PAS-C01 Technology Practice Test 11 — 15 Questions

Question 1

A company is migrating an SAP ERP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). The solution must use a shared file system for the SAP transport directory. Which combination of AWS services should be used?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Amazon EFS for the transport directory and two EC2 instances with a floating IP. SAP ASCS and ERS require a highly available shared file system for the SAP transport directory, and Amazon EFS provides a fully managed NFS file system that can be mounted by multiple EC2 instances across Availability Zones. The floating IP (using AWS Elastic IP or a secondary private IP) allows the ASCS and ERS services to fail over transparently between the two EC2 instances, meeting the high availability requirements without relying on a single point of failure.

Answer

Amazon FSx for Windows File Server for the transport directory

Answer

Amazon S3 as the transport directory with two application servers

Answer

Amazon EBS volumes attached to both ASCS and ERS instances

Question 2

A company wants to automate the installation of SAP HANA on AWS using CloudFormation. Which AWS resource should be used to run a script that downloads and installs SAP HANA software on an EC2 instance after the instance is launched?

Accepted Answer

AWS::CloudFormation::CreationPolicy with cfn-signal. AWS::CloudFormation::CreationPolicy with cfn-signal is correct because it allows CloudFormation to wait for a signal from the instance before proceeding, ensuring that the SAP HANA installation script has completed successfully. The cfn-signal command is used within the UserData script to notify CloudFormation of completion, and the CreationPolicy ensures the stack doesn't proceed until all signals are received. This is critical for SAP HANA deployments where the installation must finish before other resources are created or the stack is considered complete.

Answer

AWS::CloudFormation::Init (cfn-init)

Answer

AWS Lambda function triggered by EC2 state change

Answer

EC2 User Data

Question 3

An SAP system running on AWS is configured with a Multi-AZ RDS for SAP HANA database. The primary database fails, but the automatic failover does not occur. What is the most likely reason?

Accepted Answer

Multi-AZ is not supported for RDS for SAP HANA. Multi-AZ for RDS for SAP HANA is not supported; RDS for SAP HANA does not have Multi-AZ capability. Option A is incorrect because Multi-AZ is not a paid option; it incurs costs but is not disabled by billing. Option B is incorrect because RDS for HANA does not use EBS snapshots for replication. Option D is incorrect because RDS does not use Elastic IPs.

Answer

The Multi-AZ configuration was not paid for

Answer

The standby instance was not configured with EBS snapshots

Answer

The primary instance does not have an Elastic IP attached

Question 4

Refer to the exhibit. An SAP administrator is reviewing the block device mappings of an EC2 instance. What is the impact of the DeleteOnTermination setting on /dev/sdf?

Accepted Answer

The volume will persist after the instance is terminated. The DeleteOnTermination attribute controls whether an Amazon EBS volume is automatically deleted when the associated EC2 instance is terminated. For the volume at /dev/sdf, the setting is 'false', meaning the volume will persist after the instance is terminated. This is a common configuration for data volumes that need to be retained for backup, migration, or reuse purposes.

Answer

The volume will be automatically deleted after 30 days

Answer

The volume will be deleted when the instance is terminated

Answer

The volume is a snapshot of the root volume

Question 5

Refer to the exhibit. An SAP administrator is creating an IAM policy for launching EC2 instances. Which instance type will the policy allow?

Accepted Answer

r5.4xlarge and r5.8xlarge. The IAM policy allows ec2:RunInstances with a condition that restricts instance types to those matching 'r5.4xlarge' or 'r5.8xlarge' via a ForAllValues:StringEquals condition on ec2:InstanceType. Since the condition uses a wildcard-free list, only the explicitly listed instance types are permitted. Options A, B, and C are not in the list, so they are denied.

Answer

r5.16xlarge

Answer

r5.xlarge

Answer

r5.2xlarge

Question 6

Which THREE factors should be considered when selecting an EC2 instance type for an SAP HANA production system?

Accepted Answer

Memory (RAM) size. The correct answers are A, B, and C. SAP HANA is an in-memory database, so memory size (RAM) is critical. The instance must be SAP-certified to ensure compatibility and performance. Network bandwidth is important for HANA system replication and data transfer. Option D is incorrect because HANA uses EBS volumes for persistent storage, not instance store (which is ephemeral). Option E is incorrect because GPUs are not required for SAP HANA.

Answer

Instance store volumes

Answer

GPU capabilities

Question 7

Which TWO AWS services can be used to monitor the health and performance of an SAP HANA database on AWS?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch (option B) can monitor OS-level metrics and custom metrics from SAP HANA via the CloudWatch agent or API. SAP HANA monitoring tools like HANA cockpit (option D) provide built-in health and performance monitoring. AWS Trusted Advisor (option A) offers best-practice recommendations, not real-time monitoring. AWS Config (option C) tracks resource configuration changes. VPC Flow Logs (option E) capture network traffic metadata.

Answer

AWS Trusted Advisor

Answer

AWS Config

Answer

VPC Flow Logs

Question 8

A company is running SAP HANA on an EC2 instance. The storage is configured with multiple EBS volumes striped using LVM. The SAP administrator notices that disk I/O latency spikes during peak hours. Which change would MOST effectively reduce latency without incurring additional cost?

Accepted Answer

Use an EBS-optimized EC2 instance type. Using an EBS-optimized EC2 instance provides dedicated network bandwidth for EBS I/O, which reduces contention and latency without additional cost if the instance type already supports it. Option A is incorrect because increasing the size of EBS volumes does not directly reduce latency. Option B is incorrect because provisioning additional IOPS incurs extra cost, contradicting the requirement. Option C is incorrect because switching to RAID 0 striping improves throughput but does not lower latency.

Answer

Increase the size of the EBS volumes

Answer

Provision additional IOPS on the EBS volumes

Answer

Switch from LVM to RAID 0 striping

Question 9

An SAP application must be highly available across two Availability Zones in a single Region. The SAP Central Services (ASCS) and ERS are to be deployed on EC2 instances. Which AWS service should be used to manage the floating IP address for the ASCS instance?

Accepted Answer

Amazon Route 53 with failover routing. In an SAP on AWS deployment, the ASCS instance requires a floating IP address for clients to connect to the active instance. Amazon Route 53 with failover routing can manage this by using health checks to automatically update DNS records to point to the secondary ASCS instance in case of failure. This provides a DNS-based failover mechanism for the floating IP. Option A (Network Load Balancer) is incorrect because while an NLB can front-end the ASCS service, it does not manage a floating IP; it provides a static IP but requires a load balancer configuration. Option B (AWS Global Accelerator) is designed for global traffic and not for intra-region floating IP management for SAP ASCS. Option D (Elastic IP address) can be remapped manually but does not provide automatic failover without additional scripting.

Answer

Network Load Balancer

Answer

AWS Global Accelerator

Answer

Elastic IP address

Question 10

A company runs SAP on EC2 instances in a private subnet. The instances need to download patches from the internet but must not be directly accessible from the internet. Which configuration meets these requirements?

Accepted Answer

Deploy a NAT Gateway in a public subnet and route traffic from the private subnet to it. A NAT Gateway, deployed in a public subnet with an Elastic IP, allows instances in a private subnet to initiate outbound connections to the internet (e.g., to download patches) while preventing any unsolicited inbound connections from the internet. The private subnet's route table directs 0.0.0.0/0 traffic to the NAT Gateway, which performs source network address translation (SNAT) on the outbound traffic and drops unsolicited inbound packets.

Answer

Place a proxy server on a bastion host in a public subnet

Answer

Attach an Internet Gateway to the VPC and add a route to the private subnet

Answer

Use a VPN connection to the on-premises network and route internet traffic through it

Question 11

An SAP system uses Amazon EFS for shared file storage. The SAP application writes many small files concurrently, causing high metadata operations. Which EFS performance mode should be selected to optimize for this workload?

Accepted Answer

Max I/O. Max I/O mode is designed for workloads with high concurrency and metadata-intensive operations, such as many small files being written simultaneously. It scales to higher levels of aggregate throughput and IOPS than General Purpose mode, making it the correct choice for this SAP workload.

Answer

General Purpose

Answer

Throughput Optimized

Answer

Provisioned Throughput

Question 12

A company is designing a disaster recovery solution for SAP HANA. The primary site is in us-east-1 and the DR site is in us-west-2. The RPO is 5 minutes and the RTO is 30 minutes. Which replication method meets these requirements?

Accepted Answer

SAP HANA System Replication with synchronous mode. SAP HANA System Replication with synchronous mode is the correct choice because it provides continuous, real-time data replication to the DR site in us-west-2, enabling an RPO of 5 minutes or less and an RTO of 30 minutes. Synchronous replication ensures that every committed transaction is acknowledged by the secondary site before the primary confirms to the application, meeting the strict RPO requirement. This method is purpose-built for SAP HANA and supports automatic failover, which aligns with the 30-minute RTO.

Answer

Amazon RDS Multi-AZ deployment

Answer

Scheduled EBS snapshots copied to us-west-2

Answer

AWS Database Migration Service with ongoing replication

Question 13

A company is running SAP HANA on AWS and needs to backup the database. Which TWO services can be used together to create a backup strategy that meets the requirement of point-in-time recovery? (Choose two.)

Accepted Answer

Amazon EBS snapshots. Amazon EBS snapshots (B) provide point-in-time backups of SAP HANA data volumes, and AWS Backup (C) can orchestrate and manage these snapshots, enabling a comprehensive backup strategy with point-in-time recovery. AWS Database Migration Service (A) is for database migration, not backup. Amazon S3 Lifecycle policies (D) manage object transitions, not database backups. AWS Storage Gateway (E) is for hybrid cloud storage, not SAP HANA backup.

Answer

AWS Database Migration Service

Answer

Amazon S3 Lifecycle policies

Answer

AWS Storage Gateway

Question 14

A company is migrating an SAP ERP system to AWS. The migration must be completed within a limited time window. Which THREE services can be used to accelerate the migration? (Choose three.)

Accepted Answer

AWS CloudEndure Migration. AWS CloudEndure Migration (A) is correct because it provides continuous block-level replication of source servers into a staging area and automates machine conversion and cutover, enabling fast, low-downtime migrations within a tight window. AWS Database Migration Service (B) is correct because it replicates data from source databases to AWS targets with minimal downtime, and its homogeneous/heterogeneous support (including SAP-relevant databases like Oracle, SQL Server, and SAP ASE) accelerates the data migration phase. AWS Server Migration Service (C) is correct because it automates incremental replication of on-premises VMware, Hyper-V, and Azure VMs to AWS as AMIs, allowing large server fleets to be migrated quickly and repeatedly. AWS Trusted Advisor (D) is not a migration tool; it only provides best-practice checks and recommendations, so it does not accelerate the actual migration. AWS CloudFormation (E) is an infrastructure-as-code provisioning service, useful for deploying target environments but not for replicating or migrating existing SAP workloads and data.

Answer

AWS Trusted Advisor

Answer

AWS CloudFormation

Question 15

Refer to the exhibit. An IAM policy is attached to an IAM user. Which EC2 instance can the user terminate?

Accepted Answer

None, because the Deny statement overrides the Allow for that instance. The IAM policy includes a Deny statement that explicitly denies the action on a specific instance, and in AWS IAM, an explicit Deny always overrides any Allow. Therefore, the user cannot terminate that instance, even if other statements allow it. The correct answer is that the user cannot terminate the instance due to the Deny.

Answer

Only instance i-1234567890abcdef0

Answer

Any instance with tag 'Environment:Production'

Answer

Any instance in the account