PAS-C01 Mock Exam 90 — 25 Questions

Question 1

An SAP system on AWS is experiencing high latency for database queries. The administrator notices that the EBS volume used for /hana/log has a baseline IOPS of 5000 but the workload requires 8000 IOPS. What should the administrator do to resolve this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Increase the volume size to gain additional baseline IOPS. Increasing the volume size of a gp3 or io1/io2 EBS volume directly increases its baseline IOPS performance. For gp3 volumes, baseline IOPS scales at a rate of 3 IOPS per GiB up to 16,000 IOPS, so increasing the volume size from approximately 1667 GiB (5000/3) to at least 2667 GiB (8000/3) would raise the baseline IOPS to 8000. This ensures consistent performance for /hana/log without relying on burst credits or migrating to a different volume type.

Answer

Enable EBS Multi-Attach

Answer

Enable volume bursting

Answer

Migrate to an io2 Block Express volume

Question 2

An SAP Basis team is designing a high-availability architecture for SAP NetWeaver on AWS. They plan to use a shared file system for the transport directory and SAP profiles across multiple availability zones. Which AWS storage service should they use?

Accepted Answer

Amazon EFS. Amazon EFS (Elastic File System) is the correct choice because it provides a fully managed, NFS-based shared file system that is accessible from multiple EC2 instances across different Availability Zones. For SAP NetWeaver, the transport directory and SAP profiles must be concurrently accessible from all application servers in a high-availability setup, and EFS supports the required POSIX permissions and locking semantics needed by SAP.

Answer

Amazon EBS with multi-attach

Answer

Amazon FSx for Windows File Server

Answer

Amazon S3

Question 3

A company is running SAP ERP on AWS and needs to encrypt data at rest for all SAP-related storage. Which combination of AWS services can be used to achieve this? (Select TWO.)

Accepted Answer

Amazon S3 server-side encryption. Amazon EBS encryption (Option D) provides at-rest encryption for the block storage volumes used by SAP EC2 instances, ensuring data on the underlying disks is encrypted. Amazon S3 server-side encryption (Option B) encrypts data at rest in S3 buckets, which can be used for SAP backups, log archives, or other SAP-related object storage. Together, they cover the primary storage types for SAP on AWS.

Answer

AWS Identity and Access Management (IAM)

Answer

AWS WAF

Answer

Amazon CloudWatch Logs

Question 4

A company is designing an SAP HANA disaster recovery (DR) solution on AWS. The primary site is in us-east-1, and the DR site is in us-west-2. The RPO is 15 minutes, and the RTO is 2 hours. Which AWS service should be used for replicating the SAP HANA database to the DR site?

Accepted Answer

SAP HANA System Replication with log shipping using Amazon S3 or direct VPN connection.. SAP HANA System Replication (HSR) is the native, SAP-supported mechanism for real-time database replication, capable of achieving sub-minute RPOs by continuously shipping log entries to a secondary system. When combined with a direct VPN connection or Amazon S3 as a log shipping target, it meets the 15-minute RPO and 2-hour RTO requirements for disaster recovery across AWS regions. This is the only option that provides synchronous or near-synchronous replication of the HANA database itself, not just backups or snapshots.

Answer

Amazon S3 Cross-Region Replication for database backup files.

Answer

Amazon EBS snapshots replicated to us-west-2 via Amazon Data Lifecycle Manager.

Answer

AWS Database Migration Service (DMS) with ongoing replication.

Question 5

A company is migrating an SAP system to AWS and wants to use AWS Backup to back up the SAP HANA database. What is a prerequisite for using AWS Backup with SAP HANA?

Accepted Answer

Install the AWS Backup agent for SAP HANA on the database instance. AWS Backup for SAP HANA requires the AWS Backup agent to be installed on the SAP HANA database instance. This agent is a software component that integrates with SAP HANA's native backup capabilities, enabling AWS Backup to orchestrate and manage full, incremental, and differential backups of the HANA database. Without the agent, AWS Backup cannot communicate with the SAP HANA system to initiate or manage backups.

Answer

Configure AWS Storage Gateway to store backups

Answer

Use AWS CloudEndure for backup

Answer

Set up AWS Database Migration Service (DMS) for continuous backup

Question 6

An SAP system administrator needs to grant an external auditor read-only access to view EC2 instance configurations and CloudWatch logs. Which IAM policy should they use?

Accepted Answer

AWS managed policy: ReadOnlyAccess. The ReadOnlyAccess AWS managed policy grants read-only access to all AWS services and resources, including EC2 instance configurations and CloudWatch logs, without allowing any write or modify actions. This policy is the most appropriate for an external auditor who needs to view but not change any resources, as it provides the necessary read permissions across services while preventing any modifications.

Answer

AWS managed policy: SecurityAudit

Answer

AWS managed policy: AdministratorAccess

Answer

AWS managed policy: PowerUserAccess

Question 7

An organization is migrating an SAP system from on-premises to AWS. The SAP system uses a shared file system (NFS) for transport directories. The company wants a fully managed NFS solution on AWS. Which service should they use?

Accepted Answer

Amazon Elastic File System (EFS). Amazon EFS is a fully managed NFS file system that supports the NFSv4.1 and NFSv4.0 protocols, making it the ideal choice for SAP transport directories that require a shared POSIX-compliant file system. It provides high availability, automatic scaling, and eliminates the need to manage underlying storage infrastructure, directly matching the requirement for a fully managed NFS solution on AWS.

Answer

Amazon Elastic Block Store (EBS)

Answer

Amazon FSx for Windows File Server

Answer

Amazon S3

Question 8

Match the AWS managed service to its SAP-related capability.

Accepted Answer

Amazon EFS: Provides shared file storage for SAP applications. Correct matches: Amazon EFS for shared file storage, Amazon FSx for Windows File Server for SMB storage, Amazon Route 53 for DNS, Amazon CloudWatch for monitoring. Common confusions include mistaking EFS for block storage and FSx for Lustre for SAP HANA.

Answer

Amazon EFS: Provides block storage for SAP HANA

Answer

Amazon FSx for Lustre: Provides high-performance shared storage for SAP HANA

Question 9

A company is deploying an SAP BusinessObjects (BO) platform on AWS. To ensure high availability of the BO servers, which AWS service should be used to distribute incoming traffic across multiple BO instances in different Availability Zones?

Accepted Answer

Application Load Balancer. The Application Load Balancer (ALB) operates at Layer 7 and can distribute HTTP/HTTPS traffic across multiple SAP BusinessObjects instances in different Availability Zones, providing high availability and health-check-based routing. ALB supports path-based routing and SSL termination, which are essential for modern web applications like SAP BO. It is the correct choice because it is designed for HTTP/HTTPS traffic and can balance load across instances in multiple AZs.

Answer

NAT Gateway

Answer

Amazon Route 53

Answer

Classic Load Balancer

Question 10

Drag and drop the steps to automate the installation of SAP HANA on AWS using AWS CloudFormation into the correct order.

Accepted Answer

Create the CloudFormation template, then upload it to Amazon S3, then launch the stack, then verify the SAP HANA installation.. CloudFormation automation involves template creation, upload, stack launch, provisioning, and verification.

Answer

Create the CloudFormation template, then launch the stack, then upload it to Amazon S3, then verify the SAP HANA installation.

Answer

Upload the template to Amazon S3, then create the CloudFormation template, then launch the stack, then verify the SAP HANA installation.

Answer

Create the CloudFormation template, then upload it to Amazon S3, then verify the SAP HANA installation, then launch the stack.

Question 11

Drag and drop the steps to configure an SAP Fiori front-end server on AWS behind an Application Load Balancer (ALB) into the correct order.

Accepted Answer

Launch EC2 instances, then create a target group, then register instances with target group, then create an ALB with HTTPS listener and SSL certificate, then update DNS.. Fiori ALB setup requires EC2 instances, target group, ALB listener, certificate, and DNS update.

Answer

Launch EC2 instances, then create an ALB with HTTPS listener and SSL certificate, then create a target group, then register instances, then update DNS.

Answer

Create a target group, then register instances, then create an ALB with HTTPS listener and SSL certificate, then launch EC2 instances, then update DNS.

Answer

Update DNS, then launch EC2 instances, then create a target group, then register instances, then create an ALB with HTTPS listener and SSL certificate.

Question 12

Drag and drop the steps to implement disaster recovery for SAP S/4HANA using AWS Elastic Disaster Recovery (DRS) into the correct order.

Accepted Answer

Install the AWS Replication Agent on source SAP server, then configure replication settings and start continuous replication, then launch a recovery drill to test failover, then in a disaster initiate recovery and perform post-recovery tasks.. DRS involves agent installation, configuration, testing, recovery initiation, and post-recovery steps.

Answer

Install the AWS Replication Agent on source SAP server, then launch a recovery drill, then configure replication settings and start continuous replication, then in a disaster initiate recovery and perform post-recovery tasks.

Answer

Configure replication settings and start continuous replication, then install the AWS Replication Agent on source SAP server, then launch a recovery drill, then in a disaster initiate recovery and perform post-recovery tasks.

Answer

Install the AWS Replication Agent on source SAP server, then configure replication settings and start continuous replication, then in a disaster initiate recovery and perform post-recovery tasks, then launch a recovery drill.

Question 13

Drag and drop the steps to migrate an on-premises SAP system to AWS using AWS Application Migration Service (MGN) into the correct order.

Accepted Answer

Install AWS Replication Agent, then Configure replication settings, then Launch test instances and validate, then Perform cutover, then Perform post-migration steps.. MGN migration involves installing agent, configuring replication, testing, cutover, and post-migration steps.

Answer

Install AWS Replication Agent, then Launch test instances and validate, then Configure replication settings, then Perform cutover, then Perform post-migration steps.

Answer

Configure replication settings, then Install AWS Replication Agent, then Launch test instances and validate, then Perform cutover, then Perform post-migration steps.

Answer

Install AWS Replication Agent, then Configure replication settings, then Perform cutover, then Launch test instances and validate, then Perform post-migration steps.

Question 14

A company is migrating its SAP ERP system to AWS and wants to use storage that offers the highest IOPS for the SAP HANA database. Which storage option should be used?

Accepted Answer

Provisioned IOPS SSD (io2) volumes. For SAP HANA databases on AWS, the highest IOPS is achieved using Provisioned IOPS SSD (io2) volumes, which are designed for latency-sensitive, I/O-intensive workloads. io2 volumes offer up to 256,000 IOPS per volume with 99.999% durability, making them the optimal choice for SAP HANA's demanding performance requirements.

Answer

General Purpose SSD (gp3) volumes

Answer

Instance Store volumes

Answer

Throughput Optimized HDD (st1) volumes

Question 15

A company wants to use an SAP-certified AMI for a non-production SAP system to reduce deployment time. Which AWS service provides access to SAP-certified AMIs?

Accepted Answer

AWS Marketplace. AWS Marketplace is the correct service because it provides access to SAP-certified AMIs that have been pre-configured and validated by SAP for running SAP workloads on AWS. These AMIs are published by AWS and SAP partners, ensuring compliance with SAP's certification requirements and reducing deployment time for non-production systems.

Answer

EC2 Image Builder

Answer

AWS Systems Manager

Answer

AWS Service Catalog

Question 16

Drag and drop the steps to perform a backup and restore of an SAP HANA database using AWS Backup into the correct order.

Accepted Answer

Create an AWS Backup plan, then assign SAP HANA database resources to the plan, then execute the backup, then select the backup to restore from, then restore the database.. AWS Backup requires a plan, resource assignment, backup execution, selection of backup, and restore.

Answer

Create an AWS Backup plan, then execute the backup, then assign SAP HANA database resources to the plan, then select the backup to restore from, then restore the database.

Answer

Create an AWS Backup plan, then assign SAP HANA database resources to the plan, then select the backup to restore from, then execute the backup, then restore the database.

Answer

Create an AWS Backup plan, then restore the database, then assign SAP HANA database resources to the plan, then execute the backup, then select the backup to restore from.

Question 17

An administrator is setting up an SAP system on AWS and needs to assign a static private IP address to the SAP application server. Which AWS resource should be used to ensure the private IP address remains the same even after an instance stop/start?

Accepted Answer

Elastic Network Interface (ENI) with a primary private IP. An Elastic Network Interface (ENI) with a primary private IP address retains its private IP address across instance stop/start cycles because the ENI is a separate resource that persists independently of the instance lifecycle. When you attach an ENI to an SAP application server, the primary private IP (assigned from the VPC subnet) remains fixed even after the instance is stopped and started, ensuring consistent network addressing for SAP communication.

Answer

VPC endpoint

Answer

Secondary private IP address on the primary network interface

Answer

Elastic IP address

Question 18

Which TWO options are best practices for securing SAP systems on AWS?

Accepted Answer

Enable encryption at rest for EBS volumes and RDS databases. Enabling encryption at rest for EBS volumes and RDS databases ensures that SAP data stored on disk is protected using AWS Key Management Service (KMS) or a customer-managed key. This is a fundamental security best practice to meet compliance requirements and protect sensitive SAP data from unauthorized access if the underlying storage is compromised.

Answer

Use the AWS account root user for daily administration

Answer

Place SAP application servers in a public subnet with direct internet access

Answer

Store SAP transport files in a public S3 bucket

Question 19

A financial services company is migrating its SAP HANA-based system from on-premises to AWS. The system is critical and must have a recovery point objective (RPO) of less than 1 minute and recovery time objective (RTO) of less than 15 minutes. The migration strategy is to use SAP HANA System Replication (HSR) in synchronous mode to an EC2 instance in the same region, then perform a takeover. However, during the test, the HSR replication latency is consistently above 100 ms, which prevents synchronous replication from working. The network between on-premises and AWS uses AWS Direct Connect with 1 Gbps bandwidth, and the physical distance is about 50 miles. Which action should the administrator take to achieve the RPO/RTO requirements?

Accepted Answer

Deploy the target EC2 instance in an AWS Local Zone closer to the on-premises data center.. Synchronous HSR over long distance is challenging due to latency. Option A is correct because AWS Local Zones reduce latency by placing the target closer to on-premises. Option B is wrong because using a Site-to-Site VPN adds more latency compared to Direct Connect. Option C is wrong because asynchronous mode does not meet the RPO of less than 1 minute. Option D is wrong because increasing bandwidth to 10 Gbps does not reduce latency; the issue is distance, not bandwidth.

Answer

Use a Site-to-Site VPN instead of Direct Connect.

Answer

Use asynchronous HSR mode instead of synchronous.

Answer

Increase the Direct Connect bandwidth to 10 Gbps.

Question 20

An SAP customer is using AWS Direct Connect to connect their on-premises network to AWS. They have multiple SAP systems in different VPCs. The network team wants to centralize connectivity and simplify routing. Which AWS service should they use to connect all VPCs to the on-premises network?

Accepted Answer

Use AWS Transit Gateway to connect all VPCs and the Direct Connect gateway. AWS Transit Gateway acts as a central hub that interconnects VPCs and on-premises networks via a Direct Connect Gateway. This allows the customer to attach multiple VPCs to a single Transit Gateway and connect that Transit Gateway to the Direct Connect Gateway, simplifying routing and eliminating the need for multiple Direct Connect Virtual Interfaces (VIFs) or complex peering arrangements.

Answer

Use a VPN connection from each VPC to the on-premises network

Answer

Use VPC Peering between each VPC and the Direct Connect VIF

Answer

Use AWS PrivateLink to connect services across VPCs