PAS-C01 Operations and Maintenance Practice Test 11 — 15 Questions

Question 1

An SAP administrator runs the CLI commands shown in the exhibit for a production EC2 instance. The output indicates that the instance is running but the system status is impaired. Which action should the administrator take to recover the instance?

Accepted Answer

Configure EC2 Auto Recovery and wait for recovery.. Option D is correct because EC2 Auto Recovery can automatically recover an instance when system status is impaired. Option A is wrong because the instance is already running. Option B is wrong because rebooting might not fix underlying hardware issues. Option C is wrong because stopping and starting moves the instance to new hardware, which is similar to recovery, but EC2 Auto Recovery is the automated solution.

Answer

Reboot the instance using the AWS console.

Answer

Restart the SAP application services.

Answer

Stop and start the instance.

Question 2

An SAP administrator is troubleshooting connectivity between an SAP application server (security group sg-12345) and an SAP HANA database server. The inbound rule on the database security group is shown in the exhibit. Which additional configuration is required for the application server to communicate with the database?

Accepted Answer

Modify the network ACL to allow inbound traffic on port 3300.. Option A is correct because the rule references the source security group, but the direction is inbound; the database needs an inbound rule allowing traffic from sg-12345. Without that, traffic is blocked. Option B is wrong because the rule already references sg-12345. Option C is wrong because NACLs are stateless and need both inbound and outbound rules, but the question is about security group. Option D is wrong because the application server needs an outbound rule, not inbound.

Answer

Add an inbound rule allowing traffic from the application server's IP address.

Answer

Add an inbound rule to the application server's security group.

Answer

No additional rule is needed; the rule allows traffic from sg-12345.

Question 3

A company runs an SAP HANA database on an EC2 instance with EBS volumes. The operations team notices increased latency and I/O errors. Which AWS service should they use to analyze performance and identify bottlenecks?

Accepted Answer

Amazon CloudWatch. Option B is correct because Amazon CloudWatch provides metrics and logs to monitor EC2 and EBS performance. Option A (AWS Trusted Advisor) gives recommendations but not real-time performance data. Option C (AWS Config) tracks configuration changes, not performance. Option D (AWS Service Catalog) manages service portfolios, not monitoring.

Answer

AWS Config

Answer

AWS Service Catalog

Answer

AWS Trusted Advisor

Question 4

An SAP system is running on EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). The SAP application logs indicate intermittent timeouts. The operations team has enabled detailed CloudWatch metrics for the ALB. Which metric should they analyze to determine if the ALB is the cause of the timeouts?

Accepted Answer

RequestCount per target. Option D is correct because `RequestCount` per target helps identify if traffic is unbalanced. Option A (`HealthyHostCount`) shows health status but not request distribution. Option B (`TargetResponseTime`) indicates latency but not directly timeouts. Option C (`HTTPCode_ELB_5XX`) shows ALB errors but not per-target imbalance.

Answer

HTTPCode_ELB_5XX

Answer

HealthyHostCount

Answer

TargetResponseTime

Question 5

A company is migrating an SAP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS) instance. Which AWS service is best suited for this?

Accepted Answer

Amazon RDS Multi-AZ deployment. Option A is correct because a Multi-AZ deployment of Amazon RDS provides automatic failover for the ASCS database. Option B (EC2 Auto Scaling) is for horizontal scaling, not for stateful services. Option C (Amazon Route 53 routing policy) can redirect traffic but doesn't ensure instance availability. Option D (Amazon S3) is for storage, not high-availability failover.

Answer

EC2 Auto Scaling group

Answer

Amazon Route 53 weighted routing policy

Answer

Amazon S3 cross-region replication

Question 6

An SAP on AWS environment uses a shared file system with Amazon EFS. The operations team reports slow performance during peak hours. Which configuration change would most likely improve throughput?

Accepted Answer

Enable Bursting Throughput. Option B is correct because enabling Bursting Throughput on EFS allows higher throughput for short bursts. Option A (changing to General Purpose performance mode) is already default; Max I/O mode is for throughput but not bursting. Option C (increasing provisioned throughput) increases cost but may help, but bursting is more cost-effective. Option D (enabling encryption) does not affect performance.

Answer

Enable encryption at rest

Answer

Increase provisioned throughput

Answer

Change the performance mode to Max I/O

Question 7

An SAP system is running on EC2 instances in a VPC. The security team requires that all traffic between the SAP application and database tiers be encrypted in transit. Which solution meets this requirement with minimal latency?

Accepted Answer

Use security groups to allow traffic only between the instances, with IPsec configured. Option C is correct because using an Application Load Balancer with TLS termination at the application tier adds latency and complexity. Option A (AWS VPN) is for site-to-site, not internal. Option B (TLS certificates on each instance) adds CPU overhead for encryption. Option D is correct because using security groups with IPsec is not possible natively; IPsec requires VPN or Transit Gateway.

Answer

Use an AWS Site-to-Site VPN connection between the tiers

Answer

Use an Application Load Balancer with TLS termination in front of the database tier

Answer

Install TLS certificates on each EC2 instance and enable HTTPS

Question 8

An SAP system administrator needs to automate the patching of SAP applications on EC2 instances. Which AWS service should they use?

Accepted Answer

AWS Systems Manager Patch Manager. Option B is correct because AWS Systems Manager Patch Manager automates patching for managed instances. Option A (AWS OpsWorks) is for Chef/Puppet, not specifically for patching. Option C (AWS Config) is for configuration compliance. Option D (Amazon Inspector) is for vulnerability assessment.

Answer

Amazon Inspector

Answer

AWS OpsWorks

Answer

AWS Config

Question 9

An SAP HANA database is experiencing high memory utilization. The operations team needs to determine if the database is using more memory than allocated. Which CloudWatch metric should they monitor?

Accepted Answer

MemoryUtilization. Option D is correct because `MemoryUtilization` is a custom metric typically published by the SAP HANA agent. Option A is not a standard metric name. Option B (`SwapUsage`) shows swap, not memory. Option C (`CPUUtilization`) is for CPU.

Answer

SwapUsage

Answer

CPUUtilization

Answer

HANA_Memory_Usage

Question 10

An SAP system uses a large Amazon RDS for Oracle instance. The operations team wants to minimize downtime during a major version upgrade. Which strategy should they use?

Accepted Answer

Create a read replica, upgrade it, and then promote it to the primary. Option B is correct because using a read replica allows you to upgrade the replica and then promote it, minimizing downtime. Option A (taking a snapshot and restoring) has downtime. Option C (modifying the DB instance) causes downtime. Option D (using AWS DMS) requires complex setup and may introduce latency.

Answer

Take a snapshot of the database and restore it as a new instance with the upgraded version

Answer

Modify the DB instance and apply the upgrade immediately

Answer

Use AWS Database Migration Service (DMS) to migrate to a new instance

Question 11

A company is running SAP on AWS and wants to send alerts when the CPU utilization of an EC2 instance exceeds 90% for 5 minutes. Which AWS service should be used to create this alarm?

Accepted Answer

Amazon CloudWatch Alarms. Option A is correct because Amazon CloudWatch Alarms can trigger based on metrics. Option B (AWS Lambda) can be a target, not the alarm service. Option C (Amazon SNS) is a notification service. Option D (AWS Config) is for configuration rules.

Answer

AWS Lambda

Answer

AWS Config

Answer

Amazon Simple Notification Service (SNS)

Question 12

An SAP system administrator needs to perform a backup of an SAP HANA database running on EC2. Which TWO AWS services can be used together to create consistent backups? (Choose TWO.)

Accepted Answer

Amazon EBS snapshots. Option A (AWS Backup) can orchestrate backups, and Option D (Amazon EBS snapshots) capture block-level data. Option B (Amazon S3) is not for database backup directly. Option C (AWS Storage Gateway) is for hybrid storage. Option E (AWS CloudFormation) is for infrastructure as code.

Answer

Amazon S3

Answer

AWS CloudFormation

Answer

AWS Storage Gateway

Question 13

An SAP system on AWS is experiencing performance degradation. The operations team suspects a network bottleneck. Which THREE metrics should they analyze in CloudWatch to diagnose the issue? (Choose THREE.)

Accepted Answer

NetworkOut. Option A (NetworkIn), Option C (NetworkOut), and Option D (NetworkPacketsIn) are standard EC2 network metrics. Option B (DiskReadOps) is storage-related. Option E (CPUUtilization) is compute-related.

Answer

CPUUtilization

Answer

DiskReadOps

Question 14

Which TWO actions should be taken to ensure high availability for an SAP NetWeaver system on AWS? (Choose TWO.)

Accepted Answer

Assign Elastic IP addresses to the instances for failover. Option A (using a Multi-AZ RDS instance) provides database HA. Option C (deploying ASCS in an Auto Scaling group) is not recommended because ASCS is stateful. Option D (using Elastic IP addresses) allows IP remapping. Option B (placing instances in a single AZ) reduces HA. Option E (using spot instances) risks interruption.

Answer

Place all EC2 instances in a single Availability Zone

Answer

Use Amazon EC2 Spot Instances for cost savings

Answer

Deploy the ASCS instance in an Auto Scaling group

Question 15

A company runs an SAP HANA database on AWS. The operations team wants to automate the monitoring of HANA alert logs and send notifications when critical alerts occur. Which AWS service should they use to collect and analyze the logs?

Accepted Answer

Amazon CloudWatch Logs with metric filters and alarms. Amazon CloudWatch Logs can ingest HANA alert logs via the CloudWatch agent and trigger alarms based on metric filters. CloudTrail records API activity, not application logs. S3 Event Notifications do not analyze log content. Lambda alone does not provide log collection.

Answer

AWS CloudTrail

Answer

Amazon S3 Event Notifications

Answer

AWS Lambda scheduled functions