PAS-C01 Hard Questions — 25 Difficult Questions

Question 1

A company runs SAP on AWS and is experiencing high latency for database queries after moving the SAP HANA database to a larger instance type. CloudWatch metrics show that the EBS volume queue length is consistently high. What is the most likely cause of the latency?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The EBS volume does not have enough provisioned IOPS.. A consistently high EBS volume queue length indicates that the volume is receiving more I/O requests than it can process, causing requests to queue up. Since the SAP HANA database was moved to a larger instance type, the workload likely demands more IOPS than the EBS volume is provisioned for, leading to throttling and increased latency. Option C correctly identifies that insufficient provisioned IOPS is the most likely cause.

Answer

The instance's network bandwidth is saturated.

Answer

The instance's CPU is under-provisioned.

Answer

The EBS volume is not encrypted.

Question 2

An SAP Basis administrator is migrating an SAP ERP system from an on-premises environment to AWS. The system uses an SAP HANA database. The migration must have minimal downtime. The administrator plans to use SAP HANA System Replication (HSR) to synchronize data to an AWS HANA instance. However, the network latency between on-premises and AWS is consistently around 50 ms. What should the administrator do to ensure that HSR can maintain synchronization without impacting source system performance?

Accepted Answer

Configure HSR in asynchronous mode with full sync disabled to avoid affecting source transaction performance.. With 50 ms network latency, synchronous replication would block source transactions while waiting for acknowledgment from the target, severely impacting performance. Asynchronous mode with full sync disabled allows HSR to send log buffers without waiting for the target to confirm, ensuring source system performance is unaffected while still maintaining eventual consistency for migration.

Answer

Use synchronous replication with a lower sync timeout setting to avoid blocking.

Answer

Keep synchronous replication but increase the replication timeout value in the HANA global.ini file.

Answer

Enable HANA delta merge operations during replication to reduce the amount of data transferred.

Question 3

A company runs SAP Business Suite on AWS. They plan to use the SAP Landscape Management (LaMa) connector to automate system copy and relocation. What is a prerequisite for using the AWS LaMa connector?

Accepted Answer

An IAM role with permissions for EC2, EBS, and CloudFormation actions. The AWS LaMa connector automates SAP system copy and relocation by orchestrating EC2, EBS, and CloudFormation actions. An IAM role with permissions for these services is required so that LaMa can programmatically manage infrastructure resources (e.g., stop/start instances, snapshot volumes, create CloudFormation stacks) without manual intervention. This role is assumed by the LaMa connector when executing workflows.

Answer

An EC2 Auto Scaling group configured for the SAP application tier

Answer

AWS Systems Manager managed instances for all SAP servers

Answer

SSH keys for all SAP instances to allow LaMa to connect

Question 4

An SAP system on AWS experiences intermittent connectivity issues between the SAP Central Services (SCS) instance and the application servers. The SCS instance is in a private subnet in us-east-1a, and the application servers are spread across us-east-1a and us-east-1b. Security groups allow traffic on all required ports. What is the MOST likely cause of the intermittent connectivity?

Accepted Answer

The network ACLs are blocking the traffic.. Network ACLs are stateless and must explicitly allow both inbound and outbound traffic on ephemeral ports. If the outbound rules for the SCS subnet's NACL do not allow return traffic on high ports (e.g., 1024–65535), or if the application servers' subnet NACL blocks inbound traffic from the SCS instance, connections will intermittently fail. Security groups are stateful and automatically allow return traffic, but NACLs are not, making them the likely culprit for intermittent connectivity across different Availability Zones.

Answer

The route tables do not have a route for the SCS subnet.

Answer

The Internet Gateway is misconfigured.

Answer

The VPC peering connection is not established correctly.

Question 5

An SAP administrator runs the AWS CLI command shown in the exhibit to check the status of a production HANA instance. The output shows the instance is running in us-east-1a. However, the SAP application team reports that the HANA database is not responding. What should the administrator check next to diagnose the issue?

Accepted Answer

The HANA database service is not running on the instance. The AWS CLI command only checks the EC2 instance state (e.g., 'running'), not the status of the HANA database service itself. Even if the instance is running, the HANA database service (hdbnameserver, hdbindexserver, etc.) may have crashed, failed to start, or been stopped. The administrator should SSH into the instance and run commands like 'systemctl status hdbindexserver' or 'sapcontrol -nr <instance_number> -function GetProcessList' to verify the HANA service status.

Answer

The EBS volumes are detached from the instance

Answer

The instance state is 'running' so no issue with the instance

Answer

The security group does not allow inbound traffic to the database port

Question 6

A company runs SAP ERP 6.0 on an Oracle database on EC2. The system is experiencing high CPU usage on the database server during peak hours. Analysis shows that the CPU is consumed by log writes. Which configuration change can reduce CPU usage?

Accepted Answer

Increase the Oracle log buffer size to reduce the number of log write operations.. High CPU usage from log writes indicates that the database is spending excessive CPU cycles on writing redo log entries to disk. Increasing the Oracle log buffer size reduces the frequency of log write operations by allowing more redo data to accumulate before a write is triggered, thereby lowering CPU overhead. This directly addresses the root cause without changing storage or compute capacity.

Answer

Disable archiving of redo logs.

Answer

Switch from EBS gp3 to io2 Block Express volumes.

Answer

Upgrade to a larger EC2 instance type with more vCPUs.

Question 7

Which TWO are required considerations when sizing an SAP HANA instance on AWS for a production environment? (Choose two.)

Accepted Answer

Ensure the instance has enough memory to hold the HANA data in memory (RAM:data ratio).. SAP HANA is an in-memory database that requires all active data to reside in RAM. The RAM:data ratio must be carefully sized to ensure the instance has enough memory to hold the HANA data and log volumes in memory, typically with a 1:4 or 1:8 ratio depending on compression and workload. AWS provides specific instance types (e.g., x1e, u-6tb1) certified for SAP HANA that meet these memory requirements.

Answer

Provision instance store volumes for HANA data and log areas.

Answer

Purchase Reserved Instances for the HANA server to reduce costs.

Answer

Select an RDS instance type that supports SAP HANA.

Question 8

A company runs its SAP ERP system on AWS with an SAP HANA database on an EC2 instance. The database is configured with multiple EBS io1 volumes striped in a RAID 0. Recently, the company implemented a new backup process using AWS Backup with the Backint agent. However, during the backup window, the database performance degrades significantly, causing application timeouts. The database administrator checks CloudWatch metrics and sees that the EBS write latency spikes to over 50 ms during backups. The backup target is an S3 bucket in the same region. The EC2 instance type is r5.4xlarge with EBS-optimized enabled. What is the MOST likely cause of the performance degradation?

Accepted Answer

The Backint agent is consuming CPU and I/O resources, causing contention.. The Backint agent runs on the same EC2 instance as SAP HANA, consuming CPU and I/O resources during backup, causing contention and performance degradation. Option B is unlikely because with RAID 0 the aggregate IOPS is higher than the provisioned per volume limit. Option C is incorrect because the S3 bucket is in the same region as stated. Option D is incorrect because the r5.4xlarge instance supports EBS optimization and is suitable for Backint.

Answer

The EBS volumes have reached the provisioned IOPS limit of 20,000 IOPS.

Answer

The S3 bucket is in a different region, causing network latency.

Answer

The EC2 instance type does not match the requirements for Backint.

Question 9

A company is migrating a large-scale SAP environment to AWS. Which THREE AWS services can be used to optimize storage costs for SAP workloads? (Choose three.)

Accepted Answer

Amazon S3 Lifecycle policies to transition data. Amazon S3 Lifecycle policies (Option B) allow you to automatically transition SAP backup and archival data from S3 Standard to lower-cost storage classes like S3 Standard-IA or S3 Glacier, reducing storage costs without manual intervention. This is critical for SAP workloads where large volumes of backup data accumulate over time and do not require immediate access.

Answer

AWS Storage Gateway for on-premises caching

Answer

Amazon S3 Standard for all data

Question 10

A company is designing a highly available SAP NetWeaver system on AWS. The architecture includes two EC2 instances running the ABAP application server in an Auto Scaling group. Which THREE components are required to maintain session persistence and distribute traffic? (Choose THREE.)

Accepted Answer

Health checks on the target group to detect unhealthy instances. Health checks on the target group are required to detect unhealthy EC2 instances running the ABAP application server. When an instance fails a health check, the load balancer automatically stops routing traffic to it, ensuring that only healthy instances serve requests. This is critical for maintaining high availability in an SAP NetWeaver environment, as it prevents session failures caused by underlying instance issues.

Answer

A shared file system (e.g., Amazon EFS) for /sapmnt

Answer

A Multi-AZ deployment for the SAP application servers

Question 11

A company is migrating its SAP environment to AWS and wants to use SAP HANA as a Service on AWS (HANA database on AWS). The SAP application tier will run on EC2 instances behind an Application Load Balancer. The company requires high availability for the database with automatic failover in case of an AZ failure. Which architecture should the company implement?

Accepted Answer

Set up HANA System Replication between two EC2 instances in different AZs with automatic failover.. HANA System Replication configured between two EC2 instances in different Availability Zones (AZs) with automatic failover ensures high availability and resilience against an AZ failure. Option A is incorrect because replicating HANA to Amazon S3 is meant for backups and point-in-time recovery, not for real-time automatic failover. Option C is incorrect because synchronous replication within the same AZ does not protect against an AZ failure; it only provides protection against instance or host failure. Option D is incorrect because a single HANA database instance in one AZ, even with regular backups to S3, cannot provide automatic failover if the AZ fails; it would require manual recovery.

Answer

Configure HANA replication to Amazon S3 for point-in-time recovery.

Answer

Use HANA System Replication with a synchronous secondary in the same AZ.

Answer

Deploy a single HANA database on a large EC2 instance in one AZ with regular backups to S3.

Question 12

An organization uses AWS Systems Manager to run automation documents on their SAP EC2 instances. Recently, some automation runbooks have failed because the EC2 instances did not have the required SSM Agent version. The operations team wants to ensure all existing and future instances automatically have the latest SSM Agent. Which solution meets this requirement?

Accepted Answer

Create an AWS Systems Manager State Manager association that runs the AWS-UpdateSSMAgent document on the instances.. AWS Systems Manager State Manager can enforce a desired state configuration on EC2 instances. By creating an association that runs the `AWS-UpdateSSMAgent` document on a schedule, State Manager ensures that both existing and future instances (when configured with the appropriate instance profile and tags) automatically update to the latest SSM Agent version, regardless of the instance's lifecycle.

Answer

Use an automation document to update the SSM Agent and schedule it via a cron job on each instance.

Answer

Enable the 'Auto-update SSM Agent' option in the EC2 launch settings for all instances.

Answer

Configure AWS Systems Manager Patch Manager to update the SSM Agent.

Question 13

An SAP administrator notices that the SAP HANA database is running out of disk space on the /hana/data volume. The volume is an EBS gp3 volume with 2000 GB size. The administrator wants to increase the size without downtime. Which action should be taken?

Accepted Answer

Use the modify-volume API to increase the size of the existing volume. AWS EBS gp3 volumes support online resizing via the modify-volume API without requiring downtime. The SAP HANA /hana/data volume can be increased in size while the instance remains running, as EBS volumes can be modified dynamically. After the modification, the administrator must extend the file system to recognize the new space, but no volume detachment or data migration is needed.

Answer

Detach the volume, create a snapshot, create a larger volume from the snapshot, and attach it

Answer

Create a new larger volume and copy data using rsync

Answer

Increase the IOPS of the volume to improve performance

Question 14

An SAP administrator is troubleshooting a performance issue on an SAP NetWeaver system running on AWS. The system uses an Oracle database. The CPU utilization of the database server is consistently below 30%, but application response times are slow. Which THREE checks should the administrator perform to identify the bottleneck?

Accepted Answer

Use Amazon CloudWatch metrics to check network throughput and latency between the application and database servers.. High network latency or insufficient throughput between the application and database servers can cause slow response times even when CPU utilization is low. Amazon CloudWatch metrics such as NetworkIn, NetworkOut, and NetworkPacketsIn/Out can reveal congestion or bandwidth saturation, which is a common bottleneck in SAP NetWeaver deployments on AWS.

Answer

Increase the number of CPU cores on the database server.

Answer

Enable Amazon EBS Elastic Volumes to increase volume size dynamically.

Question 15

Which THREE actions should be taken to ensure minimal downtime during an SAP system migration to AWS using SAP HSR (HANA System Replication)?

Accepted Answer

Perform a takeover to the target system to finalize migration.. To minimize downtime during an SAP HANA migration to AWS using HSR, it is critical to replicate data in advance. Pre-provisioning the target HANA instance on AWS ensures the infrastructure is ready (C). Configuring HANA System Replication between source and target enables ongoing data synchronization (E). Performing a takeover to the target system finalizes the migration with a quick cutover, minimizing downtime (B). Disabling backups on the source (A) is risky and does not reduce downtime, and manually copying data files (D) is unnecessary because HSR handles the replication.

Answer

Disable backups on the source system to reduce load.

Answer

Manually copy data files to AWS before starting replication.

Question 16

A systems administrator is troubleshooting an SAP HANA database that runs on an EC2 instance. The exhibit shows the block device mappings of the EC2 instance. The administrator needs to ensure that the data volumes (/dev/sdf and /dev/sdg) are not accidentally terminated when the instance is terminated. However, the administrator also wants to take a nightly snapshot of these volumes using AWS Backup. Which of the following is a potential issue with the current configuration?

Accepted Answer

The volumes are not tagged, so AWS Backup may not automatically include them in backup plans.. AWS Backup uses resource tags to identify which resources to include in backup plans. If the volumes /dev/sdf and /dev/sdg are not tagged with the appropriate key-value pairs that match the backup plan's tag-based selection criteria, AWS Backup will not automatically discover and include them in nightly snapshots. This can lead to missing backups for critical SAP HANA data volumes.

Answer

The volume /dev/sdf has DeleteOnTermination set to false, which will cause data persistence issues.

Answer

The device names /dev/sdf and /dev/sdg are reserved for NVMe instance storage and should not be used for EBS.

Answer

The volumes are attached to a running instance, which prevents snapshot creation.

Question 17

A company is migrating its SAP HANA database to AWS. The database is 3 TB and runs on a dedicated physical server. The company wants to use a HANA-certified EC2 instance. Which instance type should the company choose?

Accepted Answer

x1e.32xlarge. The x1e.32xlarge instance is SAP HANA-certified and provides 1952 GB of memory, which is sufficient for a 3 TB HANA database when considering compression and overhead. The other options either lack sufficient memory or are not HANA-certified. Specifically, the i3.16xlarge (488 GB) is not HANA-certified for large instances, the m5.24xlarge (384 GB) has too little memory, and the r5.24xlarge (768 GB) also lacks the required capacity.

Answer

i3.16xlarge

Answer

m5.24xlarge

Answer

r5.24xlarge

Question 18

An SAP system administrator notices that an SAP HANA database on AWS is experiencing high memory usage and slow query performance. The administrator wants to identify the root cause. Which Amazon CloudWatch metric should be analyzed first?

Accepted Answer

SwapUsage. SwapUsage is the correct metric to analyze first because high swap usage indicates that the system is running out of physical memory, causing it to use disk-based swap space. This can directly lead to slow query performance due to increased I/O and memory pressure. The other metrics are less directly related: CPUUtilization may not reflect memory issues, NetworkIn is unrelated to memory, and DiskQueueDepth relates to disk I/O, not memory.

Answer

NetworkIn

Answer

CPUUtilization

Answer

DiskQueueDepth

Question 19

An SAP system on AWS is experiencing increased latency in database queries. The operations team suspects that the RDS for Oracle instance is hitting its maximum connections limit. Which CloudWatch metric should be monitored to confirm this?

Accepted Answer

DatabaseConnections. The DatabaseConnections metric in Amazon CloudWatch tracks the number of database sessions currently connected to the RDS for Oracle instance. When this metric approaches or reaches the value of the `max_connections` parameter (or the Oracle-specific `sessions` and `processes` limits), new connections are rejected, causing application-side latency as queries queue or fail. Monitoring this metric directly confirms whether the maximum connections limit is being hit.

Answer

CPUCreditBalance

Answer

SwapUsage

Answer

ReadIOPS

Question 20

A company is migrating a multi-tier web application to AWS. The web tier uses sticky sessions. The application tier uses a shared session store. Which architecture ensures high availability and scalability?

Accepted Answer

Use an Application Load Balancer with sticky sessions and Amazon ElastiCache for session storage.. An Application Load Balancer (ALB) supports sticky sessions, and Amazon ElastiCache provides a scalable, low-latency, distributed session store that is shared across instances, ensuring high availability and scalability.
Option A is incorrect because storing sessions on each EC2 instance does not provide a shared session store; if an instance fails, its sessions are lost.
Option B is incorrect because while the Classic Load Balancer supports sticky sessions and RDS can be used as a session store, RDS is not optimized for high-throughput session data and the Classic Load Balancer lacks advanced features like path-based routing and is considered legacy.
Option D is incorrect because Amazon CloudFront is a content delivery network (CDN) and is not designed for session storage; S3 is object storage with higher latency, making it unsuitable for real-time session data.

Answer

Use an Application Load Balancer with sticky sessions enabled, and store sessions on each EC2 instance.

Answer

Use a Classic Load Balancer with sticky sessions and store sessions in RDS.

Answer

Use Amazon CloudFront with origin failover and store sessions in S3.