PAS-C01 Technology Practice Test 11 — 15 Questions

Question 1

A company runs SAP on AWS and uses a shared file system for SAP transport files. The system must support concurrent access from multiple SAP application servers and provide strong consistency. The transport files are typically small (less than 1 MB) and are frequently read and written. Which file storage solution should be used?

Accepted Answer

Amazon EFS. Option A is correct: Amazon EFS provides a shared NFS file system with strong consistency and is suitable for concurrent access. Option B is wrong: Amazon S3 is object storage, not a file system. Option C is wrong: Amazon FSx for Windows File Server supports SMB, not NFS typically used by SAP on Linux. Option D is wrong: Instance store is ephemeral and not shared.

Answer

Amazon FSx for Windows File Server

Answer

Amazon S3

Answer

Amazon EC2 instance store

Question 2

An SAP administrator is configuring backups for an SAP HANA database running on Amazon EC2. The backup must be stored in Amazon S3 for long-term retention. Which AWS service should be used to automate the backup process?

Accepted Answer

AWS Backup. Option B is correct: AWS Backup integrates with SAP HANA (via pre/post scripts) and can automate backups to S3. Option A is wrong: Amazon S3 Lifecycle policies manage object lifecycle, not backup orchestration. Option C is wrong: AWS Lambda could be used but requires custom coding; AWS Backup is simpler. Option D is wrong: Amazon EBS Snapshots are for block-level backups, not HANA-specific.

Answer

Amazon S3 Lifecycle policies

Answer

AWS Lambda

Answer

Amazon EBS Snapshots

Question 3

A company is deploying SAP NetWeaver on AWS and needs to configure high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). The solution must use AWS native services. Which TWO actions should be taken?

Accepted Answer

Associate an Elastic IP address with the active ASCS instance using a script.. Options B and D are correct: Use Amazon Route 53 with health checks for failover DNS routing; use an Elastic IP address for the virtual IP address that moves between instances. Option A is wrong: ELB is for HTTP/HTTPS; ASCS uses proprietary protocols. Option C is wrong: AWS Global Accelerator is for traffic routing, but not typically used for ASCS/ERS failover. Option E is wrong: AWS Direct Connect is for private connectivity, not high availability.

Answer

Place an Application Load Balancer in front of the ASCS instances.

Answer

Set up AWS Direct Connect for redundant connectivity.

Answer

Deploy AWS Global Accelerator for failover.

Question 4

The exhibit shows the block device mapping of an EC2 instance running SAP HANA. The root volume (/dev/xvda) has DeleteOnTermination set to true, and the data volume (/dev/sdf) has DeleteOnTermination set to false. If the instance is terminated, what happens to the data volume?

Accepted Answer

Only the root volume is deleted; the data volume remains.. Option B is correct: The data volume (vol-0def456abc1237890) has DeleteOnTermination=false, so it will not be deleted when the instance is terminated. It remains in the AWS account and can be attached to another instance. Option A is wrong: Only the root volume is deleted. Option C is wrong: The data volume is not deleted. Option D is wrong: The volume is not automatically moved to S3.

Answer

Only the data volume is deleted; the root volume remains.

Answer

Both volumes are detached and moved to Amazon S3.

Answer

Both volumes are deleted.

Question 5

A company is running SAP BusinessObjects on AWS. The application servers are behind an Application Load Balancer (ALB). The ALB is configured to use a single target group. The company wants to deploy a new version of the application with zero downtime. Which deployment strategy should be used?

Accepted Answer

Implement a blue/green deployment by creating a new target group and updating the ALB listener.. Option D is correct: Blue/green deployment creates a new target group with new instances, then updates the ALB listener rule to route traffic to the new group, enabling zero downtime. Option A is wrong: Rolling update with in-place replacement can cause downtime. Option B is wrong: Canary releases are for gradual rollout, not necessarily zero downtime. Option C is wrong: Creating a new ALB and updating DNS can cause DNS propagation delays.

Answer

Perform a rolling update by terminating one instance at a time and launching a new one.

Answer

Create a new ALB and update the DNS record to point to the new ALB.

Answer

Use a canary release by routing 10% of traffic to the new version.

Question 6

An SAP administrator needs to provide temporary, time-limited access to an S3 bucket containing SAP backup files for an external auditor. The auditor should be able to download files from the bucket. Which method provides the most secure way to grant access?

Accepted Answer

Generate a presigned URL for each file the auditor needs to download.. Option C is correct: Generate a presigned URL that provides temporary access to a specific object. It is secure because permissions are time-limited and scoped to a single object. Option A is wrong: Creating an IAM user for the auditor is not time-limited and requires managing credentials. Option B is wrong: Making the bucket public is insecure. Option D is wrong: Sharing AWS credentials is a security risk.

Answer

Create an IAM user with read-only access to the bucket and share the credentials with the auditor.

Answer

Provide the auditor with the root user credentials of the AWS account.

Answer

Make the bucket publicly readable and share the bucket URL.

Question 7

A company is running an SAP HANA database on an AWS EC2 instance. The SAP application team reports occasional performance issues during peak hours. The CloudWatch metrics show high CPU utilization. What is the MOST cost-effective solution to address this issue?

Accepted Answer

Implement an EC2 Auto Scaling group with a scheduled scaling policy to add instances during peak hours.. Option B is correct because using an EC2 Auto Scaling group with a scheduled scaling policy can add CPU capacity during known peak hours cost-effectively. Option A is wrong because vertical scaling to a larger instance incurs cost even during off-peak. Option C is wrong because it does not directly address CPU. Option D is wrong because it is not specific to CPU performance.

Answer

Migrate the instance to a larger instance type permanently.

Answer

Enable termination protection on the instance.

Answer

Increase the provisioned IOPS for the EBS volumes attached to the instance.

Question 8

An SAP system on AWS uses a Multi-AZ DB instance for its database. The operations team notices that during a recent Availability Zone outage, the database failover did not occur automatically. What is the MOST likely cause?

Accepted Answer

The secondary DB instance is in the same Availability Zone as the primary.. Option A is correct because Multi-AZ failover requires a primary DB instance in a different AZ; if both are in the same AZ, failover will not happen during an AZ outage. Option B is wrong because read replicas are for read scaling, not failover. Option C is wrong because synchronous replication is used for Multi-AZ. Option D is wrong because Multi-AZ supports automatic failover.

Answer

The database is configured with asynchronous replication.

Answer

The Multi-AZ option is not supported for this database engine.

Answer

The database is configured as a read replica.

Question 9

A company is migrating an SAP ERP system to AWS. The system requires low-latency access to a shared file system for SAP transport directories. The file system must be accessible from multiple EC2 instances in different Availability Zones. Which storage solution meets these requirements?

Accepted Answer

Amazon EFS file system.. Option C is correct because Amazon EFS provides a shared file system accessible from multiple AZs with low latency. Option A is wrong because instance store is ephemeral and not shared. Option B is wrong because EBS volumes can only be attached to one instance at a time. Option D is wrong because S3 is object storage, not a file system.

Answer

Amazon EBS volumes snapshotted and shared across instances.

Answer

Instance store volumes on each EC2 instance.

Answer

Amazon S3 with Transfer Acceleration.

Question 10

An SAP administrator needs to ensure that all changes to an SAP system's AWS resources are tracked and that alerts are sent when SSH access to EC2 instances is modified. Which AWS service should be used?

Accepted Answer

AWS CloudTrail. Option B is correct because AWS CloudTrail records API calls and can trigger alerts via CloudWatch Events. Option A is wrong because Config tracks resource configuration changes but not API calls. Option C is wrong because CloudWatch monitors performance, not API calls. Option D is wrong because Trusted Advisor provides best-practice checks, not change tracking.

Answer

AWS Config

Answer

Amazon CloudWatch

Answer

AWS Trusted Advisor

Question 11

An SAP system running on AWS is experiencing high latency for database writes. The database is running on an RDS instance with General Purpose (gp2) storage. What change will PROVIDE the most immediate performance improvement?

Accepted Answer

Change the storage type to Provisioned IOPS (io1 or io2).. Option A is correct because switching to Provisioned IOPS (io1/io2) provides consistent low latency for write-heavy workloads. Option B is wrong because adding read replicas helps read scaling, not write latency. Option C is wrong because increasing storage size may improve gp2 baseline performance but not as effectively as io1. Option D is wrong because Multi-AZ provides high availability, not performance.

Answer

Add a read replica to offload read traffic.

Answer

Increase the allocated storage size to increase baseline IOPS.

Answer

Enable Multi-AZ deployment.

Question 12

A company is using SAP HANA on AWS and needs to back up the database to Amazon S3. The backup must be encrypted at rest in S3. The company already uses AWS KMS for encryption. What is the MOST secure way to configure the backup?

Accepted Answer

Use SSE-KMS with a customer managed key and restrict key usage with key policies.. Option D is correct because using a customer managed key with appropriate key policies ensures the backup is encrypted and access is controlled. Option A is wrong because SSE-S3 uses AWS-managed keys, not the company's KMS keys. Option B is wrong because SSE-C requires managing keys yourself, which is less integrated. Option C is wrong because SSE-KMS with an AWS managed key does not allow the same level of control.

Answer

Use client-side encryption before uploading to S3.

Answer

Enable default S3 encryption with SSE-S3.

Answer

Use SSE-KMS with the AWS managed key for S3.

Question 13

An SAP system on AWS needs to be highly available across two Availability Zones. The application tier runs on EC2 instances behind an Application Load Balancer. The database tier uses an RDS Multi-AZ deployment. What additional step is REQUIRED to ensure complete high availability for the application tier?

Accepted Answer

Launch EC2 instances in at least two different Availability Zones.. Option B is correct because EC2 instances must be deployed in multiple AZs to survive an AZ outage. Option A is wrong because Auto Scaling handles scaling, not HA. Option C is wrong because instance size does not affect HA. Option D is wrong because EBS Multi-Attach is not used for HA of application servers.

Answer

Use a larger EC2 instance type.

Answer

Enable EBS Multi-Attach for the root volumes.

Answer

Configure an Auto Scaling group with a dynamic scaling policy.

Question 14

A company runs SAP S/4HANA on AWS and needs to set up a disaster recovery (DR) site in another AWS Region. The RPO is 15 minutes and RTO is 4 hours. The database is SAP HANA. Which approach meets these requirements?

Accepted Answer

Enable SAP HANA System Replication across regions.. Option D is correct because HANA System Replication with log shipping can achieve RPO of 15 minutes and RTO of a few hours. Option A is wrong because EBS snapshots have longer RPO. Option B is wrong because DMS is for migrations, not DR. Option C is wrong because backup/restore from S3 takes longer RTO.

Answer

Take nightly backups to S3 and restore in the DR region.

Answer

Use AWS Database Migration Service (DMS) for continuous replication.

Answer

Use AWS Backup for cross-region EBS snapshots.

Question 15

An SAP system on AWS is experiencing slow performance for batch jobs. The jobs are I/O intensive and write large amounts of data to EBS volumes. CloudWatch metrics show that the EBS volumes are reaching their throughput limits. Which action will MOST effectively improve performance?

Accepted Answer

Increase the size of the EBS volumes to improve baseline throughput.. Option C is correct because increasing the volume size of gp2/gp3 increases baseline throughput. Option A is wrong because instance store is ephemeral and not suitable for persistent data. Option B is wrong because read replicas do not help with write throughput. Option D is wrong because Multi-AZ does not increase throughput.

Answer

Add read replicas to offload read traffic.

Answer

Use Multi-AZ for the database.

Answer

Move the data to instance store volumes.