PAS-C01 Migration Practice Test 14 — 15 Questions

Question 1

During the migration of an SAP ERP system to AWS, the SAP application team reports that after migrating the database to Amazon RDS for SAP HANA, batch jobs that previously ran in 2 hours now take 5 hours. The system uses AWS Direct Connect with adequate bandwidth. Which action is most likely to resolve this performance issue?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Increase the RDS instance size and storage IOPS.. The performance degradation is likely due to insufficient compute or IOPS capacity on the RDS instance compared to the original on-premises HANA system. Increasing the instance size (more vCPUs and memory) and storage IOPS directly addresses the bottleneck. Multi-AZ (Option A) provides high availability but does not improve performance. Reducing backup retention (Option C) has no impact on query execution. Since Direct Connect bandwidth is adequate (Option D), increasing it would not help. Therefore, Option B is the most effective action.

Answer

Enable Multi-AZ deployment for RDS.

Answer

Reduce the automated backup retention period.

Answer

Increase the Direct Connect bandwidth.

Question 2

Which TWO factors are most important to consider when planning the network connectivity for an SAP migration to AWS using AWS Direct Connect?

Accepted Answer

Latency and bandwidth requirements.. The two most important factors for planning Direct Connect connectivity in an SAP migration are latency/bandwidth requirements (C) and BGP routing configuration with failover (D). SAP applications are highly sensitive to latency and require consistent throughput, so ensuring sufficient bandwidth and low latency is critical. BGP routing and failover mechanisms guarantee high availability and resilience by enabling automatic failover to backup connections. Option A (VPC endpoints) is not a Direct Connect factor—endpoints provide private access to AWS services but are unrelated to Direct Connect planning. Option B (security group rules) controls instance-level traffic and is not a primary Direct Connect consideration. Option E (VPC subnet IP ranges) is important for VPC design but does not directly impact the Direct Connect connection itself.

Answer

Number of VPC endpoints required.

Answer

Security group rules for the SAP application.

Answer

IP address range for VPC subnets.

Question 3

Which THREE actions should be taken to ensure minimal downtime during an SAP system migration to AWS using SAP HSR (HANA System Replication)?

Accepted Answer

Perform a takeover to the target system to finalize migration.. To minimize downtime during an SAP HANA migration to AWS using HSR, it is critical to replicate data in advance. Pre-provisioning the target HANA instance on AWS ensures the infrastructure is ready (C). Configuring HANA System Replication between source and target enables ongoing data synchronization (E). Performing a takeover to the target system finalizes the migration with a quick cutover, minimizing downtime (B). Disabling backups on the source (A) is risky and does not reduce downtime, and manually copying data files (D) is unnecessary because HSR handles the replication.

Answer

Disable backups on the source system to reduce load.

Answer

Manually copy data files to AWS before starting replication.

Question 4

Which TWO components are typically migrated as part of an SAP workload migration to AWS?

Accepted Answer

SAP Central Services (ASCS/SCS).. When migrating an SAP workload to AWS, the key components that are typically migrated include SAP Central Services (ASCS/SCS) and the SAP HANA database. These are core parts of the SAP system. Option A is incorrect because AWS KMS encryption keys are infrastructure security components, not part of the workload itself. Option C is incorrect because AWS Direct Connect is a network connectivity service, not migrated. Option D is incorrect because IAM roles and policies are AWS access control mechanisms, not workload components.

Answer

AWS KMS encryption keys.

Answer

AWS Direct Connect virtual interface.

Answer

IAM roles and policies.

Question 5

An SAP administrator is migrating an on-premises SAP system to AWS using this IAM policy. When attempting to launch a new EC2 instance from an AMI stored in the S3 bucket, the launch fails. What is the likely cause?

Accepted Answer

The IAM policy does not include ec2:RunInstances.. The launch fails because the IAM policy does not include the ec2:RunInstances permission, which is required to launch new EC2 instances. Option A is incorrect because the ability to stop or start instances is not relevant to launching new instances. Option C is incorrect because the failure is due to the IAM policy, not the S3 bucket policy; the IAM policy may allow s3:GetObject but that does not overcome the lack of ec2:RunInstances. Option D is incorrect because describing instances is not a prerequisite for launching.

Answer

The policy does not allow stopping or starting instances.

Answer

The S3 bucket policy does not allow reading the AMI object.

Answer

The policy does not allow describing EC2 instances.

Question 6

A company is using AWS Database Migration Service (DMS) to migrate an SAP HANA database from on-premises to Amazon RDS for SAP HANA. The migration task fails with the error shown. Which step should the administrator take to resolve this?

Accepted Answer

Modify the DMS task to include character set conversion settings.. The error indicates a character set mismatch between the source and target databases. AWS DMS can handle character set conversion if configured correctly. By modifying the DMS task to include character set conversion settings, the administrator can resolve the mismatch without altering the source or creating a new instance. Option A is incorrect because changing the source database character set is unnecessary and could impact other applications. Option C is incorrect because creating a new RDS instance is overkill; the issue lies in the DMS task configuration. Option D is incorrect because AWS Server Migration Service (SMS) is for server-level migration, not database migration.

Answer

Change the source database character set to ISO-8859-1.

Answer

Create a new RDS instance with the correct character set.

Answer

Use AWS Server Migration Service (SMS) instead of DMS.

Question 7

A retail company is migrating its SAP ERP system from on-premises to AWS. The system includes an SAP HANA database (2 TB) and an SAP NetWeaver application server. The migration strategy is to use SAP HANA System Replication (HSR) to replicate the database to an EC2 instance running SAP HANA, then perform a takeover. The application server will be migrated using AWS Application Migration Service (MGN). The network connection is AWS Direct Connect with 1 Gbps bandwidth. During a test migration, the HSR replication is working, but the application server replication through MGN is taking much longer than expected. The MGN console shows that the data replication progress is stuck at 45% for several hours. The source server is a physical server with a 500 GB disk, 75% utilized. Which action is most likely to resolve the issue?

Accepted Answer

Increase the disk queue depth on the source server or add additional disks to improve I/O performance.. The MGN data replication process is stuck at 45%, indicating a source disk I/O bottleneck. This often occurs when the source server's disk queue depth is insufficient to keep up with the rate of change. Increasing the disk queue depth (option A) can improve I/O performance and resolve the stall. Option B is incorrect because converting to dynamic disks does not address I/O throughput; MGN works with static disks. Option C is incorrect because increasing the staging area size would not help if the issue is I/O; the staging area is used for caching changes, but the problem is the source disk cannot read/write fast enough. Option D is incorrect because increasing Direct Connect bandwidth would not affect source I/O performance; the bottleneck is local to the source server.

Answer

Convert the source disks to dynamic disks to improve replication speed.

Answer

Increase the staging area size in the MGN replication settings.

Answer

Increase the Direct Connect bandwidth to 10 Gbps.

Question 8

A multinational corporation is migrating its SAP S/4HANA system to AWS. The system consists of a production database (3 TB), a development database (500 GB), and multiple application servers. The migration plan is to use AWS Database Migration Service (DMS) for the databases and AWS Application Migration Service (MGN) for the application servers. The company has set up a test environment in AWS and has performed a test migration. During the test, the production database migration via DMS completed successfully, but the development database migration failed with an error indicating that the source database version is not supported by DMS. The development database is SAP HANA 2.0 SPS 04, while the production database is SAP HANA 2.0 SPS 05. The target for both is Amazon RDS for SAP HANA. The DMS source endpoint was created using the same settings for both databases. Which step should the administrator take to resolve the development database migration failure?

Accepted Answer

Upgrade the source development SAP HANA to a supported version (e.g., SPS 05).. DMS requires a supported SAP HANA version. The development database version (SPS 04) is not supported, so upgrading it to SPS 05 will allow the migration to proceed. Option A is incorrect because SAP HANA System Replication is not designed for migrating to RDS; it replicates between HANA instances. Option C is incorrect because downgrading the production database is unnecessary and risky. Option D is incorrect because AWS SMS is for server migration, not database migration.

Answer

Use SAP HANA System Replication to replicate the development database to RDS.

Answer

Downgrade the production database to match the development version.

Answer

Use AWS Server Migration Service (SMS) for the development database.

Question 9

A financial services company is migrating its SAP HANA-based system from on-premises to AWS. The system is critical and must have a recovery point objective (RPO) of less than 1 minute and recovery time objective (RTO) of less than 15 minutes. The migration strategy is to use SAP HANA System Replication (HSR) in synchronous mode to an EC2 instance in the same region, then perform a takeover. However, during the test, the HSR replication latency is consistently above 100 ms, which prevents synchronous replication from working. The network between on-premises and AWS uses AWS Direct Connect with 1 Gbps bandwidth, and the physical distance is about 50 miles. Which action should the administrator take to achieve the RPO/RTO requirements?

Accepted Answer

Deploy the target EC2 instance in an AWS Local Zone closer to the on-premises data center.. Synchronous HSR over long distance is challenging due to latency. Option A is correct because AWS Local Zones reduce latency by placing the target closer to on-premises. Option B is wrong because using a Site-to-Site VPN adds more latency compared to Direct Connect. Option C is wrong because asynchronous mode does not meet the RPO of less than 1 minute. Option D is wrong because increasing bandwidth to 10 Gbps does not reduce latency; the issue is distance, not bandwidth.

Answer

Use a Site-to-Site VPN instead of Direct Connect.

Answer

Use asynchronous HSR mode instead of synchronous.

Answer

Increase the Direct Connect bandwidth to 10 Gbps.

Question 10

A manufacturing company is migrating its SAP ECC system to AWS. The system includes an SAP HANA database (1 TB) and an SAP NetWeaver application server. They plan to use AWS Database Migration Service (DMS) for the database and AWS Application Migration Service (MGN) for the application server. The network connection is AWS Direct Connect with 1 Gbps bandwidth. During a test migration, the DMS task for the database fails with a connection error. The source database is on an on-premises server that is behind a firewall. The administrator has already opened the necessary ports in the firewall. The DMS replication instance is in a VPC with a public subnet. Which step should the administrator take to resolve the connection issue?

Accepted Answer

Configure the source database to allow connections from the DMS replication instance IP.. The DMS replication instance needs to establish a connection to the source database. Even if the necessary ports are open in the firewall, the source database itself may have an IP allowlist that must include the DMS instance's IP. Since the DMS instance is in a public subnet, it has a public IP. The administrator should configure the source database to allow connections from that IP. Option C is correct. Option B is misleading because a NAT gateway provides internet access, not connectivity to on-premises via Direct Connect; proper routing via a virtual private gateway is needed. Option A is incorrect because changing the port does not resolve network reachability. Option D is incorrect because the firewall ports are already open.

Answer

Modify the DMS source endpoint to use a different port.

Answer

Create a private subnet for the DMS replication instance and attach a NAT gateway to allow outbound traffic to the on-premises database.

Answer

Open additional ports in the on-premises firewall.

Question 11

A technology company is migrating its SAP Business Warehouse (BW) system to AWS. The system includes an SAP HANA database (2 TB) and multiple application servers. The migration plan is to use SAP HANA System Replication (HSR) for the database and AWS Application Migration Service (MGN) for the application servers. The network connection is AWS Direct Connect with 1 Gbps bandwidth. During a test migration, the HSR replication is working, but the MGN replication for one of the application servers is failing with an error: "The agent cannot communicate with the MGN service endpoint." The source server is a Windows Server 2016 machine. The administrator has verified that the source server has internet connectivity. Which action is most likely to resolve the issue?

Accepted Answer

Configure an HTTP proxy on the source server to route traffic through the corporate proxy.. The error indicates the MGN agent cannot reach the service endpoint. Since the source server has internet connectivity, the issue is likely that outbound traffic to the MGN endpoint is blocked by a corporate proxy or firewall. Configuring an HTTP proxy on the source server (option B) allows the agent to route traffic through the corporate proxy, which is a common requirement in enterprise environments. Option C (creating a VPC endpoint) is not applicable because the source server is on-premises, not in a VPC. Option A (reinstalling the agent) does not address the connectivity issue. Option D (changing OS) is irrelevant.

Answer

Reinstall the MGN agent on the source server.

Answer

Create a VPC endpoint for AWS Application Migration Service in the source VPC.

Answer

Change the source server's OS to Linux.

Question 12

A large enterprise is migrating its SAP S/4HANA system to AWS. The system includes a production SAP HANA database (4 TB) and a development SAP HANA database (1 TB). The migration strategy is to use SAP HANA System Replication (HSR) for both databases to EC2 instances in the same AWS region. The company has a compliance requirement that the production database must be in a different AWS account than the development database. The network between on-premises and AWS uses AWS Direct Connect with 10 Gbps bandwidth. During the test migration, the HSR replication for the development database works, but the production database fails to establish replication. The error log shows: "HSR connection timed out." The security groups and network ACLs for the production target EC2 instance allow inbound traffic on port 30101 from the on-premises source IP. What is the most likely cause of the failure?

Accepted Answer

The production target EC2 instance is in a different AWS account, and there is no VPC peering or Transit Gateway between the accounts to allow connectivity.. HSR requires communication between the source and target HANA instances. If the target is in a different account, VPC peering or Transit Gateway is needed for cross-account connectivity. Option A is correct because cross-account communication requires VPC peering or Transit Gateway. Option B is wrong because the port is correct. Option C is wrong because HSR does not use port 443. Option D is wrong because the source is on-premises, not in another AWS account.

Answer

The production source HANA instance is not configured to replicate to a different AWS account.

Answer

The production target EC2 instance is using the wrong port for HSR.

Answer

The security group on the production target EC2 instance does not allow inbound traffic on port 443.

Question 13

A retail company is migrating its SAP ERP system to AWS. The system includes an SAP HANA database (1 TB) and an SAP NetWeaver application server. The migration strategy is to use AWS Database Migration Service (DMS) for the database and then manually install the application server on an EC2 instance. The network connection is AWS Direct Connect with 1 Gbps bandwidth. During the migration, the DMS task for the database completes successfully, but the application server installation fails because the SAP installation media is not accessible. The installation media is stored on an on-premises file server. The EC2 instance for the application server is in a private subnet with no direct internet access. The administrator has created a VPC endpoint for S3 to access the media, but the media is not in S3. Which step should the administrator take to make the installation media available?

Accepted Answer

Add a route in the VPC route table to direct traffic to the on-premises network via Direct Connect.. The installation media resides on an on-premises file server. The EC2 instance is in a private subnet connected via Direct Connect. To access the on-premises network, the administrator must add a route in the VPC route table that directs traffic for the on-premises IP range to the Direct Connect virtual interface (VIF). Option A involves an unnecessary copy to S3. Option C introduces internet exposure. Option D is for caching on-premises data to S3 but does not resolve routing.

Answer

Copy the installation media to an S3 bucket and use the VPC endpoint to access it.

Answer

Attach an internet gateway to the VPC and assign a public IP to the EC2 instance.

Answer

Use AWS Storage Gateway to cache the media in S3.

Question 14

A company is migrating a critical Oracle database to Amazon RDS for Oracle. The database is 2 TB in size and has a high transaction rate. The migration must have minimal downtime. Which TWO AWS services or features should be used to achieve this? (Choose two.)

Accepted Answer

AWS Database Migration Service (DMS) with ongoing replication. AWS Database Migration Service (DMS) with ongoing replication (change data capture) is the correct approach for minimal downtime migration. AWS Schema Conversion Tool (SCT) is used for schema conversion, which is necessary when moving to RDS Oracle. Option A (AWS DataSync) is for file/object transfers, not suitable for database migration. Option C (AWS Snowball) is for large offline data transfer, not suitable for minimal downtime. Option D (AWS Server Migration Service) is for server migration, not databases.

Answer

AWS DataSync

Answer

AWS Snowball

Answer

AWS Server Migration Service (SMS)

Question 15

Refer to the exhibit. A company is migrating its data to Amazon S3. The security team has provided this IAM policy for the migration user. However, the migration fails with an Access Denied error when trying to upload files to the bucket. What is the most likely cause?

Accepted Answer

The bucket policy explicitly denies the s3:PutObject action for the IAM user.. The IAM policy allows s3:PutObject on the specified bucket. However, if the bucket has an explicit deny statement in its bucket policy that denies s3:PutObject for the user or any principal, that deny will override the IAM policy allow. Since the migration fails with Access Denied, the most likely cause is that the bucket policy explicitly denies the s3:PutObject action for the IAM user. Therefore, Option A is correct. Options B, C, and D are incorrect: Option B is wrong because the IAM policy does include s3:PutObject; Option C is wrong because there is no encryption requirement in the policy; Option D is wrong because default encryption does not cause Access Denied if the user lacks permission to use the key, but the policy does not mention KMS permissions.

Answer

The IAM policy does not include s3:PutObject permission.

Answer

The IAM policy does not include kms:Decrypt permission.

Answer

The bucket has default encryption enabled and the IAM user does not have permission to use the encryption key.