PAS-C01 Mock Exam 81 — 25 Questions

Question 1

A company is migrating its SAP landscape to AWS and plans to use SAP S/4HANA. The migration includes a heterogeneous system conversion from an existing SAP ECC system. Which AWS service or tool supports the generation of the migration cockpit and migration object modeler content required for the conversion?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

SAP S/4HANA Migration Cockpit (not an AWS service). SAP S/4HANA migration uses the SAP S/4HANA Migration Cockpit, which relies on migration object modeler content. This content is generated by the SAP S/4HANA Migration Cockpit itself, not by an AWS service. AWS does not provide a service that generates SAP migration content. Option A (AWS Migration Hub) tracks migrations. Option B (AWS Application Migration Service) is for server migration. Option C (AWS Database Migration Service) migrates databases. Option D (SAP S/4HANA Migration Cockpit) is the correct tool for generating the migration cockpit content.

Answer

AWS Database Migration Service (DMS)

Answer

AWS Application Migration Service (MGN)

Answer

AWS Migration Hub

Question 2

A company is migrating an SAP ERP system to AWS. They plan to use AWS Launch Wizard to deploy the SAP landscape. After running Launch Wizard, the deployment fails with an error indicating that the instance type is not available in the selected Availability Zone. What should the company do to resolve this issue?

Accepted Answer

Relaunch the deployment using a different Availability Zone in the same Region.. Launch Wizard allows specifying multiple Availability Zones. By selecting a different AZ where the instance type is available, the deployment can proceed. Modifying the template manually or using CloudFormation directly is not necessary as Launch Wizard provides this option.

Answer

Create a new VPC with different subnets and rerun Launch Wizard.

Answer

Modify the AWS CloudFormation template generated by Launch Wizard to specify a different instance type.

Answer

Request a limit increase for the instance type from AWS Support.

Question 3

A company is migrating a large SAP Business Suite system to AWS. The system has a 10 TB SAP HANA database. The migration window is limited to 48 hours. The company has a 1 Gbps direct connect link to AWS. Which TWO actions should the company take to minimize the migration time while ensuring data consistency?

Accepted Answer

Use AWS Snowball Edge to transfer a full database backup from on-premises to AWS, then restore it on the target HANA instance.. (initialize the target HANA instance with a backup/restore using AWS Snowball) is correct because it bypasses network limitations for the initial data load. Option D (configure SAP HANA System Replication over the Direct Connect link after initial load) is correct because it syncs incremental changes. Option B would take too long over the link. Option C is for ongoing replication not initial load. Option E is a best practice but not for minimizing migration time.

Answer

Set up SAP HANA System Replication (HSR) and let it synchronize the full database over the Direct Connect link.

Answer

Use AWS DMS to migrate the HANA database directly over the Direct Connect link.

Answer

Use AWS SCT to convert the database schema before migration.

Question 4

Which THREE considerations are important when planning the migration of an SAP HANA database to AWS using HANA System Replication (HSR)?

Accepted Answer

The target EC2 instance must have at least the same amount of RAM as the source.. HSR requires network latency below 10 ms for synchronous replication, and the target instance must have sufficient memory and storage. Network bandwidth is important but not the only factor. The source and target can be in different Regions, but latency must be acceptable. Encryption is not a prerequisite for HSR.

Answer

The source and target must be in the same AWS Region.

Answer

The source database must be encrypted before replication can start.

Question 5

A company is running SAP on AWS and needs to encrypt all data at rest for the SAP HANA database. Which AWS service should be used to manage the encryption keys?

Accepted Answer

AWS Key Management Service (KMS). AWS Key Management Service (KMS) is the correct service for managing encryption keys for SAP HANA on AWS because it provides a centralized, highly available key management system that integrates directly with AWS services and supports envelope encryption. For SAP HANA, KMS can be used to encrypt the EBS volumes, S3 buckets, or other storage where HANA data resides, and it allows you to control key rotation, access policies, and auditing via AWS CloudTrail, meeting the requirement to encrypt data at rest.

Answer

AWS CloudHSM

Answer

AWS Secrets Manager

Answer

AWS Certificate Manager (ACM)

Question 6

An SAP system is running on EC2 with a single Availability Zone. The company needs to increase availability for the SAP application layer. Which is the most cost-effective and reliable approach?

Accepted Answer

Use an Auto Scaling group with EC2 instances in two Availability Zones behind an Application Load Balancer.. It distributes the SAP application layer across multiple EC2 instances in two Availability Zones behind an Application Load Balancer, providing both high availability and fault tolerance. The Auto Scaling group ensures that the desired number of instances are maintained even if an instance or an entire AZ fails, while the ALB performs health checks and routes traffic only to healthy instances. This approach is cost-effective as it avoids over-provisioning and only scales based on demand, and it is reliable because it eliminates a single point of failure at the application tier.

Answer

Deploy a second EC2 instance in the same AZ and configure a Route 53 weighted routing policy.

Answer

Use a multi-AZ RDS database and keep the application on a single EC2 instance.

Answer

Use an EC2 instance in a different region and use Route 53 latency-based routing.

Question 7

A company is migrating a legacy SAP ERP system with a large ABAP codebase to AWS. They want to use the same SAP version without re-implementation. Which migration strategy should they adopt?

Accepted Answer

Rehost (Lift-and-shift). Lift-and-shift (rehost) moves the existing system as-is to AWS, preserving the ABAP codebase and SAP version. Replatform may involve minor changes. Refactor/Re-architect would require re-implementation. Retire is not applicable.

Answer

Refactor / Re-architect

Answer

Retire

Answer

Replatform (Lift, tinker, and shift)

Question 8

A company wants to monitor the performance of its SAP HANA database on AWS. Which THREE Amazon CloudWatch metrics should be monitored to ensure optimal database performance?

Accepted Answer

NetworkIn. CPUCreditBalance indicates if the instance is using burstable CPU. EBSIOBalance% shows I/O credit balance for EBS volumes. NetworkIn/Out monitor network traffic. These are key for HANA performance. MemoryUtilization is not a standard CloudWatch metric (needs custom agent). DiskReadOps is also not standard.

Answer

DiskReadOps

Answer

MemoryUtilization

Question 9

A company is running SAP HANA on AWS and wants to encrypt the EBS volumes at rest. The company requires key rotation and audit logging of key usage. Which solution should be used?

Accepted Answer

Use EBS encryption with AWS KMS. Amazon EBS encryption with AWS KMS provides key management, rotation, and audit logging. S3 server-side encryption does not apply to EBS. AWS CloudHSM is for hardware-based key management but does not provide automatic key rotation. AWS Certificate Manager is for SSL/TLS certificates.

Answer

Use AWS Certificate Manager

Answer

Use AWS CloudHSM to manage keys

Answer

Use S3 server-side encryption

Question 10

A company is migrating its SAP landscape to AWS and plans to use SAP S/4HANA. The migration includes a heterogeneous system conversion from an existing SAP ECC system. Which AWS service or tool supports the generation of the migration cockpit and migration object modeler content required for the conversion?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Amazon EFS. Amazon EFS provides a scalable, shared file system accessible from multiple EC2 instances with low latency, ideal for SAP transport directories. Amazon S3 is object storage, not a file system. Amazon FSx for Windows File Server is for Windows workloads. Amazon EBS volumes can only be attached to one instance at a time (except for multi-attach, which has limitations).

Answer

Amazon EBS with multi-attach

Answer

Amazon S3 with S3FS

Answer

Amazon FSx for Windows File Server

Question 11

A company is running SAP S/4HANA on AWS. They are experiencing high read latency on their EBS volumes used for /usr/sap. Which of the following is the MOST effective way to improve read performance?

Accepted Answer

Use io2 Block Express volumes with provisioned IOPS.. The io2 Block Express volume type provides the highest durability and consistent low-latency performance for SAP workloads, with up to 256,000 provisioned IOPS per volume. For /usr/sap, which is sensitive to read latency due to frequent binary and configuration file access, io2 Block Express ensures predictable sub-millisecond latency even under high I/O demand, directly addressing the high read latency issue.

Answer

Change the volume type to gp3 with higher throughput.

Answer

Move to a larger instance type with more network bandwidth.

Answer

Configure RAID 0 across multiple volumes.

Question 12

A company uses AWS Organizations with multiple accounts. The security team wants to ensure that all newly created S3 buckets in any account are automatically tagged with a 'CostCenter' tag. Which solution requires the least operational overhead?

Accepted Answer

Create an SCP that denies s3:CreateBucket unless the request includes the CostCenter tag.. A Service Control Policy (SCP) that denies s3:CreateBucket unless the request includes the CostCenter tag enforces tagging at the organization level, preventing any bucket creation without the required tag. This approach requires no ongoing maintenance, no additional services, and no per-account configuration, making it the least operational overhead solution.

Answer

Use AWS Config rules to detect untagged buckets and trigger a Lambda function to add tags.

Answer

Configure each account's S3 bucket creation process to include tagging.

Answer

Use AWS CloudTrail to monitor bucket creation and send alerts to the security team.

Question 13

An organization is migrating a large SAP ERP system using SAP Landscape Virtualization Management (LVM) for system copy and refresh. During the migration, they encounter an error in LVM indicating that the target host is not reachable. What is the most likely cause?

Accepted Answer

The security groups do not allow inbound traffic from the LVM instance to the target host.. Security groups controlling traffic between source and target are a common cause. IAM roles affect AWS API calls, not network connectivity. S3 permissions are irrelevant. AWS DMS is not used.

Answer

The S3 bucket used for backup is not accessible.

Answer

The IAM role assigned to the LVM instance does not have sufficient permissions.

Answer

The AWS Database Migration Service is not configured correctly.

Question 14

A company is migrating an SAP system to AWS and wants to use AWS Launch Wizard for deployment. They have an existing VPC and subnets. Launch Wizard requires the selection of a subnet for each component. What is the best practice for selecting subnets for high availability?

Accepted Answer

Select subnets in different Availability Zones to ensure high availability.. For high availability, it is best to deploy SAP components across multiple Availability Zones by selecting subnets in different AZs. Launch Wizard supports this. Deploying all in one AZ creates a single point of failure. Launch Wizard can use existing subnets.

Answer

Use only private subnets without public access.

Answer

Select a single subnet in one Availability Zone for simplicity.

Answer

Create a new VPC and subnets specifically for Launch Wizard.

Question 15

Which TWO AWS services are commonly used to monitor the performance of SAP applications and infrastructure?

Accepted Answer

AWS X-Ray. AWS X-Ray is correct because it helps trace and analyze user requests as they travel through SAP applications, identifying performance bottlenecks and errors in distributed transactions. Amazon CloudWatch is correct because it collects and monitors metrics, logs, and alarms for SAP infrastructure resources such as EC2 instances, RDS databases, and Application Load Balancers, enabling proactive performance management.

Answer

AWS CloudTrail

Answer

AWS Config

Answer

AWS Trusted Advisor

Question 16

An SAP customer has deployed SAP HANA on AWS using an r5.12xlarge instance with 16 EBS io1 volumes for data and log. The system is running in production. The operations team receives an alert that one of the EBS volumes has failed (status check failed). The volume is part of the RAID 0 stripe for the data volume. What should they do to recover the system with minimal data loss?

Accepted Answer

Restore the HANA database from the latest backup to a new set of EBS volumes.. Since the failed volume is part of a RAID 0 stripe, the entire stripe is compromised. Restoring from the most recent backup is the safest way to recover with minimal data loss. Option A (replace volume and rebuild RAID) may not work because RAID 0 has no redundancy. Option B (AWS Support) may help but not recover data directly. Option C (increase volume size) does not fix the failed volume.

Answer

Detach the failed volume, attach a new identical volume, and rebuild the RAID array.

Answer

Contact AWS Support to recover the data from the failed EBS volume.

Answer

Increase the size of the remaining volumes to compensate for the lost capacity.

Question 17

An SAP HANA database is running on an EC2 instance with EBS volumes. The operations team needs to take nightly backups of the database. Which AWS service provides the most cost-effective backup solution for long-term retention?

Accepted Answer

Amazon S3 Glacier Deep Archive. Amazon S3 Glacier Deep Archive is the most cost-effective storage class for long-term retention of backups that are accessed infrequently. Amazon EBS Snapshots are stored in S3 but cost more for long-term retention. AWS Backup is a service but does not change storage class. Amazon S3 Standard is expensive for long-term.

Answer

Amazon EBS Snapshots

Answer

Amazon S3 Standard

Answer

AWS Backup

Question 18

A company is running SAP HANA on AWS and needs to perform a backup to S3 using the SAP HANA BACKUP command. The backup fails with an error indicating that the S3 bucket cannot be accessed. The EC2 instance has an IAM role assigned with the necessary S3 permissions. What is the most likely cause of the failure?

Accepted Answer

The S3 bucket policy denies access from the instance's VPC.. SAP HANA backup to S3 requires a properly configured S3 bucket and the backup tool must be able to write to it. The error is likely due to the bucket policy blocking the request. IAM role permissions are correct, but bucket policies can override them.

Answer

The S3 bucket is in a different region.

Answer

The instance does not have internet access.

Answer

The IAM role does not have the correct trust policy.

Question 19

A company is migrating an SAP environment and wants to automate the provisioning of infrastructure using Infrastructure as Code (IaC). Which AWS service should they use to define and deploy AWS resources?

Accepted Answer

AWS CloudFormation. AWS CloudFormation allows you to define infrastructure as code. OpsWorks is for configuration management. Elastic Beanstalk is for application deployment. CodeDeploy is for code deployment.

Answer

AWS OpsWorks

Answer

AWS CodeDeploy

Answer

AWS Elastic Beanstalk

Question 20

A company is migrating its SAP ERP system to AWS. The system has a custom ABAP code that uses RFC calls to an external system. The company wants to test the migrated system in a sandbox environment before the final cutover. What is the best practice for handling the RFC connections during testing?

Accepted Answer

Create a separate sandbox environment that is isolated from production and uses mock endpoints for RFC calls.. Using a sandbox environment disconnected from the production system prevents accidental data changes or impacts. Options B, C, D are incorrect because they either involve production connections or are not best practices.

Answer

Use the same RFC destinations as production but disable the external system.

Answer

Set up a VPN between the sandbox and the external system to test real connectivity.

Answer

Configure the sandbox to use the production RFC endpoints but with read-only access.