP application servers running on EC2 instances. It uses patch baselines to define approved patches and can schedule patching across multiple instances, ensuring SAP systems remain compliant without manual intervention.

Answer

AWS CloudFormation

Answer

Amazon EC2 Auto Scaling

Answer

AWS Elastic Beanstalk

Question 12

Refer to the exhibit. An operations team sees this log entry in CloudWatch Logs for an SAP system. What is the MOST likely cause?

Accepted Answer

The network connection between the ABAP application server and HANA is down.. The error indicates an RFC communication failure, which is typically due to a network issue between the ABAP application server and the HANA database. Option A is wrong because there is no indication of a HANA crash. Option B is wrong because the error is about communication, not authentication (password expiry would result in a different error). Option D is wrong because the error is not about the ABAP program itself; it is a connectivity issue.

Answer

The HANA database has crashed.

Answer

The SAP system user password has expired.

Answer

The ABAP program Z_MONITOR has a bug.

Question 13

Which AWS service can be used to monitor the performance of SAP HANA databases running on EC2 instances?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch is the primary AWS service for monitoring the performance of SAP HANA databases on EC2. It can collect custom metrics such as CPU utilization, memory usage, disk I/O, and SAP HANA-specific metrics (e.g., row store memory, column store memory) via the CloudWatch agent or monitoring scripts. The other listed services (Inspector, RDS Performance Insights, X-Ray, Config) are not designed for or capable of directly monitoring self-managed SAP HANA database performance on EC2.

Answer

Amazon Inspector

Answer

Amazon RDS Performance Insights

Answer

AWS X-Ray

Answer

AWS Config

Question 14

An administrator needs to apply a critical OS security patch to multiple SAP application servers in an Auto Scaling group without disrupting ongoing operations. Which strategy should be used?

Accepted Answer

Use AWS CloudFormation with a rolling update policy to gradually replace instances in the Auto Scaling group.. Using AWS CloudFormation with a rolling update policy allows gradual replacement of instances in the Auto Scaling group, applying the patch without downtime. Option A (stop all instances) causes downtime. Option C (Systems Manager Patch Manager) may not handle Auto Scaling gracefully and could patch instances inconsistently. Option D (new AMI and terminate all instances) is a blue/green approach that can cause disruption if not carefully managed.

Answer

Stop all instances, apply the patch using AWS Systems Manager, then restart all instances.

Answer

Use AWS Systems Manager Patch Manager to patch instances at the next maintenance window.

Answer

Create a new Amazon Machine Image (AMI) with the patch, update the Auto Scaling group's launch configuration, and terminate all instances.

Question 15

Which TWO AWS services can be used to automate the start and stop of SAP EC2 instances based on a schedule? (Select TWO.)

Accepted Answer

AWS Lambda with CloudWatch Events. The correct answers are A (AWS Lambda with CloudWatch Events) and C (AWS Instance Scheduler). Option A allows you to run a custom Lambda function triggered by CloudWatch Events on a schedule (e.g., cron expression) to start or stop EC2 instances. Option C is a purpose-built AWS solution for scheduling instance start and stop times. Options B (Systems Manager Run Command) is used for ad-hoc command execution, not for recurring scheduling. Option D (Auto Scaling) manages capacity based on scaling policies, not for scheduled start/stop of existing instances. Option E (AWS OpsWorks) is a configuration management service (Chef/Puppet) and not designed for scheduling instance power states.

Answer

AWS Systems Manager Run Command

Answer

AWS Auto Scaling

Answer

AWS OpsWorks

Question 16

A company runs an SAP HANA database on an EC2 instance with a large EBS volume. The operations team receives alerts that the volume's burst balance has dropped to 10%. Which action should be taken to prevent performance degradation?

Accepted Answer

Increase the volume size to increase the baseline IOPS.. Increasing the volume size increases the baseline IOPS and burst balance replenishment rate. Option A is wrong because io2 volumes do not have a burst bucket; they use provisioned IOPS instead and thus do not experience burst balance depletion. Option C is wrong because EBS optimization improves network throughput but does not affect burst balance. Option D is wrong because converting to gp3 changes the volume type but does not directly address the burst balance issue; gp3 volumes have a baseline performance but may still have burst credits if the volume is small, so the correct action to replenish burst balance is to increase volume size.

Answer

Change the volume type to io2 with provisioned IOPS.

Answer

Enable EBS optimization on the instance.

Answer

Convert the volume to gp3.

Question 17

A company is running a critical SAP application on AWS. The operations team receives a notification that the SAP HANA database is running low on memory. Which AWS service should be used to automatically increase memory capacity without downtime?

Accepted Answer

Amazon EC2 Auto Scaling. Mazon EC2 Auto Scaling (Option B). For SAP HANA on AWS, increasing memory capacity without downtime is achieved through HANA scale-out, which adds additional nodes to the HANA cluster. Amazon EC2 Auto Scaling can automatically launch new EC2 instances configured as HANA worker nodes, thereby increasing the total available memory. This approach allows the database to accommodate higher memory demand without restarting the existing instance. Option A (ElastiCache) provides a separate caching layer but does not increase HANA's own memory. Option C (DynamoDB) and Option D (Lambda) are irrelevant for this purpose.

Answer

Amazon ElastiCache

Answer

Amazon DynamoDB

Answer

AWS Lambda

Question 18

A company is migrating a SAP system to AWS and wants to use the same SAP system ID (SID) as on-premises. What is a prerequisite for this migration?

Accepted Answer

The SID must be unique within the AWS account and region.. SAP requires that the System ID (SID) be unique within an AWS account and region to avoid conflicts with existing SAP systems. During migration, the same SID can be reused as long as no other SAP system with that SID exists in the same account and region, ensuring proper system identification and integration with AWS services like Amazon EFS or Amazon FSx for SAP.

Answer

The SID must be changed to a new value for the migration.

Answer

The SID must be at least 5 characters long.

Answer

The SID must be registered with AWS.

Question 19

A company runs its SAP Business Suite on AWS with an Oracle database on an EC2 instance. The database is stored on multiple EBS volumes configured as a RAID 0 array. The company wants to migrate the database to SAP HANA on a new EC2 instance. The SAP HANA instance will use EBS volumes for data and log storage. The current Oracle database size is 500 GB. The company needs to minimize downtime during the migration. Which migration strategy should they use?

Accepted Answer

Use AWS Database Migration Service (DMS) to migrate from Oracle to SAP HANA.. AWS DMS supports heterogeneous migration from Oracle to SAP HANA, enabling minimal downtime through continuous replication. SAP HANA System Replication (HSR) cannot be used because it only works between HANA systems, not from Oracle. Export/import causes extended downtime, and Application Migration Service is for server-level migration, not database-level.

Answer

Use AWS Application Migration Service to migrate the entire EC2 instance.

Answer

Use SAP HANA System Replication to replicate data from the source Oracle database to the target HANA database.

Answer

Export the Oracle database to a flat file and import into SAP HANA.

Question 20

Which TWO AWS services can be used to automate the startup and shutdown of SAP application servers based on a schedule to reduce costs? (Select TWO.)

Accepted Answer

AWS Instance Scheduler. AWS Instance Scheduler (option C) is a solution that automatically starts and stops EC2 instances based on a schedule, reducing costs for non-production SAP systems. AWS Systems Manager Maintenance Windows (option E) can be configured to stop and start instances during scheduled maintenance windows, enabling automated start/stop. Option A (CloudWatch Events) can trigger actions via Lambda but does not natively schedule instance start/stop. Option B (CodePipeline) is for CI/CD, not scheduling. Option D (Auto Scaling) adjusts capacity based on demand, not schedule-based start/stop of specific instances.

Answer

Amazon CloudWatch Events

Answer

AWS CodePipeline

Answer

Amazon EC2 Auto Scaling