PAS-C01 Migration Practice Test 3 — 15 Questions

Question 1

A company is migrating a legacy mainframe application to AWS. The application uses COBOL and VSAM files. Which AWS service can best replicate the VSAM file system?

Accepted Answer

Amazon FSx for NetApp ONTAP. Amazon FSx for NetApp ONTAP provides a fully managed NetApp ONTAP file system that supports NFS, SMB, and iSCSI protocols. VSAM files from mainframe can be migrated to an NFS share on FSx for ONTAP, preserving file access patterns. Option A is incorrect because Amazon S3 is object storage and does not provide a file system interface required for VSAM. Option C is incorrect because Amazon EBS is block-level storage that attaches to EC2 instances and does not offer a native file system for VSAM. Option D is incorrect because Amazon EFS is a POSIX-compliant file system but does not support the specific VSAM file structures and features needed.

Answer

Amazon S3 with Object Lock

Answer

Amazon Elastic Block Store (EBS)

Answer

Amazon Elastic File System (EFS)

Question 2

A company is migrating an on-premises SAP HANA database to AWS. The database is 10 TB and requires high IOPS. Which EC2 instance type and storage configuration is most appropriate?

Accepted Answer

x1e.32xlarge with EBS io1 volumes. SAP HANA is an in-memory database that demands very high memory capacity and sustained high IOPS for persistence and log writes. The x1e.32xlarge instance is purpose-built for SAP HANA with ~3.9 TB of memory and is SAP-certified, and EBS io1 volumes provide provisioned IOPS that can meet HANA's demanding storage requirements. This combination is the standard AWS reference architecture for large HANA migrations.

Answer

r5.24xlarge with EBS io1 volumes

Answer

x1e.32xlarge with instance store volumes

Answer

r5.24xlarge with EBS gp2 volumes

Question 3

A company is migrating a critical application to AWS and needs to ensure compliance with PCI DSS. The application handles credit card numbers. Which AWS service should be used to encrypt the data at rest?

Accepted Answer

AWS CloudHSM. AWS CloudHSM, is correct because it provides dedicated hardware security modules (HSMs) that are FIPS 140-2 Level 3 compliant, which is often required for PCI DSS compliance when handling credit card numbers. Option A (Amazon S3 server-side encryption) is incorrect because it is used for encrypting objects in S3 and does not provide dedicated HSM capabilities. Option B (AWS KMS) is a managed key service but is FIPS 140-2 Level 2 only, which may not meet the stringent requirements of PCI DSS for protecting cardholder data. Option D (AWS Secrets Manager) is incorrect because it manages secrets such as database credentials, not encryption keys for data at rest.

Answer

Amazon S3 server-side encryption

Answer

AWS Key Management Service (KMS)

Answer

AWS Secrets Manager

Question 4

Which TWO AWS services can be used to migrate an on-premises Microsoft SQL Server database to Amazon RDS for SQL Server with minimal downtime? (Choose two.)

Accepted Answer

AWS Schema Conversion Tool (SCT). AWS Schema Conversion Tool (SCT) (B) is correct because it converts the source Microsoft SQL Server schema and code objects to a format compatible with Amazon RDS for SQL Server, which is a required step when the source and target database engines differ in features or syntax; SCT helps ensure the migrated schema works on the RDS target with minimal manual rework. AWS Database Migration Service (DMS) (D) is correct because it performs the actual data migration with ongoing replication (change data capture) from the on-premises SQL Server to Amazon RDS for SQL Server, allowing cutover with minimal downtime. AWS Snowball Edge (A) is a physical data-transfer device for bulk offline migration and does not provide continuous database replication or schema conversion for SQL Server to RDS. Amazon EC2 with SQL Server (C) is just a compute host for running SQL Server and is not a migration service for moving a database to RDS. AWS Direct Connect (E) is a dedicated network connection that can improve transfer performance but does not itself migrate or replicate a SQL Server database to RDS.

Answer

AWS Snowball Edge

Answer

Amazon EC2 with SQL Server

Answer

AWS Direct Connect

Question 5

Refer to the exhibit. An IAM policy is attached to a role used by AWS DMS to write data to an S3 bucket. The migration fails with an access denied error. What is the most likely cause?

Accepted Answer

The policy does not include s3:AbortMultipartUpload.. DMS needs s3:PutObject and s3:AbortMultipartUpload actions. Option A is incorrect because the bucket exists. Option C is incorrect because encryption settings are not shown. Option D is incorrect because the policy allows PutObject.

Answer

The policy does not allow s3:PutObject.

Answer

The bucket has default encryption enabled.

Answer

The bucket name is incorrect.

Question 6

Refer to the exhibit. An EC2 instance is running and has a public IP address. A security engineer needs to verify that the instance is not publicly accessible from the internet. Which additional step is required?

Accepted Answer

Check the security group inbound rules.. A public IP address alone does not make an instance publicly accessible; the security group inbound rules determine whether traffic from the internet is allowed. Even with a public IP and an internet gateway route, if the security group does not permit inbound traffic on the relevant ports, the instance is not publicly accessible. Therefore, checking the security group inbound rules is the required additional step.

Answer

Check if the instance has a public IP.

Answer

Check the route table for an internet gateway.

Answer

Check the network ACL of the subnet.

Question 7

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database size is 2 TB and the network bandwidth between the on-premises data center and AWS is 100 Mbps. The company needs to minimize the migration time and wants to use AWS DMS. Which approach should they take?

Accepted Answer

Use AWS DMS with AWS Snowball Edge for the full load, then ongoing replication.. AWS Snowball Edge can be used with AWS DMS to transfer the full load of large databases over a physical device, avoiding long upload times over limited bandwidth. After the full load, ongoing replication via DMS handles changes. Option A is incorrect because Direct Connect does not increase bandwidth beyond the 100 Mbps limit; it only provides a dedicated connection. Option B is incorrect because a full load over the network at 100 Mbps would take too long for 2 TB. Option D is incorrect because Schema Conversion Tool (SCT) is used for heterogeneous migrations (e.g., Oracle to PostgreSQL), but here the target is also Oracle (homogeneous), so SCT is unnecessary.

Answer

Use AWS Database Migration Service (DMS) with AWS Direct Connect to increase bandwidth.

Answer

Use AWS DMS with a full load over the network, then ongoing replication.

Answer

Use AWS Schema Conversion Tool (SCT) to convert the schema and then AWS DMS for full load.

Question 8

A company is migrating a critical SAP ERP system from on-premises to AWS. The system uses SAP ASE as its database. During the migration, the company must ensure minimal downtime and data consistency. They plan to use SAP HANA System Replication (HSR) for the database migration. Which AWS service should they use to achieve this?

Accepted Answer

Use AWS Direct Connect to establish a private connection between on-premises and AWS, then configure HSR over the private IP.. For migrating an SAP ASE database with minimal downtime and data consistency, a private, high-bandwidth, low-latency connection between on-premises and AWS is essential. AWS Direct Connect provides this private connectivity, enabling reliable replication using SAP ASE's native replication mechanisms (e.g., SAP ASE Replication Server or log shipping) over a stable network. Option C (ALB with static IP) is incorrect because SAP ASE does not use HSR; that is only for SAP HANA. Options B (Route 53) and D (Transit Gateway) do not offer the dedicated private line required for consistent replication.

Answer

Use Amazon Route 53 weighted routing to distribute traffic between the source and target databases.

Answer

Use an Application Load Balancer (ALB) with a static IP address as the HSR endpoint.

Answer

Use an AWS Transit Gateway to connect the on-premises network to the VPC hosting the target HANA instance.

Question 9

A company is migrating an SAP ERP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS). The company plans to use a shared file system for the SAP transport directory. Which TWO AWS services can be used to provide a highly available shared file system for this purpose?

Accepted Answer

Amazon FSx for NetApp ONTAP. Options D (Amazon FSx for NetApp ONTAP) and E (Amazon EFS) are correct because they provide NFS-based shared file systems that support the required protocols for SAP transport directory and can be configured for high availability. Option A (Amazon EBS Multi-Attach) is block storage, not a shared file system, and does not support concurrent read/write operations required for SAP. Option B (Amazon S3) is object storage, not POSIX-compliant. Option C (Amazon FSx for Windows File Server) uses SMB protocol, not NFS, which is required by SAP.

Answer

Amazon EBS Multi-Attach

Answer

Amazon S3

Answer

Amazon FSx for Windows File Server

Question 10

A company is migrating a large SAP Business Suite system to AWS. The system has a 10 TB SAP HANA database. The migration window is limited to 48 hours. The company has a 1 Gbps direct connect link to AWS. Which TWO actions should the company take to minimize the migration time while ensuring data consistency?

Accepted Answer

Use AWS Snowball Edge to transfer a full database backup from on-premises to AWS, then restore it on the target HANA instance.. Option A is correct because AWS Snowball Edge physically ships a full 10 TB HANA backup to AWS, avoiding the ~22+ hour minimum transfer time (10 TB at 1 Gbps) and any Direct Connect variability, so the bulk data lands quickly and can be restored on the target HANA instance. Option D is correct because after the initial Snowball-based restore, SAP HANA System Replication (HSR) can be configured to ship only the incremental redo log changes over the 1 Gbps Direct Connect link, keeping the target in sync and enabling a consistent cutover within the 48-hour window. Option B is not appropriate because synchronizing the entire 10 TB full database over the 1 Gbps Direct Connect link would consume most or all of the migration window and risks exceeding 48 hours. Option C is not appropriate because AWS DMS does not natively support SAP HANA as a source/target for this kind of large-scale HANA database migration and would not preserve HANA consistency. Option E is not appropriate because AWS SCT is a schema-conversion tool for heterogeneous migrations (for example, Oracle to PostgreSQL), not a mechanism to move or synchronize a 10 TB SAP HANA database within the window.

Answer

Set up SAP HANA System Replication (HSR) and let it synchronize the full database over the Direct Connect link.

Answer

Use AWS DMS to migrate the HANA database directly over the Direct Connect link.

Answer

Use AWS SCT to convert the database schema before migration.

Question 11

A company is planning to migrate its SAP NetWeaver system from on-premises to AWS. The system uses an SAP HANA database. The company wants to use the SAP System Migration (sum) tool. Which THREE prerequisites must be met before starting the migration?

Accepted Answer

The target SAP HANA database must be installed and running.. Option A is correct because the SAP System Migration (sum) tool requires the target SAP HANA database to be installed, configured, and running so that the migration can connect to it and load the exported data during the migration process. Option B is correct because the target system must have the SAP kernel and the required libraries installed, since sum uses the kernel binaries and libraries on the target to perform the migration and subsequent startup. Option D is correct because SAP's migration with sum requires the source and target systems to run on the same operating system platform (for example, both Linux on the same architecture), ensuring binary and kernel compatibility during the migration. Option C is not required because sum does not depend on an HTTP proxy for source-to-target communication; it uses direct database and file transfer mechanisms. Option E is not required because the source SAP system does not need to be fully shut down before starting the migration; sum can run while the source system is operational, and only specific steps may require downtime later.

Answer

An HTTP proxy must be configured for communication between source and target.

Answer

The source SAP system must be fully shut down before starting the migration.

Question 12

A company is migrating its SAP ERP system to AWS. The system uses an SAP HANA database and runs on SUSE Linux Enterprise Server (SLES). The company wants to use the same SLES version on AWS and needs to ensure that the instance type supports the required SAP HANA workload. Which AWS resource should the administrator use to find the appropriate instance types?

Accepted Answer

The SAP Certified and Supported SAP HANA Hardware Directory on the SAP website.. The SAP Certified and Supported SAP HANA Hardware Directory on the SAP website is the authoritative source that lists certified instance types and hardware configurations for running SAP HANA workloads, including the specific AWS instance families validated for HANA. Because the company must ensure the chosen instance type supports the required SAP HANA workload on SLES, this directory is the correct resource to consult. It is maintained by SAP and reflects the official certification matrix that AWS and SAP jointly validate.

Answer

The AWS Well-Architected Framework documentation.

Answer

The SAP on AWS Implementation Guide.

Answer

The AWS Trusted Advisor console.

Question 13

A company is migrating an SAP S/4HANA system to AWS. The system uses SAP HANA as its database. The company has a complex networking setup with multiple VPCs and on-premises connectivity via AWS Direct Connect. The SAP HANA system replication will be used for high availability across two Availability Zones. What is the minimum number of Elastic Network Interfaces (ENIs) required per HANA instance to support the recommended network architecture?

Accepted Answer

2. The minimum number of ENIs recommended for SAP HANA system replication across Availability Zones is 2. This allows separation of client traffic from HANA system replication traffic, which is a best practice. A single ENI can technically carry all traffic but does not adhere to the recommended network architecture. Option A (2) is the minimum, while Option B (1) is insufficient.

Answer

1

Question 14

A company is migrating an SAP HANA database from on-premises to AWS. The database is 5 TB and the network link is 500 Mbps. The company has a tight window of 24 hours for the migration. Which TWO methods can be used to transfer the initial data load within the time constraint?

Accepted Answer

Use AWS Snowball Edge to transfer the database backup files to AWS.. Option C (AWS Snowball Edge) is correct because a 5 TB transfer over a 500 Mbps link would take roughly 22+ hours at theoretical line rate and far longer in practice, whereas shipping a Snowball Edge device physically moves the data in days without consuming the WAN link, and the device's local storage and 10/25/40/100 GbE interfaces allow the backup files to be loaded quickly and ingested into Amazon S3 on arrival. Option D (AWS DataSync with compression enabled over a Direct Connect link) is correct because DataSync performs parallel, multi-threaded transfers with built-in compression and integrity verification, and a dedicated Direct Connect link provides the consistent high bandwidth needed to move 5 TB within the 24-hour window, unlike an unpredictable internet path. Option A is not suitable because AWS DMS full load over the same 500 Mbps network link is subject to the same bandwidth ceiling and would not finish in 24 hours. Option B is incorrect because a Site-to-Site VPN over the internet cannot deliver the throughput required, and jumbo frames are not supported end-to-end across the public internet. Option E is incorrect because S3 multipart upload still traverses the 500 Mbps link and offers no compression or acceleration to meet the deadline.

Answer

Use AWS DMS to perform a full load directly over the network.

Answer

Use AWS Site-to-Site VPN with jumbo frames enabled.

Answer

Use Amazon S3 multipart upload to upload backup files directly from on-premises.

Question 15

A company is migrating its SAP NetWeaver system to AWS. The system uses an Oracle database. The company wants to use the SAP Software Provisioning Manager (SWPM) to perform a system copy. The target database will be Amazon RDS for Oracle. Which of the following backup types can be used as the source for the SWPM system copy?

Accepted Answer

An Oracle RMAN backup. SAP Software Provisioning Manager (SWPM) supports using Oracle Recovery Manager (RMAN) backups as the source for a system copy to Amazon RDS for Oracle. Options A, B, and C are incorrect because SWPM does not support Oracle Data Pump exports, AWS DMS snapshots, or Oracle Export utility dumps as direct input for the system copy process.

Answer

An Oracle Data Pump export

Answer

An AWS DMS snapshot of the Oracle database

Answer

An Oracle Export utility (exp) dump