PAS-C01 Operations and Maintenance Practice Test 10 — 15 Questions

Question 1

A company is running SAP S/4HANA on AWS with an RDS for SAP HANA database. The operations team needs to perform a minor version upgrade of the database. They want to minimize downtime and ensure that the upgrade can be rolled back if needed. What should they do?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Take a manual snapshot before the upgrade, then perform the upgrade.. Taking a manual snapshot before the upgrade provides a point-in-time backup that can be restored if the upgrade fails, enabling a rollback. RDS minor version upgrades are typically performed with minimal downtime (usually a few minutes). Option B is incorrect because enabling Multi-AZ does not provide a rollback mechanism; it only provides high availability during the upgrade. Option C is incorrect because the clone feature is specific to SAP HANA native tools, not RDS; RDS for SAP HANA does not support cloning for version upgrades. Option D is incorrect because creating a read replica does not facilitate rollback of the primary instance; read replicas are used for read scaling and cannot be used to revert an upgrade on the source.

Answer

Enable Multi-AZ, then perform the upgrade.

Answer

Use the clone feature of SAP HANA to create a copy.

Answer

Create a read replica, promote it after the upgrade.

Question 2

An SAP system on AWS uses a shared file system for the SAP transport directory. The file system is hosted on an Amazon EFS file system. Recently, the operations team noticed that SAP transports are failing with errors indicating file locking issues. The EFS file system is mounted using the NFS client with default options. What is the most likely cause of the file locking issues?

Accepted Answer

The EFS file system is mounted using NFS version 3, which has limited locking support.. Amazon EFS supports NFSv4.1 by default, and NFSv3 has weaker, byte-range locking semantics that frequently break SAP transport locking. SAP's transport directory relies on strict file locking (tp/TPPARA lock mechanisms), so mounting EFS with NFSv3 causes the observed lock failures. The fix is to mount with NFSv4.1, which EFS supports and which provides proper locking behavior.

Answer

The EFS file system has insufficient throughput for the number of concurrent mounts.

Answer

The security group for the EFS mount targets does not allow inbound traffic on port 2049.

Answer

The EFS file system is using access points that restrict permissions.

Question 3

A company has an SAP HANA database running on an EC2 instance with multiple EBS volumes striped using LVM. The database is experiencing high latency during peak hours. Monitoring shows that the EBS volumes have a high Average Queue Length (avgqueue) and are frequently hitting the IOPS limit. The volumes are gp2 with 3000 IOPS each. The operations team wants to improve performance without increasing storage size. What should they do?

Accepted Answer

Change the volume type to gp3 and increase the IOPS and throughput.. The gp2 volumes are capped at 3000 IOPS each and are hitting that limit, causing high avgqueue. Migrating to gp3 allows independent configuration of IOPS (up to 16,000 per volume) and throughput (up to 1,000 MB/s) without increasing storage size, directly resolving the bottleneck.

Answer

Change the volume type to io2 Block Express with higher IOPS.

Answer

Migrate the database to an instance store-backed instance.

Answer

Add more gp2 volumes to the LVM stripe set.

Question 4

A company runs SAP ERP on AWS with a two-tier architecture: application and database on the same EC2 instance. The instance is part of an Auto Scaling group with a minimum of 1 and maximum of 1, so it's effectively a single instance. The operations team wants to implement a patching strategy for the operating system that minimizes downtime. They need to apply security patches quarterly. Which approach should they take?

Accepted Answer

Use AWS Systems Manager Automation to create a new AMI, launch a new instance, and update the DNS record.. The best approach for minimizing downtime when patching a single-instance SAP ERP system on AWS. Using AWS Systems Manager Automation to create a new AMI, launch a new instance, and update the DNS record allows a controlled replacement with minimal downtime, as the new instance is fully prepared before switching traffic. Option A (Patch Manager) applies patches in-place, which still requires a reboot and thus downtime. Option C (creating a second instance in the Auto Scaling group) is not feasible because the architecture is two-tier (application and database on same instance), and simply adding a second instance without proper data synchronization would cause data inconsistency. Option D (in-place yum update and reboot) also requires downtime and does not provide a rollback mechanism.

Answer

Use AWS Systems Manager Patch Manager to apply patches during a maintenance window.

Answer

Create a second instance in the Auto Scaling group and detach the original.

Answer

Apply patches in-place using yum update and reboot the instance.

Question 5

A company has an SAP HANA database running on an RDS for SAP HANA instance. The operations team wants to automate the backup process and retain backups for 90 days. Which AWS service should they use?

Accepted Answer

AWS Backup. AWS Backup is the correct service because it provides a centralized, policy-based backup solution that can automate backups for RDS for SAP HANA and other AWS services, with retention settings up to 90 days or more. It simplifies compliance by allowing backup plans with lifecycle rules and cross-region/cross-account copies. RDS automated backups alone do not offer the same centralized management and long-term retention flexibility.

Answer

RDS automated backups

Answer

Amazon S3 lifecycle policies

Answer

AWS Storage Gateway

Question 6

An SAP system on AWS uses a Multi-AZ deployment for the database layer with synchronous replication. The application servers are in the same region but different Availability Zones. During a recent failure of the primary database instance, the automatic failover to the standby instance took longer than expected, exceeding the RTO of 5 minutes. Upon investigation, the team finds that the standby instance was not fully synchronized at the time of failure. What could be the cause?

Accepted Answer

The network latency between the Availability Zones is high.. High network latency between Availability Zones can delay synchronous replication, causing the standby to lag behind the primary. When failover occurs, the standby may not have all committed transactions, and the failover process must wait or reconcile, extending recovery time beyond the RTO. This directly explains the incomplete synchronization and slow failover.

Answer

The EBS volumes on the standby instance have lower IOPS than the primary.

Answer

The Multi-AZ configuration uses a single network interface.

Answer

The security groups on the standby instance block replication traffic.

Question 7

A company runs SAP on AWS and uses an Application Load Balancer (ALB) to distribute traffic to a fleet of EC2 instances running SAP Web Dispatcher. The ALB has a target group with health checks configured on port 8080. Recently, the operations team noticed that some instances are being deregistered due to health check failures. The instances are healthy and the Web Dispatcher is running. The health check response time is consistently below 2 seconds. What is the most likely cause?

Accepted Answer

The health check interval is too short, causing the threshold to be exceeded.. A health check interval that is too short can cause the threshold to be exceeded even though the instances are healthy. If the interval is set very low, the ALB may send health checks more frequently than the instance can respond, leading to occasional timeouts or failures that accumulate and cross the unhealthy threshold. Option B is incorrect because the ALB health checks originate from the ALB's own subnet IPs, not from the internet, so a security group blocking internet traffic would not affect health checks. Option C is incorrect because memory exhaustion would typically cause application-level failures, not health check failures on port 8080 if Web Dispatcher is still running. Option D is incorrect because an incorrect health check path would cause all health checks to fail consistently, not just some instances intermittently.

Answer

The security group for the instances blocks inbound traffic from the internet.

Answer

The instances are running out of memory.

Answer

The health check path is incorrect.

Question 8

A company runs a critical SAP application on an SAP HANA database on AWS. The database is backed up daily to Amazon S3. The company needs to ensure that the database can be restored to a point in time within the last 24 hours with minimal data loss. Which AWS service should be used to achieve this requirement?

Accepted Answer

Use AWS Backup with the SAP HANA backup plan.. AWS Backup provides a managed backup service for SAP HANA databases, supporting automated backups and point-in-time recovery (PITR) within a specified retention period. Option A is incorrect because S3 Object Versioning protects against accidental deletion but does not provide database-level point-in-time recovery. Option B is incorrect because Amazon Data Lifecycle Manager (DLM) is designed for managing EBS snapshots, not for SAP HANA database backups. Option D is incorrect because Amazon RDS is a managed relational database service and does not support SAP HANA.

Answer

Enable S3 Object Versioning on the backup bucket.

Answer

Configure Amazon Data Lifecycle Manager (DLM) for EBS snapshots.

Answer

Use Amazon RDS automated backups.

Question 9

A company runs SAP S/4HANA in a multi-AZ deployment with a standby database in a different Availability Zone. The primary database fails. What is the expected behavior of the SAP HANA system replication?

Accepted Answer

The standby database automatically takes over as the new primary.. In SAP HANA system replication with a standby database in a different Availability Zone, when the primary database fails, the standby database automatically takes over as the new primary. This is the expected behavior of SAP HANA system replication in a multi-AZ deployment, providing high availability and automatic failover.

Answer

A new standby database is automatically provisioned in the same AZ.

Answer

The primary database is automatically restarted in the same AZ.

Answer

The administrator must manually promote the standby database.

Question 10

An SAP system is running on AWS with a Multi-AZ RDS for SAP HANA database. The operations team notices that the database failover test takes longer than expected. What is the most likely cause of the prolonged failover time?

Accepted Answer

The application caches the DNS name of the database. Multi-AZ failover involves DNS propagation. If the application caches the DNS resolution, it may continue to point to the old primary, causing delays until the cache expires. Database instance size, storage type, and VPC configuration do not directly affect failover time.

Answer

The VPC does not have DNS resolution enabled

Answer

The RDS instance uses General Purpose SSD storage

Answer

The database instance size is too small

Question 11

An operations team needs to automate the patching of EC2 instances running SAP applications. The instances are part of an Auto Scaling group. The team wants to apply patches without causing downtime to the SAP system. Which approach should they use?

Accepted Answer

Use AWS Systems Manager Patch Manager with a maintenance window and configure the Auto Scaling group to perform a rolling update. AWS Systems Manager Patch Manager can be integrated with an Auto Scaling group to perform a rolling update, which updates instances in batches, ensuring that the SAP application remains available throughout the patching process. This approach minimizes downtime by replacing or updating instances incrementally rather than all at once, which is critical for SAP systems that require high availability.

Answer

Use AWS Systems Manager Patch Manager with a maintenance window that patches all instances simultaneously

Answer

Use AWS CodeDeploy to deploy patches as a new application version

Answer

Use AWS OpsWorks to manage patching, configuring a rolling update

Question 12

An operations team needs to back up the SAP HANA database running on an EC2 instance. The database is 1 TB in size and the team wants to minimize backup time and cost. Which backup strategy should they use?

Accepted Answer

Use AWS Backup to create EBS snapshots of the attached EBS volumes. EBS snapshots provide point-in-time backups that are incremental after the first full snapshot, reducing backup time and cost. HANA Studio backup to S3 requires more manual steps and is slower. AWS Backup can be used but EBS snapshots are more direct. S3 lifecycle policies are for object management, not database backups.

Answer

Use SAP HANA Studio to back up the database to Amazon S3

Answer

Use Amazon S3 lifecycle policies to move old backups to Glacier

Answer

Use AWS Systems Manager to run a script that copies data to S3

Question 13

A company runs SAP on AWS and uses AWS Direct Connect for on-premises connectivity. The operations team notices that the SAP system is experiencing high latency when accessing an on-premises database. The network team confirms that the Direct Connect link is not saturated. What is the most likely cause of the high latency?

Accepted Answer

The traffic is traversing a transit VPC with additional NAT instances. The most likely cause of high latency when the Direct Connect link is not saturated is that traffic is traversing a transit VPC with additional NAT instances. NAT instances introduce processing overhead and potential bottlenecks, adding latency. This is a common architectural misconfiguration in SAP on AWS deployments where transit VPCs are used for connectivity but not optimized for performance.

Answer

The Direct Connect link is using a public VIF instead of a private VIF

Answer

The Direct Connect bandwidth is insufficient

Answer

The on-premises network is using a VPN over the Direct Connect link

Question 14

An SAP system on AWS uses a shared file system with Amazon EFS. The operations team notices that file operations have high latency during peak hours. The EFS file system is configured with Bursting Throughput mode. The team monitors the CloudWatch metric PercentIOLimit and sees it consistently at 100%. What should the team do to improve performance?

Accepted Answer

Change the file system to Provisioned Throughput mode. The CloudWatch metric PercentIOLimit at 100% indicates that the file system is consistently hitting its IOPS limit. In Bursting Throughput mode, EFS throughput scales with file system size, and burst credits are consumed during high activity. When credits are exhausted, performance drops to baseline. Switching to Provisioned Throughput mode allows the team to specify a throughput level independent of file system size, providing consistent performance during peak hours.

Answer

Enable encryption at rest for the file system

Answer

Change the performance mode to General Purpose

Answer

Increase the size of the file system by adding more files

Question 15

An operations team is troubleshooting an issue where an SAP application is unable to connect to an RDS for SQL Server database. The database is in a private subnet, and the application is in a public subnet. Which TWO actions should the team take to resolve the connectivity issue? (Choose TWO.)

Accepted Answer

Modify the security group for the database to allow inbound traffic from the application's security group. The application and database are in the same VPC, so the VPC's local route already provides network connectivity between subnets. No additional routes are needed. The only required action is to modify the database's security group to allow inbound traffic from the application's security group. Options A and B are unnecessary because both subnets are within the same VPC. Option C would not help because traffic originates from the application subnet, not the database subnet. Option E is not needed because the local route already handles inter-subnet traffic.

Answer

Attach an internet gateway to the VPC

Answer

Create a VPC peering connection between the application and database subnets

Answer

Add a route to the route table of the database's subnet that directs traffic to the application's subnet

Answer

Add a route to the route table of the application's subnet that directs traffic to the database subnet