PAS-C01 Mock Exam 82 — 25 Questions

Question 1

A company is migrating its SAP ERP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). They plan to use two EC2 instances in different Availability Zones with a shared file system. Which AWS service should they use to manage the failover of the virtual IP address?

Accepted Answer

Configure Amazon Route 53 with failover routing and health checks for the virtual IP.. Option C is correct because AWS offers a managed solution for SAP HANA and SAP NetWeaver using Route 53 health checks and failover routing, but for virtual IP, the recommended approach is to use Amazon Route 53 with failover routing or an Elastic IP reassignment. However, for ASCS/ERS, the standard is to use a Network Load Balancer (NLB) with a static IP. Option A is wrong because EC2 does not allow moving Elastic IPs across AZs automatically. Option B is wrong because Application Load Balancer does not support static IP. Option D is wrong because Classic Load Balancer is deprecated and not recommended.

Answer

Use an Elastic IP address and reassign it during failover using a script.

Answer

Deploy an Application Load Balancer to route traffic to the active instance.

Answer

Set up a Classic Load Balancer with cross-zone load balancing enabled.

Question 2

An administrator created the IAM policy shown in the exhibit for the operations team. The team needs to create snapshots of EBS volumes that have the tag 'Name' with a value starting with 'SAP-HANA-'. However, the policy is not working as expected. What is the most likely reason?

Accepted Answer

The 'ec2:CreateSnapshot' action does not support the 'ec2:ResourceTag' condition key.. Option D is correct because the ec2:CreateSnapshot action does not support the ec2:ResourceTag condition key. Condition keys must be supported by the action. Option A is wrong because the resource ARN is correct for volumes. Option B is wrong because the action is allowed. Option C is wrong because the condition is not about the snapshot resource.

Answer

The resource ARN is incorrect; it should specify the snapshot resource type.

Answer

The action 'ec2:CreateSnapshot' should be 'ec2:CreateSnapshots' (plural).

Answer

The condition key should be 'aws:ResourceTag' instead of 'ec2:ResourceTag'.

Question 3

A company needs to track API calls made to create, modify, or delete SAP-related resources in AWS. Which service should be used?

Accepted Answer

AWS CloudTrail. Option A is correct because CloudTrail records all API calls for auditing. Option B (CloudWatch) monitors metrics and logs. Option C (Config) tracks configuration changes. Option D (VPC Flow Logs) captures network traffic.

Answer

AWS Config

Answer

VPC Flow Logs

Answer

Amazon CloudWatch

Question 4

A company has an SAP environment with a recovery time objective (RTO) of 2 hours and a recovery point objective (RPO) of 15 minutes. Which backup strategy meets these requirements?

Accepted Answer

Incremental backups every 15 minutes and log backups every 5 minutes.. Option D is correct because HANA incremental backups combined with log backups can achieve 15-minute RPO, and restoring from incremental backups can meet 2-hour RTO if the database is not too large. Option A is wrong because daily backups cannot meet 15-minute RPO. Option B is wrong because snapshots are not as frequent. Option C is wrong because full backups take longer to restore.

Answer

Daily full backups to Amazon S3 and log backups every 30 minutes.

Answer

Weekly full backups and daily differential backups.

Answer

Hourly EBS snapshots and continuous log shipping to S3.

Question 5

An SAP system administrator notices that the SAP HANA database backup job to Amazon S3 is failing intermittently. The backup script uses the AWS CLI. Which step should be taken to diagnose the issue?

Accepted Answer

Check AWS CloudTrail logs for S3 API call errors. Option A is correct because checking CloudTrail logs reveals API call errors. Option B is wrong as S3 Transfer Acceleration would not fix failures. Option C is wrong because the script already uses CLI. Option D is wrong because lifecycle policies don't affect backup jobs.

Answer

Enable S3 Transfer Acceleration on the bucket

Answer

Configure S3 Lifecycle policy to expire incomplete multipart uploads

Answer

Modify the backup script to use the AWS SDK instead of CLI

Question 6

A company runs SAP HANA on AWS and wants to implement a backup strategy using AWS Backint agent for SAP HANA. Which storage service is best suited for storing the backup files when using Backint?

Accepted Answer

Amazon S3. Option A is correct because AWS Backint for SAP HANA is designed to stream backups directly to Amazon S3. Option B is wrong because EBS volumes are for block storage, not the target for Backint. Option C is wrong because S3 Glacier is for archival, not for frequent backups. Option D is wrong because EFS is file storage, not the intended target.

Answer

Amazon S3 Glacier

Answer

Amazon EFS

Answer

Amazon EBS

Question 7

An SAP administrator attaches this IAM policy to a user. The user is unable to start an EC2 instance with ID i-0abcdef1234567890. What is the most likely cause?

Accepted Answer

The IAM policy is applied to a user who is working in a different AWS region than the one specified in the resource ARN.. Option D is correct because the resource ARN specifies us-east-1, but the user might be operating in a different region. Option A is wrong because the policy includes ec2:StartInstances. Option B is wrong because ec2:DescribeInstances is included. Option C is wrong because ec2:RebootInstances is not required for starting.

Answer

The IAM policy does not include the ec2:RebootInstances action.

Answer

The IAM policy does not include the ec2:DescribeInstances action.

Answer

The IAM policy does not include the ec2:StartInstances action.

Question 8

Which TWO tasks require the use of AWS Systems Manager Session Manager? (Choose TWO.)

Accepted Answer

Execute a one-time command on an EC2 instance interactively. Options A and D are correct. Session Manager provides secure shell access without SSH keys (A) and can be used to execute commands interactively (D). Options B and C are wrong because Session Manager does not manage patches or store parameters. Option E is wrong because Session Manager is not for file transfers.

Answer

Transfer files between on-premises and AWS

Answer

Store database connection strings securely

Answer

Apply operating system patches to a fleet of EC2 instances

Question 9

An SAP system on AWS uses a shared file system via Amazon EFS mounted on multiple EC2 instances. Users report that file operations are slow. Which metric in Amazon CloudWatch should be analyzed to determine if the EFS file system's throughput is being throttled?

Accepted Answer

BurstCreditBalance. Option D is correct because the BurstCreditBalance metric indicates the remaining burst credits; if it reaches zero, throughput is throttled. Option A (DataReadIOBytes) measures data read. Option B (PercentIOLimit) is not a standard metric. Option C (MeteredIOBytes) measures metered I/O.

Answer

PercentIOLimit

Answer

DataReadIOBytes

Answer

MeteredIOBytes

Question 10

A company is running SAP HANA on a memory-optimized EC2 instance with an EBS volume for /hana/data and /hana/log. The database administrator notices that the /hana/log volume is experiencing high write latency. The current volume is a gp2 volume with 1000 GB size. Which change would most effectively reduce write latency?

Accepted Answer

Ensure the EC2 instance is EBS-optimized and use a higher instance type with dedicated EBS bandwidth.. Option D is correct because using EBS-optimized instances with dedicated EBS bandwidth reduces contention and latency. Option A is wrong because increasing volume size increases IOPS but not necessarily reduces latency. Option B is wrong because changing to st1 is not ideal for log writes. Option C is wrong because enabling Multi-Attach does not reduce latency.

Answer

Change the volume type to st1 (throughput optimized) for better write throughput.

Answer

Increase the volume size to 2000 GB to get more IOPS.

Answer

Enable Multi-Attach on the volume to distribute writes.

Question 11

A company is running an SAP HANA database on an AWS EC2 instance. The system administrator needs to ensure that the database logs are automatically backed up to Amazon S3 and retained for 30 days. Which combination of AWS services can achieve this with minimal operational overhead?

Accepted Answer

Use an S3 Lifecycle Policy to transition logs to S3 Glacier after 30 days.. Option B is correct because it uses a Lifecycle Policy to transition logs to S3 Glacier after 30 days, meeting the retention requirement with minimal overhead. Option A involves manual scripting and lifecycle rules that don't automatically delete logs after 30 days. Option C uses CloudWatch Logs but doesn't automatically delete logs after 30 days. Option D uses AWS Backup, which is for EC2 backups, not log files.

Answer

Use Amazon CloudWatch Logs with a retention policy of 30 days.

Answer

Use an S3 Lifecycle Policy to transition logs to S3 Standard-IA after 30 days.

Answer

Use AWS Backup to schedule backups of the EC2 instance.

Question 12

Which THREE components are required to set up a highly available SAP HANA database using AWS services? (Choose 3)

Accepted Answer

Multi-AZ deployment with synchronous replication. Options A, B, and D are correct. A Multi-AZ deployment with synchronous replication (A) provides HA. A cluster manager (B) automates failover. An Elastic IP (D) provides a static IP for failover. Option C (Single AZ) does not provide HA. Option E (ALB) is not needed for database HA.

Answer

Application Load Balancer

Answer

Single Availability Zone deployment

Question 13

A company runs SAP on AWS and needs to implement a disaster recovery (DR) strategy. The primary site is in us-east-1, and the DR site is in us-west-2. The database is SAP HANA. Which approach provides the lowest RPO?

Accepted Answer

SAP HANA system replication in synchronous mode across regions.. Option A is correct because HANA system replication with synchronous mode provides near-zero RPO. Option B is wrong because asynchronous replication may have higher RPO. Option C is wrong because EBS snapshots have higher RPO. Option D is wrong because restoring from S3 is slow and has higher RPO.

Answer

SAP HANA system replication in asynchronous mode.

Answer

Database backups to S3 and cross-region replication of S3 bucket.

Answer

EBS snapshots replicated to the DR region using cross-region snapshot copy.

Question 14

A company runs SAP Business Suite on AWS. The SAP system frequently crashes with a 'JAVA out of memory' error. The application server is an EC2 instance with 32 GB RAM. Which solution should be implemented to prevent this issue?

Accepted Answer

Configure Amazon CloudWatch alarms to trigger EC2 Auto Scaling based on memory utilization. Option B is correct because CloudWatch alarms can trigger Auto Scaling to add instances. Option A is wrong as increasing instance memory is a manual workaround. Option C is wrong because increasing swap may cause performance issues. Option D is wrong as reducing heap would increase crashes.

Answer

Increase the EC2 instance memory to 64 GB

Answer

Reduce the Java heap size in the SAP system

Answer

Increase the swap space on the EC2 instance

Question 15

An organization runs SAP on AWS and needs to ensure that their SAP HANA database backups are encrypted at rest. Which AWS service should they use to manage the encryption keys?

Accepted Answer

AWS Key Management Service (KMS). Option C is correct because AWS KMS is the key management service for encryption keys. Option A is wrong because CloudHSM is a hardware security module, but KMS is the standard for key management. Option B is wrong because IAM is for identity, not encryption keys. Option D is wrong because ACM is for SSL/TLS certificates.

Answer

AWS CloudHSM

Answer

AWS Identity and Access Management (IAM)

Answer

AWS Certificate Manager

Question 16

During an SAP system refresh, the operations team needs to restore an SAP HANA database from an S3 backup to a new EC2 instance. The backup was created using SAP HANA Backint. Which AWS service is required to read the backup from S3?

Accepted Answer

SAP HANA Backint agent for Amazon S3. Option A is correct because SAP HANA Backint is a certified backup tool that integrates with S3. Option B is wrong because AWS Storage Gateway is not used for Backint. Option C is wrong because AWS Backup offers SAP HANA support but not via Backint. Option D is wrong because EC2 Snapshots are not used with Backint.

Answer

Amazon EBS snapshots

Answer

AWS Backup

Answer

AWS Storage Gateway

Question 17

A company runs SAP on AWS and needs to automate the patching of SAP application servers. The solution should apply patches during a defined maintenance window and ensure high availability. What is the most efficient approach?

Accepted Answer

Use AWS Systems Manager Patch Manager with a maintenance window.. Option D is correct because AWS Systems Manager automates patching with maintenance windows and supports high availability by targeting instances in an Auto Scaling group. Option A (Lambda with Run Command) is possible but less efficient. Option B (manual patching via SSH) is not automated. Option C (CloudFormation update) is complex and not ideal for patching.

Answer

Update the CloudFormation stack to replace instances with new AMIs.

Answer

Use AWS Lambda to invoke Run Command on each instance sequentially.

Answer

Manually connect to each instance via SSH and apply patches.

Question 18

A company runs a critical SAP HANA database on an Amazon EC2 instance. The operations team receives an alert that the instance's EBS-optimized throughput is consistently exceeding the baseline performance of the gp2 volume. Which action should the team take to resolve the performance issue without downtime?

Accepted Answer

Modify the volume type to gp3 and adjust the throughput setting.. Option B is correct because modifying the volume type to gp3 allows dynamic adjustment of IOPS and throughput without downtime, improving performance. Option A is wrong because stopping the instance causes downtime. Option C is wrong because increasing the volume size increases baseline IOPS but may not be sufficient and also requires downtime if the OS partition is resized. Option D is wrong because enabling EBS optimization on a running instance requires a reboot.

Answer

Enable EBS optimization on the EC2 instance.

Answer

Increase the volume size to improve baseline IOPS.

Answer

Stop the EC2 instance and increase the volume size.

Question 19

A company runs SAP NetWeaver on AWS and uses a Network Load Balancer (NLB) to distribute traffic to multiple application servers. The operations team notices that the NLB is not properly routing traffic to healthy targets. Which three steps should the team take to diagnose the issue? (Choose THREE.)

Accepted Answer

Confirm that the target instances are registered in the target group and are in the Available state.. Option A is correct because health check targets must be configured correctly on the NLB. Option C is correct because security groups on targets must allow health check traffic from the NLB. Option E is correct because checking target group registration ensures the instances are in the group. Option B is wrong because CloudWatch alarms indicate issues but not the cause. Option D is wrong because enabling cross-zone load balancing does not affect health checks.

Answer

Enable cross-zone load balancing on the NLB.

Answer

Review the CloudWatch metrics for the NLB to see if there are any anomalies.

Question 20

An SAP system is deployed on AWS using a shared account structure. The security team requires that all changes to SAP security groups be logged and alerted. Which combination of AWS services should be used?

Accepted Answer

AWS CloudTrail with Amazon CloudWatch Events. Option D is correct because CloudTrail logs API calls (including security group changes) and CloudWatch Events can trigger alerts. Option A (Config + SNS) can detect changes but not real-time. Option B (GuardDuty) is for threat detection. Option C (Inspector) is for vulnerability assessment.

Answer

AWS Config with an SNS topic

Answer

Amazon Inspector with Amazon SNS

Answer

Amazon GuardDuty with Amazon SNS