PAS-C01 Multiple Select — 30 Questions

Question 1

A company is using AWS Systems Manager Patch Manager to patch a fleet of EC2 instances. The instances are in a patch group and have the SSM Agent installed. After a patching operation, the operations team notices that some instances did not apply the patches. The instances show a status of 'Failed' in the Patch Manager console. Which TWO steps should the team take to troubleshoot and resolve the issue? (Choose TWO.)

Accepted Answer

Verify that the SSM Agent on the failed instances is running and is able to communicate with the Systems Manager service.. Option C is correct because if the SSM Agent is not running or cannot communicate with the AWS Systems Manager service, Patch Manager cannot execute the patching commands. The agent must be in a healthy state and have network connectivity (e.g., via VPC endpoints or internet gateway) to receive the patch baseline and report status. Option D is correct because the AWS-RunPatchBashelline SSM document execution history in Run Command provides detailed logs and error messages for each instance, allowing the team to identify why the patching failed, such as missing dependencies or timeout issues.

Answer

Assign the patch baseline to the instance IDs directly.

Answer

Ensure that the instances have the appropriate IAM role that allows them to be patched.

Answer

Configure a Maintenance Window for the patching operation.

Question 2

A company is migrating a legacy on-premises application to AWS. The application uses a MySQL database with a complex stored procedure that runs every hour and takes approximately 10 minutes to complete. The company wants to minimize downtime during migration. Which TWO approaches should the company use to migrate the database?

Accepted Answer

Use AWS Database Migration Service (DMS) with ongoing replication from the source MySQL database to an Amazon RDS for MySQL instance.. Option B is correct because AWS DMS with ongoing replication allows continuous synchronization from the source MySQL database to Amazon RDS for MySQL, minimizing downtime during migration. The complex stored procedure that runs hourly and takes 10 minutes is handled seamlessly as DMS captures ongoing changes, enabling a controlled cutover with minimal disruption.

Answer

Use AWS DMS with a full load only, without ongoing replication, and schedule a cutover window.

Answer

Take a full database dump using mysqldump and import it into an Amazon RDS for MySQL instance during a planned maintenance window.

Answer

Create an Amazon RDS for MySQL read replica from the on-premises database.

Question 3

Which TWO of the following are best practices for securing SAP workloads on AWS?

Accepted Answer

Use IAM roles to grant EC2 instances access to AWS services.. IAM roles allow EC2 instances to securely access AWS services (e.g., S3, DynamoDB) without embedding long-term credentials. By attaching an IAM role to an EC2 instance, the instance can obtain temporary credentials via the instance metadata service, which is a best practice for securing SAP workloads on AWS.

Answer

Disable encryption in transit between application and database tiers.

Answer

Allow SSH access from the internet for administration.

Answer

Store SAP backup files in a public S3 bucket for easy access.

Question 4

Which THREE of the following are valid considerations when designing an SAP HANA backup strategy on AWS?

Accepted Answer

Use EBS snapshots for backing up HANA data volumes.. Option A is correct because EBS snapshots provide a consistent, point-in-time backup of HANA data volumes when the database is in backup mode (e.g., using hdbsql to create a snapshot). This method is supported by SAP and AWS, and it allows for fast recovery by restoring the entire volume without needing to replay transaction logs from a separate backup.

Answer

Back up HANA data directly to Amazon S3 using standard tools.

Answer

Replicate backups to another AWS Region using S3 Cross-Region Replication.

Question 5

A company is migrating a 10 TB SQL Server database to Amazon RDS for SQL Server using AWS DMS. The migration is taking longer than expected. Which TWO actions can improve the migration speed? (Choose two.)

Accepted Answer

Enable parallel loading by splitting tables into multiple tasks. Option B is correct because splitting tables into multiple DMS tasks enables parallel loading, which significantly reduces migration time by processing multiple tables concurrently. Option D is correct because increasing the DMS replication instance size provides more CPU and memory resources, allowing the instance to handle larger data volumes and higher throughput more efficiently.

Answer

Use a single DMS task with full LOB mode

Answer

Use S3 multipart upload for the data

Answer

Disable transaction logging on the source

Question 6

A company is planning to migrate a critical application to AWS using the 7 Rs migration strategy. The application is currently running on a large VMware VM. Which THREE strategies are appropriate for this migration? (Choose three.)

Accepted Answer

Rehost: Use AWS VM Import/Export to migrate the VM to EC2. Rehost (A) is appropriate because AWS VM Import/Export allows you to migrate VMware VMs directly to Amazon EC2 as AMIs, enabling a lift-and-shift migration with minimal changes. This is a core 7 Rs strategy for moving existing virtualized workloads to AWS.

Answer

Retire: Decommission the application as it is no longer needed

Answer

Retain: Keep the application on-premises

Question 7

A company is migrating a legacy application to AWS. The application currently uses Oracle Database and the company wants to migrate to Amazon Aurora PostgreSQL with minimal downtime. Which TWO steps should be taken to achieve this? (Choose TWO)

Accepted Answer

Use the AWS Schema Conversion Tool (SCT) to convert the Oracle schema to PostgreSQL.. Option A is correct because the AWS Schema Conversion Tool (SCT) can automatically convert Oracle database schemas (including stored procedures, views, and data types) to a PostgreSQL-compatible format, which is essential when migrating to Amazon Aurora PostgreSQL. Option D is correct because AWS DMS with ongoing replication (change data capture) allows you to keep the source Oracle database and target Aurora PostgreSQL synchronized with minimal downtime, enabling a near-zero-downtime migration by capturing and applying incremental changes.

Answer

Rehost the Oracle database on an Amazon EC2 instance to minimize changes.

Answer

Configure Amazon Aurora PostgreSQL with Multi-AZ for high availability.

Answer

Export Oracle database as dump files and import into Aurora PostgreSQL using native tools.

Question 8

A company is migrating a critical application to AWS using a phased approach. The application uses a custom Linux distribution that is not supported by AWS Application Migration Service. Which THREE steps should the company take to migrate the application? (Choose THREE)

Accepted Answer

Use AWS Server Migration Service (SMS) to replicate the on-premises server to AWS.. AWS Server Migration Service (SMS) is the correct choice because it is an agentless service that can replicate on-premises servers running custom Linux distributions as long as they are supported by the underlying hypervisor. SMS uses incremental replication to create Amazon Machine Images (AMIs) from the source server, enabling a lift-and-shift migration without requiring the application to be converted to a different OS. This approach directly addresses the scenario where AWS Application Migration Service does not support the custom Linux distribution.

Answer

Convert the application to run on Amazon Linux 2 to simplify future management.

Answer

Use AWS Database Migration Service (DMS) to migrate the application server.

Question 9

A company is migrating a legacy application to AWS. The application requires a static IP address that does not change during instance stop/start. The application also needs to be highly available across two Availability Zones. Which THREE actions should the company take to meet these requirements?

Accepted Answer

Use a Network Load Balancer with an Elastic IP address. A Network Load Balancer (NLB) supports static IP addresses by allowing you to associate an Elastic IP address with each of its Availability Zone subnets. This provides a fixed entry point that does not change when backend instances are stopped or started, meeting the requirement for a static IP. Combined with an Auto Scaling group spanning two Availability Zones, the NLB ensures high availability by distributing traffic across healthy instances in both zones.

Answer

Place the instances in a placement group to ensure high availability

Answer

Use an Application Load Balancer to distribute traffic to the instances

Question 10

A company runs a production web application on EC2 instances behind an ALB. The operations team receives an alert that the application is returning HTTP 503 errors. Which THREE steps should be taken to diagnose the issue?

Accepted Answer

Check the ALB's HealthyHostCount metric in CloudWatch.. The ALB's HealthyHostCount metric in CloudWatch shows the number of healthy targets registered to the target group. A value of zero or a persistent drop indicates that all EC2 instances are failing health checks, which directly causes HTTP 503 errors because the ALB has no healthy targets to forward traffic to. This metric is the first place to check when diagnosing 503 errors, as it pinpoints whether the issue is with target health rather than network connectivity or load.

Answer

Review VPC Flow Logs to identify if traffic is reaching the ALB.

Question 11

A company is designing a disaster recovery strategy for a critical application that runs on EC2 instances with data stored on EBS volumes. The application requires RPO of 15 minutes and RTO of 1 hour. Which TWO approaches meet these requirements?

Accepted Answer

Use EBS Snapshots taken every 15 minutes and copy them to the DR region. Option A is correct because EBS Snapshots can be taken as frequently as every 15 minutes, and copying them to a DR region ensures that the most recent snapshot is available for recovery. When a disaster occurs, you can create a new EBS volume from the latest snapshot in the DR region, attach it to an EC2 instance, and achieve an RPO of 15 minutes and an RTO of under 1 hour (assuming the instance is pre-provisioned or launched quickly). This approach directly satisfies the stated recovery objectives without relying on instance-level operations.

Answer

Use AWS Backup with a backup plan that takes cross-region backups every 15 minutes

Answer

Use Amazon Machine Images (AMIs) backed by EBS snapshots, taken hourly

Answer

Use EBS Multi-Attach volumes to allow the DR instance to access the same volumes

Question 12

A company runs a web application on Amazon ECS with Fargate launch type. The application's memory utilization spikes periodically, causing tasks to be killed. The operations team wants to automatically scale the service based on memory usage. Which THREE steps are necessary to implement this?

Accepted Answer

Create an Application Auto Scaling target tracking scaling policy based on memory utilization.. Option B is correct because Application Auto Scaling with a target tracking scaling policy allows the ECS service to automatically adjust its desired count based on a CloudWatch metric, such as memory utilization. This ensures the service scales out when memory usage spikes and scales in when it drops, preventing tasks from being killed due to OOM (out-of-memory) errors.

Answer

Attach an EC2 Auto Scaling group to the ECS service to handle capacity.

Answer

Configure step scaling policies to add multiple tasks at once.

Question 13

Which TWO of the following are best practices for securing an SAP HANA database on AWS? (Choose two.)

Accepted Answer

Deploy the HANA instance in a private subnet without direct internet access.. Deploying the HANA instance in a private subnet without direct internet access ensures that the database is not exposed to the public internet, reducing the attack surface. This follows the AWS security best practice of using private subnets for sensitive workloads, with access only through bastion hosts or VPN/Direct Connect. It also aligns with SAP's own security recommendations for HANA deployments.

Answer

Disable SSL/TLS for client connections to improve performance.

Answer

Use a single Availability Zone to simplify network security group management.

Answer

Assign a public IP address to the HANA instance for easy access from the internet.

Question 14

A company is migrating an SAP HANA database to AWS. The database must be backed up automatically. Which TWO AWS services can be used for this purpose? (Choose 2.)

Accepted Answer

Amazon S3. Amazon S3 is correct because it can be used as a target for SAP HANA backup and recovery using the SAP HANA Backup to S3 feature, which allows direct backup of HANA databases to S3 buckets via the SAP HANA Studio or hdbsql commands. AWS Backup is correct because it provides a fully managed backup service that can automate and centralize backups of SAP HANA databases running on Amazon EC2 instances, using the AWS Backup console or API to create and manage backup policies.

Answer

Amazon RDS

Answer

AWS Database Migration Service

Answer

Amazon EFS

Question 15

Which THREE AWS services are typically used in the migration of an SAP environment to AWS? (Choose 3.)

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) is correct because it enables the migration of SAP HANA, SAP ASE, or other SAP-supported databases to AWS with minimal downtime. DMS supports homogeneous migrations (e.g., SAP HANA to SAP HANA on Amazon RDS or EC2) and heterogeneous migrations (e.g., SAP ASE to SAP HANA) when paired with the Schema Conversion Tool (SCT). It handles ongoing replication via Change Data Capture (CDC), which is critical for SAP systems that cannot tolerate extended outages.

Answer

AWS CloudTrail

Answer

AWS Direct Connect

Question 16

Which THREE factors should be considered when selecting an AWS Region for a migration to minimize latency for users in Europe? (Choose three.)

Accepted Answer

Data residency and compliance requirements. Data residency and compliance requirements (Option A) are critical when selecting an AWS Region for a migration to minimize latency for users in Europe because many European countries have strict data sovereignty laws (e.g., GDPR) that mandate personal data remain within the EU/EEA. Choosing a Region outside Europe would violate these regulations, regardless of latency benefits, and could result in legal penalties. Therefore, compliance directly influences which Regions are permissible, making it a primary factor in Region selection.

Answer

Number of Availability Zones in the Region

Answer

Cost of data transfer between Regions

Question 17

A company is migrating a large-scale SAP environment to AWS. Which THREE AWS services can be used to optimize storage costs for SAP workloads? (Choose three.)

Accepted Answer

Amazon S3 Lifecycle policies to transition data. Amazon S3 Lifecycle policies (Option B) allow you to automatically transition SAP backup and archival data from S3 Standard to lower-cost storage classes like S3 Standard-IA or S3 Glacier, reducing storage costs without manual intervention. This is critical for SAP workloads where large volumes of backup data accumulate over time and do not require immediate access.

Answer

AWS Storage Gateway for on-premises caching

Answer

Amazon S3 Standard for all data

Question 18

Which TWO AWS services can be used to automate the patching of SAP application servers?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager (Option B) is correct because it provides a fully managed service specifically designed to automate the process of patching operating systems and applications, including SAP application servers running on EC2 instances. It uses patch baselines to define approved patches and can schedule patching across multiple instances, ensuring SAP systems remain compliant without manual intervention.

Answer

AWS CloudFormation

Answer

Amazon EC2 Auto Scaling

Answer

AWS Elastic Beanstalk

Question 19

Which TWO actions can be taken to improve the resilience of an SAP HANA database running on AWS? (Choose two.)

Accepted Answer

Use EBS snapshots for automated backup.. Option B is correct because EBS snapshots provide a reliable, automated backup mechanism for SAP HANA data volumes, enabling point-in-time recovery and disaster recovery without requiring additional SAP HANA-specific replication. These snapshots are stored in Amazon S3 and can be used to restore the database to a consistent state, improving resilience against data corruption or accidental deletion.

Answer

Deploy the application in a single Availability Zone.

Answer

Increase the CPU capacity of the database server.

Answer

Enable cross-region replication of the database.

Question 20

A company is designing an SAP S/4HANA deployment on AWS. They want to ensure high availability for the central services (ASCS and ERS) across two Availability Zones. Which TWO of the following are required components for a typical SAP high availability setup on AWS? (Choose TWO.)

Accepted Answer

AWS Network Load Balancer to route traffic to the ASCS and ERS instances.. The AWS Network Load Balancer (NLB) is required to distribute traffic to the ASCS and ERS instances across two Availability Zones. It uses health checks to detect failures and reroute traffic to the healthy instance, ensuring that the SAP central services remain available even if one AZ fails. The NLB operates at Layer 4, preserving the source IP and supporting the necessary SAP protocols like the Message Server and Enqueue Replication.

Answer

Amazon RDS Multi-AZ deployment for the SAP HANA database.

Answer

AWS Transit Gateway to connect the two Availability Zones.

Answer

AWS Global Accelerator to provide static anycast IP addresses.