PAS-C01 Mock Exam 90 — 25 Questions

Question 1

An SAP administrator is configuring the /hana/data volume for SAP HANA on an EC2 instance. The exhibit shows the /etc/fstab entry. What is the purpose of the 'noatime' mount option?

Accepted Answer

To disable updating the access time on files, improving performance.. The 'noatime' mount option disables the update of inode access timestamps (atime) on every file read. For SAP HANA, which performs high-frequency I/O operations on the /hana/data volume, this eliminates unnecessary metadata writes, reducing disk I/O overhead and improving overall filesystem performance.

Answer

To enable swap space on the volume.

Answer

To enable disk quotas.

Answer

To mount the volume as read-only.

Question 2

An SAP workload is running on an EC2 instance in a private subnet. The application needs to access an S3 bucket for backups. Which AWS service should be used to enable private connectivity without traversing the internet?

Accepted Answer

VPC Endpoint (Gateway). A VPC Endpoint (Gateway) allows private connectivity between an EC2 instance in a private subnet and an S3 bucket without traversing the internet. It uses AWS’s internal network and route table entries to direct S3 traffic through the endpoint, ensuring data never leaves the AWS backbone. This is the correct choice for SAP workloads requiring secure, low-latency backups to S3.

Answer

Internet Gateway

Answer

NAT Gateway

Answer

AWS Site-to-Site VPN

Question 3

A company is designing a disaster recovery strategy for SAP S/4HANA. The primary site is in us-east-1 and the DR site is in us-west-2. The RPO must be less than 30 minutes and RTO less than 2 hours. Which approach meets these requirements?

Accepted Answer

Configure HANA System Replication in asynchronous mode with automatic takeover. Option A is correct because HANA System Replication in asynchronous mode with automatic takeover meets the RPO of less than 30 minutes and RTO of less than 2 hours. Asynchronous replication provides near-real-time data transfer across AWS regions with minimal impact on primary performance, and automatic takeover enables fast failover to the DR instance, satisfying the RTO requirement.

Answer

Configure HANA System Replication in synchronous mode across regions

Answer

Take nightly backups to S3 and restore in DR

Answer

Use AWS Backup to copy daily snapshots to DR region

Question 4

Which TWO are best practices for designing high availability for SAP NetWeaver on AWS? (Choose two.)

Accepted Answer

Deploy SAP ASCS and PAS instances in separate Availability Zones.. Deploying SAP ASCS (ABAP SAP Central Services) and PAS (Primary Application Server) instances in separate Availability Zones ensures that if one AZ fails, the other can continue processing, providing high availability. This aligns with AWS best practices for SAP NetWeaver, which recommend distributing critical SAP components across AZs to achieve a Recovery Time Objective (RTO) of minutes and a Recovery Point Objective (RPO) of near-zero using SAP enqueue replication and failover mechanisms.

Answer

Use T2 or T3 burstable instances for cost savings.

Answer

Use EBS Multi-Attach volumes for the SAP application data.

Answer

Configure multiple Application Load Balancers in a failover configuration.

Question 5

A company is designing a disaster recovery (DR) strategy for its SAP system on AWS. The primary site is in us-east-1 and the DR site in us-west-2. The RTO is 4 hours and RPO is 1 hour. Which AWS service should be used for cross-region replication of the SAP HANA database backups stored in Amazon S3?

Accepted Answer

Amazon S3 Cross-Region Replication (CRR).. Amazon S3 Cross-Region Replication (CRR) is the correct choice because it automatically replicates objects (including SAP HANA database backups) from a source S3 bucket in us-east-1 to a destination bucket in us-west-2, meeting the 1-hour RPO by ensuring backups are available in the DR region within minutes of upload. CRR operates asynchronously at the object level, requires no additional infrastructure, and directly supports the stated requirement for cross-region replication of S3-stored backups without introducing extra latency or complexity.

Answer

AWS Backup with a cross-region backup plan.

Answer

Use AWS Storage Gateway to replicate backups.

Answer

Enable S3 Versioning on the source bucket.

Question 6

An organization runs SAP BusinessObjects on AWS and wants to improve the performance of report generation. The current environment uses EBS gp2 volumes. Which TWO changes could potentially reduce report generation time?

Accepted Answer

Switch to EBS io2 Block Express volumes with higher IOPS.. Option D is correct because switching to EBS io2 Block Express volumes provides higher IOPS and lower latency compared to gp2 volumes, which directly improves the I/O performance for SAP BusinessObjects report generation that often involves heavy database and file system reads. Option E is correct because adding more SAP BusinessObjects application servers distributes the report generation workload across multiple nodes, reducing the processing bottleneck on a single server and decreasing overall generation time.

Answer

Increase the size of the EBS root volume.

Answer

Enable EBS optimization on the instance.

Answer

Configure automated snapshots of the EBS volumes.

Question 7

A company is running SAP ERP on AWS and needs to encrypt data at rest for all SAP-related storage. Which combination of AWS services can be used to achieve this? (Select TWO.)

Accepted Answer

Amazon S3 server-side encryption. Amazon EBS encryption (Option D) provides at-rest encryption for the block storage volumes used by SAP EC2 instances, ensuring data on the underlying disks is encrypted. Amazon S3 server-side encryption (Option B) encrypts data at rest in S3 buckets, which can be used for SAP backups, log archives, or other SAP-related object storage. Together, they cover the primary storage types for SAP on AWS.

Answer

AWS Identity and Access Management (IAM)

Answer

AWS WAF

Answer

Amazon CloudWatch Logs

Question 8

Refer to the exhibit. An SAP administrator runs the AWS CLI command and receives the output shown. The SAP application server (instance i-0abcd1234) is in 'running' state, but the SAP application is not reachable. The security group allows inbound traffic on port 3200. What is the MOST likely cause of the issue?

Accepted Answer

The operating system firewall on the instance is blocking port 3200.. Option D is correct because the instance is in 'running' state and the security group allows inbound traffic on port 3200, yet the SAP application is unreachable. This indicates a host-level firewall (e.g., iptables, firewalld, or Windows Firewall) on the SAP application server is blocking inbound connections to port 3200, which operates independently of AWS security groups and network ACLs.

Answer

The network ACL for the subnet is blocking outbound traffic.

Answer

The instance is in a stopped state.

Answer

The security group inbound rule for port 3200 is not applied to the instance.

Question 9

An SAP system on AWS is running on an r5.16xlarge instance. The system is experiencing network throughput bottlenecks. Which step should be taken to improve network performance?

Accepted Answer

Enable Enhanced Networking and install the ENA driver. Option C is correct because enabling Enhanced Networking and installing the Elastic Network Adapter (ENA) driver is the standard method to achieve higher packet-per-second (PPS) performance, lower latency, and increased network bandwidth on supported instance types like r5.16xlarge. Without the ENA driver, the instance uses the older Xen network driver, which cannot utilize the full 25 Gbps network bandwidth available to r5 instances, leading to throughput bottlenecks.

Answer

Move the instance to a placement group

Answer

Attach an Elastic Fabric Adapter

Answer

Change the instance type to c5.18xlarge

Question 10

A company is designing a disaster recovery (DR) solution for SAP HANA on AWS. The primary site is in us-east-1, and the DR site is in us-west-2. The RPO is 5 minutes, and the RTO is 1 hour. The company wants to use SAP HANA System Replication (HSR). Which configuration meets these requirements?

Accepted Answer

Use asynchronous HSR with multiple secondary instances (multi-target) in us-west-2.. Option A is correct because multi-target asynchronous HSR allows SAP HANA to replicate data to multiple secondary instances simultaneously, meeting the 5-minute RPO with asynchronous replication while providing the flexibility to fail over to a secondary instance in us-west-2 within the 1-hour RTO. Asynchronous replication is necessary over such a long distance (us-east-1 to us-west-2) to avoid latency impacting primary site performance, and multi-target enables multiple DR targets without additional primary-side overhead.

Answer

Use synchronous HSR between us-east-1 and us-west-2.

Answer

Use asynchronous HSR with a single secondary instance in us-west-2.

Answer

Use EBS snapshots every 5 minutes and copy them to us-west-2.

Question 11

A company runs SAP HANA on AWS and needs to ensure that the database can be restored to any point in time within the last 48 hours with minimal data loss. Which backup strategy should be used?

Accepted Answer

Schedule daily full backups and hourly incremental log backups to Amazon S3 using Backint.. Option B is correct because SAP HANA supports Backint integration with Amazon S3 for log backups, enabling point-in-time recovery (PITR) with minimal data loss. Daily full backups combined with hourly incremental log backups ensure that any transaction committed within the last 48 hours can be restored, meeting the RPO requirement of minimal data loss.

Answer

Use Amazon EBS snapshots every 6 hours.

Answer

Use AWS Backup with a daily backup plan.

Answer

Take weekly full backups and daily differential backups to Amazon S3.

Question 12

Which THREE are valid strategies for backing up an SAP HANA database on AWS? (Choose three.)

Accepted Answer

Use Amazon EBS snapshots of the HANA data volumes.. Amazon EBS snapshots provide crash-consistent, point-in-time backups of the HANA data volumes. When used with SAP HANA's snapshot mode (e.g., via hdbsql or Python scripts), they ensure transactional consistency by quiescing the database before the snapshot. This is a valid and commonly used backup strategy for SAP HANA on AWS.

Answer

Set up an Amazon RDS for SAP HANA read replica.

Answer

Configure a lifecycle policy to move backups to Amazon S3 Glacier immediately.

Question 13

A company is designing an SAP HANA disaster recovery (DR) solution on AWS. The primary site is in us-east-1, and the DR site is in us-west-2. The RPO is 15 minutes, and the RTO is 2 hours. Which AWS service should be used for replicating the SAP HANA database to the DR site?

Accepted Answer

SAP HANA System Replication with log shipping using Amazon S3 or direct VPN connection.. SAP HANA System Replication (HSR) is the native, SAP-supported mechanism for real-time database replication, capable of achieving sub-minute RPOs by continuously shipping log entries to a secondary system. When combined with a direct VPN connection or Amazon S3 as a log shipping target, it meets the 15-minute RPO and 2-hour RTO requirements for disaster recovery across AWS regions. This is the only option that provides synchronous or near-synchronous replication of the HANA database itself, not just backups or snapshots.

Answer

Amazon S3 Cross-Region Replication for database backup files.

Answer

Amazon EBS snapshots replicated to us-west-2 via Amazon Data Lifecycle Manager.

Answer

AWS Database Migration Service (DMS) with ongoing replication.

Question 14

A company is migrating an SAP NetWeaver system to AWS. The system uses an on-premises shared file system (NFS). Which TWO AWS services can provide a scalable, highly available NFS share for SAP transport directories?

Accepted Answer

Amazon Elastic File System (EFS). Amazon EFS provides a scalable, fully managed NFS file system that is highly available across multiple Availability Zones, making it suitable for SAP transport directories. It supports the NFSv4 protocol required by SAP and automatically scales storage capacity as files are added or removed, eliminating the need for manual provisioning.

Answer

AWS Storage Gateway File Gateway

Answer

Amazon Elastic Block Store (EBS) with a shared volume

Answer

Amazon S3 with S3 File Gateway

Question 15

A company runs SAP HANA on AWS with a multi-AZ deployment using HANA System Replication (HSR). The primary site is in us-east-1a and the secondary in us-east-1b. Each site has an ASCS and PAS. The HANA database uses a virtual IP address managed by a Route 53 health check with a failover routing policy. During a recent AZ failure in us-east-1a, the automatic failover to the secondary site took over 15 minutes. The recovery time objective (RTO) is 5 minutes. Analysis shows that the Route 53 health check failed but the failover did not trigger quickly because the DNS TTL was set to 300 seconds. What changes should be made to meet the RTO?

Accepted Answer

Reduce the DNS TTL to 60 seconds and use a weighted routing policy with health checks.. Option C is correct because reducing the DNS TTL to 60 seconds ensures that DNS resolvers cache the failover record for a shorter duration, allowing the Route 53 failover routing policy to propagate the new IP address more quickly after a health check failure. Combined with a weighted routing policy and health checks, this enables failover within the 5-minute RTO by minimizing DNS propagation delay, which was the bottleneck at 300 seconds.

Answer

Increase the DNS TTL to 600 seconds to ensure stability.

Answer

Replace Route 53 with an Application Load Balancer for the virtual IP.

Answer

Remove the health check and use a simple routing policy with a low TTL.

Question 16

An SAP administrator is troubleshooting a performance issue on an SAP NetWeaver system running on AWS. The system uses an Oracle database. The CPU utilization of the database server is consistently below 30%, but application response times are slow. Which THREE checks should the administrator perform to identify the bottleneck?

Accepted Answer

Use Amazon CloudWatch metrics to check network throughput and latency between the application and database servers.. Option A is correct because high network latency or insufficient throughput between the application and database servers can cause slow response times even when CPU utilization is low. Amazon CloudWatch metrics such as NetworkIn, NetworkOut, and NetworkPacketsIn/Out can reveal congestion or bandwidth saturation, which is a common bottleneck in SAP NetWeaver deployments on AWS.

Answer

Increase the number of CPU cores on the database server.

Answer

Enable Amazon EBS Elastic Volumes to increase volume size dynamically.

Question 17

A company runs SAP ECC on AWS with a multi-ASCS architecture for high availability. During a failover test, the secondary ASCS instance does not take over. The cluster logs indicate that the 'aws-cluster' resource agent failed to release the Elastic IP. What is the MOST likely cause?

Accepted Answer

The Elastic IP is associated with the primary private IP address of the ENI.. In a multi-ASCS SAP cluster on AWS, the 'aws-cluster' resource agent manages Elastic IP (EIP) failover by disassociating the EIP from the primary instance and associating it with the secondary instance. If the EIP is associated with the primary private IP address of the Elastic Network Interface (ENI) rather than the ENI itself, the resource agent cannot release it because the association is at the IP level, not the ENI level. This prevents the secondary ASCS instance from acquiring the EIP, causing the failover to fail.

Answer

The Elastic IP is in a different Availability Zone than the secondary ASCS instance.

Answer

The cluster is using a NAT Gateway for outbound traffic, conflicting with the Elastic IP.

Answer

The IAM role assigned to the instances does not have permission to release the Elastic IP.

Question 18

A company runs SAP HANA on AWS using an r5.8xlarge instance with 3.8 TB of EBS gp3 storage. The HANA data volume is 2 TB. The system is experiencing performance issues, and the database administrator suspects that the storage I/O is the bottleneck. Which TWO actions should be taken to improve I/O performance?

Accepted Answer

Change the data volume type from gp3 to io2 Block Express with higher IOPS.. Option B is correct because io2 Block Express provides up to 256,000 IOPS per volume with sub-millisecond latency, which is essential for SAP HANA's demanding I/O patterns. The current gp3 volume, while offering baseline performance, cannot match the consistent low-latency and high-IOPS capabilities required for HANA data volumes under heavy write workloads. Option E is also correct because increasing provisioned IOPS on the existing gp3 volume directly addresses the I/O bottleneck by raising the performance ceiling, though gp3 has a maximum of 16,000 IOPS per volume, which may still be insufficient for large HANA deployments.

Answer

Increase the size of the log volume to improve write performance.

Answer

Enable HANA delta merge operations to run more frequently.

Answer

Upgrade the instance to a larger size with higher network bandwidth.

Question 19

A company runs SAP ERP Central Component (ECC) on AWS with an Oracle database. The system is deployed on a single EC2 instance with EBS volumes. The company has scheduled a maintenance window for applying Oracle patches. The database administrator (DBA) will apply the patches during the maintenance window, which requires the database to be shut down. The DBA wants to minimize downtime and ensure that if the patching fails, the system can be rolled back quickly. The current setup includes daily EBS snapshots of the data volume, but these are taken at midnight. What should the DBA do to minimize downtime and ensure a quick rollback?

Accepted Answer

Create a snapshot of the EBS data volume immediately before applying the patches. If the patching fails, restore the volume from the snapshot.. Option A is correct because creating a snapshot of the EBS data volume immediately before applying the patches captures a point-in-time, crash-consistent state of the Oracle database. Since the database will be shut down during the maintenance window, this snapshot provides a reliable restore point. If patching fails, the DBA can quickly restore the volume from this snapshot, minimizing downtime by avoiding the need to restore from the older midnight snapshot, which would lose an entire day's worth of transactions.

Answer

Use AWS Database Migration Service (DMS) to create a replica of the database before patching. If patching fails, redirect traffic to the replica.

Answer

Create an AMI of the entire EC2 instance before the maintenance window. If patching fails, launch a new instance from the AMI.

Answer

Stop the EC2 instance, create a snapshot of the data volume, then apply the patches. If patching fails, restore from the snapshot.

Question 20

An organization is migrating an SAP system from on-premises to AWS. The SAP system uses a shared file system (NFS) for transport directories. The company wants a fully managed NFS solution on AWS. Which service should they use?

Accepted Answer

Amazon Elastic File System (EFS). Amazon EFS is a fully managed NFS file system that supports the NFSv4.1 and NFSv4.0 protocols, making it the ideal choice for SAP transport directories that require a shared POSIX-compliant file system. It provides high availability, automatic scaling, and eliminates the need to manage underlying storage infrastructure, directly matching the requirement for a fully managed NFS solution on AWS.

Answer

Amazon Elastic Block Store (EBS)

Answer

Amazon FSx for Windows File Server

Answer

Amazon S3

PAS-C01 Mock Exam 90 — 25 Questions

Exhibit

PAS-C01 Mock Exam 90 — 25 Questions

Exhibit