PAS-C01 Operations and Maintenance Practice Test 19 — 15 Questions

Question 1

A company runs SAP ERP on AWS with a two-tier architecture: application and database on the same EC2 instance. The instance is part of an Auto Scaling group with a minimum of 1 and maximum of 1, so it's effectively a single instance. The operations team wants to implement a patching strategy for the operating system that minimizes downtime. They need to apply security patches quarterly. Which approach should they take?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use AWS Systems Manager Automation to create a new AMI, launch a new instance, and update the DNS record.. The best approach for minimizing downtime when patching a single-instance SAP ERP system on AWS. Using AWS Systems Manager Automation to create a new AMI, launch a new instance, and update the DNS record allows a controlled replacement with minimal downtime, as the new instance is fully prepared before switching traffic. Option A (Patch Manager) applies patches in-place, which still requires a reboot and thus downtime. Option C (creating a second instance in the Auto Scaling group) is not feasible because the architecture is two-tier (application and database on same instance), and simply adding a second instance without proper data synchronization would cause data inconsistency. Option D (in-place yum update and reboot) also requires downtime and does not provide a rollback mechanism.

Answer

Use AWS Systems Manager Patch Manager to apply patches during a maintenance window.

Answer

Create a second instance in the Auto Scaling group and detach the original.

Answer

Apply patches in-place using yum update and reboot the instance.

Question 2

An SAP system uses a Network Load Balancer (NLB) to distribute traffic to SAP application servers. The application servers are in private subnets. The operations team notices that the health checks are failing for one of the application servers. The health check is configured to use TCP on port 3200. The application server's security group allows inbound traffic on port 3200 from the NLB's subnet CIDR. The network ACL allows inbound and outbound traffic on ephemeral ports. What is the most likely cause of the health check failure?

Accepted Answer

The SAP application is not listening on port 3200.. The health check failure is isolated to one instance, and the security group is configured correctly to allow traffic from the NLB's subnet CIDR on port 3200. The network ACL allows ephemeral ports. Therefore, the most likely cause is that the SAP application on that instance is not listening on port 3200. This could be due to the application service not running, a misconfiguration, or the instance not being properly joined to the SAP system.

Answer

The security group does not allow inbound traffic from the NLB's private IP addresses.

Answer

The network ACL is blocking the health check traffic.

Answer

The NLB is configured to use the instance's public IP address.

Question 3

A company has an SAP HANA database running on an RDS for SAP HANA instance. The operations team wants to automate the backup process and retain backups for 90 days. Which AWS service should they use?

Accepted Answer

AWS Backup. AWS Backup is the correct answer because it provides a centralized backup service that can automate and retain backups of RDS for SAP HANA instances with custom retention policies, including beyond 35 days. Options A and B are incorrect: RDS automated backups are limited to a maximum retention of 35 days, and Amazon S3 lifecycle policies manage object lifecycles, not database backups. Option D is incorrect because AWS Storage Gateway is a hybrid storage service, not a backup service for RDS.

Answer

RDS automated backups

Answer

Amazon S3 lifecycle policies

Answer

AWS Storage Gateway

Question 4

An SAP system on AWS uses a Multi-AZ deployment for the database layer with synchronous replication. The application servers are in the same region but different Availability Zones. During a recent failure of the primary database instance, the automatic failover to the standby instance took longer than expected, exceeding the RTO of 5 minutes. Upon investigation, the team finds that the standby instance was not fully synchronized at the time of failure. What could be the cause?

Accepted Answer

The network latency between the Availability Zones is high.. In a Multi-AZ deployment with synchronous replication, high network latency between Availability Zones can cause the primary database to wait for acknowledgment from the standby. This increases transaction commit time and can lead to the standby falling behind, especially if the primary continues processing transactions while waiting. During failover, the standby may not be fully synchronized, causing longer failover time and exceeding RTO. Option A is unlikely because EBS IOPS affect storage performance but not replication lag directly; Option B is incorrect because Multi-AZ uses multiple network interfaces; Option C is incorrect because blocked replication traffic would cause complete failure, not just lag.

Answer

The EBS volumes on the standby instance have lower IOPS than the primary.

Answer

The Multi-AZ configuration uses a single network interface.

Answer

The security groups on the standby instance block replication traffic.

Question 5

A company runs SAP on AWS and uses an Application Load Balancer (ALB) to distribute traffic to a fleet of EC2 instances running SAP Web Dispatcher. The ALB has a target group with health checks configured on port 8080. Recently, the operations team noticed that some instances are being deregistered due to health check failures. The instances are healthy and the Web Dispatcher is running. The health check response time is consistently below 2 seconds. What is the most likely cause?

Accepted Answer

The health check interval is too short, causing the threshold to be exceeded.. A health check interval that is too short can cause the threshold to be exceeded even though the instances are healthy. If the interval is set very low, the ALB may send health checks more frequently than the instance can respond, leading to occasional timeouts or failures that accumulate and cross the unhealthy threshold. Option B is incorrect because the ALB health checks originate from the ALB's own subnet IPs, not from the internet, so a security group blocking internet traffic would not affect health checks. Option C is incorrect because memory exhaustion would typically cause application-level failures, not health check failures on port 8080 if Web Dispatcher is still running. Option D is incorrect because an incorrect health check path would cause all health checks to fail consistently, not just some instances intermittently.

Answer

The security group for the instances blocks inbound traffic from the internet.

Answer

The instances are running out of memory.

Answer

The health check path is incorrect.

Question 6

A company runs a critical SAP application on an SAP HANA database on AWS. The database is backed up daily to Amazon S3. The company needs to ensure that the database can be restored to a point in time within the last 24 hours with minimal data loss. Which AWS service should be used to achieve this requirement?

Accepted Answer

Use AWS Backup with the SAP HANA backup plan.. AWS Backup provides a managed backup service for SAP HANA databases, supporting automated backups and point-in-time recovery (PITR) within a specified retention period. Option A is incorrect because S3 Object Versioning protects against accidental deletion but does not provide database-level point-in-time recovery. Option B is incorrect because Amazon Data Lifecycle Manager (DLM) is designed for managing EBS snapshots, not for SAP HANA database backups. Option D is incorrect because Amazon RDS is a managed relational database service and does not support SAP HANA.

Answer

Enable S3 Object Versioning on the backup bucket.

Answer

Configure Amazon Data Lifecycle Manager (DLM) for EBS snapshots.

Answer

Use Amazon RDS automated backups.

Question 7

An SAP system administrator notices that an SAP HANA database on AWS is experiencing high memory usage and slow query performance. The administrator wants to identify the root cause. Which Amazon CloudWatch metric should be analyzed first?

Accepted Answer

SwapUsage. SwapUsage is the correct metric to analyze first because high swap usage indicates that the system is running out of physical memory, causing it to use disk-based swap space. This can directly lead to slow query performance due to increased I/O and memory pressure. The other metrics are less directly related: CPUUtilization may not reflect memory issues, NetworkIn is unrelated to memory, and DiskQueueDepth relates to disk I/O, not memory.

Answer

NetworkIn

Answer

CPUUtilization

Answer

DiskQueueDepth

Question 8

A company is migrating its SAP landscape to AWS and wants to automate the deployment of SAP applications using infrastructure as code. Which AWS service should the company use to define and provision the AWS infrastructure?

Accepted Answer

AWS CloudFormation. AWS CloudFormation allows defining and provisioning AWS infrastructure as code. Option A (Elastic Beanstalk) is wrong because it is a platform-as-a-service (PaaS) for deploying web applications, not for defining infrastructure. Option C (CodeDeploy) is wrong because it automates code deployments to running instances, not infrastructure provisioning. Option D (OpsWorks) is wrong because it is a configuration management service using Chef/Puppet, not a general-purpose IaC tool.

Answer

AWS Elastic Beanstalk

Answer

AWS CodeDeploy

Answer

AWS OpsWorks

Question 9

An SAP administrator is troubleshooting a high CPU utilization issue on an SAP application server running on an Amazon EC2 instance. The administrator suspects a specific ABAP program is consuming excessive resources. Which AWS service can be used to capture detailed performance metrics and identify the process?

Accepted Answer

Amazon CloudWatch Agent. The Amazon CloudWatch Agent can be installed on an EC2 instance to collect detailed OS-level metrics, including CPU utilization per process, which can help identify the specific ABAP program consuming excessive resources. Option A is incorrect: AWS CloudTrail records API activity, not performance metrics. Option C is incorrect: AWS Config monitors configuration changes and compliance, not CPU usage. Option D is incorrect: Amazon VPC Flow Logs capture network traffic metadata, not CPU utilization.

Answer

AWS CloudTrail

Answer

AWS Config

Answer

Amazon VPC Flow Logs

Question 10

A company runs SAP S/4HANA in a multi-AZ deployment with a standby database in a different Availability Zone. The primary database fails. What is the expected behavior of the SAP HANA system replication?

Accepted Answer

The standby database automatically takes over as the new primary.. With SAP HANA system replication in synchronous mode, the standby database automatically takes over as the new primary when the primary fails, ensuring high availability. Option A is incorrect because a new standby is not automatically provisioned; the existing standby in the other AZ becomes the new primary. Option C is incorrect because the primary database is not restarted in the same AZ; the failover goes to the standby. Option D is incorrect because automatic failover eliminates the need for manual intervention.

Answer

A new standby database is automatically provisioned in the same AZ.

Answer

The primary database is automatically restarted in the same AZ.

Answer

The administrator must manually promote the standby database.

Question 11

An SAP system administrator needs to apply an operating system patch to an Amazon EC2 instance running SAP NetWeaver. The instance is part of an Auto Scaling group. What is the BEST approach to minimize downtime?

Accepted Answer

Use a rolling update by updating the launch configuration and performing an instance refresh.. An instance refresh in an Auto Scaling group allows you to apply a new launch configuration (which includes the patched AMI or user data) to all instances in a rolling, controlled manner. This minimizes downtime by replacing instances one at a time or in batches, ensuring the SAP NetWeaver application remains available throughout the process. Detaching, stopping, or terminating individual instances would cause unnecessary disruption or require manual reattachment, which is not optimal for high-availability SAP landscapes.

Answer

Detach the instance from the Auto Scaling group, apply the patch, and reattach.

Answer

Stop the instance, apply the patch, and start it.

Answer

Terminate the instance and let Auto Scaling launch a new one with the patch.

Question 12

A company uses AWS Systems Manager to automate patching of SAP EC2 instances. The patching fails for some instances with the error 'SSM Agent not running'. What should the administrator do to resolve this?

Accepted Answer

Verify that the SSM Agent is installed and running on the instances.. The error 'SSM Agent not running' indicates that the AWS Systems Manager Agent is not installed or not running on the instance. The correct action is to verify and ensure the SSM Agent is installed and running. Option A (rebooting) is incorrect because rebooting does not resolve a missing or stopped agent. Option B (installing CloudWatch Agent) is unrelated to Systems Manager patching. Option C (configuring a VPC endpoint) addresses connectivity but not the agent status. Therefore, D is the correct answer.

Answer

Reboot the instances.

Answer

Install the Amazon CloudWatch Agent on the instances.

Answer

Configure a VPC endpoint for Systems Manager.

Question 13

An SAP administrator notices that the /hana/data filesystem on an SAP HANA database is approaching 95% utilization. The HANA instance uses EBS gp3 volumes. What is the MOST efficient way to increase storage without downtime?

Accepted Answer

Modify the existing EBS volume to increase its size.. EBS gp3 volumes support online resizing without downtime. You can increase the volume size while the instance is running, and then extend the filesystem and logical volume (if using LVM) to utilize the additional space. This avoids any disruption to the SAP HANA database.

Answer

Add a new EBS volume and extend the logical volume.

Answer

Migrate the database to a new instance with larger volumes.

Answer

Create a snapshot, create a larger volume, and restore.

Question 14

A company wants to ensure that its SAP systems on AWS are compliant with internal security policies. Which AWS service can be used to continuously monitor and evaluate resource configurations?

Accepted Answer

AWS Config. AWS Config is the correct service because it continuously monitors and evaluates the configurations of AWS resources against desired policies, such as internal security policies for SAP systems. It provides detailed configuration snapshots, compliance history, and automated remediation via AWS Config Rules, which can be custom or managed, to ensure ongoing compliance.

Answer

Amazon Inspector

Answer

AWS CloudTrail

Answer

Amazon GuardDuty

Question 15

Which TWO actions can be taken to improve the resilience of an SAP HANA database running on AWS? (Choose two.)

Accepted Answer

Use EBS snapshots for automated backup.. EBS snapshots provide a reliable, automated backup mechanism for SAP HANA data volumes, enabling point-in-time recovery and disaster recovery without requiring additional SAP HANA-specific replication. These snapshots are stored in Amazon S3 and can be used to restore the database to a consistent state, improving resilience against data corruption or accidental deletion.

Answer

Deploy the application in a single Availability Zone.

Answer

Increase the CPU capacity of the database server.

Answer

Enable cross-region replication of the database.