PAS-C01 Operations and Maintenance Practice Test 24 — 15 Questions

Question 1

A company runs SAP on AWS and has configured a cross-region DR strategy using Amazon EBS snapshots. The DR region is in us-west-2. After a region-wide outage, the administrator attempts to restore the snapshots but finds the latest snapshot is incomplete. What is the most likely cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The latest snapshot copy had not completed before the outage. Cross-region snapshot copies are asynchronous and may fail if the source region becomes unavailable. Option A is wrong because IAM does not prevent copying. Option C is wrong because KMS keys can be used cross-region with proper configuration. Option D is wrong because the snapshot ID would not become invalid.

Answer

The IAM role used for copying snapshots does not have permissions

Answer

The snapshots are encrypted with a KMS key that is not available in us-west-2

Answer

The snapshot ID used for recovery is not valid

Question 2

An SAP on AWS environment uses a shared file system via Amazon EFS for SAP transport files. The EFS file system is mounted on multiple EC2 instances. Users report that file operations are slow during peak hours. Which action should be taken to improve performance?

Accepted Answer

Enable EFS Provisioned Throughput mode and increase throughput. Enabling EFS Provisioned Throughput mode allows you to increase throughput beyond the baseline, which can alleviate performance issues during peak hours. Option B is incorrect because Amazon EBS with Multi-Attach is limited to a maximum of 16 instances and is not intended for large-scale shared file systems like SAP transport directories. Option C is incorrect because Amazon S3 does not provide a POSIX-compliant file system; S3FS introduces additional overhead and may not meet performance or compatibility requirements for SAP transport files. Option D is incorrect because increasing the number of EC2 instances does not improve EFS throughput; EFS performance is determined by the provisioned throughput and file system size.

Answer

Migrate to Amazon EBS with Multi-Attach enabled

Answer

Move the transport files to Amazon S3 and use S3FS

Answer

Increase the number of EC2 instances to distribute the load

Question 3

An SAP administrator receives an alert that the HANA database has switched to read-only mode. The administrator checks the disk space and finds that the /hana/data volume is 100% full. What is the most efficient way to resolve this issue?

Accepted Answer

Increase the size of the EBS volume using the console or CLI. EBS volumes can be increased in size online without downtime using the AWS Management Console or CLI, providing immediate additional space to resolve the read-only issue. Option A is incorrect because deleting backup files may not free enough space and is not a long-term solution. Option B is incorrect because restarting the database does not add storage space. Option C is incorrect because creating a new EC2 instance with larger disks requires migration and causes unnecessary downtime compared to simply increasing the EBS volume size.

Answer

Delete old HANA backup files from the volume

Answer

Restart the HANA database to clear temporary files

Answer

Create a new EC2 instance with larger disks and migrate

Question 4

A company is running SAP on AWS and wants to ensure high availability for the SAP Central Services (ASCS) instance. They have set up a cluster using Amazon Route 53 with health checks. During a failover test, the ASCS instance fails but the DNS record does not update immediately. What is the most likely cause?

Accepted Answer

The TTL on the DNS record is set too high. The TTL (Time to Live) on the DNS record determines how long clients cache the DNS response. If the TTL is set too high, clients continue to use the old (failed) IP address even after Route 53 updates the record based on the health check. This delays failover. Options B and C are incorrect because health checks and routing policies do affect failover, but the immediate cause of the delay is the TTL. Option D is incorrect because Route 53 record sets are updatable.

Answer

The health check is not configured to check the ASCS service port

Answer

The Route 53 record is using simple routing instead of failover

Answer

The Route 53 record set is not updatable

Question 5

Which TWO of the following are best practices for monitoring SAP on AWS? (Choose 2)

Accepted Answer

Set up Amazon CloudWatch alarms for HANA database metrics. Options A and B are correct. A: Amazon CloudWatch alarms for HANA database metrics enable proactive detection of performance issues, such as high memory or CPU usage, which is critical for SAP systems. B: SAP EarlyWatch Alert (EWA) provides periodic health checks and recommendations, making it a standard best practice for monitoring. Option C is incorrect because disabling detailed monitoring reduces visibility into EC2 instance performance, harming monitoring capabilities. Option D is incorrect because manual log reviews are not scalable or timely for production systems. Option E is incorrect because EBS snapshots are for backup and disaster recovery, not real-time monitoring.

Answer

Disable detailed monitoring on EC2 instances to reduce costs

Answer

Manually review system logs weekly

Answer

Take daily EBS snapshots of the HANA data volume

Question 6

Which THREE actions should be taken to ensure a secure and compliant SAP environment on AWS? (Choose 3)

Accepted Answer

Restrict IAM permissions to only necessary actions. Options B, C, and D are correct. B: Restricting IAM permissions to only necessary actions follows the principle of least privilege, minimizing security risks. C: Security groups act as a virtual firewall to control inbound and outbound traffic, enhancing network security. D: Enabling encryption on EBS volumes and RDS instances protects data at rest, ensuring compliance with security standards. Option A is incorrect because placing SAP servers in a public subnet exposes them to the internet, increasing attack surface. Option E is incorrect because storing logs with public read access violates security best practices; logs should be private or accessed via controlled mechanisms.

Answer

Place all SAP servers in a public subnet for easy access

Answer

Store all application logs in Amazon S3 with public read access

Question 7

Which TWO options are valid methods to back up an SAP HANA database on AWS? (Choose 2)

Accepted Answer

Use SAP HANA Backint with AWS Backup. Options B and E are correct. B: SAP HANA Backint integrated with AWS Backup provides a certified and native backup solution for HANA databases. E: Creating application-consistent EBS snapshots using pre and post scripts ensures data consistency and is a valid backup method. Option A is incorrect because Amazon RDS automated backups are not applicable to SAP HANA running on EC2; RDS is a managed service for relational databases, not HANA. Option C is incorrect because AWS DMS is designed for database migration, not backup. Option D is incorrect because copying HANA data files to S3 using AWS CLI does not ensure consistency and is not a supported backup method for HANA.

Answer

Use Amazon RDS automated backups

Answer

Use AWS Database Migration Service (DMS)

Answer

Copy HANA data files to Amazon S3 using AWS CLI

Question 8

A company is running an SAP HANA database on a single EC2 instance. The operations team notices that the instance is running low on memory, which is causing performance degradation. The team needs to increase memory without downtime. Which solution should they use?

Accepted Answer

Increase the swap space on the existing instance.. Increasing swap space on the existing instance can be done without downtime by adding a swap file or enlarging an existing swap partition. This provides additional virtual memory, which can help alleviate memory pressure without stopping the database. While swap does not increase physical memory, it is a quick, no-downtime solution to mitigate performance degradation until a more permanent solution (e.g., migrating to a larger instance) can be scheduled. Option D is incorrect because modifying the EC2 instance type requires stopping the instance, which causes downtime, contradicting the requirement.

Answer

Launch a new EC2 instance with more memory and migrate the database.

Answer

Add additional EBS volumes to increase swap space.

Answer

Modify the EC2 instance type to a larger type with more memory.

Question 9

A company runs SAP on AWS using an SAP HANA multi-node cluster. The operations team needs to apply an OS-level security patch that requires a reboot. How can they minimize downtime?

Accepted Answer

Use HANA scale-out to move services to other nodes, then reboot each node sequentially.. In a HANA multi-node cluster, you can leverage HANA's scale-out capabilities to move services (e.g., using HANA system replication or failover) to other nodes, then reboot each node sequentially. This minimizes downtime as the database remains available through the other nodes. Option A is incorrect because AWS Systems Manager Run Command can apply the patch, but if a reboot is required, it will still need a reboot, causing downtime. Option B is incorrect because rebooting all nodes simultaneously will cause complete downtime. Option D is incorrect because creating a new EC2 instance and updating DNS introduces complexity, potential connectivity issues, and is not a standard approach for HANA clusters; it also does not leverage HANA's built-in high availability features.

Answer

Use AWS Systems Manager Run Command to apply the patch without reboot.

Answer

Reboot all nodes simultaneously during the maintenance window.

Answer

Create a new EC2 instance with the patch applied, then update DNS to point to the new instance.

Question 10

An SAP administrator needs to monitor the CPU utilization of an SAP application server EC2 instance and send an alert if it exceeds 80% for 5 consecutive minutes. Which AWS service should be used?

Accepted Answer

Amazon CloudWatch Alarm. Amazon CloudWatch Alarm is the correct service for monitoring CPU utilization and sending alerts when the CPU utilization exceeds 80% for 5 consecutive minutes. CloudWatch Alarms can be configured to monitor any CloudWatch metric (such as CPUUtilization) and trigger actions like sending a notification via Amazon SNS. Option A (AWS CloudTrail) is incorrect because it records API calls for auditing, not metric monitoring. Option B (VPC Flow Logs) is incorrect as it captures network traffic information, not CPU metrics. Option D (AWS Config) is incorrect because it evaluates resource compliance against rules, not performance metrics.

Answer

AWS CloudTrail

Answer

VPC Flow Logs

Answer

AWS Config

Question 11

A company is migrating its SAP environment to AWS. The operations team needs to ensure that all changes to the SAP infrastructure are tracked and that unauthorized changes are detected. Which AWS service should they use?

Accepted Answer

AWS Config. AWS Config records configuration changes and enables compliance monitoring, making it the right choice for tracking changes and detecting unauthorized changes. CloudTrail records API calls, not configuration state. GuardDuty is for threat detection. Trusted Advisor provides best practice checks.

Answer

AWS CloudTrail

Answer

Amazon GuardDuty

Answer

AWS Trusted Advisor

Question 12

An SAP HANA database on AWS is experiencing high latency. The operations team suspects a network bottleneck. The SAP application and HANA are on different subnets within the same VPC. Which AWS feature can help reduce latency?

Accepted Answer

Elastic Network Adapter (ENA). (Elastic Network Adapter) is correct. ENA provides higher bandwidth and lower latency for HANA workloads. Option A (NAT Gateway) is incorrect because NAT Gateway adds latency and is used for outbound internet access, not for internal communication within a VPC. Option C (VPC Peering) is incorrect because VPC Peering connects different VPCs, not subnets within the same VPC, and does not reduce latency within a single VPC. Option D (Internet Gateway) is incorrect because it provides internet access and would add latency.

Answer

NAT Gateway

Answer

VPC Peering

Answer

Internet Gateway

Question 13

An SAP administrator needs to back up the SAP HANA database daily. The backups must be stored securely and retained for 30 days. Which storage option is the most cost-effective?

Accepted Answer

Amazon S3 Standard-Infrequent Access (S3 Standard-IA). S3 Standard-IA is for infrequently accessed data with lower cost. Option A is incorrect because S3 Standard is more expensive. Option B is incorrect because Glacier is for long-term archival, not 30-day retention. Option D is incorrect because EBS snapshots are for volumes, not database backups directly.

Answer

Amazon S3 Standard

Answer

Amazon S3 Glacier

Answer

Amazon EBS Snapshots

Question 14

A company runs SAP on AWS and uses a central syslog server to collect logs from all SAP instances. The operations team wants to use a managed AWS service to centralize log storage and enable real-time analysis. Which service should they use?

Accepted Answer

Amazon CloudWatch Logs. Amazon CloudWatch Logs is a managed service that can aggregate logs from multiple Amazon EC2 instances and other sources, providing centralized storage and real-time monitoring and analysis. It is the most appropriate choice for this use case because it offers built-in log aggregation, real-time analysis with CloudWatch Logs Insights, and integration with AWS services. Amazon Athena (Option A) is an interactive query service for analyzing data in Amazon S3, not designed for real-time log ingestion from multiple sources. Amazon Kinesis Data Firehose (Option C) is a streaming data delivery service that can capture and load data into destinations like S3 or Redshift, but it requires additional setup for real-time analysis and is more complex for simple log centralization. Amazon S3 (Option D) is an object storage service that can store logs but does not natively provide real-time analysis capabilities.

Answer

Amazon Athena

Answer

Amazon Kinesis Data Firehose

Answer

Amazon S3

Question 15

An SAP system on AWS is experiencing performance issues during peak hours. The operations team notices that the EBS volumes are consistently showing high queue depth. What should they do to improve performance?

Accepted Answer

Provision more IOPS on the EBS volumes.. High EBS queue depth indicates that the volumes are not keeping up with IO demand, and provisioning more IOPS directly addresses this. Option A is incorrect: changing the EC2 instance type may improve available EBS bandwidth (throughput), but it does not provision additional IOPS; queue depth is primarily an IOPS issue. Option C is incorrect: switching to Throughput Optimized HDD (st1) is optimized for sequential throughput, not for high IOPS or low latency, so it would likely worsen queue depth for typical SAP workloads. Option D is incorrect: increasing EBS volume size can increase baseline IOPS for gp2/gp3 volumes, but that increase is indirect and often insufficient; the direct remedy for high queue depth is to provision more IOPS.

Answer

Change the EC2 instance type to a larger one.

Answer

Change the EBS volume type to Throughput Optimized HDD (st1).

Answer

Increase the size of the EBS volumes.