PAS-C01 Mock Exam 75 — 25 Questions

Question 1

Match the AWS service to its primary use in an SAP environment.

Accepted Answer

Amazon EC2: Compute for SAP applications. In SAP on AWS, Amazon EC2 provides compute, Amazon EBS provides block storage, Amazon S3 is used for backup/archive, and Amazon FSx for Windows File Server provides shared file storage. Distractors swap these roles.

Answer

Amazon EC2: Persistent block storage for SAP

Answer

Amazon S3: Compute for SAP applications

Question 2

Match the SAP system type to its typical AWS deployment pattern.

Accepted Answer

SAP Production System: Typically deployed across multiple Availability Zones with SAP HANA System Replication for high availability.. SAP production systems require high availability and are typically deployed across multiple AZs. Development and sandbox systems have lower availability needs and are often in single AZs.

Answer

SAP Production System: Typically deployed in a single Availability Zone for cost optimization.

Answer

SAP Development System: Typically deployed across multiple Regions for disaster recovery.

Answer

SAP Sandbox System: Typically deployed across multiple Availability Zones with high availability.

Question 3

A company is migrating SAP applications to AWS and uses the CloudFormation template snippet shown in the exhibit. The SAP ASCS instance requires a shared file system for the transport directory. However, the template does not create any shared storage. Which AWS resource should be added to the template to provide a shared file system?

Accepted Answer

Amazon EFS file system. Amazon EFS provides a scalable, shared file system that can be mounted across multiple EC2 instances, making it suitable for the SAP transport directory. Option C (Additional EBS volume) is block storage that can only be attached to a single instance, not shared. Option D (Amazon S3 bucket) is object storage, not a file system. Option B (Instance Store) is ephemeral and not shared.

Answer

Instance Store

Answer

Additional Amazon EBS volume

Answer

Amazon S3 bucket

Question 4

A company is migrating its SAP ERP system to AWS. The system includes an SAP Central Services (ASCS) instance and an SAP application server. Which TWO of the following are required for high availability? (Choose TWO.)

Accepted Answer

Enqueue replication server (ERS) must be set up for the ASCS cluster. The Enqueue Replication Server (ERS) is a mandatory component for an SAP ASCS high-availability cluster. In a clustered ASCS setup, the ERS replicates the lock table from the active ASCS node to the standby node, ensuring that in the event of a failover, the new active ASCS instance can recover the locks without data inconsistency. Without ERS, the ASCS cluster cannot provide true high availability for the enqueue service.

Answer

Use an EBS Multi-Attach volume for shared /sapmnt

Answer

Configure an Elastic Load Balancer for ASCS

Answer

Deploy at least two application servers in different Availability Zones

Question 5

A company is migrating its SAP ERP system to AWS. They need to ensure high availability for the SAP Central Services (ASCS) instance. Which AWS architecture should they implement?

Accepted Answer

Configure a two-node cluster with a virtual IP (VIP) using AWS Route 53 health checks and failover. SAP ASCS requires a highly available cluster with a virtual IP (VIP) that can fail over between two EC2 instances. AWS Route 53 health checks can monitor the VIP and update DNS records to redirect traffic to the standby node upon failure, providing the necessary high availability for the ASCS instance without relying on a single point of failure.

Answer

Run ASCS on Amazon RDS for SAP with Multi-AZ

Answer

Deploy ASCS on a single large EC2 instance

Answer

Use an Auto Scaling group with a minimum of 2 instances

Question 6

An SAP landscape on AWS includes several instances in a VPC. The administrator needs to ensure that SAProuter can connect to the SAP system from the internet securely. Which networking component should be used?

Accepted Answer

AWS VPN connection to the customer's network. An AWS VPN connection establishes an encrypted tunnel over the internet between the customer's on-premises network and the VPC, allowing SAProuter to connect securely to the SAP system without exposing any instance to the public internet. This aligns with the requirement for secure, authenticated connectivity from the internet while maintaining network isolation.

Answer

AWS Direct Connect with a public VIF

Answer

Internet Gateway with a public IP on the SAProuter instance

Answer

AWS CloudFront with a security group

Question 7

A company is designing a disaster recovery (DR) strategy for SAP S/4HANA on AWS. The primary site is in us-east-1. They want a secondary site in us-west-2 with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. Which solution meets these requirements with the LEAST operational overhead?

Accepted Answer

Use HANA System Replication in async mode to us-west-2.. HANA System Replication in asynchronous mode can meet the 15-minute RPO and 2-hour RTO requirements when combined with automatic failover. Asynchronous replication is recommended for cross-region DR on AWS to avoid performance impact from latency, and automatic failover minimizes operational overhead. Option D is not recommended because synchronous replication over long distances introduces latency that can degrade primary site performance and may not be feasible for cross-region scenarios.

Answer

Take hourly backups to S3 and restore in us-west-2 when needed.

Answer

Use HANA System Replication to us-west-2 with manual failover.

Answer

Use HANA System Replication in sync mode with automatic failover to us-west-2.

Question 8

A company is migrating a critical application to AWS using a lift-and-shift strategy. The application has a legacy licensing model tied to specific hardware IDs. The company has already migrated the application to an Amazon EC2 instance but the license validation fails because the hardware ID changed. What is the MOST cost-effective and least disruptive solution?

Accepted Answer

Provision a Dedicated Host and associate the instance with it to control hardware IDs.. Provisioned Dedicated Hosts provide a consistent hardware ID for the EC2 instance, as the instance runs on a specific physical server. This allows the legacy license to validate against the same hardware ID after migration, without modifying the application or reverting the migration. It is the most cost-effective and least disruptive solution, as it avoids re-architecture or application changes.

Answer

Revert the migration and keep the application on-premises with a VPN connection to AWS for other services.

Answer

Modify the application's license file to accept the new hardware ID.

Answer

Use AWS License Manager to create a hardware-based license token that matches the original hardware ID.

Question 9

Which TWO AWS services can be used to automate the restart of an SAP application server when it becomes unresponsive? (Choose 2.)

Accepted Answer

Amazon CloudWatch alarm with an EC2 action to recover the instance. To automate the restart of an SAP application server when unresponsive, two appropriate AWS services are Amazon CloudWatch alarms with an EC2 action to recover the instance (Option B) and AWS Systems Manager Automation documents (Option C). A CloudWatch alarm can monitor a metric (e.g., StatusCheckFailed) and trigger an EC2 Recover action, which stops and starts the instance to restore service. Systems Manager Automation provides pre-defined or custom runbooks to perform automated remediation steps, including restarting services or instances. Option A (Amazon ECS) is for container orchestration, not for EC2 instance recovery. Option D (EC2 Auto Scaling) can replace instances via health checks but is not designed to restart the same instance. Option E (Amazon EventBridge with Lambda) could be used but requires custom coding and is not a native automated restart solution like the two correct options.

Answer

Amazon ECS service auto-recovery

Answer

EC2 Auto Scaling group with a health check

Answer

Amazon EventBridge with a Lambda function

Question 10

A company is using AWS Systems Manager to automate patching of SAP EC2 instances. The patching fails for some instances with the error 'Unable to retrieve SSM Agent registration'. What is the MOST likely cause?

Accepted Answer

The instance does not have outbound internet access or a VPC endpoint for Systems Manager.. The error 'Unable to retrieve SSM Agent registration' indicates that the SSM Agent cannot communicate with the Systems Manager service. This typically occurs when the instance lacks outbound internet access or a VPC endpoint for Systems Manager. Option A is incorrect because a patching window timeout would produce a different error. Option B is incorrect because the IAM role permissions issue would cause an access denied error, not a registration failure. Option D is incorrect because the SSM Agent runs on EC2 instances, not containers, and the error is unrelated to container environments.

Answer

The patching window is too short and the instance times out.

Answer

The IAM role attached to the instance does not have permissions to list patches.

Answer

The SSM Agent is not installed because the instance is running in a container.

Question 11

A company runs SAP HANA on EC2 with EBS io1 volumes. The administrator notices that the disk queue depth is consistently high during peak hours, causing increased latency. The volume is 2 TB with 5000 provisioned IOPS. The instance is an r5.4xlarge with EBS bandwidth of 4750 Mbps. The database workload is write-intensive. The administrator wants to reduce latency without increasing costs significantly. Which action should the administrator take?

Accepted Answer

Increase the provisioned IOPS to 10,000. Increasing the provisioned IOPS to 10,000 directly addresses the high disk queue depth by allowing more I/O operations to be processed concurrently, thereby reducing latency. Option B is incorrect because EBS Multi-Attach is used to attach a volume to multiple EC2 instances simultaneously, but it does not improve queue depth or latency for a single instance write-intensive workload. Option C is incorrect because changing to gp3 with the same 5000 IOPS does not provide any performance improvement; gp3 has a baseline of 3000 IOPS and relies on burst credits, which is not suitable for sustained high write demands. Option D is incorrect because upgrading to an r5.8xlarge increases network and EBS bandwidth but does not increase the provisioned IOPS, so it does not resolve the queue depth issue and adds unnecessary cost.

Answer

Enable EBS Multi-Attach and use multiple instances to share the volume

Answer

Change the volume type to gp3 with 5000 IOPS

Answer

Upgrade the EC2 instance to an r5.8xlarge

Question 12

A company runs SAP S/4HANA on AWS. The system is deployed in a cluster across two Availability Zones using Pacemaker for high availability. The primary SAP HANA node fails, and the failover to the secondary node is successful. However, after failover, the application servers cannot connect to the database because the database IP address changed. The application servers are configured to use the IP address of the primary node. The company needs a solution that allows the application servers to connect to the active database node without reconfiguration after failover. Which solution should the company implement?

Accepted Answer

Deploy an internal Network Load Balancer (NLB) with a static IP and target the HANA nodes. An internal Network Load Balancer (NLB) with a static IP provides a stable endpoint for application servers. The NLB forwards traffic to the active HANA node, so no reconfiguration is needed after failover. Option A is incorrect because using Route 53 DNS with health checks introduces DNS caching and TTL delays, causing application servers to use stale IPs after failover. Option B is incorrect because associating an Elastic IP via script is not seamless and may require manual intervention or scripting, and Elastic IP reassignment can have delays. Option C is incorrect because a CNAME record still points to a DNS name with TTL delays and does not automatically update to the active node's IP; it also would require the primary node's DNS name to be updated.

Answer

Use Amazon Route 53 DNS with a health check to point to the active node's IP

Answer

Associate an Elastic IP address to the active node using a script during failover

Answer

Configure a CNAME record in Route 53 that points to the primary node's DNS name

Question 13

A company is running a critical SAP HANA database on a single EC2 instance with a large gp2 EBS volume. They need to ensure high availability with a Recovery Time Objective (RTO) of less than 15 minutes and a Recovery Point Objective (RPO) of less than 5 minutes. Which solution meets these requirements?

Accepted Answer

Configure SAP HANA System Replication in scale-up mode with a standby HANA instance in a different Availability Zone.. SAP HANA System Replication in scale-up mode with a standby instance in a different Availability Zone meets the RTO of less than 15 minutes and RPO of less than 5 minutes by continuously replicating data synchronously or near-synchronously to a standby EC2 instance. This allows automatic failover to the standby instance, ensuring minimal data loss and rapid recovery without relying on EBS snapshots or cross-region replication.

Answer

Deploy the SAP HANA database on Amazon RDS for SAP HANA in a Multi-AZ configuration.

Answer

Use AWS Backup to take daily snapshots of the EBS volume and restore to a new instance in another Availability Zone.

Answer

Use AWS Application Recovery Controller to continuously replicate data to a standby EC2 instance in another region.

Question 14

A company running SAP on AWS needs to back up their SAP HANA database daily with point-in-time recovery. Which service should they use to achieve this with minimal operational overhead?

Accepted Answer

AWS Backup with the SAP HANA backup plan.. AWS Backup with the SAP HANA backup plan is the correct choice because it provides a fully managed, policy-driven backup service that integrates directly with SAP HANA to perform database-consistent, log-based backups for point-in-time recovery. This eliminates the need for custom scripts or manual orchestration, minimizing operational overhead while ensuring compliance with SAP's backup requirements.

Answer

Amazon RDS automated backups.

Answer

Amazon EBS snapshots via a script.

Answer

Amazon S3 with lifecycle policies.

Question 15

A company is migrating an SAP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS) instance. Which AWS service is best suited for this?

Accepted Answer

Amazon Route 53 weighted routing policy. None of the provided options is correct for ensuring high availability for SAP ASCS. ASCS requires a cluster manager with shared file systems (e.g., Amazon EFS) and failover mechanisms (e.g., overlay IP or Elastic Network Interface repositioning), which are not represented by any of the options. The current answer, Amazon Route 53 weighted routing policy, alone does not provide true high availability for ASCS as it lacks stateful failover and shared storage coordination.

Answer

Amazon RDS Multi-AZ deployment

Answer

EC2 Auto Scaling group

Answer

Amazon S3 cross-region replication

Question 16

An SAP system uses Amazon EFS for shared file storage. The SAP application writes many small files concurrently, causing high metadata operations. Which EFS performance mode should be selected to optimize for this workload?

Accepted Answer

Max I/O. Max I/O mode is designed for workloads with high concurrency and metadata-intensive operations, such as many small files being written simultaneously. It scales to higher levels of aggregate throughput and IOPS than General Purpose mode, making it the correct choice for this SAP workload.

Answer

General Purpose

Answer

Throughput Optimized

Answer

Provisioned Throughput

Question 17

An SAP system administrator needs to perform a backup of an SAP HANA database running on EC2. Which TWO AWS services can be used together to create consistent backups? (Choose TWO.)

Accepted Answer

Amazon EBS snapshots. (Amazon EBS snapshots) captures block-level data and can be made consistent for SAP HANA by using pre/post snapshot scripts. Option C (AWS Backup) can automate and orchestrate EBS snapshots, ensuring consistency and integration with HANA backup processes. Option A (Amazon S3) is an object storage service, not directly used for creating consistent database backups. Option D (AWS CloudFormation) is for infrastructure as code and does not create backups. Option E (AWS Storage Gateway) is for hybrid cloud storage, not for database backups.

Answer

Amazon S3

Answer

AWS CloudFormation

Answer

AWS Storage Gateway

Question 18

A company is deploying SAP NetWeaver on AWS and needs to ensure high availability for the ASCS instance. They plan to use a shared file system for the transport directory. Which AWS storage service is most appropriate for this shared file system?

Accepted Answer

Amazon EFS. Amazon EFS provides a fully managed, scalable, and highly available NFS file system that can be mounted concurrently by multiple EC2 instances across multiple Availability Zones. For SAP NetWeaver ASCS high availability, the transport directory (/usr/sap/trans) must be shared between the active and passive ASCS instances, and EFS supports the required NFSv4 protocol with strong consistency and POSIX permissions, making it the most appropriate choice.

Answer

Amazon EBS volumes with multi-attach

Answer

EC2 Instance Store

Answer

Amazon S3

Question 19

A company is running SAP on AWS and wants to automate the patching of SAP application servers. The servers are behind an Auto Scaling group. Which AWS service is BEST suited to apply OS patches without downtime?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager is the best choice because it automates the patching of OS-level updates. Combined with Auto Scaling groups, you can perform rolling updates to avoid downtime. AWS Config (option A) is used for compliance and configuration auditing, not patching. AWS CloudFormation (option C) is an infrastructure-as-code service, not a patching solution. AWS OpsWorks (option D) supports Chef and Puppet automation but is less integrated and not the primary service for OS patching.

Answer

AWS Config

Answer

AWS CloudFormation

Answer

AWS OpsWorks

Question 20

A company is using AWS DMS to migrate an SAP database. The full load is complete, but the CDC latency is high. Which step should the company take to reduce latency?

Accepted Answer

Increase the compute capacity of the DMS replication instance.. Increasing the compute capacity of the DMS replication instance provides more resources to process CDC changes, reducing latency. Option B is incorrect because increasing the target database size does not directly affect DMS replication performance. Option C is incorrect because restarting the task does not address the underlying resource constraint and may cause temporary downtime. Option D is incorrect because disabling CDC would stop replication entirely, not reduce latency.

Answer

Increase the size of the target database instance.

Answer

Restart the DMS replication task.

Answer

Disable change data capture (CDC) on the source database.