PAS-C01 Migration Practice Test 6 — 15 Questions

Question 1

A company is migrating a SAP database to Amazon RDS. The IAM policy shown in the exhibit is attached to a user. Which action is allowed by this policy?

Accepted Answer

Modify the production SAP RDS instance.. The policy allows all RDS actions (rds:*) on all resources, with an explicit deny for DeleteDBInstance on the prod-sap-db resource. This means the user can perform any RDS operation except deleting the specific production SAP RDS instance. Therefore, the user is allowed to modify the production SAP RDS instance (ModifyDBInstance), making Option B the correct answer. Creating a new RDS instance (CreateDBInstance) is generally allowed, but it is not the action directly related to the production instance in this scenario. Option C is denied explicitly. Option D is incorrect because the policy allows write operations.

Answer

Create a new RDS instance.

Answer

Delete the production SAP RDS instance.

Answer

Only read RDS instances.

Question 2

An SAP administrator wants to deploy a SAP system across two Availability Zones for high availability. The administrator runs the command shown in the exhibit. How many subnets are available for the deployment?

Accepted Answer

2. The output shows two subnets, one in us-east-1a and one in us-east-1b. Option A is wrong because there are two subnets. Option C is wrong because there are not four. Option D is wrong because there are exactly two.

Answer

4

Answer

3

Answer

1

Question 3

A company is migrating a legacy SAP HANA database (version 1.0) to SAP HANA on Amazon EC2 (version 2.0) with minimal downtime. Which AWS service should be used for the migration?

Accepted Answer

Use AWS Database Migration Service (DMS) with change data capture (CDC) from the source SAP HANA database.. AWS DMS supports homogeneous migrations for SAP HANA and can replicate data with minimal downtime using change data capture (CDC). Option B is correct because DMS can migrate data from SAP HANA 1.0 to SAP HANA 2.0 on EC2 with CDC to minimize downtime. Option A is incorrect because RDS does not support SAP HANA, and read replicas cannot be created from an on-premises source. Option C is incorrect because exporting to flat files and restoring via an RDS read replica is not a valid procedure and would cause downtime. Option D is incorrect because SCT is for schema conversion between different database engines, but since both source and target are SAP HANA, no schema conversion is needed; DMS alone is sufficient.

Answer

Use SAP HANA System Replication to replicate the source database to an Amazon RDS for SAP HANA instance.

Answer

Export the database to flat files, upload to Amazon S3, and restore using an RDS read replica.

Answer

Use AWS Schema Conversion Tool (SCT) to convert the schema and then use AWS Database Migration Service (DMS) for data replication.

Question 4

A company is migrating an SAP application running on Windows Server to AWS. They plan to use Amazon EC2 with a Windows license included. The current application uses SQL Server Standard edition. Which migration strategy minimizes licensing costs?

Accepted Answer

Use Amazon RDS for SQL Server with License Included pricing.. Using Amazon RDS for SQL Server with License Included pricing eliminates the need for separate SQL Server licenses, which is the most cost-effective approach for migrating the SAP application. Options A, B, and D are incorrect: A (BYOL on Dedicated Hosts) requires existing SAP ASE licenses and Dedicated Hosts add cost; B (Dedicated Instances) provides isolation but adds expense without licensing benefit; D (Express Edition) is limited in features and may not support all SAP requirements.

Answer

Lift and shift to EC2 with SAP ASE BYOL on Dedicated Hosts.

Answer

Use EC2 with SAP ASE Standard on Dedicated Instances to ensure isolation.

Answer

Use EC2 with SAP ASE Express Edition, which is cheaper but may not support all features.

Question 5

A company is migrating an SAP HANA workload to Amazon EC2. Which configuration ensures data encryption at rest and in transit without performance degradation?

Accepted Answer

Enable Amazon EBS encryption with SSE-EBS for at-rest and enable in-transit encryption using TLS.. Amazon EBS encryption (SSE-EBS) provides at-rest encryption with minimal performance overhead (handled at the hypervisor layer with hardware acceleration), and TLS secures data in transit. Option A is incorrect because client-side encryption adds CPU overhead on the EC2 instance, potentially degrading SAP HANA performance. Option B is incorrect because VPC peering does not encrypt traffic in transit; TLS must be used. Option C is incorrect as it compromises security.

Answer

Use client-side encryption with AWS KMS for SAP HANA data files.

Answer

Use EBS encryption with AWS KMS for at-rest and VPC peering for in-transit.

Answer

Disable encryption to maximize performance; use security groups for isolation.

Question 6

An organization is migrating a large on-premises data lake (500 TB) to Amazon S3. The migration must complete within 2 weeks. The network bandwidth is 1 Gbps. Which AWS service should be used?

Accepted Answer

AWS Snowball Edge. (AWS Direct Connect with 10 Gbps) would require 10 Gbps bandwidth, but the organization only has 1 Gbps available, and provisioning a 10 Gbps connection takes weeks, so it cannot meet the 2-week timeline. Option B (DMS) is designed for database migrations, not large data lakes. Option C (S3 Transfer Acceleration) improves transfer speed over the internet but with only 1 Gbps bandwidth, it would still take over 50 days to transfer 500 TB, exceeding the 2-week deadline. Option D (AWS Snowball Edge) is a physical device that can transfer 500 TB in about 10 days (including shipping), making it the correct choice given the bandwidth constraint and time requirement.

Answer

AWS Direct Connect with a 10 Gbps connection

Answer

AWS Database Migration Service (DMS)

Answer

Amazon S3 Transfer Acceleration

Question 7

A company is migrating a legacy mainframe application to AWS. The application uses COBOL and VSAM files. Which AWS service can best replicate the VSAM file system?

Accepted Answer

Amazon FSx for NetApp ONTAP. Amazon FSx for NetApp ONTAP provides a fully managed NetApp ONTAP file system that supports NFS, SMB, and iSCSI protocols. VSAM files from mainframe can be migrated to an NFS share on FSx for ONTAP, preserving file access patterns. Option A is incorrect because Amazon S3 is object storage and does not provide a file system interface required for VSAM. Option C is incorrect because Amazon EBS is block-level storage that attaches to EC2 instances and does not offer a native file system for VSAM. Option D is incorrect because Amazon EFS is a POSIX-compliant file system but does not support the specific VSAM file structures and features needed.

Answer

Amazon S3 with Object Lock

Answer

Amazon Elastic Block Store (EBS)

Answer

Amazon Elastic File System (EFS)

Question 8

A company is migrating a multi-tier web application to AWS. The web tier uses sticky sessions. The application tier uses a shared session store. Which architecture ensures high availability and scalability?

Accepted Answer

Use an Application Load Balancer with sticky sessions and Amazon ElastiCache for session storage.. An Application Load Balancer (ALB) supports sticky sessions, and Amazon ElastiCache provides a scalable, low-latency, distributed session store that is shared across instances, ensuring high availability and scalability.
Option A is incorrect because storing sessions on each EC2 instance does not provide a shared session store; if an instance fails, its sessions are lost.
Option B is incorrect because while the Classic Load Balancer supports sticky sessions and RDS can be used as a session store, RDS is not optimized for high-throughput session data and the Classic Load Balancer lacks advanced features like path-based routing and is considered legacy.
Option D is incorrect because Amazon CloudFront is a content delivery network (CDN) and is not designed for session storage; S3 is object storage with higher latency, making it unsuitable for real-time session data.

Answer

Use an Application Load Balancer with sticky sessions enabled, and store sessions on each EC2 instance.

Answer

Use a Classic Load Balancer with sticky sessions and store sessions in RDS.

Answer

Use Amazon CloudFront with origin failover and store sessions in S3.

Question 9

A company is migrating a custom CRM application to AWS. The application uses a PostgreSQL database. Which migration approach minimizes downtime?

Accepted Answer

Use AWS Database Migration Service (DMS) with ongoing replication (CDC).. AWS Database Migration Service (DMS) with ongoing change data capture (CDC) enables near-zero downtime migration by continuously replicating changes from the source to the target until cutover. Options B, C, and D all require taking the source database offline for backup or export, resulting in significant downtime.

Answer

Use AWS Backup to create a snapshot and restore to RDS.

Answer

Take a full backup of the source database, restore to RDS for PostgreSQL, and then cut over.

Answer

Use pg_dump to export the database and pg_restore to import into RDS.

Question 10

A company is migrating an on-premises SAP HANA database to AWS. The database is 10 TB and requires high IOPS. Which EC2 instance type and storage configuration is most appropriate?

Accepted Answer

x1e.32xlarge with EBS io1 volumes. The x1e.32xlarge instance is SAP HANA certified and provides the required memory for large HANA databases. EBS io1 volumes deliver the high IOPS needed for the 10 TB database. Option B (r5.24xlarge with io1) is incorrect because r5 instances are not HANA optimized. Option C (x1e.32xlarge with instance store) is incorrect because instance store is ephemeral and not suitable for persistent data. Option D (r5.24xlarge with gp2) is incorrect because gp2 cannot achieve the high IOPS required for this workload.

Answer

r5.24xlarge with EBS io1 volumes

Answer

x1e.32xlarge with instance store volumes

Answer

r5.24xlarge with EBS gp2 volumes

Question 11

A company is migrating a critical application to AWS and needs to ensure compliance with PCI DSS. The application handles credit card numbers. Which AWS service should be used to encrypt the data at rest?

Accepted Answer

AWS CloudHSM. AWS CloudHSM, is correct because it provides dedicated hardware security modules (HSMs) that are FIPS 140-2 Level 3 compliant, which is often required for PCI DSS compliance when handling credit card numbers. Option A (Amazon S3 server-side encryption) is incorrect because it is used for encrypting objects in S3 and does not provide dedicated HSM capabilities. Option B (AWS KMS) is a managed key service but is FIPS 140-2 Level 2 only, which may not meet the stringent requirements of PCI DSS for protecting cardholder data. Option D (AWS Secrets Manager) is incorrect because it manages secrets such as database credentials, not encryption keys for data at rest.

Answer

Amazon S3 server-side encryption

Answer

AWS Key Management Service (KMS)

Answer

AWS Secrets Manager

Question 12

Which TWO AWS services can be used to migrate an on-premises Microsoft SQL Server database to Amazon RDS for SQL Server with minimal downtime? (Choose two.)

Accepted Answer

AWS Schema Conversion Tool (SCT). Correct options: B and D. AWS Database Migration Service (DMS) can perform live migration with continuous change data capture (CDC) for minimal downtime. AWS Schema Conversion Tool (SCT) helps convert the on-premises SQL Server schema to be compatible with Amazon RDS for SQL Server. Options A, C, and E are incorrect: AWS Snowball Edge (A) is for offline data transfer, not minimal downtime; Amazon EC2 with SQL Server (C) is a target but not a migration service; AWS Direct Connect (E) provides network connectivity but does not perform the migration itself.

Answer

AWS Snowball Edge

Answer

Amazon EC2 with SQL Server

Answer

AWS Direct Connect

Question 13

Which THREE factors should be considered when choosing a migration strategy for a legacy application to AWS? (Choose three.)

Accepted Answer

Total cost of ownership (TCO). Correct options: C, D, E. Total cost of ownership (TCO) is a key factor in migration decision-making. Business continuity requirements (RTO/RPO) ensure the application meets recovery objectives. Data sensitivity and compliance requirements dictate how data is handled during and after migration. Option A (Physical location) is less relevant because cloud migrations are not bound by physical location; servers can be migrated regardless of location. Option B (Programming language) alone does not determine the migration strategy; the application's architecture and dependencies are more important.

Answer

Physical location of the source server

Answer

Programming language used

Question 14

A company is migrating a large SAP ERP system to AWS. Which TWO AWS services are essential for high availability and disaster recovery? (Choose two.)

Accepted Answer

AWS Elastic Disaster Recovery (DRS). Correct options: D and E. AWS Elastic Disaster Recovery (DRS) provides continuous replication and recovery for SAP systems, ensuring disaster recovery. Amazon Route 53 enables DNS failover to route traffic to a secondary region or availability zone, supporting high availability. Option A (CloudWatch) is a monitoring service, not directly for HA/DR. Option B (DMS) is for database migration, not full system recovery. Option C (S3) is storage, not a core HA/DR service.

Answer

Amazon CloudWatch

Answer

AWS Database Migration Service

Answer

Amazon S3

Question 15

Refer to the exhibit. An IAM policy is attached to a role used by AWS DMS to write data to an S3 bucket. The migration fails with an access denied error. What is the most likely cause?

Accepted Answer

The policy does not include s3:AbortMultipartUpload.. DMS needs s3:PutObject and s3:AbortMultipartUpload actions. Option A is incorrect because the bucket exists. Option C is incorrect because encryption settings are not shown. Option D is incorrect because the policy allows PutObject.

Answer

The policy does not allow s3:PutObject.

Answer

The bucket has default encryption enabled.

Answer

The bucket name is incorrect.