PAS-C01 Operations and Maintenance Practice Test 32 — 15 Questions

Question 1

A company runs SAP on AWS and uses a Multi-AZ RDS for SAP ASE database. The operations team receives an alert that the database instance failed over automatically. After the failover, the SAP application servers are unable to connect to the database. The team checks the RDS console and sees that the DB instance status is 'available' and the endpoint is the same as before. The security groups and network ACLs have not changed. What is the MOST likely reason for the connectivity issue?

Accepted Answer

The application servers have cached the old database IP address and need to flush DNS.. Option A is correct because after a failover, the DNS record for the RDS endpoint is updated to point to the new primary, but the application may still be using the old IP due to DNS caching. Option B is wrong because the endpoint remains the same. Option C is wrong because Multi-AZ failover updates the DNS record. Option D is wrong because the failover does not change the security group.

Answer

The RDS endpoint changed after the failover.

Answer

The DNS record for the RDS endpoint did not update after the failover.

Answer

The security group for the database instance no longer allows traffic from the application servers.

Question 2

A company is running an SAP HANA database on an EC2 instance. The operations team notices that the SAP application is responding slowly during peak hours. CloudWatch metrics show high CPU utilization and increased swap usage. Which combination of actions should the team take to resolve the performance issue?

Accepted Answer

Resize the EC2 instance to a larger instance type with more vCPUs and memory.. Option C is correct because increasing memory reduces swap usage, and increasing CPU capacity addresses high CPU utilization. Option A is wrong because vertical scaling is often the simplest approach for a single HANA instance. Option B is wrong because adding more EBS volumes does not address CPU or memory. Option D is wrong because changing instance type to memory-optimized is the correct approach, not compute-optimized.

Answer

Enable Auto Scaling for the EC2 instance to automatically add more instances.

Answer

Change the instance type to a compute-optimized instance to improve CPU performance.

Answer

Add more EBS volumes and increase the number of read replicas.

Question 3

An SAP system administrator notices that the SAP Central Services (ASCS) instance on an EC2 instance has failed. The instance is still running, but the ASCS service is unresponsive. What is the MOST efficient way to restore the ASCS service without affecting the SAP application?

Accepted Answer

Restart the ASCS service using SAP MMC or sapcontrol.. Option B is correct because restarting the ASCS service via SAP MMC is the quickest and least impactful method. Option A is wrong because rebooting the instance takes longer and may affect other services. Option C is wrong because restoring from backup is time-consuming and unnecessary. Option D is wrong because failing over to the secondary node requires a complete environment and may introduce complexity if not already configured.

Answer

Manually fail over the ASCS to the secondary node in the cluster.

Answer

Reboot the EC2 instance hosting the ASCS.

Answer

Restore the ASCS instance from the most recent AMI backup.

Question 4

A company is running SAP on AWS and needs to automate OS-level patching for their SAP application servers. Which AWS service should they use to schedule and apply patches?

Accepted Answer

AWS Systems Manager Patch Manager. Option A is correct because AWS Systems Manager Patch Manager is designed for automated patching of EC2 instances. Option B is wrong because CloudWatch is for monitoring, not patching. Option C is wrong because OpsWorks is for configuration management but not primarily for patching. Option D is wrong because EC2 Auto Scaling does not handle patching.

Answer

Amazon CloudWatch Events

Answer

AWS OpsWorks

Answer

Amazon EC2 Auto Scaling

Question 5

An SAP Basis administrator needs to monitor the health of SAP application servers running on EC2. The administrator wants to receive alerts when a server becomes unreachable or when critical SAP processes stop. Which AWS service should be used to create a custom dashboard and set up alarms?

Accepted Answer

Amazon CloudWatch. Option B is correct because CloudWatch can monitor EC2 instances and create alarms based on custom metrics, including process status. Option A is wrong because CloudTrail is for auditing API calls. Option C is wrong because Config is for resource compliance. Option D is wrong because Trusted Advisor provides best-practice checks but not custom monitoring.

Answer

AWS CloudTrail

Answer

AWS Config

Answer

AWS Trusted Advisor

Question 6

A company runs SAP HANA on AWS using a multi-node scale-out configuration. During a routine maintenance window, the administrator needs to apply an HANA database software update. What is the BEST practice to minimize downtime?

Accepted Answer

Perform a rolling update by updating one node at a time while keeping the system operational.. Option C is correct because HANA scale-out supports rolling updates, allowing nodes to be updated one by one with minimal downtime. Option A is wrong because stopping all services causes full downtime. Option B is wrong because using HSR failover is complex and may cause data inconsistency if not properly managed. Option D is wrong because creating a new cluster and migrating is not efficient for a minor update.

Answer

Use HANA System Replication to fail over to a standby system, then update the primary.

Answer

Stop all HANA services, apply the update to all nodes, then restart.

Answer

Create a new HANA cluster with the updated version and migrate data.

Question 7

An SAP administrator is troubleshooting a network connectivity issue between an SAP application server and an SAP HANA database, both running on EC2 in the same VPC. The security groups allow traffic on port 3xx15 and 3xx17. Which TWO steps should the administrator take to diagnose the problem?

Accepted Answer

Check the route tables to ensure the subnets can communicate.. Options B and D are correct. Verifying network ACLs is important because they can block traffic even if security groups allow it. Checking route tables ensures that subnets are properly connected. Option A is wrong because VPC Flow Logs are useful for analysis but not the first step. Option C is wrong because NACLs are stateless and need both inbound and outbound rules. Option E is wrong because internet gateway is not needed for internal traffic.

Answer

Check that the security groups have outbound rules that allow return traffic.

Answer

Ensure the internet gateway is attached to the VPC.

Answer

Enable VPC Flow Logs and analyze logs for dropped packets.

Question 8

A company runs SAP ERP on AWS. The system includes a primary application server and a secondary application server for high availability. The secondary server is not receiving updates from the primary. Which THREE steps should the administrator take to investigate?

Accepted Answer

Verify network connectivity between the primary and secondary servers using ping or telnet on SAP ports.. Options B, C, and D are correct. Checking the SAP enqueue replication status (B) verifies that locks are being replicated. Reviewing the SAP message server logs (C) can show communication errors. Verifying network connectivity between servers (D) is fundamental. Option A is wrong because the SAP Gateway is not directly related to replication. Option E is wrong because the secondary server should not be restarted without investigation.

Answer

Restart the secondary application server to force a resync.

Answer

Check the SAP Gateway service status on the primary server.

Question 9

An SAP administrator is setting up backup for an SAP HANA database running on an EC2 instance. The database is 1 TB in size. Which TWO AWS services can be used to create a cost-effective backup strategy?

Accepted Answer

AWS Backup. Options B and E are correct. AWS Backup is a managed service that can back up EBS volumes, and EBS snapshots are a direct way to back up the database volumes. Option A is wrong because S3 is not directly used for HANA backups without additional tools. Option C is wrong because Storage Gateway is for on-premises integration. Option D is wrong because DMS is for migration, not backup.

Answer

AWS Database Migration Service (DMS)

Answer

AWS Storage Gateway

Answer

Amazon S3 with lifecycle policies

Question 10

A company runs SAP S/4HANA on AWS. The environment includes an SAP HANA database on an EC2 instance with multiple EBS volumes for data, log, and backup. The backup strategy uses AWS Backup to create daily snapshots of all EBS volumes. During a disaster recovery test, the team discovers that the snapshots are not crash-consistent and the database cannot be restored to a consistent state. The backup window is set to 2 AM daily. What should the team do to ensure crash-consistent backups?

Accepted Answer

Configure AWS Backup to create multi-volume crash-consistent snapshots for the instance.. Option B is correct. To achieve crash consistency across multiple EBS volumes attached to a single instance, the volumes should be snapshotted together using the same snapshot request. AWS Backup can be configured to create multi-volume snapshots. Option A is wrong because stopping the instance causes downtime. Option C is wrong because individual snapshots are not crash-consistent across volumes. Option D is wrong because HANA backup to S3 does not address the EBS snapshot consistency issue.

Answer

Use SAP HANA backup to S3 instead of EBS snapshots for database backups.

Answer

Take individual EBS snapshots of each volume sequentially within the backup window.

Answer

Stop the EC2 instance before the backup window and start it after the snapshots complete.

Question 11

A company runs SAP ERP on AWS using a single Availability Zone. The system includes an SAP HANA database on an EC2 instance with 2 TB of memory. The operations team plans to perform a major version upgrade of the SAP HANA database, which requires approximately 4 hours of downtime. The company's SLA allows a maximum of 2 hours of downtime. The team decides to use a blue/green deployment strategy by creating a new HANA instance in a different Availability Zone and replicating data using HANA System Replication (HSR). After setting up replication, they perform a failover to the new instance. However, the failover takes 3 hours due to the large amount of data that needs to be synchronized. What should the team do to meet the 2-hour downtime requirement?

Accepted Answer

Use HANA System Replication with initial snapshot by taking a backup of the source, restoring on the target, and then setting up replication.. Option C is correct. Using initial snapshot with HSR reduces the initial sync time significantly because it avoids copying all data over the network. Instead, the snapshot is restored on the target and then replication catches up. Option A is wrong because increasing bandwidth may help but not enough for 2 TB of memory; the initial sync will still take hours. Option B is wrong because multi-AZ for RDS is for RDS databases, not for self-managed HANA on EC2. Option D is wrong because scaling up the source does not help; the issue is data transfer time.

Answer

Scale up the source HANA instance to a larger instance type to speed up replication.

Answer

Increase the network bandwidth between the two Availability Zones to 10 Gbps.

Answer

Use Amazon RDS for SAP HANA instead of self-managed EC2.

Question 12

A company runs SAP Business Suite on AWS. The SAP application servers are behind an Application Load Balancer (ALB). The operations team notices that occasionally, some requests fail with HTTP 503 errors. The team checks the ALB and finds that the target group has healthy instances. The SAP application logs show no errors. What is the most likely cause of the 503 errors?

Accepted Answer

The ALB connection draining timeout is set too low, causing requests to be routed to instances that are being de-registered.. Option A is correct. If the ALB connection draining timeout is too short, the ALB may send requests to instances that are being de-registered, resulting in 503 errors. Option B is wrong because if instances were unhealthy, the ALB would not route traffic to them. Option C is wrong because SSL issues would cause other errors, not necessarily 503. Option D is wrong because security group misconfigurations would typically cause connection timeouts, not 503 errors.

Answer

The security groups for the application servers do not allow traffic from the ALB.

Answer

The SSL certificate on the ALB has expired.

Answer

The target group health checks are misconfigured, marking instances as healthy when they are not.

Question 13

A company runs SAP S/4HANA on AWS. The system uses an SAP HANA database with a single EC2 instance. The operations team needs to implement a disaster recovery (DR) strategy with a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 1 hour. The DR site is in a different AWS Region. The team currently takes daily EBS snapshots and sends them to the DR region using AWS Backup cross-region copy. However, the RPO is not met because snapshots are only taken daily. Which combination of actions should the team take to meet the RPO and RTO?

Accepted Answer

Set up HANA System Replication (HSR) between the primary and DR regions. In the DR region, maintain a standby HANA instance in sync. Use automated failover scripts.. Option B is correct. HANA System Replication provides near-continuous data replication, meeting the 15-minute RPO. For RTO, having a pre-provisioned HANA instance in the DR region and using automated failover procedures can achieve 1-hour RTO. Option A is wrong because increasing snapshot frequency to every hour still does not meet 15-minute RPO and RTO may be longer due to snapshot restore time. Option C is wrong because EBS replication does not guarantee database consistency. Option D is wrong because CloudEndure is designed for server-level replication but may not be optimized for HANA and could impact performance.

Answer

Increase the frequency of EBS snapshots to every hour and use cross-region copy. Also, pre-warm the DR instance by restoring the latest snapshot.

Answer

Use AWS CloudEndure Disaster Recovery to replicate the entire EC2 instance to the DR region.

Answer

Use Amazon EBS multi-region replication for the HANA data volumes.

Question 14

A company runs SAP HANA on AWS using a clustered environment with two EC2 instances in an active/passive configuration. The cluster uses a shared EFS file system for the SAP HANA shared volume. The operations team recently migrated the EFS file system from the previous generation to Elastic Throughput mode to improve performance. After the migration, the HANA database becomes unresponsive intermittently. The team notices that the EFS mount target is in a different Availability Zone than the active HANA instance. What is the most likely cause of the unresponsiveness?

Accepted Answer

The EFS mount target is in a different Availability Zone than the active HANA instance, causing high latency and potential timeouts.. Option B is correct. EFS access from a different Availability Zone incurs cross-AZ data transfer costs and higher latency, which can cause performance issues and timeouts for HANA. Option A is wrong because HANA does not require provisioned IOPS for shared storage; EFS is suitable. Option C is wrong because Elastic Throughput mode is designed to handle variable workloads. Option D is wrong because HANA does not block a certain number of concurrent connections to EFS; the issue is latency.

Answer

The EFS file system does not provide sufficient IOPS for HANA workloads.

Answer

The EFS Elastic Throughput mode is throttling the HANA database traffic.

Answer

The EFS file system has reached its maximum number of concurrent connections.

Question 15

A company is running SAP on AWS and needs to monitor the available memory on their SAP application servers. Which AWS service can be used to collect and visualize memory utilization metrics?

Accepted Answer

Amazon CloudWatch with CloudWatch Agent. Amazon CloudWatch with the CloudWatch Agent is the correct choice because the agent can be installed on EC2 instances to collect custom metrics, including memory utilization, which is not available by default from the hypervisor. The agent sends these metrics to CloudWatch, where you can visualize them using dashboards or set alarms. This directly addresses the need to monitor SAP application server memory on AWS.

Answer

AWS Config

Answer

Amazon Inspector

Answer

AWS CloudTrail