PAS-C01 Migration Practice Test 7 — 15 Questions

Question 1

Refer to the exhibit. An EC2 instance is running and has a public IP address. A security engineer needs to verify that the instance is not publicly accessible from the internet. Which additional step is required?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Check the security group inbound rules.. Security group inbound rules determine whether traffic from the internet is allowed to reach the instance. Option A is incorrect because having a public IP does not guarantee accessibility; the security group must allow inbound traffic. Option B is incorrect because the route table's internet gateway entry is necessary but not sufficient; inbound rules must permit access. Option D is incorrect because network ACLs provide stateless filtering at the subnet level, but the question specifically requires verifying that the instance is not publicly accessible, which is primarily controlled by security group inbound rules.

Answer

Check if the instance has a public IP.

Answer

Check the route table for an internet gateway.

Answer

Check the network ACL of the subnet.

Question 2

Refer to the exhibit. A CloudFormation template is used to migrate a web server to AWS. The template launches an EC2 instance but does not install the web server. What is the best way to automate the installation?

Accepted Answer

Add a UserData property to the EC2 instance resource.. The UserData property in a CloudFormation EC2 resource allows you to specify scripts or commands that run automatically at instance launch. This is the simplest and most direct method to install software like a web server during provisioning. Option A (CloudWatch Events triggering Lambda) is not automatic at launch and requires additional resources. Option C (Run Command) requires manual invocation or scheduling, not automatic at launch. Option D (CodeDeploy) requires an agent to be pre-installed, which is not the case here.

Answer

Create a CloudWatch Events rule to trigger a Lambda function after instance launch.

Answer

Use AWS Systems Manager Run Command to install the web server.

Answer

Use AWS CodeDeploy to deploy the web server after the instance is created.

Question 3

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database size is 2 TB and the network bandwidth between the on-premises data center and AWS is 100 Mbps. The company needs to minimize the migration time and wants to use AWS DMS. Which approach should they take?

Accepted Answer

Use AWS DMS with AWS Snowball Edge for the full load, then ongoing replication.. AWS Snowball Edge can be used with AWS DMS to transfer the full load of large databases over a physical device, avoiding long upload times over limited bandwidth. After the full load, ongoing replication via DMS handles changes. Option A is incorrect because Direct Connect does not increase bandwidth beyond the 100 Mbps limit; it only provides a dedicated connection. Option B is incorrect because a full load over the network at 100 Mbps would take too long for 2 TB. Option D is incorrect because Schema Conversion Tool (SCT) is used for heterogeneous migrations (e.g., Oracle to PostgreSQL), but here the target is also Oracle (homogeneous), so SCT is unnecessary.

Answer

Use AWS Database Migration Service (DMS) with AWS Direct Connect to increase bandwidth.

Answer

Use AWS DMS with a full load over the network, then ongoing replication.

Answer

Use AWS Schema Conversion Tool (SCT) to convert the schema and then AWS DMS for full load.

Question 4

A company wants to migrate its SAP HANA database to AWS using SAP HANA Database Backup and Recovery. The backup files are stored on an NFS share on-premises. The company wants to restore these backups directly to an Amazon EC2 instance running SAP HANA. Which AWS storage service should they use to make the NFS backup files accessible to the EC2 instance?

Accepted Answer

Amazon EFS. Amazon EFS provides a scalable NFS file system that can be mounted on EC2 instances. The backup files can be copied from on-premises NFS to EFS using AWS DataSync or other methods, and then used for restore. Options A, B, D are incorrect because S3 is object storage (not NFS), FSx for Windows File Server is SMB, and EBS is block storage not NFS.

Answer

Amazon S3

Answer

Amazon FSx for Windows File Server

Answer

Amazon EBS

Question 5

A company is migrating an SAP ERP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS). The company plans to use a shared file system for the SAP transport directory. Which TWO AWS services can be used to provide a highly available shared file system for this purpose?

Accepted Answer

Amazon FSx for NetApp ONTAP. Options D (Amazon FSx for NetApp ONTAP) and E (Amazon EFS) are correct because they provide NFS-based shared file systems that support the required protocols for SAP transport directory and can be configured for high availability. Option A (Amazon EBS Multi-Attach) is block storage, not a shared file system, and does not support concurrent read/write operations required for SAP. Option B (Amazon S3) is object storage, not POSIX-compliant. Option C (Amazon FSx for Windows File Server) uses SMB protocol, not NFS, which is required by SAP.

Answer

Amazon EBS Multi-Attach

Answer

Amazon S3

Answer

Amazon FSx for Windows File Server

Question 6

A company is migrating a large SAP Business Suite system to AWS. The system has a 10 TB SAP HANA database. The migration window is limited to 48 hours. The company has a 1 Gbps direct connect link to AWS. Which TWO actions should the company take to minimize the migration time while ensuring data consistency?

Accepted Answer

Use AWS Snowball Edge to transfer a full database backup from on-premises to AWS, then restore it on the target HANA instance.. (initialize the target HANA instance with a backup/restore using AWS Snowball) is correct because it bypasses network limitations for the initial data load. Option D (configure SAP HANA System Replication over the Direct Connect link after initial load) is correct because it syncs incremental changes. Option B would take too long over the link. Option C is for ongoing replication not initial load. Option E is a best practice but not for minimizing migration time.

Answer

Set up SAP HANA System Replication (HSR) and let it synchronize the full database over the Direct Connect link.

Answer

Use AWS DMS to migrate the HANA database directly over the Direct Connect link.

Answer

Use AWS SCT to convert the database schema before migration.

Question 7

A company is planning to migrate its SAP NetWeaver system from on-premises to AWS. The system uses an SAP HANA database. The company wants to use the SAP System Migration (sum) tool. Which THREE prerequisites must be met before starting the migration?

Accepted Answer

The target SAP HANA database must be installed and running.. For an SAP System Migration (SUM) to AWS with HANA, the target HANA database must be installed and running (A), the target system must have the SAP kernel and required libraries (B), and source and target must be on the same OS (D) to ensure compatibility. HTTP proxy (C) is not a prerequisite; communication between source and target does not require a proxy. The source system does not need to be fully shut down before starting; SUM can be run with the source system running (E).

Answer

An HTTP proxy must be configured for communication between source and target.

Answer

The source SAP system must be fully shut down before starting the migration.

Question 8

A company is migrating its SAP ERP system to AWS. The system uses an SAP HANA database and runs on SUSE Linux Enterprise Server (SLES). The company wants to use the same SLES version on AWS and needs to ensure that the instance type supports the required SAP HANA workload. Which AWS resource should the administrator use to find the appropriate instance types?

Accepted Answer

The SAP Certified and Supported SAP HANA Hardware Directory on the SAP website.. The SAP Certified and Supported SAP HANA Hardware Directory is the authoritative source that lists all AWS instance types certified for SAP HANA. The administrator can filter by provider (Amazon Web Services), OS (SUSE Linux Enterprise Server), and instance type to find supported options. Option A (AWS Well-Architected Framework) provides general guidance but not certified hardware lists. Option C (SAP on AWS Implementation Guide) offers deployment guidance but not the exhaustive hardware directory. Option D (AWS Trusted Advisor) checks best practices and cost optimization but does not provide SAP HANA certification details.

Answer

The AWS Well-Architected Framework documentation.

Answer

The SAP on AWS Implementation Guide.

Answer

The AWS Trusted Advisor console.

Question 9

A company wants to migrate its SAP BusinessObjects system to AWS. The system includes a CMS database that runs on Microsoft SQL Server. The company wants to use AWS DMS to migrate the database with minimal downtime. Which migration method should they use?

Accepted Answer

Full load with ongoing replication (change data capture). Ongoing replication (change data capture) allows DMS to keep the target database in sync with the source, minimizing downtime. Options A, B, D are incorrect because full load only, one-time restore, or snapshot restore do not minimize downtime.

Answer

Snapshot restore to Amazon RDS

Answer

Full load with one-time restore

Answer

Full load only

Question 10

A company is migrating an SAP S/4HANA system to AWS. The system uses SAP HANA as its database. The company has a complex networking setup with multiple VPCs and on-premises connectivity via AWS Direct Connect. The SAP HANA system replication will be used for high availability across two Availability Zones. What is the minimum number of Elastic Network Interfaces (ENIs) required per HANA instance to support the recommended network architecture?

Accepted Answer

2. The minimum number of ENIs recommended for SAP HANA system replication across Availability Zones is 2. This allows separation of client traffic from HANA system replication traffic, which is a best practice. A single ENI can technically carry all traffic but does not adhere to the recommended network architecture. Option A (2) is the minimum, while Option B (1) is insufficient.

Answer

1

Question 11

A company is migrating its SAP ERP system to AWS. The system has a custom ABAP code that uses RFC calls to an external system. The company wants to test the migrated system in a sandbox environment before the final cutover. What is the best practice for handling the RFC connections during testing?

Accepted Answer

Create a separate sandbox environment that is isolated from production and uses mock endpoints for RFC calls.. Using a sandbox environment disconnected from the production system prevents accidental data changes or impacts. Options B, C, D are incorrect because they either involve production connections or are not best practices.

Answer

Use the same RFC destinations as production but disable the external system.

Answer

Set up a VPN between the sandbox and the external system to test real connectivity.

Answer

Configure the sandbox to use the production RFC endpoints but with read-only access.

Question 12

A company is migrating an SAP HANA database from on-premises to AWS. The database is 5 TB and the network link is 500 Mbps. The company has a tight window of 24 hours for the migration. Which TWO methods can be used to transfer the initial data load within the time constraint?

Accepted Answer

Use AWS Snowball Edge to transfer the database backup files to AWS.. The correct answers are Option C (AWS Snowball Edge) and Option D (AWS DataSync over Direct Connect with compression). Snowball Edge allows physical shipment of the 5 TB database, bypassing the 500 Mbps network bottleneck entirely. DataSync with compression over Direct Connect can accelerate the transfer, potentially completing within 24 hours. Option A (AWS DMS) over 500 Mbps for 5 TB would take approximately 23 hours theoretically, but with overhead and potential retries, it may exceed the 24-hour window. Option B (AWS Site-to-Site VPN) is slower than Direct Connect and also limited by the 500 Mbps link. Option E (Amazon S3 multipart upload) faces the same network speed limitation as DMS and would likely exceed the time constraint.

Answer

Use AWS DMS to perform a full load directly over the network.

Answer

Use AWS Site-to-Site VPN with jumbo frames enabled.

Answer

Use Amazon S3 multipart upload to upload backup files directly from on-premises.

Question 13

A company is migrating its SAP NetWeaver system to AWS. The system uses an Oracle database. The company wants to use the SAP Software Provisioning Manager (SWPM) to perform a system copy. The target database will be Amazon RDS for Oracle. Which of the following backup types can be used as the source for the SWPM system copy?

Accepted Answer

An Oracle RMAN backup. SAP Software Provisioning Manager (SWPM) supports using Oracle Recovery Manager (RMAN) backups as the source for a system copy to Amazon RDS for Oracle. Options A, B, and C are incorrect because SWPM does not support Oracle Data Pump exports, AWS DMS snapshots, or Oracle Export utility dumps as direct input for the system copy process.

Answer

An Oracle Data Pump export

Answer

An AWS DMS snapshot of the Oracle database

Answer

An Oracle Export utility (exp) dump

Question 14

A company is migrating a critical Oracle database to Amazon RDS for Oracle. They need to minimize downtime and ensure data consistency. Which AWS service should they use to perform an online migration with minimal impact?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) supports ongoing replication and can perform live migrations with minimal downtime. AWS Snowball is for offline data transfer. S3 Transfer Acceleration speeds up uploads to S3. Direct Connect establishes dedicated network connections but is not a migration service.

Answer

AWS Direct Connect

Answer

AWS Snowball

Answer

Amazon S3 Transfer Acceleration

Question 15

An organization is migrating a large SAP HANA workload to AWS. The current on-premises environment uses IBM Spectrum Scale (GPFS) for shared storage. Which AWS storage solution should they use to provide a similar shared file system for SAP HANA?

Accepted Answer

Amazon FSx for NetApp ONTAP. Amazon FSx for NetApp ONTAP provides a fully managed shared file system that supports NFS, SMB, and iSCSI protocols, and can replace GPFS for SAP HANA. EBS is block storage not shared. S3 is object storage. EFS is NFS but lacks some enterprise features needed for HANA.

Answer

Amazon S3

Answer

Amazon Elastic Block Store (EBS)

Answer

Amazon Elastic File System (EFS)