Question 1mediummultiple choice
Read the full Technology explanation →PAS-C01 Technology • Complete Question Bank
Complete PAS-C01 Technology question bank — all 0 questions with answers and detailed explanations.
Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:PutObject"
],
"Resource": "arn:aws:s3:::my-bucket/*",
"Condition": {
"IpAddress": {
"aws:SourceIp": "10.0.0.0/16"
}
}
}
]
}Refer to the exhibit. Health check failed on target group 'tg-app' with the following: - Target: i-0abc123def456 (10.0.1.5:8080) - Health check protocol: HTTP - Health check path: /health - Health check response: 503 Service Unavailable - The application logs show: "Health check endpoint /health is returning 503 due to database connection timeout."
Refer to the exhibit.
```json
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::123456789012:role/CrossAccountRole"
},
"Action": "s3:PutObject",
"Resource": "arn:aws:s3:::my-bucket/logs/*",
"Condition": {
"StringEquals": {
"s3:x-amz-acl": "bucket-owner-full-control"
}
}
}
]
}
```Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag a concept onto its matching description — or click a concept then click the description.
Shared file storage for SAP NetWeaver
High-performance NFS for SAP HANA
Centralized backup management for SAP workloads
DNS resolution for SAP systems
Drag a concept onto its matching description — or click a concept then click the description.
Automatically adjusts capacity of SAP application servers
DNS failover and health checks
Distributes traffic across SAP instances
Infrastructure as code for multi-AZ deployment
Drag a concept onto its matching description — or click a concept then click the description.
Track SAP license usage and compliance
Patch management and automation for SAP instances
Monitoring SAP metrics and logs
Best practice checks for SAP on AWS
Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:StartInstances",
"ec2:StopInstances",
"ec2:RebootInstances"
],
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*",
"Condition": {
"StringEquals": {
"ec2:ResourceTag/Environment": "Production"
}
}
},
{
"Effect": "Deny",
"Action": "ec2:TerminateInstances",
"Resource": "*"
}
]
}Refer to the exhibit. Error: 'SAPHostAgent' is not installed on instance i-0abcd1234efgh5678. Please install the SAP Host Agent before configuring the SAP system.
Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:Describe*",
"ec2:StartInstances",
"ec2:StopInstances"
],
"Resource": "*"
},
{
"Effect": "Deny",
"Action": "ec2:TerminateInstances",
"Resource": "*"
}
]
}
```Refer to the exhibit.
```
{
"Sid": "Stmt1234567890",
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::123456789012:role/SAPAdminRole"
},
"Action": "sts:AssumeRole",
"Resource": "arn:aws:iam::123456789012:role/CrossAccountBackupRole"
}
```Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:DescribeInstances",
"ec2:StartInstances",
"ec2:StopInstances"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "ec2:TerminateInstances",
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*"
}
]
}Refer to the exhibit. 2023-05-15T10:30:00Z ERROR [pool-12-thread-1] com.sap.hana.di: Rowid: 12345, Error: 100 Could not execute 'INSERT INTO "SAPSR3"."BKPF" VALUES ( ... )' SQLState: 42000: [SAP AG][LIBODBCHDB SOAP][HDBODBC] General error;258: authentication failed: invalid user or password
Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:PutObject",
"Resource": "arn:aws:s3:::my-bucket/backups/*",
"Condition": {
"StringEquals": {
"s3:x-amz-server-side-encryption": "aws:kms"
}
}
}
]
}Refer to the exhibit.
Resources:
SAPEC2Instance:
Type: AWS::EC2::Instance
Properties:
ImageId: ami-0abcdef1234567890
InstanceType: r5.4xlarge
BlockDeviceMappings:
- DeviceName: /dev/xvda
Ebs:
VolumeSize: 50
VolumeType: gp3
Encrypted: true
NetworkInterfaces:
- DeviceIndex: 0
GroupSet:
- !Ref SecurityGroupRefer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:DescribeInstances",
"ec2:StartInstances",
"ec2:StopInstances"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:PutObject"
],
"Resource": "arn:aws:s3:::sap-backup-bucket/*"
},
{
"Effect": "Deny",
"Action": "*",
"Resource": "*",
"Condition": {
"Bool": {
"aws:SecureTransport": "false"
}
}
}
]
}
```Refer to the exhibit.
```
Resources:
MySAPInstance:
Type: AWS::EC2::Instance
Properties:
InstanceType: r5.2xlarge
ImageId: ami-0abcdef1234567890
BlockDeviceMappings:
- DeviceName: /dev/xvda
Ebs:
VolumeSize: 50
VolumeType: gp2
```Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:Describe*",
"ec2:StartInstances",
"ec2:StopInstances",
"ec2:TerminateInstances"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"ec2:ResourceTag/Environment": "Production"
}
}
},
{
"Effect": "Deny",
"Action": "ec2:TerminateInstances",
"Resource": "*",
"Condition": {
"StringEquals": {
"ec2:ResourceTag/Environment": "Production"
}
}
}
]
}Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:PutObject",
"Resource": "arn:aws:s3:::sap-backup-bucket/*",
"Condition": {
"StringEquals": {
"s3:x-amz-server-side-encryption": "AES256"
}
}
}
]
}{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:PutObject",
"Resource": "arn:aws:s3:::my-sap-backup/*"
},
{
"Effect": "Allow",
"Action": [
"ec2:DescribeInstances",
"ec2:CreateSnapshot"
],
"Resource": "*"
}
]
}An SAP administrator is trying to set up an AWS CLI script that queries EC2 instance metadata. The script runs on an EC2 instance with an IAM role attached. The IAM role has the following policy:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "ec2:DescribeInstances",
"Resource": "*"
}
]
}What is the most likely cause of the error?
Refer to the exhibit. "Error: 'SAP' is not authorized to perform: ec2:DescribeInstances on resource: arn:aws:ec2:us-east-1:123456789012:instance/*"
Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:PutObject"
],
"Resource": "arn:aws:s3:::sap-backup-bucket/*"
},
{
"Effect": "Allow",
"Action": [
"kms:Decrypt",
"kms:GenerateDataKey"
],
"Resource": "arn:aws:kms:us-east-1:123456789012:key/abc123-..."
}
]
}Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "ec2:RunInstances",
"Resource": "*",
"Condition": {
"StringEquals": {
"ec2:InstanceType": ["r5.4xlarge", "r5.8xlarge"]
}
}
},
{
"Effect": "Allow",
"Action": "ec2:RunInstances",
"Resource": "arn:aws:ec2:*:*:volume/*",
"Condition": {
"StringEquals": {
"ec2:VolumeType": "gp3"
}
}
},
{
"Effect": "Allow",
"Action": "ec2:RunInstances",
"Resource": "arn:aws:ec2:*:*:network-interface/*"
}
]
}
```Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:DescribeInstances",
"ec2:StartInstances",
"ec2:StopInstances"
],
"Resource": "*"
},
{
"Effect": "Deny",
"Action": "ec2:TerminateInstances",
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*"
},
{
"Effect": "Allow",
"Action": "ec2:TerminateInstances",
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/i-1234567890abcdef0"
}
]
}Refer to the exhibit. SAP HANA backup log: 2023-06-01 01:00:00 - Backup started 2023-06-01 01:05:00 - Error: 'Cannot allocate memory' during backup of /hana/data 2023-06-01 01:05:30 - Backup failed
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "ec2:Describe*",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"ec2:StartInstances",
"ec2:StopInstances"
],
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*",
"Condition": {
"StringEquals": {
"ec2:ResourceTag/Environment": "non-production"
}
}
}
]
}{
"AWSTemplateFormatVersion": "2010-09-09",
"Resources": {
"SAPApplicationServer": {
"Type": "AWS::EC2::Instance",
"Properties": {
"InstanceType": "r5.2xlarge",
"ImageId": "ami-0abcdef1234567890",
"UserData": "#!/bin/bash\nsleep 30\n/usr/sap/install/start_app_server.sh"
}
}
}
}Refer to the exhibit.
Exhibit:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:PutObject",
"Resource": "arn:aws:s3:::sap-backup-bucket/*",
"Condition": {
"StringEquals": {
"s3:x-amz-server-side-encryption": "AES256"
}
}
},
{
"Effect": "Deny",
"Action": "s3:PutObject",
"Resource": "arn:aws:s3:::sap-backup-bucket/*",
"Condition": {
"StringNotEquals": {
"s3:x-amz-server-side-encryption": "AES256"
}
}
}
]
}Refer to the exhibit. Exhibit: [ec2-user@ip-10-0-1-10 ~]$ df -h Filesystem Size Used Avail Use% Mounted on devtmpfs 16G 0 16G 0% /dev tmpfs 16G 0 16G 0% /dev/shm /dev/xvda1 30G 20G 10G 67% / /dev/xvdf 500G 200G 300G 40% /hana/data /dev/xvdg 100G 80G 20G 80% /hana/log
Refer to the exhibit.
```json
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:StartInstances",
"ec2:StopInstances",
"ec2:DescribeInstances"
],
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/i-0abcd1234efgh5678"
},
{
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:ListBucket"
],
"Resource": [
"arn:aws:s3:::sap-backup-bucket",
"arn:aws:s3:::sap-backup-bucket/*"
]
}
]
}
```Refer to the exhibit.
```json
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:StartInstances",
"ec2:StopInstances",
"ec2:DescribeInstances"
],
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/i-0abcd1234efgh5678"
},
{
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:ListBucket"
],
"Resource": [
"arn:aws:s3:::sap-backup-bucket",
"arn:aws:s3:::sap-backup-bucket/*"
]
}
]
}
```{"content":"Refer to the exhibit.\n\n```json\n{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Effect\": \"Allow\",\n \"Action\": [\n \"ec2:AttachVolume\",\n \"ec2:DetachVolume\"\n ],\n \"Resource\": \"arn:aws:ec2:us-east-1:123456789012:volume/*\",\n \"Condition\": {\n \"StringEquals\": {\n \"ec2:ResourceTag/SAPSystem\": \"PRD\"\n }\n }\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": [\n \"ec2:AttachVolume\",\n \"ec2:DetachVolume\"\n ],\n \"Resource\": \"arn:aws:ec2:us-east-1:123456789012:instance/*\",\n \"Condition\": {\n \"StringEquals\": {\n \"ec2:ResourceTag/SAPSystem\": \"PRD\"\n }\n }\n }\n ]\n}\n```","description":"IAM policy for SAP administrators"}{"content":"Refer to the exhibit.\n\n```\n{\n \"AWSTemplateFormatVersion\": \"2010-09-09\",\n \"Resources\": {\n \"SAPApplicationELB\": {\n \"Type\": \"AWS::ElasticLoadBalancingV2::LoadBalancer\",\n \"Properties\": {\n \"Name\": \"sap-app-elb\",\n \"Scheme\": \"internet-facing\",\n \"Subnets\": [\n \"subnet-12345678\",\n \"subnet-23456789\"\n ],\n \"SecurityGroups\": [\n \"sg-12345678\"\n ]\n }\n },\n \"SAPTargetGroup\": {\n \"Type\": \"AWS::ElasticLoadBalancingV2::TargetGroup\",\n \"Properties\": {\n \"Name\": \"sap-tg\",\n \"Port\": 443,\n \"Protocol\": \"HTTPS\",\n \"VpcId\": \"vpc-12345678\",\n \"TargetType\": \"instance\"\n }\n }\n }\n}\n```","description":"CloudFormation snippet for ALB"}Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:AttachVolume",
"ec2:DetachVolume"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"ec2:ResourceTag/Environment": "production"
}
}
},
{
"Effect": "Deny",
"Action": "ec2:DeleteVolume",
"Resource": "*"
}
]
}
```Refer to the exhibit.
```json
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:PutObject",
"s3:DeleteObject"
],
"Resource": "arn:aws:s3:::sap-backup-bucket/*",
"Condition": {
"StringEquals": {
"aws:SourceVpce": "vpce-0abcdef1234567890"
}
}
},
{
"Effect": "Deny",
"Action": "s3:*",
"Resource": "arn:aws:s3:::sap-backup-bucket/*",
"Condition": {
"BoolIfExists": {
"aws:SecureTransport": "false"
}
}
}
]
}
```