Question 1easymultiple choice
Read the full Operations and Maintenance explanation →PAS-C01 Operations and Maintenance • Complete Question Bank
Complete PAS-C01 Operations and Maintenance question bank — all 0 questions with answers and detailed explanations.
Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "ec2:Describe*",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::my-bucket/*"
},
{
"Effect": "Deny",
"Action": "s3:PutObject",
"Resource": "arn:aws:s3:::my-bucket/restricted/*"
}
]
}Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag a concept onto its matching description — or click a concept then click the description.
Up to 256K IOPS per volume
Object storage for backups and archives
Offline data migration for large SAP datasets
POSIX-compliant file storage for SAP
Drag a concept onto its matching description — or click a concept then click the description.
Replicates servers to another AWS Region
Replicates backups to secondary Region
Traffic routing to standby region
Point-in-time backups for HANA data volumes
Refer to the exhibit.
Output from `aws ec2 describe-instances`:
```
{
"Reservations": [
{
"Instances": [
{
"InstanceId": "i-0abcd1234efgh5678",
"InstanceType": "r5.2xlarge",
"State": {
"Name": "running"
},
"BlockDeviceMappings": [
{
"DeviceName": "/dev/xvda",
"Ebs": {
"VolumeId": "vol-0a1b2c3d4e5f67890",
"Status": "attached"
}
},
{
"DeviceName": "/dev/sdf",
"Ebs": {
"VolumeId": "vol-0a1b2c3d4e5f67891",
"Status": "attached"
}
}
]
}
]
}
]
}
```Refer to the exhibit.
IAM policy attached to an EC2 instance role:
```json
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:DescribeInstances",
"ec2:CreateSnapshot",
"ec2:CreateTags",
"ec2:DeleteSnapshot"
],
"Resource": "*"
},
{
"Effect": "Deny",
"Action": "ec2:DeleteSnapshot",
"Resource": "arn:aws:ec2:us-east-1:123456789012:snapshot/snap-0abcdef1234567890"
}
]
}
```Refer to the exhibit. CloudWatch Logs log entry: ``` 2023-10-01T12:00:00Z [ABAP] System: PRD, Program: Z_MONITOR, Error: RFC communication failure with destination SAPDBHOST (HANA) ```
Refer to the exhibit.
AWS CloudFormation template snippet:
```yaml
Resources:
SAPAppServer:
Type: AWS::EC2::Instance
Properties:
InstanceType: !Ref InstanceType
ImageId: !Ref LatestAmiId
SecurityGroupIds:
- !Ref SecurityGroup
UserData:
Fn::Base64: !Sub |
#!/bin/bash
/opt/sap/install.sh
```Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:DescribeInstances",
"ec2:StartInstances",
"ec2:StopInstances"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::sap-backups/*"
}
]
}
```Refer to the exhibit.
```
{
"AWSTemplateFormatVersion": "2010-09-09",
"Resources": {
"SAPApplicationServer": {
"Type": "AWS::AutoScaling::AutoScalingGroup",
"Properties": {
"LaunchConfigurationName": "my-launch-config",
"MinSize": "1",
"MaxSize": "5",
"DesiredCapacity": "2",
"VPCZoneIdentifier": ["subnet-1a", "subnet-1b"]
}
}
}
}
```Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "ec2:Describe*",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "ec2:StartInstances",
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*",
"Condition": {
"StringEquals": {
"ec2:ResourceTag/Environment": "production"
}
}
},
{
"Effect": "Allow",
"Action": "ec2:StopInstances",
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*",
"Condition": {
"StringEquals": {
"ec2:ResourceTag/Environment": "production"
}
}
}
]
}
```Refer to the exhibit.
```
{
"Records": [
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"arn": "arn:aws:iam::123456789012:user/sapadmin"
},
"eventTime": "2023-05-01T10:00:00Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "StopInstances",
"awsRegion": "us-east-1",
"requestParameters": {
"instancesSet": {
"items": [
{
"instanceId": "i-0abcdef1234567890"
}
]
}
},
"responseElements": null
}
]
}
```Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "ec2:Describe*",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "ec2:StartInstances",
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*",
"Condition": {
"StringEquals": {
"ec2:ResourceTag/Environment": "production"
}
}
},
{
"Effect": "Allow",
"Action": "ec2:StopInstances",
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*",
"Condition": {
"StringEquals": {
"ec2:ResourceTag/Environment": "production"
}
}
}
]
}
```Refer to the exhibit.
```
{
"Rules": [
{
"SourceSecurityGroupId": "sg-12345",
"SourceSecurityGroupOwnerId": "123456789012",
"IpProtocol": "tcp",
"FromPort": 3300,
"ToPort": 3300
}
]
}
```Refer to the exhibit.
"{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::sap-backup-bucket/*"
},
{
"Effect": "Allow",
"Action": "s3:PutObject",
"Resource": "arn:aws:s3:::sap-backup-bucket/*"
},
{
"Effect": "Allow",
"Action": "kms:Decrypt",
"Resource": "*"
}
]
}"Refer to the exhibit.
"Resources:
SAPApplicationServer:
Type: AWS::EC2::Instance
Properties:
InstanceType: !Ref InstanceType
SecurityGroupIds:
- !Ref AppSecurityGroup
UserData:
Fn::Base64: !Sub |
#!/bin/bash
yum install -y https://s3.amazonaws.com/ec2-downloads-windows/SSMAgent/latest/linux_amd64/amazon-ssm-agent.rpm
Tags:
- Key: Name
Value: SAP-APP-Server
AppSecurityGroup:
Type: AWS::EC2::SecurityGroup
Properties:
GroupDescription: Security group for SAP application servers
SecurityGroupIngress:
- IpProtocol: tcp
FromPort: 443
ToPort: 443
CidrIp: 0.0.0.0/0"Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:DescribeInstances",
"ec2:StartInstances",
"ec2:StopInstances",
"ec2:RebootInstances"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:PutObject"
],
"Resource": "arn:aws:s3:::sap-backup-bucket/*"
}
]
}
```Refer to the exhibit. CloudWatch Logs Insights query: fields @timestamp, @message | filter @message like /ERROR/ | stats count() by @logStream | sort count() desc | limit 10
Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"ec2:DescribeInstances",
"ec2:StartInstances",
"ec2:StopInstances"
],
"Resource": "*"
},
{
"Sid": "VisualEditor1",
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:PutObject"
],
"Resource": "arn:aws:s3:::my-sap-backup/*"
}
]
}Refer to the exhibit. Error log from SAP application server: [ERROR] DBMS: SQL error: 1003 - 'ORA-01003: no statement parsed' [ERROR] DBMS: SQL error: 1003 - 'ORA-01003: no statement parsed' [ERROR] DBMS: SQL error: 1003 - 'ORA-01003: no statement parsed'
Refer to the exhibit.
CloudFormation template snippet:
Resources:
SAPApplicationServer:
Type: AWS::EC2::Instance
Properties:
InstanceType: m5.large
ImageId: ami-0abcdef1234567890
SecurityGroupIds:
- !Ref SecurityGroup
UserData:
Fn::Base64: !Sub |
#!/bin/bash
yum install -y s3fs-fuse
mkdir /mnt/sap
s3fs my-sap-bucket /mnt/sap
Tags:
- Key: Name
Value: SAP-APPRefer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:*",
"Resource": "arn:aws:s3:::sap-backup-bucket/*"
},
{
"Effect": "Allow",
"Action": "ec2:Describe*",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "kms:Decrypt",
"Resource": "arn:aws:kms:us-east-1:123456789012:key/abcd1234-a123-456a-a12b-a123b4cd56ef"
}
]
}
```Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:StartInstances",
"ec2:StopInstances"
],
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*",
"Condition": {
"StringEquals": {
"ec2:ResourceTag/Environment": "production"
}
}
},
{
"Effect": "Deny",
"Action": "*",
"Resource": "*",
"Condition": {
"StringNotEquals": {
"aws:RequestedRegion": "us-east-1"
}
}
}
]
}Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:DescribeInstances",
"ec2:StartInstances",
"ec2:StopInstances"
],
"Resource": "*"
},
{
"Effect": "Deny",
"Action": "ec2:TerminateInstances",
"Resource": "*",
"Condition": {
"StringNotEquals": {
"ec2:ResourceTag/Environment": "Production"
}
}
}
]
}Refer to the exhibit.
{
"AWSTemplateFormatVersion": "2010-09-09",
"Resources": {
"SAPApplicationServer": {
"Type": "AWS::EC2::Instance",
"Properties": {
"ImageId": "ami-0abcdef1234567890",
"InstanceType": "r5.2xlarge",
"SecurityGroupIds": ["sg-0123456789abcdef0"],
"UserData": {
"Fn::Base64": "#!/bin/bash\n yum install -y httpd"
}
}
}
}
}{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:DescribeInstances",
"ec2:CreateSnapshot",
"ec2:CreateTags"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"kms:Decrypt",
"kms:GenerateDataKey"
],
"Resource": "arn:aws:kms:us-east-1:123456789012:key/abcd1234-..."
}
]
}HANA_LOG: 2023-10-05 14:30:00.123456+00:00 - ERROR - Backup (sys) failed: [447] backup could not be completed: [11078] backup could not be completed because of internal error: [100] Cannot access /backup/hana/COMPLETE_DATA_BACKUP_0.dat: Permission denied
ResourceRecordSet: {
Name: "sap.example.com.",
Type: "A",
AliasTarget: {
HostedZoneId: "Z2FDTNDATAQYW2",
DNSName: "dualstack.my-alb-1234567890.us-east-1.elb.amazonaws.com.",
EvaluateTargetHealth: true
}
}Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:ListBucket",
"Resource": "arn:aws:s3:::sap-backup-bucket"
},
{
"Effect": "Allow",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::sap-backup-bucket/*"
},
{
"Effect": "Deny",
"Action": "s3:DeleteObject",
"Resource": "arn:aws:s3:::sap-backup-bucket/*"
}
]
}Refer to the exhibit. # hdbsql -U backupuser -d SYSTEMDB -j "SELECT * FROM M_BACKUP_CATALOG WHERE ENTRY_TYPE_NAME = 'complete data backup' ORDER BY UTC_END_TIME DESC" BACKUP_ID | UTC_END_TIME | STATE_NAME 123 | 2023-01-15 03:00:00 | successful 124 | 2023-01-16 03:00:00 | successful 125 | 2023-01-17 03:00:00 | failed 126 | 2023-01-18 03:00:00 | successful
Refer to the exhibit.
ResourceRecordSet:
Type: AWS::Route53::RecordSet
Properties:
HostedZoneId: Z3AADJGX6KTTL2
Name: sap.example.com.
Type: CNAME
TTL: 60
ResourceRecords:
- sap-alb-1234567890.elb.amazonaws.comRefer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:StartInstances",
"ec2:StopInstances",
"ec2:RebootInstances"
],
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/i-0abcdef1234567890"
},
{
"Effect": "Allow",
"Action": [
"ec2:DescribeInstances"
],
"Resource": "*"
}
]
}Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "ec2:CreateSnapshot",
"Resource": "arn:aws:ec2:us-east-1:123456789012:volume/*",
"Condition": {
"StringLike": {
"ec2:ResourceTag/Name": "SAP-HANA-*"
}
}
}
]
}