PAS-C01 Operations and Maintenance Practice Test 25 — 15 Questions

Question 1

An SAP administrator needs to ensure that all API calls made to AWS services are logged for auditing purposes. Which AWS service should be enabled?

Accepted Answer

AWS CloudTrail. AWS CloudTrail records API calls for auditing. Option A is incorrect because AWS Config monitors configuration changes. Option C is incorrect because Amazon CloudWatch Logs is for storing log data. Option D is incorrect because VPC Flow Logs capture network traffic information.

Answer

AWS Config

Answer

Amazon CloudWatch Logs

Answer

VPC Flow Logs

Question 2

A company runs SAP on AWS and needs to implement a disaster recovery (DR) strategy with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. Which TWO actions should they take?

Accepted Answer

Set up SAP HANA System Replication to another AWS region.. To achieve an RPO of 15 minutes and RTO of 2 hours, the company should use SAP HANA System Replication to replicate data to another AWS region (Option A), which provides near-real-time replication meeting the RPO. Additionally, using AWS CloudFormation to automate infrastructure deployment in the DR region (Option C) enables rapid provisioning of the DR environment, meeting the RTO. Option B (Pilot Light with EC2 standby) may not meet the RTO if manual steps are required. Option D (AWS Backup with 15-minute schedules) is not suitable for SAP HANA databases and may not meet RTO. Option E (EBS snapshots every 15 minutes) is not feasible due to performance impact and recovery time.

Answer

Implement a Pilot Light strategy using EC2 instances in standby.

Answer

Use AWS Backup to schedule backups every 15 minutes.

Answer

Take EBS snapshots every 15 minutes.

Question 3

An SAP system on AWS is running on a single Availability Zone. The operations team wants to improve high availability. Which THREE actions should they take?

Accepted Answer

Use an Application Load Balancer to distribute traffic across AZs.. A: Use an Application Load Balancer to distribute traffic across AZs. This helps distribute traffic across multiple AZs, improving availability. D: Deploy SAP application servers in an Auto Scaling group across multiple AZs. This ensures that if one AZ fails, the application servers in other AZs continue to serve traffic. E: Configure the SAP database for Multi-AZ deployment. This provides a standby database in another AZ for automatic failover. B is incorrect because EBS volumes are AZ-specific and cannot be attached across AZs. C is incorrect because Elastic IP addresses are static public IPs and do not provide high availability across AZs on their own; they are typically used for failover within a single AZ.

Answer

Use EBS Multi-Attach to share volumes across AZs.

Answer

Assign Elastic IP addresses to instances for failover.

Question 4

An SAP administrator wants to automate the patching of SAP application servers. Which TWO AWS services can be used together to achieve this?

Accepted Answer

AWS Systems Manager Patch Manager. Options A and C are correct. AWS Systems Manager Patch Manager automates the patching of instances, and AWS Systems Manager Maintenance Windows schedules when the patching occurs. Option B (AWS Lambda) is incorrect because Lambda can orchestrate patching processes but does not directly patch. Option D (AWS OpsWorks) is incorrect as it is a configuration management service based on Chef/Puppet, not for direct patching automation. Option E (Amazon CloudWatch Alarms) is for monitoring and alerting, not patching.

Answer

AWS Lambda

Answer

AWS OpsWorks

Answer

Amazon CloudWatch Alarms

Question 5

A company is running SAP HANA on AWS. The system administrator notices that the SAP HANA database is frequently running out of memory, causing performance degradation. Which AWS service should the administrator use to set up memory usage alarms and automate scaling of the SAP HANA instance?

Accepted Answer

AWS Systems Manager. AWS Systems Manager. To scale a single SAP HANA instance vertically, the administrator can use CloudWatch to monitor memory usage (via custom metrics) and trigger an alarm that invokes an AWS Systems Manager Automation document. The Automation document can execute the 'modify-instance-type' step to change the EC2 instance type to one with more memory. Option D (Amazon CloudWatch and AWS Auto Scaling) is incorrect because AWS Auto Scaling is designed for horizontal scaling (adding/removing instances) and does not natively support vertical scaling of a single instance. Option B (AWS Lambda) could be part of a custom solution but is not the primary service for setting up alarms and scaling; Lambda alone does not provide monitoring or scaling orchestration. Option A (Amazon EC2 Auto Scaling) also focuses on horizontal scaling and is not suitable for vertical scaling.

Answer

Amazon EC2 Auto Scaling

Answer

AWS Lambda

Answer

Amazon CloudWatch and AWS Auto Scaling

Question 6

A company is running SAP on AWS and needs to ensure high availability for their SAP Central Services (ASCS) instance. They plan to use a multi-AZ deployment with a floating IP. Which AWS service should they use to manage the floating IP and failover?

Accepted Answer

Amazon Route 53. Amazon Route 53 can be used to associate a DNS name with a health check and failover to a secondary IP in another AZ. Option A is wrong because Elastic Load Balancer (ELB) is for distributing traffic, not for floating IPs. Option C is wrong because AWS Global Accelerator improves performance, not floating IP failover. Option D is wrong because Amazon CloudFront is a CDN.

Answer

Elastic Load Balancer

Answer

AWS Global Accelerator

Answer

Amazon CloudFront

Question 7

A company is running an SAP S/4HANA system on AWS. During a planned maintenance window, the operations team needs to apply an SAP kernel patch that requires stopping all SAP instances. Which AWS service can be used to orchestrate the stop/start sequence of multiple EC2 instances and ensure proper dependencies are maintained?

Accepted Answer

AWS Systems Manager Automation. (AWS Systems Manager Automation) is correct because it provides runbooks that can orchestrate the stop/start sequence of multiple EC2 instances with dependency management and error handling, ideal for SAP maintenance. Option B (AWS Step Functions) is less suitable because it requires custom Lambda functions to manage EC2 states, adding complexity. Option C (AWS CloudFormation) is for provisioning infrastructure, not ad-hoc operational tasks. Option D (Amazon EC2 Run Command) is for running individual commands on instances, not for orchestrating multi-step sequences with dependencies.

Answer

AWS Step Functions

Answer

AWS CloudFormation

Answer

Amazon EC2 Run Command

Question 8

A company runs SAP HANA on AWS and wants to implement a backup strategy using AWS Backint agent for SAP HANA. Which storage service is best suited for storing the backup files when using Backint?

Accepted Answer

Amazon S3. AWS Backint agent for SAP HANA is designed to stream backups directly to Amazon S3, making S3 the optimal storage service for backup files. Option B (Amazon EFS) is a file storage service not intended for Backint backups. Option A (Amazon S3 Glacier) is a cold archival storage, not suited for frequent backups. Option D (Amazon EBS) provides block storage for EC2 instances, not the target for Backint.

Answer

Amazon S3 Glacier

Answer

Amazon EFS

Answer

Amazon EBS

Question 9

An SAP Basis administrator is troubleshooting a slow-running SAP HANA query. The administrator wants to identify which SQL statements are consuming the most CPU time in the HANA database. Which SAP HANA view or tool should they query?

Accepted Answer

M_ACTIVE_STATEMENTS. (M_ACTIVE_STATEMENTS) is correct because this SAP HANA view provides real-time information about currently executing SQL statements, including their CPU time consumption. Option B (M_TABLES) is incorrect as it shows metadata about tables, not active queries. Option C (M_LOAD_HISTORY) is incorrect as it shows historical load data. Option D (M_SERVICE_REPLICATION) is incorrect as it displays replication status for services.

Answer

M_TABLES

Answer

M_LOAD_HISTORY

Answer

M_SERVICE_REPLICATION

Question 10

A company is running SAP on AWS and wants to automatically recover an unhealthy EC2 instance that hosts their SAP application. Which AWS feature should they configure to automatically restart the instance in the same Availability Zone if it fails?

Accepted Answer

EC2 Auto Recovery. (EC2 Auto Recovery) is correct because EC2 Auto Recovery automatically recovers an impaired EC2 instance in the same Availability Zone, which matches the requirement. Option A is wrong because a Cluster Placement Group is a logical grouping of instances within a single AZ to achieve low-latency network performance, not for automatic recovery. Option B is wrong because an Auto Scaling group is used for scaling and replacing instances based on demand, but it may launch instances in different AZs, not necessarily the same AZ. Option D is wrong because a Lifecycle Hook is used to perform custom actions when instances are launched or terminated by Auto Scaling, not for automatic recovery of a single instance.

Answer

Cluster Placement Group

Answer

Auto Scaling group

Answer

Lifecycle Hook

Question 11

An AWS administrator needs to monitor the CPU utilization of an EC2 instance running SAP NetWeaver. The instance type is r5.2xlarge. Which CloudWatch metric should the administrator use to track the CPU usage of the instance?

Accepted Answer

CPUUtilization. (CPUUtilization). CPUUtilization is a standard CloudWatch metric for EC2 instances that measures the percentage of allocated EC2 compute units that are currently in use. It is suitable for monitoring CPU usage of an EC2 instance running SAP NetWeaver. Option A (MemoryUtilization) is incorrect because memory utilization is not a default CloudWatch metric; it requires a custom agent. Option C (NetworkIn) measures network traffic, not CPU. Option D (DiskReadOps) measures disk I/O operations.

Answer

MemoryUtilization

Answer

NetworkIn

Answer

DiskReadOps

Question 12

A company runs SAP HANA on AWS and needs to perform a system copy from production to a test environment. The test environment is in a different AWS account. Which AWS service can be used to securely share the HANA backup files stored in Amazon S3 across accounts?

Accepted Answer

S3 bucket policy. S3 bucket policies can grant cross-account access to the backup files stored in Amazon S3. By attaching a bucket policy that allows the test account to access the backup objects, the company can securely share the files without needing to make them public. Option A (VPC Peering) is incorrect because it provides network connectivity between VPCs but does not grant access to S3 objects. Option B (S3 Transfer Acceleration) is incorrect because it only speeds up data transfer, not cross-account access. Option D (AWS Direct Connect) is incorrect because it provides a dedicated network connection but does not handle S3 access control.

Answer

VPC Peering

Answer

S3 Transfer Acceleration

Answer

AWS Direct Connect

Question 13

An organization runs SAP on AWS and needs to ensure that their SAP HANA database backups are encrypted at rest. Which AWS service should they use to manage the encryption keys?

Accepted Answer

AWS Key Management Service (KMS). AWS Key Management Service (KMS) is the managed service that allows you to create, control, and manage encryption keys for encrypting data at rest, including SAP HANA backups. Option B (CloudHSM) is a hardware security module for generating keys but is not the standard managed service for key management; KMS is more appropriate for this use case. Option C (IAM) is for identity and access management, not encryption key management. Option D (ACM) is for managing SSL/TLS certificates, not encryption keys for data at rest.

Answer

AWS CloudHSM

Answer

AWS Identity and Access Management (IAM)

Answer

AWS Certificate Manager

Question 14

A company is running SAP on AWS and needs to reduce the cost of their development and test systems. The systems are only needed during business hours on weekdays. Which AWS service can be used to automatically stop and start the EC2 instances on a schedule?

Accepted Answer

AWS Instance Scheduler. AWS Instance Scheduler is a solution that automatically stops and starts instances based on a schedule. Option B is wrong because Auto Scaling is for scaling, not scheduling. Option C is wrong because CloudWatch Alarms trigger based on metrics, not time-based schedules. Option D is wrong because Systems Manager Maintenance Windows are for patching and maintenance tasks, not scheduling stop/start.

Answer

Amazon EC2 Auto Scaling

Answer

Amazon CloudWatch Alarms

Answer

AWS Systems Manager Maintenance Windows

Question 15

A company runs SAP HANA on AWS and needs to implement a disaster recovery (DR) strategy. The DR site must have a Recovery Time Objective (RTO) of 30 minutes and a Recovery Point Objective (RPO) of 15 minutes. Which two AWS services should be used together to achieve these objectives? (Choose TWO.)

Accepted Answer

SAP HANA System Replication. To achieve an RTO of 30 minutes and RPO of 15 minutes for SAP HANA on AWS, the best combination is SAP HANA System Replication (HSR) and AWS CloudEndure Disaster Recovery. HSR provides near-synchronous replication, enabling an RPO of seconds and rapid failover, meeting the RTO. CloudEndure offers continuous replication at the server level, with sub-second RPO and fast recovery, complementing HSR for additional disaster recovery scenarios. Option A (AWS DMS) is for database migration, not DR. Option D (Amazon S3) is for object storage, not suitable for real-time replication. Option E (Amazon EBS snapshots) cannot achieve a 15-minute RPO because automated snapshot schedules have a minimum interval of 1 hour, and restoring from snapshots takes time exceeding the 30-minute RTO.

Answer

AWS Database Migration Service

Answer

Amazon S3

Answer

Amazon EBS snapshots