PAS-C01 Operations and Maintenance Practice Test 22 — 15 Questions

Question 1

An SAP administrator needs to implement a disaster recovery (DR) strategy for SAP HANA with an RTO of 2 hours and RPO of 15 minutes. The primary site is in us-east-1, and the DR site is in us-west-2. The system uses SAP HANA System Replication (HSR) for data replication. Which AWS service should be used to automate failover and minimize downtime?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS Elastic Disaster Recovery (AWS DRS).. AWS Elastic Disaster Recovery (DRS) can replicate EC2 instances and automate failover, meeting the RTO and RPO requirements. Option B is wrong because AWS Backup is for backup, not real-time replication. Option C is wrong because CloudEndure is now AWS DRS. Option D is wrong because RDS is not used for SAP HANA; it is a managed database service.

Answer

AWS Backup with cross-region backup copies.

Answer

AWS CloudEndure Disaster Recovery.

Answer

Amazon RDS for SAP HANA.

Question 2

A company is running SAP ERP on a single EC2 instance with an SAP HANA database. The operations team receives an alert that the /hana/data filesystem is 85% full. The filesystem is mounted from an EBS volume. Which of the following actions should be taken to resolve the issue with MINIMAL downtime?

Accepted Answer

Increase the size of the existing EBS volume and extend the filesystem.. You can increase the size of an EBS volume and extend the filesystem while the instance is running, without any downtime. The filesystem can be extended online using commands like xfs_growfs for XFS or resize2fs for ext4. Option B is incorrect because adding a new volume and relocating data would require more complex configuration and potential downtime, and it doesn't resolve the issue of the existing filesystem being full. Option C is incorrect because deleting log files is not a sustainable solution and may not free up enough space, and it is not a best practice for production systems. Option D is incorrect because creating a new larger volume and copying data would require the instance to be stopped to swap volumes, causing downtime.

Answer

Add an additional EBS volume and mount it to /hana/data2, then relocate some data.

Answer

Delete unnecessary log files from the /hana/data directory.

Answer

Create a new, larger EBS volume, attach it to the instance, and copy the data.

Question 3

An SAP Basis administrator needs to monitor the performance of SAP HANA database using Amazon CloudWatch. Which of the following metrics should be monitored to detect potential CPU bottlenecks?

Accepted Answer

CPUUtilization. (CPUUtilization) is the correct metric to monitor for detecting CPU bottlenecks in SAP HANA on Amazon CloudWatch. CPUUtilization directly measures the percentage of CPU capacity being used. High values indicate CPU contention. Option A (MemoryUtilization) indicates memory pressure, not CPU. Option B (DiskReadBytes/DiskWriteBytes) indicates I/O activity. Option D (NetworkPacketsIn/NetworkPacketsOut) indicates network traffic, none of which directly measure CPU bottlenecks.

Answer

MemoryUtilization

Answer

DiskReadBytes / DiskWriteBytes

Answer

NetworkPacketsIn / NetworkPacketsOut

Question 4

A company is running SAP on AWS and wants to implement a patching strategy for the operating system of EC2 instances with minimal downtime. The instances are part of an Auto Scaling group. Which of the following approaches is the MOST appropriate?

Accepted Answer

Create a new Amazon Machine Image (AMI) with the latest patches, update the launch configuration, and perform a rolling update of the Auto Scaling group.. Creating a new AMI with the latest patches, updating the launch configuration, and performing a rolling update of the Auto Scaling group replaces instances with patched AMIs without downtime. Option A is incorrect because applying patches directly to running instances using AWS Systems Manager Patch Manager requires reboots, causing downtime for each instance. Option B is incorrect because stopping the Auto Scaling group stops all instances, resulting in full downtime. Option C is incorrect because using Patch Manager to patch all instances at the same time during a maintenance window would cause simultaneous reboots, leading to downtime.

Answer

Apply patches directly to the running instances using AWS Systems Manager Patch Manager and reboot each instance one at a time.

Answer

Stop the Auto Scaling group, patch the instances, and start the group again.

Answer

Use AWS Systems Manager Patch Manager to patch all instances at the same time during a maintenance window.

Question 5

An SAP administrator notices that the sapstartsrv process on an EC2 instance is failing to start after a system reboot. The instance is running SUSE Linux Enterprise Server (SLES) for SAP Applications. Which of the following log files should be examined FIRST to diagnose the issue?

Accepted Answer

/usr/sap//SYS/global/sapstartsrv.log. The sapstartsrv process log is stored in /usr/sap//SYS/global/sapstartsrv.log (Option B). This log contains startup and error messages specific to the sapstartsrv process, making it the first place to check for failures after a reboot. Option A (/var/log/messages) is a general system log that may contain kernel or hardware messages but not SAP-specific process details. Option C (SAP HANA studio trace files) is used for database issues, not the sapstartsrv process. Option D (Amazon CloudWatch logs) requires prior configuration to capture local boot logs and would not be the first choice for a local SAP process failure.

Answer

/var/log/messages

Answer

SAP HANA studio trace files

Answer

Amazon CloudWatch logs for the instance

Question 6

A company is running SAP on AWS and wants to automate the creation of consistent snapshots of EBS volumes attached to SAP HANA instances. Which AWS service is BEST suited for this task?

Accepted Answer

AWS Backup. (AWS Backup) is correct because it is a fully managed backup service that can automate scheduled backups of EBS volumes, including those attached to SAP HANA instances. Option A is wrong because AWS Lambda would require custom scripting to manage snapshot creation and retention. Option B is wrong because AWS CloudFormation is for infrastructure as code, not backup automation. Option C is wrong because Amazon S3 is object storage, not for EBS snapshots.

Answer

AWS Lambda

Answer

AWS CloudFormation

Answer

Amazon S3

Question 7

An SAP administrator is setting up monitoring for SAP HANA using Amazon CloudWatch. Which TWO metrics are available from the SAP HANA CloudWatch integration?

Accepted Answer

Memory Usage. The SAP HANA CloudWatch integration provides metrics related to resource utilization, including Memory Usage and Disk Usage. Metrics such as Number of SQL Queries per Second, Number of Active Connections, and Average Response Time are not directly available from the standard integration and require additional custom monitoring solutions.

Answer

Number of SQL Queries per Second

Answer

Number of Active Connections

Answer

Average Response Time

Question 8

A company is running SAP on AWS and uses an Application Load Balancer (ALB) to distribute traffic to SAP Web Dispatchers. The operations team notices that some requests are failing with 502 errors. Which THREE actions should be taken to troubleshoot the issue?

Accepted Answer

Review the ALB access logs to identify the target response codes.. Options C, D, and E are correct actions to troubleshoot 502 errors. Option C: Reviewing ALB access logs helps identify the target response codes, which can indicate why requests are failing. Option D: Verifying security group rules ensures that the ALB and target instances can communicate properly. Option E: Checking the health check configuration and target group health status can reveal if targets are unhealthy, causing 502 errors. Option A is incorrect because disabling cross-zone load balancing does not directly address 502 errors. Option B is incorrect because increasing the idle timeout is not a typical solution for 502 errors; idle timeouts usually affect 504 errors.

Answer

Disable cross-zone load balancing to isolate the issue.

Answer

Increase the idle timeout setting on the ALB.

Question 9

Which TWO of the following are best practices for operating SAP HANA on AWS?

Accepted Answer

Deploy SAP HANA in a Multi-AZ configuration for high availability.. Deploying SAP HANA in a Multi-AZ configuration provides high availability by automatically failing over to a standby instance in another Availability Zone if the primary fails. Option B is correct because EBS snapshots are an efficient and consistent backup method for SAP HANA on AWS, supporting point-in-time recovery. Option C is incorrect because General Purpose SSD (gp2) volumes do not provide the consistent low latency and high IOPS required for SAP HANA data files; Provisioned IOPS (io1/io2) are recommended. Option D is incorrect because stopping the HANA instance during backup is not necessary and causes downtime; EBS snapshots can be taken consistently without stopping the instance using pre-snapshot scripts or SAP HANA snapshot-based backups. Option E is incorrect because disabling swap space can lead to memory pressure issues; SAP HANA recommends having swap space configured for safety.

Answer

Use General Purpose SSD (gp2) volumes for HANA data files.

Answer

Stop the HANA instance during backup to ensure consistency.

Answer

Disable swap space to improve performance.

Question 10

Refer to the exhibit. An SAP HANA database backup fails with the error shown. The backup target is an EFS file system mounted at /backup. The EC2 instance has the appropriate IAM role to access EFS. What is the MOST likely cause of this error?

Accepted Answer

The SAP HANA database user does not have write permissions on the backup directory.. The error 'Permission denied' indicates that the SAP HANA user (e.g., <sid>adm) does not have write permissions to the backup directory on the EFS file system. Option A is wrong because the error is not about disk space. Option C is wrong because EFS does not have IOPS limits like EBS. Option D is wrong because the IAM role is for accessing EFS, but file permissions are separate.

Answer

The IAM role attached to the EC2 instance does not have permissions to write to EFS.

Answer

The EFS file system has insufficient IOPS for the backup operation.

Answer

The EFS file system is out of storage capacity.

Question 11

Refer to the exhibit. An SAP administrator is configuring Route 53 to point a custom domain name to an Application Load Balancer (ALB) that fronts SAP Web Dispatchers. The record set is configured as shown. However, when users access sap.example.com, they receive a 503 error. What is the MOST likely cause?

Accepted Answer

The security group for the ALB is not allowing inbound traffic on port 443 from the internet.. A 503 error from an ALB typically indicates that the ALB is not receiving traffic or that the target group is unhealthy. However, in this scenario, the correct answer is B: the security group for the ALB is not allowing inbound traffic on port 443 from the internet. Without that rule, the ALB cannot accept HTTPS requests, resulting in a 503. EvaluateTargetHealth being true (Option A) is a correct configuration for alias records and does not cause a 503. The Alias Target (Option C) is correctly set to the ALB's DNS name; 'dualstack' is part of that DNS name and is legitimate. A failing target group health check (Option D) would cause a 503, but the question specifies that users receive 503 when accessing the domain, and the most likely cause given the exhibit is the missing security group rule on the ALB.

Answer

The EvaluateTargetHealth is set to true, which is causing the record to be marked as unhealthy.

Answer

The Alias Target is incorrect; it should be the ALB's DNS name without 'dualstack'.

Answer

The health check for the ALB target group is failing, causing Route 53 to return 503.

Question 12

A company is running a production SAP HANA database on an r5.4xlarge EC2 instance with EBS-backed storage. The operations team notices that the database checkpoint writes are frequently slow, causing application performance degradation. The team has already increased the EBS IOPS and throughput. What should the team do next to improve checkpoint write performance?

Accepted Answer

Modify the Linux I/O scheduler to 'noop' and ensure the EBS-optimized instance attribute is enabled.. Modifying the Linux I/O scheduler to 'noop' reduces CPU overhead and prevents fragmentation of sequential writes, which is beneficial for SAP HANA checkpoint writes. Additionally, ensuring the EBS-optimized instance attribute is enabled guarantees dedicated bandwidth between the instance and EBS. Option B is incorrect because changing from io1 to gp2 would reduce performance, as gp2 has lower sustained IOPS and throughput compared to provisioned IOPS volumes. Option C is incorrect because disabling checkpoint compression would increase the volume of data written during checkpoints, worsening the performance issue. Option D is incorrect because simply increasing volume size does not directly improve checkpoint write performance; the team has already increased IOPS and throughput, so the bottleneck is likely I/O scheduling, not volume size.

Answer

Change the EBS volume type from io1 to gp2 for higher throughput.

Answer

Disable SAP HANA checkpoint compression to reduce CPU overhead.

Answer

Increase the EBS volume size to gain additional baseline IOPS.

Question 13

An SAP NetWeaver administrator needs to patch the operating system of an SAP application server running in an Auto Scaling group. The instances are behind an Application Load Balancer. What is the correct procedure to minimize downtime?

Accepted Answer

Use an Auto Scaling rolling update with lifecycle hooks to launch new instances from a patched AMI and gradually deregister old ones.. It uses Auto Scaling rolling updates with lifecycle hooks to replace instances one by one, minimizing downtime by ensuring new instances are healthy before old ones are terminated. Option B is wrong because manually detaching and patching does not leverage Auto Scaling's automation and can lead to inconsistent AMIs. Option C is wrong because stopping traffic at the ALB causes full downtime during patching. Option D is wrong because terminating all instances at once causes full downtime, and the new instances may not be immediately available.

Answer

Detach one instance from Auto Scaling, patch it, test, then reattach.

Answer

Stop accepting traffic at the ALB, patch all instances manually, then re-enable traffic.

Answer

Terminate all instances at once and let Auto Scaling launch new ones with a patched AMI.

Question 14

A company runs SAP S/4HANA in a multi-AZ deployment with a primary and standby database. During a planned failover test, the database fails over but the SAP system becomes unresponsive. Investigation reveals that the SAP application servers cannot connect to the new primary database because the database VIP is not updated. What is the most likely cause?

Accepted Answer

The HANA database VIP is not configured to move to the new primary instance during failover.. In a multi-AZ SAP HANA setup, the application servers connect to the database via a virtual IP address (VIP). During failover, the VIP must be moved to the new primary instance for connectivity. If the VIP is not migrated, the application servers will still try to reach the old primary (which is now standby), causing unresponsiveness. Option A is incorrect because the HANA instance number remains constant. Option B is incorrect because DNS records are not typically used for HANA failover; the VIP is used. Option C could cause issues if set to the physical hostname, but in this case the core problem is that the VIP did not move.

Answer

The HANA instance number changed after failover.

Answer

The DNS record for the HANA host still points to the old primary IP address.

Answer

The HANA hostname in the SAP profile is set to the physical instance hostname instead of the VIP.

Question 15

An SAP Basis administrator needs to monitor the CPU utilization of all EC2 instances running SAP applications. The team wants to receive alerts when CPU utilization exceeds 80% for 5 consecutive minutes. Which AWS service should be used to set up this monitoring and alerting?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch is the correct service because it can collect CPU utilization metrics from EC2 instances and trigger alarms when the metric exceeds a threshold (e.g., 80% for 5 consecutive minutes). AWS Trusted Advisor provides best-practice recommendations but cannot create custom metric alarms. AWS CloudTrail is for auditing API calls, not monitoring performance metrics. AWS Config tracks resource configuration changes, not real-time performance metrics.

Answer

AWS Trusted Advisor

Answer

AWS CloudTrail

Answer

AWS Config