PAS-C01 Practice Test 9 — 10 Questions

Question 1

A company is migrating a critical application to AWS and needs to ensure compliance with PCI DSS. The application handles credit card numbers. Which AWS service should be used to encrypt the data at rest?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS CloudHSM. AWS CloudHSM, is correct because it provides dedicated hardware security modules (HSMs) that are FIPS 140-2 Level 3 compliant, which is often required for PCI DSS compliance when handling credit card numbers. Option A (Amazon S3 server-side encryption) is incorrect because it is used for encrypting objects in S3 and does not provide dedicated HSM capabilities. Option B (AWS KMS) is a managed key service but is FIPS 140-2 Level 2 only, which may not meet the stringent requirements of PCI DSS for protecting cardholder data. Option D (AWS Secrets Manager) is incorrect because it manages secrets such as database credentials, not encryption keys for data at rest.

Answer

Amazon S3 server-side encryption

Answer

AWS Key Management Service (KMS)

Answer

AWS Secrets Manager

Question 2

A company is migrating an SAP S/4HANA system to AWS. The system requires high availability across two Availability Zones. Which AWS service should be used to attach a block-level storage volume that can be concurrently accessed by two EC2 instances in active/passive mode?

Accepted Answer

Use Amazon FSx for NetApp ONTAP to provide a shared block storage volume accessible from both AZs.. Amazon FSx for NetApp ONTAP provides a shared block-level storage volume that can be concurrently accessed by multiple EC2 instances across different Availability Zones using the iSCSI protocol. In an active/passive SAP S/4HANA setup, this allows the passive instance to mount the same storage volume and take over if the active instance fails, meeting the high-availability requirement across two AZs.

Answer

Use Amazon FSx for Windows File Server with a multi-AZ file system.

Answer

Use Amazon S3 as a shared block storage device.

Answer

Use Amazon EBS Multi-Attach to attach a single EBS volume to both EC2 instances across AZs.

Question 3

A company is planning to migrate their SAP HANA database to AWS. Which TWO of the following are valid EC2 instance types for SAP HANA? (Choose 2.)

Accepted Answer

x1e.32xlarge. (x1e.32xlarge) is correct because it is part of the X1e instance family, which is specifically certified by SAP for production HANA workloads. These instances offer high memory (up to 3,904 GiB) and are optimized for large in-memory databases like SAP HANA, meeting the SAP memory and vCPU requirements for OLAP and OLTP scenarios.

Answer

c5.9xlarge

Answer

t3.2xlarge

Answer

i3.8xlarge

Question 4

An administrator needs to restore an SAP HANA database from a backup stored in Amazon S3. The backup was created using AWS Backup. Which AWS service should be used to perform the restore?

Accepted Answer

AWS Backup. AWS Backup is the correct service because the backup was created using AWS Backup, and AWS Backup provides native restore capabilities for SAP HANA databases. It automates the restore process by directly interacting with the underlying Amazon S3 storage where the backup resides, ensuring consistency with the backup metadata and recovery point objectives (RPOs).

Answer

AWS Systems Manager

Answer

Amazon S3

Answer

AWS Database Migration Service

Question 5

An SAP ERP system on AWS is experiencing performance degradation. A review shows that the Amazon EBS volumes used for SAP transport directories are gp2 with high throughput but high latency. The SAP team needs improved I/O performance without changing the total storage capacity. Which action should be taken?

Accepted Answer

Change the volume type to io2 Block Express with provisioned IOPS.. Io2 Block Express volumes provide consistent, high-performance IOPS with sub-millisecond latency, which directly addresses the high-latency issue with gp2 volumes. This option improves I/O performance without changing storage capacity, as required by the SAP team. gp2 volumes suffer from burst bucket limitations, leading to high latency under sustained throughput, while io2 Block Express offers provisioned IOPS for predictable performance.

Answer

Change the volume type to gp3 and increase baseline IOPS.

Answer

Move the transport directories to instance store volumes.

Answer

Enable EBS throughput optimization on the EC2 instance.

Question 6

An SAP Basis administrator notices that the SAP application server on an EC2 instance is experiencing intermittent high latency when writing to the SAP HANA database. The HANA database is on a separate EC2 instance in the same VPC and Availability Zone. Which configuration change is most likely to resolve the issue?

Accepted Answer

Enable Jumbo Frames on the network interfaces. The intermittent high latency when writing to SAP HANA is likely caused by network packet fragmentation. Enabling Jumbo Frames (MTU 9001) on the network interfaces of both the SAP application server and the HANA database EC2 instances reduces the number of packets required for large data transfers, lowers CPU overhead for packet processing, and improves throughput. This is a standard recommendation for SAP on AWS to optimize network performance between application and database layers.

Answer

Launch the instances in a cluster placement group

Answer

Enable EBS optimization on both instances

Answer

Change the Elastic Network Adapter (ENA) to SR-IOV

Question 7

A company is implementing an SAP S/4HANA system on AWS. The system must be highly available across multiple Availability Zones. Which of the following strategies should the company implement for the SAP Central Services (ASCS) instance to meet high availability requirements?

Accepted Answer

Deploy a Pacemaker cluster with two EC2 instances across Availability Zones using a shared file system.. SAP Central Services (ASCS) requires a highly available cluster that can manage the Enqueue and Message Server processes. A Pacemaker cluster across two Availability Zones, using a shared file system (e.g., Amazon EFS or a replicated file system), provides the necessary fencing, resource monitoring, and failover for ASCS. This architecture ensures that if the primary ASCS instance fails, the secondary instance in the other AZ can take over with minimal downtime, meeting the high availability requirement.

Answer

Deploy a single EC2 instance with a large instance type to handle failover.

Answer

Configure SAP HANA System Replication between two Availability Zones.

Answer

Use Amazon RDS for SAP Central Services with Multi-AZ deployment.

Question 8

A company is migrating an SAP system to AWS and wants to use AWS Systems Manager for patching. The SAP application server is running Windows. What is a prerequisite for Systems Manager to manage the instance?

Accepted Answer

Install the AWS Systems Manager Agent (SSM Agent) on the instance. AWS Systems Manager requires the SSM Agent to be installed and running on managed instances to perform patching and other management operations. The SSM Agent processes Systems Manager requests, executes run commands, and reports instance state back to the Systems Manager service. Without the agent, the instance cannot communicate with the Systems Manager endpoint or receive patching instructions.

Answer

Install the Amazon CloudWatch agent on the instance

Answer

Enable AWS Config on the instance

Answer

Assign a public IP address to the instance

Question 9

A company is running a critical SAP application on SAP HANA in an AWS Single-AZ deployment. The application has experienced downtime twice in the last month due to underlying hardware failures. What is the MOST cost-effective solution to minimize future downtime without compromising performance?

Accepted Answer

Deploy the SAP HANA database in a Multi-AZ configuration using SAP HANA System Replication (HSR) across Availability Zones.. Deploying SAP HANA in a Multi-AZ configuration using SAP HANA System Replication (HSR) across Availability Zones provides synchronous replication and automatic failover in case of hardware failure. This minimizes downtime without requiring a larger instance or manual intervention, and maintains performance by using the same instance type and storage configuration as the primary.

Answer

Move the SAP HANA instance to a larger instance type to improve hardware reliability.

Answer

Use Dedicated Hosts to ensure physical isolation from other AWS customers.

Answer

Implement automated snapshots of the SAP HANA data volume and restore in case of failure.

Question 10

A company needs to migrate a large amount of on-premises data to Amazon S3. The data is stored on tape backups. The migration must be completed within 2 weeks. Which AWS service should they use?

Accepted Answer

AWS Snowball Edge. AWS Snowball Edge is a physical device designed for large-scale data transfers when network bandwidth is limited or transfer time is critical. For migrating petabytes of tape backup data to Amazon S3 within 2 weeks, Snowball Edge provides a cost-effective and fast solution by shipping physical storage devices. Option A (AWS DataSync) is an online data transfer service, but for large tape backups, the transfer may take longer than 2 weeks over typical internet connections. Option B (AWS Database Migration Service) is specifically for migrating databases, not tape file data. Option D (AWS Storage Gateway) provides hybrid cloud storage but is not optimized for bulk one-time migration of tape archives.

Answer

AWS DataSync

Answer

AWS Database Migration Service

Answer

AWS Storage Gateway