PAS-C01 Multiple Select — 30 Questions

Question 1

Which TWO of the following are valid methods for monitoring SAP system performance on AWS? (Choose two.)

Accepted Answer

Configure SAP Solution Manager to send monitoring data to Amazon CloudWatch via the SAP Cloud Platform.. SAP Solution Manager can be configured to forward monitoring data to Amazon CloudWatch via the SAP Cloud Platform (now SAP BTP) using the Cloud Management Gateway or direct integration. This allows SAP-specific metrics like system load, work process usage, and response times to be visualized and alerted on in CloudWatch, enabling unified monitoring alongside AWS infrastructure metrics.

Answer

Enable AWS CloudTrail to capture system performance logs.

Answer

Use AWS Trusted Advisor to monitor real-time CPU utilization.

Answer

Use VPC Flow Logs to monitor database query performance.

Question 2

Which TWO are required considerations when sizing an SAP HANA instance on AWS for a production environment? (Choose two.)

Accepted Answer

Ensure the instance has enough memory to hold the HANA data in memory (RAM:data ratio).. SAP HANA is an in-memory database that requires all active data to reside in RAM. The RAM:data ratio must be carefully sized to ensure the instance has enough memory to hold the HANA data and log volumes in memory, typically with a 1:4 or 1:8 ratio depending on compression and workload. AWS provides specific instance types (e.g., x1e, u-6tb1) certified for SAP HANA that meet these memory requirements.

Answer

Provision instance store volumes for HANA data and log areas.

Answer

Purchase Reserved Instances for the HANA server to reduce costs.

Answer

Select an RDS instance type that supports SAP HANA.

Question 3

A company is migrating a large-scale SAP environment to AWS. Which THREE AWS services can be used to optimize storage costs for SAP workloads? (Choose three.)

Accepted Answer

Amazon S3 Lifecycle policies to transition data. Amazon S3 Lifecycle policies (Option B) allow you to automatically transition SAP backup and archival data from S3 Standard to lower-cost storage classes like S3 Standard-IA or S3 Glacier, reducing storage costs without manual intervention. This is critical for SAP workloads where large volumes of backup data accumulate over time and do not require immediate access.

Answer

AWS Storage Gateway for on-premises caching

Answer

Amazon S3 Standard for all data

Question 4

A company is migrating a legacy application to AWS. The application currently uses Oracle Database and the company wants to migrate to Amazon Aurora PostgreSQL with minimal downtime. Which TWO steps should be taken to achieve this? (Choose TWO)

Accepted Answer

Use the AWS Schema Conversion Tool (SCT) to convert the Oracle schema to PostgreSQL.. The AWS Schema Conversion Tool (SCT) can automatically convert Oracle database schemas (including stored procedures, views, and data types) to a PostgreSQL-compatible format, which is essential when migrating to Amazon Aurora PostgreSQL. Option D is correct because AWS DMS with ongoing replication (change data capture) allows you to keep the source Oracle database and target Aurora PostgreSQL synchronized with minimal downtime, enabling a near-zero-downtime migration by capturing and applying incremental changes.

Answer

Rehost the Oracle database on an Amazon EC2 instance to minimize changes.

Answer

Configure Amazon Aurora PostgreSQL with Multi-AZ for high availability.

Answer

Export Oracle database as dump files and import into Aurora PostgreSQL using native tools.

Question 5

A company is designing a highly available SAP NetWeaver system on AWS. The architecture includes two EC2 instances running the ABAP application server in an Auto Scaling group. Which THREE components are required to maintain session persistence and distribute traffic? (Choose THREE.)

Accepted Answer

Health checks on the target group to detect unhealthy instances. Health checks on the target group are required to detect unhealthy EC2 instances running the ABAP application server. When an instance fails a health check, the load balancer automatically stops routing traffic to it, ensuring that only healthy instances serve requests. This is critical for maintaining high availability in an SAP NetWeaver environment, as it prevents session failures caused by underlying instance issues.

Answer

A shared file system (e.g., Amazon EFS) for /sapmnt

Answer

A Multi-AZ deployment for the SAP application servers

Question 6

An architect is designing a disaster recovery plan for an SAP system using SAP HANA. The primary site is in us-east-1 and the DR site is in us-west-2. The RPO is 15 minutes and RTO is 1 hour. Which TWO AWS services or features should the architect use to meet these requirements? (Choose TWO.)

Accepted Answer

AWS Elastic Disaster Recovery (AWS DRS). SAP HANA System Replication (option D) is the native SAP mechanism for replicating HANA databases synchronously or asynchronously, supporting an RPO of 15 minutes with asynchronous replication. AWS Elastic Disaster Recovery (option B) provides continuous block-level replication for the entire SAP system (including OS and application volumes) and enables automated failover within the 1-hour RTO. Together, they ensure both database consistency and full infrastructure recovery.

Answer

AWS Transit Gateway with VPC peering

Answer

Amazon S3 Cross-Region Replication

Answer

AWS CloudEndure Disaster Recovery

Question 7

A company is deploying SAP NetWeaver on AWS and needs to ensure high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). Which AWS services can be used to implement a failover cluster for ASCS and ERS? (Select THREE.)

Accepted Answer

Elastic Load Balancing. Elastic Load Balancing (ELB) is correct because it can be used in conjunction with a Network Load Balancer (NLB) to provide a stable endpoint for SAP ASCS and ERS failover. The NLB supports static IP addresses and can be configured with health checks that monitor the SAP service, automatically routing traffic to the healthy node in the cluster. This eliminates the need for a traditional floating IP and integrates with AWS-native failover mechanisms.

Answer

AWS CloudTrail

Answer

AWS Config

Question 8

A company is migrating its SAP ERP system from an on-premises environment to AWS. The database is SAP HANA. The migration must minimize downtime. Which TWO approaches should the company consider?

Accepted Answer

Use AWS DMS with full load and ongoing change data capture (CDC).. AWS DMS with full load and ongoing change data capture (CDC) enables a near-zero-downtime migration by continuously replicating changes from the source SAP HANA database to the target on AWS after the initial full load, allowing the cutover to occur with minimal disruption. Option E is correct because SAP HANA System Replication provides a native, asynchronous or synchronous replication mechanism that can be configured between the on-premises HANA database and an AWS-hosted HANA instance, supporting a controlled switchover with very low downtime.

Answer

Use AWS Database Migration Service (DMS) with full load only.

Answer

Use VM Import/Export to migrate the entire on-premises virtual machine to AWS.

Answer

Use the SAP Software Provisioning Manager (SWPM) to perform a homogeneous system copy over the network.

Question 9

Which THREE of the following are best practices for securing an SAP system on AWS? (Choose THREE.)

Accepted Answer

Enable CloudTrail to log API calls for auditing. AWS CloudTrail records all API calls made to the AWS environment, including those that modify SAP infrastructure (e.g., EC2 instance launches, security group changes). Enabling CloudTrail provides an immutable audit log that is essential for compliance, security incident investigation, and operational troubleshooting in an SAP landscape. This aligns with the AWS shared responsibility model, where customers must log and monitor actions taken on their SAP workloads.

Answer

Use the same security group for all SAP instances

Answer

Store SAP license keys in a public S3 bucket

Question 10

Which TWO of the following are required components for an SAP HANA scale-out deployment on AWS that uses shared storage for /hana/shared? (Choose two.)

Accepted Answer

Amazon EFS file system. Amazon EFS is required for an SAP HANA scale-out deployment on AWS that uses shared storage for /hana/shared because it provides a fully managed, POSIX-compliant NFS file system that can be mounted concurrently across multiple EC2 instances. SAP HANA scale-out nodes require a shared file system for /hana/shared to exchange configuration and log data, and EFS supports the necessary NFSv4 protocol with the required throughput and latency characteristics for this workload.

Answer

EC2 instance store

Answer

Amazon S3 bucket

Answer

Amazon EBS volume

Question 11

An SAP administrator is troubleshooting a performance issue on an SAP NetWeaver system running on AWS. The system uses an Oracle database. The CPU utilization of the database server is consistently below 30%, but application response times are slow. Which THREE checks should the administrator perform to identify the bottleneck?

Accepted Answer

Use Amazon CloudWatch metrics to check network throughput and latency between the application and database servers.. High network latency or insufficient throughput between the application and database servers can cause slow response times even when CPU utilization is low. Amazon CloudWatch metrics such as NetworkIn, NetworkOut, and NetworkPacketsIn/Out can reveal congestion or bandwidth saturation, which is a common bottleneck in SAP NetWeaver deployments on AWS.

Answer

Increase the number of CPU cores on the database server.

Answer

Enable Amazon EBS Elastic Volumes to increase volume size dynamically.

Question 12

Which TWO of the following are required for SAP HANA high availability on AWS using HANA System Replication (HSR) with automatic failover? (Select TWO.)

Accepted Answer

An Amazon Route 53 health check that monitors the primary instance and updates a DNS record to the secondary IP on failure.. Amazon Route 53 health checks can monitor the primary HANA instance's availability. On failure, a Route 53 failover routing policy automatically updates the DNS record to point to the secondary instance's private IP, enabling clients to reconnect without manual intervention. This is a key component of HANA System Replication (HSR) with automatic failover on AWS.

Answer

Application Auto Scaling to automatically scale HANA instances.

Answer

An Elastic Load Balancer (ELB) in front of the HANA instances to distribute traffic.

Answer

An Amazon Route 53 alias record pointing to the primary instance's private IP.

Question 13

Which THREE actions should be taken to ensure minimal downtime during an SAP system migration to AWS using SAP HSR (HANA System Replication)?

Accepted Answer

Perform a takeover to the target system to finalize migration.. To minimize downtime during an SAP HANA migration to AWS using HSR, it is critical to replicate data in advance. Pre-provisioning the target HANA instance on AWS ensures the infrastructure is ready (C). Configuring HANA System Replication between source and target enables ongoing data synchronization (E). Performing a takeover to the target system finalizes the migration with a quick cutover, minimizing downtime (B). Disabling backups on the source (A) is risky and does not reduce downtime, and manually copying data files (D) is unnecessary because HSR handles the replication.

Answer

Disable backups on the source system to reduce load.

Answer

Manually copy data files to AWS before starting replication.

Question 14

Which TWO AWS services can be used to monitor the performance of SAP applications? (Select two.)

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch is correct because it provides comprehensive monitoring for SAP applications by collecting metrics such as CPU utilization, memory usage, disk I/O, and network throughput from EC2 instances running SAP. You can set custom CloudWatch alarms to trigger actions when SAP-specific performance thresholds are breached, and integrate with SAP's CCMS (Computing Center Management System) via the AWS SAP Monitoring agent to pull SAP application-level metrics like dialog response times and buffer hit ratios.

Answer

AWS Config

Answer

AWS Shield

Answer

AWS CloudTrail

Question 15

An SAP administrator is designing a backup strategy for SAP HANA on AWS. Which THREE practices should be implemented to ensure reliable backups?

Accepted Answer

Take consistent EBS snapshots of HANA volumes after quiescing the database. Consistent EBS snapshots of HANA volumes after quiescing the database ensure crash-consistent backups, which are essential for SAP HANA's data integrity. Quiescing flushes all in-memory data to disk and freezes I/O, allowing the snapshot to capture a point-in-time state that HANA can recover from without corruption. Without quiescing, snapshots may be inconsistent and lead to database failures during restore.

Answer

Store backups in Amazon S3 One Zone-IA

Answer

Disable encryption on backup targets to reduce latency

Question 16

Which TWO of the following are benefits of using SAP HANA System Replication (HSR) on AWS? (Choose 2.)

Accepted Answer

Supports replication across AWS Regions for disaster recovery. SAP HANA System Replication (HSR) supports asynchronous replication across AWS Regions, enabling disaster recovery by maintaining a secondary system in a different geographic region. This allows failover to the secondary site if the primary region becomes unavailable, meeting RPO and RTO requirements for cross-region DR scenarios.

Answer

Improves query performance by distributing workloads

Answer

Automatically scales storage based on database growth

Answer

Automatically load balances read queries between primary and secondary

Question 17

An SAP system on AWS is using an SAP HANA database. The database administrator wants to monitor memory usage and receive alerts when memory consumption exceeds 90%. Which THREE services can be used together to achieve this?

Accepted Answer

Amazon Simple Notification Service (SNS). Amazon Simple Notification Service (SNS) is correct because it provides a fully managed pub/sub messaging service that can deliver alerts (e.g., via email, SMS, or HTTP endpoints) when triggered by an Amazon CloudWatch Alarm. In this scenario, once the CloudWatch Alarm detects that memory usage exceeds 90%, it publishes to an SNS topic, which then sends the notification to the database administrator. This enables real-time alerting without requiring custom polling or additional infrastructure.

Answer

AWS Config

Answer

Amazon Inspector

Question 18

A company is migrating a legacy three-tier web application to AWS. The application uses a MySQL database and stores session data in the database. The company wants to minimize database load and improve scalability. Which TWO actions should the company take to achieve these goals?

Accepted Answer

Use Amazon ElastiCache to store session data instead of the database.. Storing session data in the database creates unnecessary write load and latency. Amazon ElastiCache (Memcached or Redis) provides an in-memory key-value store that is ideal for transient session data, reducing database load and improving application scalability by offloading session management from the persistent MySQL layer.

Answer

Configure Amazon RDS Multi-AZ for high availability.

Answer

Use Auto Scaling for the web server tier to handle variable traffic.

Answer

Use Amazon RDS read replicas to offload read traffic from the primary database.

Question 19

An SAP administrator is configuring high availability for SAP HANA using HANA system replication (HSR) across multiple Availability Zones. The administrator must ensure that the replication traffic is encrypted and uses the most efficient network path. Which TWO configurations meet these requirements? (Choose TWO.)

Accepted Answer

Enable SAP HANA system replication with TLS/SSL encryption.. SAP HANA system replication (HSR) supports TLS/SSL encryption natively, which encrypts the replication traffic between the primary and secondary HANA instances. This ensures data confidentiality and integrity without requiring additional network infrastructure, and it uses the most efficient network path because the replication occurs directly over the existing network between the Availability Zones.

Answer

Store replication data in Amazon S3 and have the secondary instance pull it.

Answer

Use AWS Direct Connect to connect the Availability Zones.

Answer

Configure a VPN connection between the Availability Zones.

Question 20

An SAP Basis administrator needs to apply security patches to the operating system of SAP EC2 instances. The administrator wants to use AWS Systems Manager Patch Manager. Which THREE steps are required to set up patching? (Choose THREE.)

Accepted Answer

Create a patch baseline in AWS Systems Manager.. To set up patching with AWS Systems Manager Patch Manager, you need three steps: Create a patch baseline (A) to define which patches to apply. Install the SSM Agent on each EC2 instance (C) to allow Systems Manager to communicate with the instances. Associate the instances with a maintenance window (E) to schedule when patching occurs. Options B and D are not required: Lambda is not needed because Patch Manager handles the patching process, and CloudWatch Logs are not mandatory for patching operations.

Answer

Create an AWS Lambda function to invoke the patching process.

Answer

Configure Amazon CloudWatch Logs to store patch logs.