PAS-C01 Operations and Maintenance Practice Test 12 — 15 Questions

Question 1

An SAP administrator notices that the sapstartsrv process on an EC2 instance is failing to start after a system reboot. The instance is running SUSE Linux Enterprise Server (SLES) for SAP Applications. Which of the following log files should be examined FIRST to diagnose the issue?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

/usr/sap//SYS/global/sapstartsrv.log. The sapstartsrv process is the SAP Start Service that manages the lifecycle of SAP instances. Its own diagnostic output is written to a dedicated log file located at /usr/sap//SYS/global/sapstartsrv.log. When sapstartsrv fails to start, this log contains the most direct and detailed error messages, such as missing directories, permission issues, or configuration problems specific to the SAP start service. Therefore, it should be examined first to quickly pinpoint the root cause.

Answer

/var/log/messages

Answer

SAP HANA studio trace files

Answer

Amazon CloudWatch logs for the instance

Question 2

An SAP administrator is setting up monitoring for SAP HANA using Amazon CloudWatch. Which TWO metrics are available from the SAP HANA CloudWatch integration?

Accepted Answer

Memory Usage. Options D and E are correct because the SAP HANA CloudWatch integration publishes host-level resource metrics such as Memory Usage and Disk Usage, which are collected by the CloudWatch agent/API and exposed as standard CloudWatch metrics for alarming and dashboards. Memory Usage is essential for detecting HANA memory pressure (e.g., against the global_allocation_limit), and Disk Usage is critical for monitoring data/log volume consumption that can halt HANA if exhausted. Options A, B, and C are not part of the standard SAP HANA CloudWatch metric set: SQL Queries per Second, Active Connections, and Average Response Time are database-internal performance indicators typically surfaced through SAP HANA's own monitoring views (e.g., M_SERVICE_STATISTICS, M_CONNECTIONS) or SAP Solution Manager/Focus, not the CloudWatch integration.

Answer

Number of SQL Queries per Second

Answer

Number of Active Connections

Answer

Average Response Time

Question 3

Which TWO of the following are best practices for operating SAP HANA on AWS?

Accepted Answer

Deploy SAP HANA in a Multi-AZ configuration for high availability.. Option A is correct because deploying SAP HANA in a Multi-AZ configuration provides high availability by replicating data across Availability Zones, enabling automatic failover with SAP HANA System Replication and AWS services like an overlay IP or Route 53 health checks. Option B is correct because EBS snapshots provide a durable, point-in-time backup mechanism for HANA data and log volumes, and AWS Backint Agent or native snapshot tools can coordinate them with HANA's backup APIs for consistency. Option C is not recommended because SAP HANA requires high-IOPS, low-latency storage such as Provisioned IOPS SSD (io1/io2) or, for certified instances, specific gp3 configurations; gp2 is not a supported best practice for HANA data files. Option D is incorrect because stopping HANA is unnecessary and disruptive; backups should be taken online using HANA's backup tools (e.g., BACKUP DATA) or storage snapshots coordinated with the database. Option E is incorrect because disabling swap is not a SAP HANA on AWS best practice; SAP and AWS guidance addresses swap configuration (often recommending it be sized appropriately or disabled per SAP notes), but it is not one of the two key operational best practices listed here.

Answer

Use General Purpose SSD (gp2) volumes for HANA data files.

Answer

Stop the HANA instance during backup to ensure consistency.

Answer

Disable swap space to improve performance.

Question 4

Refer to the exhibit. An SAP administrator is creating an IAM policy for an automated backup script that creates EBS snapshots of SAP HANA volumes. The script also needs to tag the snapshots. However, when the script runs, it fails with an authorization error. What is the missing permission?

Accepted Answer

kms:Encrypt. The correct option is B (kms:Encrypt) because EBS snapshots of SAP HANA volumes are encrypted with a customer-managed KMS key, and creating an encrypted snapshot requires the script's IAM principal to have kms:Encrypt (along with kms:CreateGrant/GenerateDataKey) on that key; without it, the CreateSnapshot call fails with an authorization error. Option A (ec2:DescribeSnapshots) is only a read permission and would not cause a create-time authorization failure, option C (ec2:ModifySnapshotAttribute) governs sharing/modifying snapshot permissions rather than creating them, and option D (ec2:DeleteSnapshot) is unrelated to snapshot creation and tagging.

Answer

ec2:DescribeSnapshots

Answer

ec2:ModifySnapshotAttribute

Answer

ec2:DeleteSnapshot

Question 5

Refer to the exhibit. An SAP administrator is configuring Route 53 to point a custom domain name to an Application Load Balancer (ALB) that fronts SAP Web Dispatchers. The record set is configured as shown. However, when users access sap.example.com, they receive a 503 error. What is the MOST likely cause?

Accepted Answer

The security group for the ALB is not allowing inbound traffic on port 443 from the internet.. A 503 error from an ALB typically indicates that the ALB is not receiving traffic or that the target group is unhealthy. However, in this scenario, the correct answer is B: the security group for the ALB is not allowing inbound traffic on port 443 from the internet. Without that rule, the ALB cannot accept HTTPS requests, resulting in a 503. EvaluateTargetHealth being true (Option A) is a correct configuration for alias records and does not cause a 503. The Alias Target (Option C) is correctly set to the ALB's DNS name; 'dualstack' is part of that DNS name and is legitimate. A failing target group health check (Option D) would cause a 503, but the question specifies that users receive 503 when accessing the domain, and the most likely cause given the exhibit is the missing security group rule on the ALB.

Answer

The EvaluateTargetHealth is set to true, which is causing the record to be marked as unhealthy.

Answer

The Alias Target is incorrect; it should be the ALB's DNS name without 'dualstack'.

Answer

The health check for the ALB target group is failing, causing Route 53 to return 503.

Question 6

A company is running a production SAP HANA database on an r5.4xlarge EC2 instance with EBS-backed storage. The operations team notices that the database checkpoint writes are frequently slow, causing application performance degradation. The team has already increased the EBS IOPS and throughput. What should the team do next to improve checkpoint write performance?

Accepted Answer

Modify the Linux I/O scheduler to 'noop' and ensure the EBS-optimized instance attribute is enabled.. For SAP HANA on AWS, checkpoint write performance is heavily influenced by the Linux I/O scheduler and EBS optimization. The 'noop' scheduler is recommended for SSD-backed EBS volumes because it reduces CPU overhead by not reordering I/O requests, which is unnecessary for fast storage. Additionally, ensuring the EBS-optimized instance attribute is enabled provides dedicated bandwidth to EBS, preventing network contention from impacting storage throughput. Since the team already increased IOPS and throughput, these next steps address the remaining bottlenecks.

Answer

Change the EBS volume type from io1 to gp2 for higher throughput.

Answer

Disable SAP HANA checkpoint compression to reduce CPU overhead.

Answer

Increase the EBS volume size to gain additional baseline IOPS.

Question 7

A company runs SAP S/4HANA in a multi-AZ deployment with a primary and standby database. During a planned failover test, the database fails over but the SAP system becomes unresponsive. Investigation reveals that the SAP application servers cannot connect to the new primary database because the database VIP is not updated. What is the most likely cause?

Accepted Answer

The HANA database VIP is not configured to move to the new primary instance during failover.. The database VIP (Virtual IP) is a floating IP address that should move with the primary database instance during failover. If the VIP is not configured to move, the SAP application servers will continue to connect to the old IP address, which is now inactive, causing the SAP system to become unresponsive. This is a common misconfiguration in high-availability setups.

Answer

The HANA instance number changed after failover.

Answer

The DNS record for the HANA host still points to the old primary IP address.

Answer

The HANA hostname in the SAP profile is set to the physical instance hostname instead of the VIP.

Question 8

A company has an SAP HANA database running on an EC2 instance with EBS volumes. The operations team needs to ensure that database backups are stored in Amazon S3 and are automatically deleted after 90 days. What is the most efficient way to achieve this?

Accepted Answer

Configure an S3 Lifecycle policy to expire objects after 90 days.. S3 Lifecycle policies are the native, server-side mechanism to automatically transition or expire objects after a defined period, requiring no custom code or manual intervention. Configuring an expiration rule of 90 days on the target prefix or bucket achieves the requirement efficiently and reliably. This is the most operationally efficient and cost-effective approach.

Answer

Use S3 Object Lock with a retention period of 90 days.

Answer

Enable S3 Versioning and delete old versions manually.

Answer

Write a script that runs daily to list backups older than 90 days and delete them.

Question 9

An SAP administrator needs to restore an SAP HANA database from a backup stored in Amazon S3. The backup was created using AWS Backup. What is the required IAM permission for the restore operation?

Accepted Answer

s3:GetObject. The correct option is B, s3:GetObject, because restoring a backup stored in Amazon S3 requires reading (downloading) the backup objects from the S3 bucket, which is authorized by the s3:GetObject permission. AWS Backup restore operations for SAP HANA retrieve the backup data from S3, so the IAM role or user performing the restore must have s3:GetObject on the relevant bucket/objects. Option A, kms:Decrypt, may be needed if the backup is encrypted with a KMS key, but it is not the permission that grants access to the S3-stored backup itself. Option C, s3:PutObject, is for writing objects to S3, which applies to backup creation rather than restore. Option D, ec2:DescribeInstances, is unrelated to reading backup data from S3 and does not authorize the restore.

Answer

kms:Decrypt

Answer

s3:PutObject

Answer

ec2:DescribeInstances

Question 10

A company is running SAP Business Suite on AWS with a Microsoft SQL Server database. The operations team needs to implement automated database backups with point-in-time recovery. Which AWS service should be used to achieve this?

Accepted Answer

AWS Backup. AWS Backup is a fully managed backup service that centralizes and automates backups across AWS services, including SAP HANA and SQL Server on EC2. It supports point-in-time recovery (PITR) for supported databases and provides backup policies, retention rules, and cross-region/cross-account copies. For SAP Business Suite on AWS with SQL Server, AWS Backup can be used to orchestrate application-consistent backups via VSS, enabling PITR.

Answer

AWS Storage Gateway

Answer

AWS Database Migration Service (DMS)

Answer

Amazon RDS for SQL Server

Question 11

An SAP system running on AWS is experiencing high memory utilization on the application server. The team suspects a memory leak in the SAP ABAP application. Which tool or process should be used to identify the root cause?

Accepted Answer

Run SAP transaction STAD to analyze memory consumption per user and program.. SAP transaction STAD (Statistics Display) provides detailed performance statistics including memory consumption per user, program, and transaction on the ABAP application server. It is the standard tool for analyzing ABAP-level memory usage and identifying which programs or users are consuming excessive memory, making it the correct choice for diagnosing a suspected ABAP memory leak.

Answer

Use the Linux 'top' command to identify the process consuming the most memory.

Answer

Use SAP HANA Studio to check memory consumption of the database.

Answer

Enable detailed CloudWatch memory metrics on the EC2 instance.

Question 12

Which THREE of the following are best practices for operating an SAP HANA database on AWS in a production environment?

Accepted Answer

Ensure the EC2 instance is EBS-optimized.. Option B is correct because EBS-optimized EC2 instances provide dedicated bandwidth between the instance and attached EBS volumes, which is essential for meeting SAP HANA's demanding storage throughput and latency requirements in production. Option C is correct because SAP HANA best practices require separating data and log files onto distinct EBS volumes so that log writes are not contended by data I/O, preserving low write latency for the redo log and enabling independent sizing, snapshotting, and tuning of each volume type (e.g., gp3/io2 for data, io2 for logs). Option E is correct because striping multiple EBS volumes with LVM or RAID 0 aggregates IOPS and throughput across volumes, which is the recommended way to achieve the high disk performance SAP HANA needs for its data and log areas on AWS. Option A is not appropriate because SAP HANA production systems on AWS should not rely on instance-store swap; SAP recommends sizing memory so swapping is avoided, and instance-store is ephemeral and unsuitable for production swap. Option D is incorrect because consolidating data and logs on a single EBS volume creates I/O contention, prevents independent performance tuning and snapshot strategies, and violates SAP HANA storage best practices.

Answer

Configure a swap partition on the instance store.

Answer

Use a single large EBS volume for both data and logs to simplify management.

Question 13

Which TWO of the following AWS services can be used to create and manage SAP system backups in an automated manner?

Accepted Answer

AWS Backup. AWS Backup (A) is correct because it is a fully managed backup service that centralizes and automates backups of AWS resources such as EBS volumes, RDS databases, EFS, and FSx for SAP workloads, using backup plans, schedules, and retention policies. AWS Systems Manager (C) is correct because its Automation runbooks and Maintenance Windows can orchestrate scheduled, automated backup tasks for SAP systems, including invoking scripts or AWS Backup jobs on EC2 instances and databases. AWS CloudTrail (B) is not a backup service; it only records API activity and audit logs. AWS Lambda (D) is a compute service that can run backup code but does not itself create or manage backups in an automated manner. AWS CloudFormation (E) is an infrastructure-as-code provisioning service and does not provide backup creation or management capabilities.

Answer

AWS CloudTrail

Answer

AWS Lambda

Answer

AWS CloudFormation

Question 14

Refer to the exhibit. An SAP administrator has created this IAM policy for a backup user. The user can list and download backups but cannot delete them. However, the user is unable to list the objects in the bucket. What is the most likely cause?

Accepted Answer

There is an additional bucket policy that denies s3:ListBucket to this user.. The IAM policy shown grants s3:ListBucket permission on the bucket, so the user should be able to list objects. However, the user cannot list objects, indicating an additional bucket policy explicitly denies s3:ListBucket for this user. Bucket policies override IAM permissions when a Deny is present. Option A is incorrect because the policy does include s3:ListBucket. Option C is incorrect because s3:GetObjectVersion is not required to list objects. Option D is incorrect because the Deny statement only affects s3:DeleteObject, not s3:ListBucket.

Answer

The IAM policy does not include s3:ListBucket for the bucket.

Answer

The user needs s3:GetObjectVersion permission to list objects.

Answer

The Deny statement also denies s3:ListBucket because of the wildcard resource.

Question 15

Refer to the exhibit. An SAP administrator has created this CloudFormation snippet to create a Route 53 record for an SAP system. The record is intended to point to an Application Load Balancer. What is a potential issue with this configuration?

Accepted Answer

Using a CNAME record for the root domain (zone apex) is not allowed.. A CNAME record cannot be created at the zone apex (the root domain, e.g., example.com) because the apex must contain SOA and NS records, and CNAME records cannot coexist with any other record type at the same name per RFC 1034/2181. For an ALB pointing to the zone apex, AWS requires an Alias record (A or AAAA) instead of a CNAME. The snippet's use of a CNAME at the root domain is therefore invalid.

Answer

The TTL value of 60 seconds is too low for production use.

Answer

The RecordSet type should be A instead of CNAME for an ALB.

Answer

The ResourceRecords value should be an IP address, not a DNS name.