PAS-C01 Mock Exam 87 — 25 Questions

Question 1

A company is planning to run SAP Business Suite on AWS. They want to minimize downtime during a failover scenario. Which AWS feature should they use to achieve automatic failover of the SAP Central Services (ASCS) instance?

Accepted Answer

Amazon Route 53 with health checks and failover routing. Amazon Route 53 with health checks and failover routing is the correct choice because SAP Central Services (ASCS) requires a DNS-level failover mechanism to redirect clients to the standby instance without relying on IP-level changes. Route 53 monitors the health of the primary ASCS instance via health checks and automatically updates DNS records to point to the secondary instance when a failure is detected, enabling automatic failover with minimal downtime.

Answer

AWS Auto Scaling

Answer

Amazon CloudWatch with alarms

Answer

Elastic Load Balancer

Question 2

An SAP application server on an EC2 instance is unable to connect to the SAP HANA database on another EC2 instance. Both instances are in the same VPC and security groups allow traffic. What is the most likely cause?

Accepted Answer

The security group for the database instance does not allow inbound traffic on the HANA port. Option B is correct because the most likely cause is that the security group attached to the SAP HANA database instance does not have an inbound rule allowing traffic on the SAP HANA database port (typically 30015 for HANA system DB or 3NN13 for tenant DBs). Even if the security group for the application server allows outbound traffic, the database security group must explicitly permit inbound TCP traffic from the application server's security group or IP address on the correct HANA port. Without this rule, the database will reject the connection at the instance level.

Answer

The VPC does not have an Internet Gateway

Answer

Network ACLs are blocking traffic

Answer

The route table does not have a local route

Question 3

A company runs SAP on AWS with an Oracle database. They want to implement a disaster recovery strategy with a Recovery Point Objective (RPO) of less than 15 minutes and a Recovery Time Objective (RTO) of less than 2 hours. Which combination of AWS services should they use?

Accepted Answer

AWS Database Migration Service (DMS) for ongoing replication to a DR instance, and automated snapshots for fast recovery.. AWS DMS can perform ongoing replication from an Oracle source database to a target DR instance with minimal latency, enabling an RPO of less than 15 minutes. Automated snapshots of the DR instance allow fast recovery within the 2-hour RTO. This combination meets the stated RPO and RTO requirements without relying on Oracle-specific licensing or complex manual scripts.

Answer

Oracle Data Guard for replication and Amazon Route 53 for DNS failover.

Answer

Amazon S3 cross-region replication for database files and a script to import them.

Answer

AWS Backup to take weekly snapshots and restore in the DR region.

Question 4

An SAP administrator needs to ensure high availability for SAP NetWeaver ABAP stack on AWS. Which three components should be configured in a multi-AZ active/passive cluster? (Select THREE.)

Accepted Answer

Enqueue Replication Server (ERS).. The Enqueue Replication Server (ERS) is a critical component in an SAP NetWeaver ABAP stack active/passive cluster because it replicates the lock table from the primary ASCS instance to the standby node. In a multi-AZ setup, this ensures that if the primary ASCS fails, the standby can take over with minimal disruption, as the lock state is preserved. Without ERS, a failover would require all locked resources to be released, causing data inconsistencies or application errors.

Answer

SAP Gateway.

Answer

Dialog instances.

Question 5

An architect is designing a disaster recovery (DR) solution for an SAP ERP system on AWS. The primary site is in us-east-1 and the DR site is in us-west-2. The SAP application uses an Oracle database. The RTO is 4 hours and RPO is 1 hour. Which solution meets these requirements with the least operational overhead?

Accepted Answer

Configure AWS Database Migration Service (DMS) with ongoing replication from the primary Oracle database to a standby in us-west-2. AWS Database Migration Service (DMS) with ongoing replication provides continuous change data capture (CDC) from the primary Oracle database to a standby in us-west-2, meeting the 1-hour RPO and 4-hour RTO with minimal operational overhead. DMS handles schema conversion, replication, and failover without requiring manual intervention or complex Oracle licensing, making it the most efficient choice for cross-region DR.

Answer

Set up Oracle Active Data Guard between the primary and DR regions

Answer

Take daily EBS snapshots of the database volumes and copy them to us-west-2, then restore using the snapshots

Answer

Use AWS Backup to copy EC2 AMIs and RDS snapshots to us-west-2 every hour

Question 6

An SAP NetWeaver system on AWS needs to be highly available across two Availability Zones. Which AWS service should be used to manage the floating IP address used by the SAP application servers?

Accepted Answer

Amazon Route 53 with failover routing. Amazon Route 53 with failover routing is the correct choice because it can manage a floating IP address by using DNS health checks to automatically route traffic to the healthy SAP application server in the active Availability Zone. When the primary server fails, Route 53 updates DNS resolution to point to the secondary server's IP, effectively providing a floating IP mechanism without requiring a static IP reassignment.

Answer

VPC Peering

Answer

AWS Global Accelerator

Answer

Elastic IP address

Question 7

A company is designing a disaster recovery (DR) strategy for SAP S/4HANA on AWS. The primary site is in us-east-1 and the DR site is in us-west-2. The SAP HANA database is 2 TB and requires Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 4 hours. Which solution meets these requirements?

Accepted Answer

Configure SAP HANA System Replication (HSR) to an EC2 instance in us-west-2 with log replication in sync mode.. SAP HANA System Replication (HSR) with synchronous log replication meets the RPO of 15 minutes and RTO of 4 hours because it continuously replicates transaction logs to the DR site in us-west-2, ensuring near-zero data loss. In sync mode, the primary waits for the secondary to acknowledge log writes, which keeps the DR database consistent and ready for takeover within minutes, well under the 4-hour RTO. This is the only option that provides continuous, database-level replication with the required recovery objectives.

Answer

Use AWS S3 Cross-Region Replication to copy database backups every 15 minutes.

Answer

Take EBS snapshots of the HANA data volume every hour and copy them to us-west-2.

Answer

Use AWS Database Migration Service (DMS) to continuously replicate changes to a HANA instance in us-west-2.

Question 8

An SAP HANA database is running on a Dedicated Host in us-east-1a. The system requires a disaster recovery site in us-west-2. What limitation does the use of a Dedicated Host impose on the DR setup?

Accepted Answer

The DR site requires a separate Dedicated Host in us-west-2, increasing cost.. Option B is correct because a Dedicated Host in us-east-1a is a physical server dedicated to your use, and to set up disaster recovery in us-west-2, you must provision a separate Dedicated Host in that region. This increases costs as you are paying for two Dedicated Hosts instead of one, and the DR host cannot be shared or reserved in advance for a specific instance type without an active allocation.

Answer

The DR site must also use a Dedicated Host, which cannot be reserved in advance.

Answer

The Dedicated Host cannot be used with SAP HANA System Replication.

Answer

The HANA instance cannot be migrated to a different host, so DR is not possible.

Question 9

An SAP system on AWS uses an Oracle database on EC2. The database is experiencing I/O bottlenecks. Which THREE design changes can improve I/O performance?

Accepted Answer

Provision Amazon EBS volumes with Provisioned IOPS (io2) for the database.. Option A is correct because Amazon EBS io2 volumes provide consistent, low-latency I/O performance with a guaranteed IOPS rate, which directly addresses I/O bottlenecks for Oracle databases on EC2. By provisioning dedicated IOPS, you eliminate the variability of burstable gp2/gp3 volumes, ensuring predictable throughput for SAP workloads.

Answer

Use instance store volumes for the database files to reduce latency.

Answer

Offload database backups to Amazon S3 using the Oracle Secure Backup module.

Question 10

An SAP system administrator needs to ensure that all SAP application logs are centrally collected and monitored for errors. Which AWS service should they use to aggregate logs from multiple EC2 instances?

Accepted Answer

Amazon CloudWatch Logs. Amazon CloudWatch Logs is the correct service because it provides a centralized, agent-based log aggregation solution. The CloudWatch Logs agent (or unified CloudWatch agent) can be installed on each EC2 instance to automatically collect, encrypt, and stream SAP application logs to a central CloudWatch Logs group. This allows the administrator to monitor logs in real time, set metric filters for error patterns, and trigger alarms without needing to build custom infrastructure.

Answer

Amazon S3 with server access logs

Answer

Amazon Kinesis Data Firehose

Answer

AWS Lambda to process logs from each instance

Question 11

An SAP administrator is designing a backup strategy for an SAP HANA database on AWS. They want to use the Backint interface with Amazon S3. Which THREE components are required? (Choose three.)

Accepted Answer

IAM role with permissions to write to the S3 bucket. Option B is correct because the Backint interface for SAP HANA on AWS requires an IAM role that grants the AWS Backint Agent permissions to write backup data to the designated S3 bucket. Without this IAM role, the agent cannot authenticate or perform PutObject operations against S3, making the backup fail.

Answer

EBS volumes for the backup catalog

Answer

S3 Transfer Acceleration enabled

Question 12

A company is planning to migrate its SAP HANA database to AWS. They need to ensure high availability with automatic failover. Which AWS service should they use to achieve this?

Accepted Answer

AWS Launch Wizard for SAP. AWS Launch Wizard for SAP is the correct service because it automates the deployment of SAP HANA on AWS with built-in high availability and automatic failover configurations. It orchestrates the setup of a multi-AZ cluster, including the installation of SAP HANA system replication, the configuration of a Pacemaker cluster, and the integration with AWS resources such as Elastic IPs and Amazon Route 53 health checks to ensure seamless failover.

Answer

AWS OpsWorks

Answer

AWS CloudFormation

Answer

Amazon Elastic File System (EFS)

Question 13

A company is deploying SAP NetWeaver on AWS and needs to ensure that the SAP application servers can communicate with the SAP HANA database using the hostname. The environment uses a Windows Domain Controller for Active Directory. Which DNS resolution strategy should be used?

Accepted Answer

Use AWS Directory Service for Microsoft Active Directory with DNS. Option A is correct because AWS Directory Service for Microsoft Active Directory provides a managed DNS service that integrates with Active Directory. This allows SAP application servers to resolve the SAP HANA database hostname via DNS, which is essential for SAP NetWeaver's hostname-based communication. The managed service ensures automatic DNS record updates and supports Windows-native DNS resolution without requiring custom infrastructure.

Answer

Configure DHCP option sets to use custom DNS

Answer

Install a DNS server on an Amazon Linux instance

Answer

Use Amazon Route 53 Resolver outbound endpoint

Question 14

A customer wants to migrate their SAP HANA database to AWS and needs to ensure that the EBS volumes for /hana/data and /hana/log are configured for maximum throughput and low latency. Which EBS volume type should be used for /hana/data?

Accepted Answer

io2. For SAP HANA workloads on AWS, the /hana/data volume requires the highest level of IOPS and low latency to support real-time data processing. io2 Block Express volumes provide up to 256,000 IOPS and sub-millisecond latency, making them the correct choice for /hana/data. io2 volumes also offer 99.999% durability, which is critical for SAP HANA database consistency.

Answer

st1

Answer

gp3

Answer

sc1

Question 15

An SAP HANA system on AWS is experiencing slow backup performance when using Backint to Amazon S3. The backup throughput is only 200 MB/s. The environment uses an m5.24xlarge instance with 25 Gbps network. What is the most likely cause and solution?

Accepted Answer

The Backint agent is configured with too few parallel streams. Increase the number of streams in the Backint configuration.. The most likely cause is that the Backint agent is configured with too few parallel streams. Backint for SAP HANA on AWS uses multiple concurrent streams to upload backup data to S3; if the stream count is too low, it cannot saturate the available network bandwidth, resulting in throughput far below the instance's 25 Gbps capacity. Increasing the number of parallel streams in the Backint configuration allows the backup to fully utilize the network and achieve higher throughput.

Answer

The network bandwidth is insufficient. Enable S3 Transfer Acceleration.

Answer

The EBS volumes are too slow. Use instance store volumes for temporary storage.

Answer

The S3 bucket is not using multipart upload. Enable multipart upload on the bucket.

Question 16

A customer is running SAP NetWeaver on AWS and wants to use Amazon EFS for shared file storage for the SAP transport directory. Which access option should be used to secure the file system?

Accepted Answer

Security group. Amazon EFS uses security groups as a stateful firewall to control NFS traffic (port 2049) at the network level. For SAP transport directories, security groups allow you to restrict access to specific EC2 instances or other AWS resources that need to mount the EFS file system, providing granular network-layer security without managing individual IP addresses.

Answer

Network ACLs

Answer

IAM role

Answer

S3 bucket policy

Question 17

A company is planning to run SAP Business Suite on AWS with an Oracle database. The database requires a shared file system for Oracle Grid Infrastructure (GI). Which AWS storage service should be used?

Accepted Answer

Amazon FSx for NetApp ONTAP.. Amazon FSx for NetApp ONTAP provides a fully managed, shared file system that supports the NFS and SMB protocols required by Oracle Grid Infrastructure (GI) for clusterware and Oracle RAC. It offers high availability, consistent performance, and the ability to present a single namespace across multiple Availability Zones, which is essential for Oracle GI's shared-storage architecture.

Answer

Amazon Elastic File System (EFS).

Answer

Amazon S3 with a file gateway.

Answer

Multiple Amazon EBS volumes with a cluster-aware file system.

Question 18

An SAP administrator notices that the SAP HANA database on an EC2 instance is experiencing high I/O latency. The instance is using EBS gp2 volumes. Which change would most effectively reduce I/O latency for the SAP HANA data volume?

Accepted Answer

Switch to io2 Block Express EBS volumes for the data volume.. Option B is correct because io2 Block Express volumes provide consistent, high-performance IOPS with sub-millisecond latency, which is critical for SAP HANA data volumes. Unlike gp2, which relies on burst credits and has variable performance, io2 Block Express delivers predictable low latency and up to 256,000 IOPS per volume, directly addressing the high I/O latency issue.

Answer

Use instance store SSDs for the SAP HANA data volume.

Answer

Increase the size of the EBS gp2 volume to increase baseline IOPS.

Answer

Configure RAID 0 across multiple gp2 volumes.

Question 19

A company has a large SAP HANA database running on an r5.8xlarge instance. They are planning to migrate to a new instance type that supports more memory for future growth. Which migration approach minimizes downtime and requires no data reload?

Accepted Answer

Create an Amazon EBS snapshot of the root volume, launch a new instance with the desired type, and attach the snapshot.. Option D is correct because stopping the r5.8xlarge instance, changing the instance type to one that supports more memory (e.g., an r5 or x1e family instance), and starting it again preserves the existing EBS volumes and HANA data without requiring any backup, restore, or data reload. This approach minimizes downtime to just the instance stop/start cycle and avoids the overhead of a full database migration or snapshot creation.

Answer

Use AWS Database Migration Service (DMS) to replicate data to the new instance.

Answer

Perform a full HANA database backup and restore to the new instance.

Answer

Stop the instance, change the instance type, and start the instance.

Question 20

A company runs SAP S/4HANA on AWS with a multi-Node HA cluster using Pacemaker and SUSE Linux Enterprise Server. The SAP application and database are on separate EC2 instances. After a planned failover test, the secondary node fails to take over the database role. What is the most likely cause?

Accepted Answer

STONITH fencing is not configured for the cluster.. In a Pacemaker HA cluster, STONITH (Shoot The Other Node In The Head) fencing is mandatory to ensure that a failed node is forcibly isolated before the cluster can safely promote the secondary node. Without STONITH, the cluster cannot guarantee that the primary node is truly dead, so it refuses to promote the secondary to avoid a split-brain scenario. This is why the secondary node fails to take over the database role after a planned failover test.

Answer

The SAP HANA system replication is using asynchronous mode.

Answer

The EBS volumes are not configured with multi-attach enabled.

Answer

The SAP HANA system replication is not configured with ENSA2.