PAS-C01 Practice Test 8 — 10 Questions

Question 1

An SAP administrator is configuring high availability for SAP HANA using HANA system replication (HSR) across multiple Availability Zones. The administrator must ensure that the replication traffic is encrypted and uses the most efficient network path. Which TWO configurations meet these requirements? (Choose TWO.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enable SAP HANA system replication with TLS/SSL encryption.. SAP HANA system replication (HSR) supports TLS/SSL encryption natively, which encrypts the replication traffic between the primary and secondary HANA instances. This ensures data confidentiality and integrity without requiring additional network infrastructure, and it uses the most efficient network path because the replication occurs directly over the existing network between the Availability Zones.

Answer

Store replication data in Amazon S3 and have the secondary instance pull it.

Answer

Use AWS Direct Connect to connect the Availability Zones.

Answer

Configure a VPN connection between the Availability Zones.

Question 2

A company is migrating a legacy .NET application to AWS. The application uses Windows Authentication and relies on Active Directory for user authentication. The company wants to minimize changes to the application code. Which AWS service should be used to integrate Active Directory with the migrated application?

Accepted Answer

AWS Directory Service for Microsoft Active Directory. AWS Directory Service for Microsoft Active Directory is the correct choice because it provides a fully managed Microsoft Active Directory in the AWS cloud, which natively supports Windows Authentication and Kerberos-based authentication without requiring any code changes. This service allows the migrated .NET application to seamlessly integrate with the existing on-premises Active Directory through a trust relationship or by extending the directory directly into AWS, preserving the application's authentication logic.

Answer

Amazon Cognito

Answer

AD Connector

Answer

Simple AD

Question 3

An IAM policy is attached to a user who manages SAP HANA volumes. The policy is shown in the exhibit. What is the effect of this policy?

Accepted Answer

The user can attach and detach volumes that have the tag Environment=production, but cannot delete any volume.. The first statement allows ec2:AttachVolume and ec2:DetachVolume only if the volume has tag Environment=production. The second statement denies ec2:DeleteVolume for all volumes. Therefore, the user can attach and detach volumes that have the tag Environment=production, but cannot delete any volume. Option A is incorrect because attach/detach are allowed only with the condition. Option B is incorrect because delete is denied for all volumes. Option D is incorrect because the allow statement is conditional on the specific tag value, not just the production environment.

Answer

The user can attach and detach any volume regardless of tags.

Answer

The user can delete any volume.

Answer

The user can attach and detach any volume in the production environment.

Question 4

An SAP workload on AWS uses an Auto Scaling group for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS) instances. The instances are launched with a custom AMI that includes the SAP software. During a recent failover test, the ASCS instance failed to start after being terminated and re-launched by the Auto Scaling group. The error log indicates that the ASCS instance cannot find the quorum device. What is the most likely cause of this issue?

Accepted Answer

The quorum device (EBS volume) was not re-attached or was not available in the same Availability Zone as the new ASCS instance.. In an SAP on AWS high-availability setup, the ASCS and ERS instances rely on a shared quorum device (typically an EBS volume or an Amazon EFS file system) to maintain cluster state and prevent split-brain scenarios. When the Auto Scaling group terminates and re-launches the ASCS instance, the new instance must have the quorum device attached and be in the same Availability Zone as the EBS volume (since EBS volumes are AZ-specific). If the quorum device is not re-attached or is in a different AZ, the SAP cluster cannot find it, causing the ASCS instance to fail to start.

Answer

The instance type of the new ASCS instance is different from the original, causing incompatibility with the SAP kernel.

Answer

The ASCS instance does not have a public IP address, preventing communication with the quorum device.

Answer

The Security Group associated with the ASCS instance does not allow inbound traffic on the quorum port.

Question 5

A company is running SAP S/4HANA on AWS. The application team reports that batch jobs are failing intermittently with database connection timeouts. The SAP system uses a single Availability Zone deployment. Which design change should the architect recommend to improve database availability?

Accepted Answer

Configure SAP HANA System Replication across two Availability Zones. SAP HANA System Replication (HSR) across two Availability Zones provides synchronous or asynchronous data replication at the database level, ensuring that if the primary HANA instance fails, the secondary can take over with minimal downtime. This directly addresses the intermittent database connection timeouts by eliminating the single point of failure in a single-AZ deployment, as the application can failover to the replica without manual intervention.

Answer

Use Amazon EBS Multi-Attach to attach the same volume to multiple EC2 instances

Answer

Implement an Amazon RDS for SAP HANA read replica

Answer

Scale up the SAP HANA instance to a larger instance type

Question 6

A company is running SAP NetWeaver on AWS. The system uses an SAP HANA database. The operations team needs to monitor the database performance and receive alerts when specific metrics exceed thresholds. Which AWS service should be used to collect and analyze SAP HANA metrics?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch is the correct service because it can collect, monitor, and analyze SAP HANA database metrics using the AWS CloudWatch Agent or the SAP HANA CloudWatch integration. By configuring custom metrics or using the SAP HANA monitoring views, operations teams can set CloudWatch Alarms to trigger notifications when specific thresholds are exceeded, enabling proactive performance management.

Answer

Amazon Inspector

Answer

AWS CloudTrail

Answer

AWS Config

Question 7

An SAP Basis administrator needs to apply security patches to the operating system of SAP EC2 instances. The administrator wants to use AWS Systems Manager Patch Manager. Which THREE steps are required to set up patching? (Choose THREE.)

Accepted Answer

Create a patch baseline in AWS Systems Manager.. To set up patching with AWS Systems Manager Patch Manager, you need three steps: Create a patch baseline (A) to define which patches to apply. Install the SSM Agent on each EC2 instance (C) to allow Systems Manager to communicate with the instances. Associate the instances with a maintenance window (E) to schedule when patching occurs. Options B and D are not required: Lambda is not needed because Patch Manager handles the patching process, and CloudWatch Logs are not mandatory for patching operations.

Answer

Create an AWS Lambda function to invoke the patching process.

Answer

Configure Amazon CloudWatch Logs to store patch logs.

Question 8

A company is migrating an SAP BusinessObjects environment to AWS. The migration must ensure that the legacy reporting system remains accessible during the transition. Which AWS service can help facilitate this by allowing the company to redirect traffic gradually?

Accepted Answer

Amazon Route53 with weighted routing policies. Amazon Route53 with weighted routing policies can gradually shift traffic from on-premises to AWS by assigning weights to DNS records. Option A (Amazon CloudFront) is a content delivery network, not for traffic shifting. Option B (Elastic Load Balancer) distributes traffic within AWS, not for gradual migration. Option C (AWS Global Accelerator) improves performance but does not provide weighted routing. Option D (Amazon Route53 with weighted routing policies) is correct because it allows incremental traffic redirection during migration.

Answer

Amazon CloudFront

Answer

Elastic Load Balancer (ELB)

Answer

AWS Global Accelerator

Question 9

A company is migrating an SAP ERP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS). The company plans to use a shared file system for the SAP transport directory. Which TWO AWS services can be used to provide a highly available shared file system for this purpose?

Accepted Answer

Amazon FSx for NetApp ONTAP. Options D (Amazon FSx for NetApp ONTAP) and E (Amazon EFS) are correct because they provide NFS-based shared file systems that support the required protocols for SAP transport directory and can be configured for high availability. Option A (Amazon EBS Multi-Attach) is block storage, not a shared file system, and does not support concurrent read/write operations required for SAP. Option B (Amazon S3) is object storage, not POSIX-compliant. Option C (Amazon FSx for Windows File Server) uses SMB protocol, not NFS, which is required by SAP.

Answer

Amazon EBS Multi-Attach

Answer

Amazon S3

Answer

Amazon FSx for Windows File Server

Question 10

A company is planning to migrate its SAP NetWeaver system from on-premises to AWS. The system uses an SAP HANA database. The company wants to use the SAP System Migration (sum) tool. Which THREE prerequisites must be met before starting the migration?

Accepted Answer

The target SAP HANA database must be installed and running.. For an SAP System Migration (SUM) to AWS with HANA, the target HANA database must be installed and running (A), the target system must have the SAP kernel and required libraries (B), and source and target must be on the same OS (D) to ensure compatibility. HTTP proxy (C) is not a prerequisite; communication between source and target does not require a proxy. The source system does not need to be fully shut down before starting; SUM can be run with the source system running (E).

Answer

An HTTP proxy must be configured for communication between source and target.

Answer

The source SAP system must be fully shut down before starting the migration.