PAS-C01 Technology Practice Test 11 — 15 Questions

Question 1

Which AWS service can be used to monitor the performance of SAP HANA databases running on EC2 instances?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch is the primary AWS service for monitoring the performance of SAP HANA databases on EC2. It can collect custom metrics such as CPU utilization, memory usage, disk I/O, and SAP HANA-specific metrics (e.g., row store memory, column store memory) via the CloudWatch agent or monitoring scripts. The other listed services (Inspector, RDS Performance Insights, X-Ray, Config) are not designed for or capable of directly monitoring self-managed SAP HANA database performance on EC2.

Answer

Amazon Inspector

Answer

Amazon RDS Performance Insights

Answer

AWS X-Ray

Answer

AWS Config

Question 2

Which TWO AWS services can be used to automate the backup of SAP HANA databases? (Choose two.)

Accepted Answer

Amazon EBS Snapshots. Amazon EBS Snapshots are correct because they provide point-in-time, incremental backups of the underlying block storage volumes that host SAP HANA data and log files. AWS Backup is correct because it offers a fully managed, policy-driven backup service that can orchestrate EBS Snapshots and other resources, supporting SAP HANA backup automation with centralized scheduling and retention management.

Answer

AWS Lambda

Answer

AWS Storage Gateway

Answer

Amazon S3

Question 3

Which THREE AWS services are commonly used to implement high availability for SAP HANA databases on AWS? (Choose three.)

Accepted Answer

Amazon EC2 Auto Recovery. Amazon EC2 Auto Recovery is correct because it automatically recovers an impaired EC2 instance by restarting it on a new healthy host within the same Availability Zone, preserving the instance ID, private IP, and Elastic IP. For SAP HANA, this minimizes downtime by quickly restoring the database instance without manual intervention, though it does not protect against an entire Availability Zone failure.

Answer

AWS Global Accelerator

Answer

Amazon Route 53

Question 4

Refer to the exhibit. An IAM policy is attached to an IAM role used by an SAP automation script. The script is failing to start an EC2 instance. What is the most likely cause?

Accepted Answer

The script is not using HTTPS, so the Deny statement blocks all actions.. The Deny statement in the policy blocks all actions unless the request uses HTTPS. Since the SAP automation script is failing to start an EC2 instance, the most likely cause is that the script is making HTTP requests instead of HTTPS, triggering the Deny and preventing any action, including ec2:StartInstances. This is a common security control to enforce encryption in transit.

Answer

The policy does not grant permission to start instances.

Answer

The policy does not allow ec2:DescribeInstances.

Answer

The script does not have access to the S3 bucket.

Question 5

Refer to the exhibit. An administrator runs the AWS CLI command shown and receives the output. The instance is running, but the SAP application on the instance is not accessible. Which additional AWS CLI command should the administrator run to troubleshoot the network connectivity?

Accepted Answer

aws ec2 describe-instances --instance-ids i-0abcd1234efgh5678 --query 'Reservations[0].Instances[0].NetworkInterfaces'. The correct command, `describe-instances` with a filter on `NetworkInterfaces`, retrieves the detailed network interface configuration attached to the specific instance, including the subnet ID, security group IDs, and public/private IP addresses. This allows the administrator to verify whether the instance is attached to the correct subnet and security groups, which are the most common causes of network connectivity issues for an SAP application. The other commands either do not filter to the specific instance or do not provide the necessary network interface details to diagnose the problem.

Answer

aws ec2 describe-subnets

Answer

aws ec2 describe-network-interfaces

Answer

aws ec2 describe-security-groups

Question 6

Refer to the exhibit. A CloudFormation template is used to launch an EC2 instance for SAP. The instance launches but the root volume is only 50 GB. The SAP installation requires at least 100 GB for the root volume. How should the template be modified?

Accepted Answer

Change VolumeSize from 50 to 100 in the BlockDeviceMapping.. The CloudFormation template explicitly defines the root volume size in the BlockDeviceMapping property. By changing VolumeSize from 50 to 100, the template will provision a new EC2 instance with a 100 GB root volume, meeting the SAP installation requirement. The BlockDeviceMapping overrides the default root volume size from the AMI, so this is the precise way to control volume size at launch.

Answer

Change the InstanceType to a larger instance.

Answer

Modify the running instance's root volume size using the AWS Management Console.

Answer

Change the ImageId to an AMI with a larger root volume.

Question 7

A company is designing a disaster recovery solution for a critical SAP HANA database running on AWS. The primary site is in us-east-1 and the recovery site must be in us-west-2. The database must have a Recovery Point Objective (RPO) of less than 15 minutes and a Recovery Time Objective (RTO) of less than 2 hours. Which approach meets these requirements with the least operational overhead?

Accepted Answer

Configure SAP HANA System Replication (HSR) in active/standby mode between the primary and secondary regions.. SAP HANA System Replication (HSR) in active/standby mode is the native, AWS-recommended disaster recovery solution for SAP HANA databases. It provides synchronous or asynchronous replication of the entire in-memory database to a standby instance in us-west-2, enabling an RPO of less than 15 minutes (asynchronous mode) and an RTO of under 2 hours through a controlled takeover. This approach minimizes operational overhead because it is built into SAP HANA, requires no external services, and automates log shipping and data synchronization.

Answer

Use AWS Backup to take snapshots of the HANA data volume every 5 minutes and copy them to us-west-2.

Answer

Use Amazon S3 Cross-Region Replication to copy HANA data files to us-west-2.

Answer

Set up AWS Database Migration Service (DMS) with ongoing replication from the primary to a secondary HANA database.

Question 8

An SAP administrator needs to migrate an on-premises SAP ERP system to AWS. The current system runs on a single Windows Server with SQL Server and uses 2 TB of storage. The migration must minimize downtime and use native AWS tools. Which service should be used to replicate the on-premises server to AWS?

Accepted Answer

AWS Server Migration Service (SMS). AWS Server Migration Service (SMS) is the correct choice because it is designed to automate the replication of on-premises live server volumes (including Windows Server with SQL Server) to AWS as Amazon Machine Images (AMIs), enabling incremental replication with minimal downtime. It uses agentless replication via the AWS Replication Agent or hypervisor-level integration, making it ideal for migrating the entire server, including the OS and SQL Server database, without requiring separate database-level tools.

Answer

AWS CloudFormation

Answer

AWS Snowball

Answer

AWS Database Migration Service (DMS)

Question 9

A company runs SAP on AWS and uses SAP HANA as its database. The system is experiencing high latency during peak hours. The SAP HANA administrator wants to identify performance bottlenecks at the CPU, memory, and disk I/O levels. Which TWO AWS services can be used together to monitor and correlate these metrics?

Accepted Answer

Amazon CloudWatch Logs. Amazon CloudWatch (Option D) collects and stores CPU, memory, and disk I/O metrics from SAP HANA instances via the CloudWatch Agent or direct integration. Amazon CloudWatch Logs (Option B) ingests SAP HANA diagnostic logs, such as trace files and performance dumps, enabling correlation of log events with metric spikes. Together, they provide a unified view to pinpoint bottlenecks at the CPU, memory, and I/O levels during peak hours.

Answer

AWS Config

Answer

Amazon Inspector

Answer

AWS X-Ray

Question 10

An SAP administrator created the IAM policy shown in the exhibit for a team managing SAP HANA instances. What is the effective permission for the team regarding an EC2 instance with the tag 'Environment=Production'?

Accepted Answer

The team can start and stop the instance, but cannot terminate it.. The IAM policy explicitly denies the 'ec2:TerminateInstances' action for instances with the tag 'Environment=Production', while allowing 'ec2:StartInstances' and 'ec2:StopInstances' via a separate Allow statement. Since an explicit Deny overrides any Allow, the team can start and stop the instance but cannot terminate it.

Answer

The team can start, stop, and terminate the instance.

Answer

The team cannot start, stop, or terminate the instance.

Answer

The team can only describe the instance.

Question 11

A company is running SAP on AWS and wants to ensure high availability for the SAP Central Services (ASCS) instance. They have two EC2 instances in different Availability Zones within a single AWS Region. Which AWS service should be used to automatically fail over the ASCS instance if the primary instance fails?

Accepted Answer

Amazon Route 53. Amazon Route 53 can be configured with a health check that monitors the primary ASCS instance. When the health check fails, Route 53 automatically updates DNS records to point to the secondary instance in the other Availability Zone, enabling failover routing. This provides a DNS-level failover mechanism that is suitable for SAP Central Services, which requires a stable IP address or hostname for client connections.

Answer

Application Load Balancer (ALB)

Answer

AWS Auto Scaling

Answer

AWS CloudFormation

Question 12

A company is planning to migrate a large SAP HANA database to AWS using AWS Snowball Edge devices. The database size is 50 TB and the migration must be completed within a week. Which TWO actions should the company take to ensure a successful migration?

Accepted Answer

Order multiple Snowball Edge devices to transfer data in parallel.. Snowball Edge devices have a usable storage capacity of up to 80 TB per device, but to transfer 50 TB within a one-week window, using multiple devices in parallel significantly reduces the total transfer time. Parallel data transfer allows the company to split the workload across devices, maximizing throughput and meeting the tight migration deadline.

Answer

Use AWS Direct Connect to accelerate data transfer from Snowball Edge to AWS.

Answer

Split the data into smaller chunks because each Snowball Edge can only hold 10 TB.

Answer

Copy the data directly to an Amazon S3 bucket using the Snowball Edge client.

Question 13

An SAP Basis administrator is troubleshooting a performance issue on an SAP NetWeaver application server running on Amazon EC2. The administrator notices that the CPU utilization is low but the application response times are high. The system is using an Amazon EBS gp2 volume. Which configuration change is most likely to improve performance?

Accepted Answer

Increase the IOPS of the EBS gp2 volume or switch to io1.. Low CPU utilization with high application response times on an SAP NetWeaver server indicates that the bottleneck is I/O latency, not compute capacity. Amazon EBS gp2 volumes have a baseline IOPS performance that scales with volume size, and if the volume is small or the workload exceeds the burst balance, throughput can be throttled. Increasing the IOPS (by resizing the gp2 volume or switching to io1/io2 with provisioned IOPS) directly addresses the I/O bottleneck, reducing latency and improving application response times.

Answer

Change the EBS volume to instance store.

Answer

Move the EC2 instance to a larger instance family.

Answer

Increase the number of vCPUs on the EC2 instance.

Question 14

A company has a mission-critical SAP S/4HANA system running on AWS with a multi-node HANA database. The system must be highly available with an RPO of 0 and an RTO of less than 30 minutes. The database uses SAP HANA System Replication (HSR) with synchronous replication. Which THREE components are essential for this high-availability architecture?

Accepted Answer

An ENSA2 (Enqueue Replication 2) enqueue server.. SAP S/4HANA with a multi-node HANA database requires the ENSA2 (Enqueue Replication 2) enqueue server to replicate the application-level lock table synchronously between the active and standby central services (ASCS and ERS) instances. This ensures that in the event of a failover, the enqueue locks are preserved, preventing data inconsistencies and enabling a seamless transition within the required RTO of less than 30 minutes.

Answer

An Application Load Balancer to distribute traffic between HANA nodes.

Answer

A VPN connection between the two Availability Zones.

Question 15

The exhibit shows an IAM policy for an SAP backup process that uploads backups to S3. An administrator wants to ensure that all uploads are encrypted using SSE-S3. What does this policy enforce?

Accepted Answer

Any PutObject request that does not include the encryption header will be denied.. The policy uses a `Deny` effect with a `StringNotEquals` condition on the `s3:x-amz-server-side-encryption` header, requiring it to be `AES256`. This enforces that any `PutObject` request must include the `x-amz-server-side-encryption: AES256` header; otherwise, the request is denied. Option C correctly states that requests without the encryption header will be denied.

Answer

The backup process must encrypt the files before uploading them.

Answer

The backup process must use AWS KMS to encrypt the objects.

Answer

The bucket automatically encrypts objects with SSE-S3 even if the request does not specify it.