PAS-C01 Operations and Maintenance Practice Test 23 — 15 Questions

Question 1

A company has an SAP HANA database running on an EC2 instance with EBS volumes. The operations team needs to ensure that database backups are stored in Amazon S3 and are automatically deleted after 90 days. What is the most efficient way to achieve this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure an S3 Lifecycle policy to expire objects after 90 days.. S3 Lifecycle policies can automatically expire objects after a specified number of days, meeting the requirement for automated deletion after 90 days. Option A is incorrect because S3 Object Lock prevents deletion or modification, not automates it. Option B is incorrect because versioning alone does not delete objects; manual deletion would be needed. Option C is incorrect because a script is less efficient than a built-in lifecycle policy.

Answer

Use S3 Object Lock with a retention period of 90 days.

Answer

Enable S3 Versioning and delete old versions manually.

Answer

Write a script that runs daily to list backups older than 90 days and delete them.

Question 2

A company runs SAP on AWS using a multi-AZ deployment. The database is an SAP HANA system replicated across two Availability Zones. During a recent failure, the standby HANA instance did not take over automatically. The operations team finds that the HANA replication status was 'ERROR' before the failure. What is the most likely reason for the failed takeover?

Accepted Answer

The HANA system replication was not in sync; data was not fully replicated to the standby.. If the HANA system replication status is 'ERROR', automatic takeover cannot occur. The replication link must be healthy for the standby to have the latest data. Option A is wrong because a difference in instance numbers does not cause a replication status error; replication setup would fail if instance numbers mismatched. Option B is wrong because a misconfigured fencing mechanism would not cause a replication status error; it would prevent takeover only if fencing fails. Option D is wrong because high network latency could cause replication lag but not an error status; the status error indicates a more fundamental issue.

Answer

The standby HANA instance had a different instance number than the primary.

Answer

The fencing mechanism was not configured correctly in the cluster.

Answer

The network latency between the two Availability Zones was too high.

Question 3

A company is running SAP Business Suite on AWS with a Microsoft SQL Server database. The operations team needs to implement automated database backups with point-in-time recovery. Which AWS service should be used to achieve this?

Accepted Answer

AWS Backup. AWS Backup (option B) is the correct service for automated database backups with point-in-time recovery for SQL Server running on EC2. It supports SQL Server databases on EC2 and provides automated backup scheduling and point-in-time recovery capabilities. Option A (AWS Storage Gateway) is for hybrid cloud storage, not database backup. Option C (AWS DMS) is for database migration, not backup. Option D (Amazon RDS for SQL Server) is a managed database service, but since the SQL Server is on EC2, RDS does not apply.

Answer

AWS Storage Gateway

Answer

AWS Database Migration Service (DMS)

Answer

Amazon RDS for SQL Server

Question 4

An SAP system running on AWS is experiencing high memory utilization on the application server. The team suspects a memory leak in the SAP ABAP application. Which tool or process should be used to identify the root cause?

Accepted Answer

Run SAP transaction STAD to analyze memory consumption per user and program.. SAP transaction STAD provides detailed analysis of memory consumption per user and program, allowing identification of a memory leak in the ABAP application. Option B is wrong because the Linux 'top' command shows OS-level process memory usage, but does not provide ABAP-specific memory allocation details per program or user. Option C is wrong because SAP HANA Studio is used to monitor the HANA database, not the application server memory. Option D is wrong because CloudWatch memory metrics provide overall EC2 memory usage, not per-process or per-user ABAP memory consumption.

Answer

Use the Linux 'top' command to identify the process consuming the most memory.

Answer

Use SAP HANA Studio to check memory consumption of the database.

Answer

Enable detailed CloudWatch memory metrics on the EC2 instance.

Question 5

Which TWO of the following are valid methods to monitor the health of an SAP HANA database running on AWS?

Accepted Answer

Amazon CloudWatch alarms based on EC2 instance metrics. Amazon CloudWatch can monitor EC2 instance metrics such as CPU utilization and memory, which are relevant to HANA database health. Option D is correct because SAP HANA provides built-in SQL queries to check service status and perform health checks. Option B is wrong because AWS Trusted Advisor checks for general best practices (e.g., security, cost optimization) and does not include HANA-specific health monitoring. Option C is wrong because AWS Config is designed for configuration compliance tracking, not real-time health monitoring. Option E is wrong because AWS CloudTrail logs API calls for auditing purposes, not health metrics.

Answer

AWS Trusted Advisor checks for HANA best practices

Answer

AWS Config rules to check HANA configuration

Answer

AWS CloudTrail logs for HANA API calls

Question 6

Which THREE of the following are best practices for operating an SAP HANA database on AWS in a production environment?

Accepted Answer

Ensure the EC2 instance is EBS-optimized.. EBS-optimized instances provide dedicated bandwidth for EBS, which is essential for HANA workloads. Option C is correct because separating data and log files onto different EBS volumes is a best practice recommended by SAP to improve performance and manageability. Option E is correct because using multiple EBS volumes striped with LVM or RAID 0 aggregates IOPS and throughput, providing the high performance required for production HANA databases. Option A is incorrect because configuring a swap partition on the instance store is not recommended for HANA; HANA relies on memory and swap usage is discouraged. Option D is incorrect because using a single large EBS volume for both data and logs can lead to performance bottlenecks and is not a best practice.

Answer

Configure a swap partition on the instance store.

Answer

Use a single large EBS volume for both data and logs to simplify management.

Question 7

Which TWO of the following AWS services can be used to create and manage SAP system backups in an automated manner?

Accepted Answer

AWS Backup. AWS Backup is a fully managed backup service that can automate and centrally manage backups across AWS services, including EC2 instances and RDS databases used for SAP. Option C is correct because AWS Systems Manager can automate backup tasks through its Automation capabilities, including creating snapshots and managing backup schedules for SAP systems. Option B is wrong because AWS CloudTrail is an auditing service that records API activity, not a backup service. Option D is wrong because AWS Lambda is a compute service that can run custom code but is not a dedicated backup management service. Option E is wrong because AWS CloudFormation is an infrastructure-as-code service for provisioning resources, not for backup management.

Answer

AWS CloudTrail

Answer

AWS Lambda

Answer

AWS CloudFormation

Question 8

Refer to the exhibit. An SAP administrator has created this IAM policy for a backup user. The user can list and download backups but cannot delete them. However, the user is unable to list the objects in the bucket. What is the most likely cause?

Accepted Answer

There is an additional bucket policy that denies s3:ListBucket to this user.. The IAM policy shown grants s3:ListBucket permission on the bucket, so the user should be able to list objects. However, the user cannot list objects, indicating an additional bucket policy explicitly denies s3:ListBucket for this user. Bucket policies override IAM permissions when a Deny is present. Option A is incorrect because the policy does include s3:ListBucket. Option C is incorrect because s3:GetObjectVersion is not required to list objects. Option D is incorrect because the Deny statement only affects s3:DeleteObject, not s3:ListBucket.

Answer

The IAM policy does not include s3:ListBucket for the bucket.

Answer

The user needs s3:GetObjectVersion permission to list objects.

Answer

The Deny statement also denies s3:ListBucket because of the wildcard resource.

Question 9

Refer to the exhibit. An administrator has run a query to check the backup status of an SAP HANA database. The output shows that the backup on January 17 failed. What is the most appropriate next step?

Accepted Answer

Investigate the backup logs for the failed backup to identify the cause.. A failed backup requires investigation to determine the root cause before taking any corrective action. Checking the backup logs will provide details on why the backup failed, such as insufficient permissions, disk space issues, or configuration errors. Option A is incorrect because restoring the database is premature without diagnosing the failure. Option C is incorrect because restarting the backup without investigation may lead to the same failure. Option D is incorrect because ignoring the failure could allow a recurring issue to affect future backups.

Answer

Restore the database from the last successful backup to ensure data integrity.

Answer

Immediately restart the failed backup from the catalog.

Answer

Ignore the failure because subsequent backups are successful.

Question 10

Refer to the exhibit. An SAP administrator has created this CloudFormation snippet to create a Route 53 record for an SAP system. The record is intended to point to an Application Load Balancer. What is a potential issue with this configuration?

Accepted Answer

Using a CNAME record for the root domain (zone apex) is not allowed.. DNS standards prohibit using a CNAME record at the zone apex (root domain, e.g., example.com) because it would conflict with the SOA and NS records required for the zone. Route 53 does not allow CNAME records for the root domain. Option B is incorrect because a TTL of 60 seconds is acceptable for dynamic environments. Option C is incorrect because an ALB endpoint is a DNS name, not an IP address, so an A record cannot be used; Route 53 supports alias records for ALBs, but the snippet uses a CNAME. Option D is incorrect because the ResourceRecords value for a CNAME record must be a DNS name, not an IP address.

Answer

The TTL value of 60 seconds is too low for production use.

Answer

The RecordSet type should be A instead of CNAME for an ALB.

Answer

The ResourceRecords value should be an IP address, not a DNS name.

Question 11

A company runs SAP on AWS using an SAP HANA database on an R5.8xlarge EC2 instance. The SAP application generates alerts about high disk I/O latency. Which AWS service should the administrator use to identify the root cause?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch provides detailed metrics for disk I/O, including latency. Option A is wrong because AWS Trusted Advisor provides best-practice checks, not real-time performance metrics. Option C is wrong because AWS Systems Manager automates operational tasks, not performance monitoring. Option D is wrong because AWS Config is for resource compliance.

Answer

AWS Trusted Advisor

Answer

AWS Systems Manager

Answer

AWS Config

Question 12

An SAP administrator needs to apply an OS security patch to all SAP application servers running on EC2 instances in an Auto Scaling group. The patch requires a reboot. What is the most efficient way to apply the patch with minimal downtime?

Accepted Answer

Use AWS Systems Manager Patch Manager with a maintenance window. AWS Systems Manager Patch Manager can orchestrate patching across instances, and using a maintenance window with a reboot strategy minimizes downtime. Option A is wrong because manual patching is not efficient. Option B is wrong because creating a new AMI and updating the Auto Scaling group requires creating a new launch configuration or template and rolling out new instances, which is more effort and not the most efficient. Option C is wrong because AWS CloudFormation is for infrastructure provisioning, not for applying OS patches.

Answer

SSH into each instance and apply the patch manually

Answer

Create a new AMI with the patch and update the Auto Scaling group

Answer

Use AWS CloudFormation to update the instances

Question 13

A company uses SAP S/4HANA on AWS with a multi-AZ deployment. The primary database is in us-east-1a and the secondary in us-east-1b. During a failover test, the secondary database becomes active but performance degrades significantly. Which configuration is most likely causing the performance issue?

Accepted Answer

The secondary instance is a smaller instance type than the primary. In a multi-AZ deployment, the secondary instance should match the primary's instance type to ensure consistent performance after failover. If the secondary is smaller, it lacks the CPU, memory, and network resources needed to handle the same workload, leading to performance degradation. Option A is incorrect because both instances should be in the same VPC for proper replication; being in different VPCs would break connectivity. Option C is incorrect because different storage types (e.g., GP2 vs. Provisioned IOPS) can also cause performance issues, but the question specifically asks about the most likely cause given the scenario. Option D is incorrect because HANA version differences would cause compatibility issues, not necessarily performance degradation.

Answer

The secondary instance is in a different VPC

Answer

The secondary instance uses a different storage type (e.g., GP2 instead of Provisioned IOPS)

Answer

The secondary database is running a different HANA version

Question 14

An SAP administrator notices that the /usr/sap directory on an EC2 instance is filling up. The instance is part of an SAP application server cluster. Which AWS service can be used to add additional storage without downtime?

Accepted Answer

Amazon EBS. Amazon EBS volumes can be attached to EC2 instances and expanded without downtime using Elastic Volumes, making it the correct choice for adding storage to the /usr/sap directory. Option A (EFS) is a file system but may not provide the required low-latency block storage for SAP application servers. Option B (S3) is object storage, not suitable for an OS directory. Option D (Instance Store) is ephemeral and not persistent, so it cannot be used for permanent storage. Therefore, Amazon EBS is the appropriate service.

Answer

Amazon EFS

Answer

Amazon S3

Answer

EC2 Instance Store

Question 15

A company wants to automate the backup of SAP HANA database on AWS. Which AWS service is best suited for creating consistent snapshots of HANA data volumes?

Accepted Answer

AWS Backup. AWS Backup is the best suited service for automating consistent snapshots of SAP HANA data volumes. It integrates with SAP HANA using pre and post scripts to ensure application-consistent backups. AWS Lambda can also be used but requires custom scripting, making it less optimal. Amazon CloudWatch is for monitoring, and Amazon S3 is a storage service, not a backup service.

Answer

AWS Lambda

Answer

Amazon CloudWatch

Answer

Amazon S3