PAS-C01 Operations and Maintenance Practice Test 29 — 15 Questions

Question 1

A company is using SAP HANA in a multi-node scale-out configuration on AWS. The operations team needs to automate the patching of the operating system on all nodes with minimal downtime. Which approach is most suitable?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use a rolling patching strategy: patch one node at a time after isolating it from the HANA cluster.. In a multi-node SAP HANA scale-out configuration, a rolling patching strategy is essential to maintain high availability and minimize downtime. By isolating one node at a time from the HANA cluster, patching its OS, and then reintegrating it, the remaining nodes continue to serve the workload. This approach aligns with SAP's recommended maintenance procedures for scale-out systems.

Answer

Stop all HANA nodes, patch the OS on each node, then start them all together.

Answer

Create new EC2 instances from a patched AMI and terminate the old ones.

Answer

Use AWS Systems Manager Patch Manager to apply patches to all nodes simultaneously.

Question 2

A company wants to automate the backup of SAP HANA databases running on AWS. Which combination of AWS services is suitable for this task?

Accepted Answer

AWS Backup and the SAP HANA Backint agent. AWS Backup integrates with the SAP HANA Backint agent to automate HANA-specific backups, ensuring consistency and managing backup lifecycle. Option B is wrong because EBS snapshots alone cannot guarantee HANA database consistency. Option C is wrong because S3 and Glacier are storage services, not automation or backup orchestration. Option D is wrong because CloudWatch Events and Lambda can trigger actions but do not provide native HANA backup functionality.

Answer

Amazon EBS snapshots and AWS Lambda

Answer

Amazon S3 and Amazon Glacier

Answer

Amazon CloudWatch Events and AWS Lambda

Question 3

An SAP system running on AWS is experiencing intermittent connectivity issues between the application server and the database server. Both servers are in the same VPC but different subnets. The security groups and network ACLs are correctly configured. Which AWS service can help diagnose the network path and identify packet loss?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture IP traffic information to and from network interfaces in a VPC. They can be used to diagnose connectivity issues by showing accepted and rejected traffic, helping identify packet loss or blocked traffic. Since security groups and NACLs are correctly configured, Flow Logs can reveal if packets are reaching the destination or being dropped.

Answer

AWS Direct Connect

Answer

AWS CloudTrail

Answer

AWS Site-to-Site VPN

Question 4

A company is running SAP on AWS and wants to ensure that the system meets the SLA for availability. The operations team needs to monitor the health of the SAP application stack (ASCS, PAS, DB). Which AWS service can provide a centralized dashboard to visualize the health and performance metrics?

Accepted Answer

Amazon CloudWatch Dashboards. Amazon CloudWatch Dashboards allow you to create customizable, centralized views of metrics from multiple AWS services and on-premises resources. For SAP on AWS, you can monitor the health and performance of the ASCS, PAS, and DB instances by collecting metrics such as CPU, memory, disk I/O, and custom application metrics, and visualizing them in a single dashboard. This meets the requirement for a centralized dashboard.

Answer

AWS CloudTrail

Answer

AWS Config

Answer

Amazon S3

Question 5

Which TWO actions are recommended to ensure high availability for SAP NetWeaver on AWS? (Choose 2).

Accepted Answer

Use an Application Load Balancer with health checks to distribute traffic.. Option A is correct because an Application Load Balancer (ALB) performs health checks on registered targets and automatically routes traffic only to healthy SAP NetWeaver application instances, removing failed nodes from rotation and thus maintaining service availability. Option D is correct because deploying SAP application instances across multiple Availability Zones provides fault isolation — if one AZ experiences an outage, instances in the other AZ continue serving requests, which is the foundation of a highly available architecture on AWS. Option B is incorrect because confining resources to a single Availability Zone creates a single point of failure, which is the opposite of high availability. Option C is incorrect because EBS snapshots address data durability and backup/recovery, not continuous service availability during an instance or AZ failure. Option E is incorrect because t2 burstable instances are not certified or recommended for production SAP NetWeaver workloads and do not provide the performance or availability characteristics required.

Answer

Use a single Availability Zone to reduce latency.

Answer

Take frequent EBS snapshots to ensure data durability.

Answer

Use t2 instance types to reduce cost.

Question 6

Which THREE steps should be taken to monitor the performance of an SAP HANA database on AWS? (Choose 3).

Accepted Answer

Install the CloudWatch agent on the EC2 instance to collect memory and disk metrics.. Option A is correct because installing the CloudWatch agent on the EC2 instance enables the collection of guest-level OS metrics such as memory utilization and disk usage, which are not available by default from the hypervisor and are essential for monitoring SAP HANA performance. Option D is correct because SAP HANA is heavily I/O dependent, and monitoring EBS volume queue length and IOPS via CloudWatch helps detect storage bottlenecks that directly affect HANA throughput and response times. Option E is correct because configuring CloudWatch alarms on SAP HANA metrics such as CPU and memory usage provides proactive notification when thresholds are breached, allowing timely remediation before performance degrades. Option B is not appropriate because AWS Direct Connect is a dedicated network connectivity service, not a monitoring tool for network latency, and it is unrelated to HANA performance monitoring. Option C is not appropriate because AWS CloudTrail records AWS API activity for auditing and governance, not database-level performance metrics of SAP HANA.

Answer

Set up AWS Direct Connect to monitor network latency.

Answer

Enable AWS CloudTrail to track all API calls to the HANA database.

Question 7

A company runs a critical SAP ERP system on AWS. The system consists of a single EC2 instance running SAP NetWeaver with an Oracle database on the same instance. The instance type is r5.4xlarge with 500 GB gp2 EBS volume for the database. The operations team receives a CloudWatch alarm that the EBS volume's 'BurstBalance' metric has dropped to 0%. Consequently, the database performance degrades significantly. The team needs to resolve the issue and prevent recurrence. The SAP system cannot tolerate more than 10 minutes of downtime. The budget is limited. Which action should the team take?

Accepted Answer

Change the EBS volume type from gp2 to gp3 and increase the IOPS and throughput settings as needed.. The correct action is C: change the EBS volume type from gp2 to gp3 and increase the IOPS and throughput settings as needed. The BurstBalance dropping to 0% indicates the gp2 volume has exhausted its burst credits, so performance is now limited to its baseline IOPS; gp3 provides independently provisioned baseline IOPS and throughput without relying on burst credits, and it can be modified in place with no downtime beyond the short volume modification window, fitting the 10-minute tolerance and limited budget. Option A (io2 Block Express) would resolve performance but is significantly more expensive and unnecessary for this workload. Option B (RAID 0 striping) adds complexity and cost and does not directly address the gp2 burst-credit exhaustion. Option D (resizing to 1000 GB) would raise gp2 baseline IOPS and credits, but it is a larger, costlier change than switching to gp3 with provisioned performance.

Answer

Migrate the database to an io2 Block Express volume with provisioned IOPS.

Answer

Add additional EBS volumes and configure RAID 0 striping to increase IOPS.

Answer

Increase the volume size to 1000 GB to increase baseline IOPS and burst credits.

Question 8

A company runs a production SAP HANA database on AWS using an EC2 instance with EBS volumes. The database is experiencing high latency during peak hours. The operations team needs to identify the root cause. Which steps should the team take to diagnose the issue?

Accepted Answer

Monitor the EBS volume queue length and latency using Amazon CloudWatch metrics.. Amazon CloudWatch provides metrics such as EBS volume queue length (depth) and average latency, which are key indicators of I/O bottlenecks. High queue depth with corresponding latency spikes suggests that the EBS volume is overwhelmed and needs adjustment (e.g., switching to Provisioned IOPS). Option A is incorrect because migrating to Provisioned IOPS without diagnosing the root cause may not solve the issue and increases cost unnecessarily. Option C is incorrect because moving SAP HANA to Amazon RDS for SAP is not a direct solution for latency and introduces migration complexity. Option D is incorrect because increasing instance size without analyzing I/O patterns may not address the bottleneck and can also increase costs.

Answer

Migrate the EBS volumes to Provisioned IOPS SSD (io1) immediately.

Answer

Move the SAP HANA database to Amazon RDS for SAP.

Answer

Increase the instance size to improve performance.

Question 9

An SAP system on AWS is configured with a Multi-AZ deployment for high availability. During a failover test, the operations team notices that the secondary instance does not take over correctly. What is the most likely cause?

Accepted Answer

The route tables or security groups do not allow traffic to the secondary instance.. In a Multi-AZ SAP deployment on AWS, the standby/secondary instance must be reachable over the network for the failover mechanism (e.g., SAP ASCS/ERS cluster with Pacemaker or SIOS) to promote it and redirect clients. If route tables or security groups don't permit traffic to the secondary ENI/instance, the cluster heartbeat or client redirection fails, so the secondary never takes over. This is the most common misconfiguration in SAP HA setups on AWS.

Answer

The SAP application layer is not configured to retry connections.

Answer

The CloudWatch alarm thresholds for failover are set too high.

Answer

The secondary instance's IP address is not automatically updated in DNS.

Question 10

An operations team is responsible for patching the operating system of SAP EC2 instances. They want to automate the patching process while minimizing downtime. Which approach should they use?

Accepted Answer

Use AWS Systems Manager Patch Manager with a maintenance window and a patch baseline.. The correct option is B: AWS Systems Manager Patch Manager with a maintenance window and a patch baseline. Patch Manager automates OS patching across EC2 instances using defined patch baselines (which specify approved patches and auto-approval rules), while maintenance windows schedule the patching during controlled timeframes to minimize downtime; it also supports SAP instances via SSM Agent and can use pre/post scripts for stop/start orchestration. Option A is not ideal because AWS OpsWorks is a configuration management service (Chef/Puppet) and is not the purpose-built patching automation tool, adding unnecessary complexity. Option C is manual and error-prone, contradicting the automation goal. Option D replaces instances via a baked AMI but does not automate ongoing OS patching and can cause disruption for stateful SAP workloads.

Answer

Deploy a configuration management tool like AWS OpsWorks to apply patches.

Answer

Schedule a weekly maintenance window and manually apply patches via RDP/SSH.

Answer

Create an Auto Scaling group with a custom AMI that includes the latest patches.

Question 11

A company runs its SAP landscape on AWS and uses an Application Load Balancer (ALB) to distribute traffic to multiple web dispatchers. The operations team notices that some requests are failing with 503 errors. What is the most likely cause?

Accepted Answer

The target group health checks are failing, causing the ALB to mark instances as unhealthy.. An ALB returns HTTP 503 (Service Unavailable) when no healthy targets are available in the target group to receive the request. If the target group health checks are failing — due to misconfigured health check paths, ports, or unhealthy web dispatcher instances — the ALB marks all targets as unhealthy and returns 503 to clients. This is the most common cause of 503 errors behind an ALB.

Answer

The security groups for the ALB are blocking incoming traffic.

Answer

The SSL certificate on the ALB has expired.

Answer

The CloudFront distribution in front of the ALB is misconfigured.

Question 12

An SAP system administrator needs to monitor the CPU and memory utilization of SAP EC2 instances. Which TWO AWS services can be used to collect and visualize these metrics? (Choose TWO.)

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch (B) is correct because it natively collects EC2 metrics such as CPUUtilization and, via the CloudWatch agent, memory metrics like mem_used_percent, and it can visualize them in dashboards and trigger alarms. Amazon Managed Service for Prometheus (D) is correct because it is a managed, Prometheus-compatible monitoring service that can scrape and store EC2 CPU/memory metrics (e.g., via node_exporter) and visualize them with Grafana. AWS Trusted Advisor (A) is not correct because it provides best-practice checks and recommendations, not time-series metric collection or visualization. AWS CloudTrail (C) is not correct because it records API activity and audit events, not resource utilization metrics. AWS Config (E) is not correct because it tracks resource configuration changes and compliance, not CPU or memory performance data.

Answer

AWS Trusted Advisor

Answer

AWS CloudTrail

Answer

AWS Config

Question 13

An SAP Basis administrator needs to apply security patches to the operating system of SAP EC2 instances. The administrator wants to use AWS Systems Manager Patch Manager. Which THREE steps are required to set up patching? (Choose THREE.)

Accepted Answer

Create a patch baseline in AWS Systems Manager.. Option A is correct because a patch baseline in AWS Systems Manager defines which patches are approved or rejected for the target operating system, and Patch Manager requires an appropriate baseline (default or custom) to determine what gets installed. Option C is correct because the SSM Agent must be installed and running on each EC2 instance so Systems Manager can send the Run Command documents that perform patching; instances also need an IAM instance profile allowing Systems Manager actions. Option E is correct because Patch Manager typically applies patches through a maintenance window, which schedules and targets the registered instances with the AWS-RunPatchBaseline document. Option B is not required because Patch Manager uses Systems Manager Run Command and documents rather than a customer-created Lambda function. Option D is not required because patch logs are stored by default in Amazon S3 and can optionally be sent to CloudWatch Logs, but CloudWatch Logs configuration is not a mandatory setup step.

Answer

Create an AWS Lambda function to invoke the patching process.

Answer

Configure Amazon CloudWatch Logs to store patch logs.

Question 14

An operations team receives an alert that an SAP application server EC2 instance is unreachable. The team checks the AWS Management Console and sees that the instance status check shows "Instance reachability check failed". What is the most likely cause?

Accepted Answer

The operating system on the instance is not responding.. An EC2 status check of 'Instance reachability check failed' specifically indicates that the instance's operating system is not responding to the hypervisor's network and CPU checks. This is distinct from a system status check failure (which indicates AWS infrastructure issues). The most likely cause is that the OS is hung, crashed, or otherwise unresponsive.

Answer

The security group associated with the instance is blocking all traffic.

Answer

The EBS root volume is detached from the instance.

Answer

The instance was stopped by an Auto Scaling group.

Question 15

A company runs its SAP S/4HANA system on AWS with a production environment consisting of a primary SAP HANA database on an r5.8xlarge instance and a secondary HANA instance for high availability in a different Availability Zone. The application tier includes multiple EC2 instances behind an Application Load Balancer. The operations team uses AWS Backup to create nightly snapshots of the HANA data volumes and stores them in a separate backup vault. Recently, a storage administrator accidentally deleted a critical SAP transport file from the HANA primary instance. The team needs to restore the file as quickly as possible with minimal data loss. The last backup completed 6 hours ago, and the file was deleted 2 hours ago. The team has enabled HANA backup logging to S3 every 30 minutes. Which option provides the fastest recovery with minimal data loss?

Accepted Answer

Restore the specific transport file from the HANA log backup stored in S3.. Restoring the specific transport file from the HANA log backup stored in S3 is the fastest method, recovering data up to the last log backup (30-minute RPO), minimizing data loss. Option B is incorrect because restoring from the nightly AWS Backup snapshot would result in losing 6 hours of data, which is not minimal. Option C is incorrect because re-importing the transport file from the original development system would require additional export steps and coordination, and the file might not be available in the same state, leading to delays and potential data loss. Option D is incorrect because the secondary HANA instance replicates all data changes, so the deletion would have been replicated as well, and failing over would not recover the file but would incur unnecessary downtime.

Answer

Restore the entire HANA data volume from the last AWS Backup snapshot.

Answer

Re-import the transport file from the original development system.

Answer

Fail over to the secondary HANA instance and retrieve the file from there.