PAS-C01 Technology Practice Test 13 — 15 Questions

Question 1

An SAP system is experiencing high CPU utilization on the application server. CloudWatch metrics show that the CPU credit balance for the T3 instance is frequently depleted. What is the most cost-effective solution to resolve this issue while maintaining performance?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enable T3 unlimited on the instance.. Enabling T3 unlimited allows the instance to burst beyond its baseline CPU utilization by spending credits, and when credits are exhausted, it can still burst by incurring a small additional charge per vCPU-hour. This is the most cost-effective solution as it avoids the need to migrate to a larger or different instance type, while maintaining performance for the SAP system's variable workloads.

Answer

Add more vCPUs by changing to a C5 instance.

Answer

Change the instance type to M5.large.

Answer

Increase the size of the EBS volumes.

Question 2

A company is running SAP HANA on AWS and needs to perform a backup to S3 using the SAP HANA BACKUP command. The backup fails with an error indicating that the S3 bucket cannot be accessed. The EC2 instance has an IAM role assigned with the necessary S3 permissions. What is the most likely cause of the failure?

Accepted Answer

The S3 bucket policy denies access from the instance's VPC.. The most likely cause is that the S3 bucket policy explicitly denies access from the instance's VPC. Even though the EC2 instance has an IAM role with the necessary S3 permissions, an explicit Deny in the bucket policy overrides any Allow from the IAM policy. This is a common misconfiguration when S3 bucket policies are used to restrict access to specific VPC endpoints or VPCs, and the instance's VPC is not included in the allowed list. Since the error indicates the bucket cannot be accessed, a bucket policy denial is the most direct explanation.

Answer

The S3 bucket is in a different region.

Answer

The instance does not have internet access.

Answer

The IAM role does not have the correct trust policy.

Question 3

An SAP system on AWS is configured with an Application Load Balancer (ALB) for health checks. The ALB marks all targets as unhealthy. The health check path is /sap/public/health.html, and the SAP Web Dispatcher is configured to serve this file. What is the most likely cause of the health check failure?

Accepted Answer

The security group for the Web Dispatcher does not allow traffic from the ALB.. The most likely cause is that the security group for the SAP Web Dispatcher does not allow traffic from the ALB. ALB health checks originate from the ALB's nodes, and if the security group does not permit inbound traffic on the health check port from the ALB's security group or subnet, the checks will fail.

Answer

The health check path is incorrect.

Answer

The health check port is wrong.

Answer

The ALB is in a different VPC.

Question 4

A company wants to migrate its SAP HANA database to AWS and needs to minimize downtime. Which AWS service should be used for a near-zero downtime migration?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) is designed for near-zero downtime migrations by continuously replicating data from the source to the target while the source remains operational. For SAP HANA, DMS supports ongoing replication using change data capture (CDC), allowing you to cut over to AWS with minimal interruption. This makes it the correct choice for minimizing downtime during a database migration.

Answer

AWS Direct Connect

Answer

AWS Snowball

Answer

AWS Server Migration Service (SMS)

Question 5

A company is deploying SAP NetWeaver on AWS and needs to ensure high availability for the SAP Central Services (ASCS) instance. Which TWO AWS features should be used together to achieve this?

Accepted Answer

Network Load Balancer (NLB). Option A (Network Load Balancer) is correct because SAP ASCS high availability on AWS relies on an NLB to provide a virtual IP (VIP) that floats between the primary and secondary ASCS nodes; the NLB performs health checks and routes traffic to the active node, enabling fast failover at the network layer (Layer 4) without requiring client reconfiguration. Option E (Amazon EFS) is correct because the ASCS instance requires shared storage for SAP global files such as /sapmnt and the enqueue replication data; EFS provides a shared, highly available NFS file system that both cluster nodes can mount simultaneously, which is essential for the ASCS failover to work. Option B (Amazon RDS Multi-AZ) is not appropriate here because RDS is a managed relational database service and does not provide the shared file system or VIP failover mechanism needed for the ASCS instance itself. Option C (Application Load Balancer) is incorrect because ALB operates at Layer 7 and does not support the floating IP / non-HTTP protocol requirements of SAP ASCS enqueue and message server traffic. Option D (Amazon S3) is incorrect because S3 is object storage and cannot be mounted as a POSIX-compliant shared file system for SAP ASCS global files.

Answer

Amazon RDS Multi-AZ

Answer

Application Load Balancer (ALB)

Answer

Amazon S3

Question 6

An SAP HANA database is running on an EC2 instance with multiple EBS volumes for /hana/data, /hana/log, and /hana/shared. Which TWO AWS features should be used to ensure that the EBS volumes are backed up consistently?

Accepted Answer

EBS snapshots. Option C (EBS snapshots) is correct because EBS snapshots provide point-in-time, crash-consistent backups of EBS volumes, and when coordinated across the /hana/data, /hana/log, and /hana/shared volumes they can capture a consistent state of the SAP HANA database storage. Option E (AWS Backup) is correct because it is a managed backup service that can orchestrate and schedule EBS snapshots across multiple volumes, apply retention and lifecycle policies, and support application-consistent backups when integrated with SAP HANA backup tooling. Option A (Amazon S3) is not correct because S3 is object storage and does not directly back up EBS volumes. Option B (AWS Storage Gateway) is not correct because it provides hybrid storage/file, volume, or tape gateway access, not native EBS volume backup consistency. Option D (EBS Lifecycle Manager) is not correct because it is a snapshot lifecycle policy feature for scheduling snapshots, but it is not the primary mechanism for ensuring consistent multi-volume SAP HANA backups.

Answer

Amazon S3

Answer

AWS Storage Gateway

Answer

EBS Lifecycle Manager

Question 7

Refer to the exhibit. An IAM policy is attached to an EC2 instance role used by SAP HANA backup scripts. The backup script attempts to upload a file to the S3 bucket without specifying server-side encryption. What will happen?

Accepted Answer

The upload fails because of the Deny statement.. The policy contains an explicit Deny statement that matches the request because the backup script uploads without specifying server-side encryption. In IAM policy evaluation, an explicit Deny always overrides any Allow, so the PutObject call is rejected with an AccessDenied error. The presence of an Allow statement is irrelevant once a matching Deny exists.

Answer

The upload fails because there is no Allow statement without condition.

Answer

The upload succeeds because there is an Allow statement.

Answer

The upload succeeds because the Deny condition does not match.

Question 8

Refer to the exhibit. An SAP administrator is reviewing the EBS volume configuration for a SAP HANA /hana/data volume. The volume is 500 GB gp2 with DeleteOnTermination set to false. The instance is in us-east-1a. Which action should the administrator take to improve performance for SAP HANA?

Accepted Answer

Modify the volume to gp3 and provision 5000 IOPS.. gp2 volumes deliver 3 IOPS per GB up to 16,000 IOPS, so a 500 GB gp2 volume provides only 1,500 IOPS — far below SAP HANA's requirement for the /hana/data volume. Migrating to gp3 decouples IOPS from capacity and allows provisioning 5,000 IOPS (or more) independently, which directly improves performance. This is the standard AWS recommendation for SAP HANA data volumes.

Answer

Take a snapshot and create a new volume in us-east-1b.

Answer

Enable encryption on the volume.

Answer

Set DeleteOnTermination to true.

Question 9

Refer to the exhibit. An SAP system administrator checks disk usage on an SAP HANA instance. The /hana/log volume is at 80% usage. What is the recommended course of action to prevent issues?

Accepted Answer

Increase the size of the EBS volume for /hana/log and extend the filesystem.. The /hana/log volume at 80% usage is approaching a critical threshold, and the recommended action is to increase the EBS volume size and extend the filesystem to restore headroom. SAP HANA log volumes grow with transaction activity and must not fill up, as a full log volume can halt the database. Expanding the volume is the safe, non-destructive fix.

Answer

Take a snapshot of the instance and terminate it.

Answer

Delete old backup files from /hana/log.

Answer

Move some data from /hana/log to /hana/data.

Question 10

An SAP system administrator needs to ensure high availability for an SAP HANA database using AWS services. What is the recommended architecture?

Accepted Answer

Deploy SAP HANA on EC2 instances in a cluster across multiple Availability Zones with synchronous replication. SAP HANA can be deployed as a multi-node cluster using EC2 instances in different Availability Zones with synchronous replication and automatic failover using cluster software like Pacemaker. RDS does not support SAP HANA. A single EC2 instance in one AZ is not highly available. Multi-AZ RDS is for other databases, not SAP HANA.

Answer

Use Amazon RDS for SAP HANA with Multi-AZ deployment

Answer

Use Amazon RDS Multi-AZ for SAP HANA database

Answer

Deploy a single EC2 instance in one Availability Zone and take daily snapshots

Question 11

A company is migrating its SAP landscape to AWS. They have a mix of production and non-production systems. The SAP systems use a shared storage architecture for transport directories. Which AWS storage solution should be used for the SAP transport directory to provide low-latency access across multiple EC2 instances in the same region?

Accepted Answer

Amazon EFS. Amazon EFS is a fully managed, elastic NFS file system that can be mounted concurrently by multiple EC2 instances across multiple Availability Zones within a region, providing the shared, low-latency POSIX-compliant storage required for SAP transport directories (/usr/sap/trans). SAP transport directories must be shared across all SAP systems (DEV, QAS, PRD) so that transport requests and cofiles/data files are visible to every application server. EFS delivers the multi-attach, NFSv4.1 semantics that SAP supports for this purpose.

Answer

Amazon EBS with multi-attach

Answer

Amazon S3 with S3FS

Answer

Amazon FSx for Windows File Server

Question 12

A company is planning to run SAP Business Suite on AWS. They need to ensure that the SAP systems are backed up according to best practices. Which backup strategy is recommended for SAP HANA databases on AWS?

Accepted Answer

Schedule HANA backups to Amazon S3 using the HANA backup tool. SAP's official guidance for HANA on AWS is to use the native SAP HANA backup tool (hdbsql BACKUP DATA / hdbsql with backint) to write backups to Amazon S3, which is the certified, SAP-supported target for HANA backups on AWS. This approach preserves HANA's log-shipping and point-in-time recovery semantics and integrates with SAP HANA Studio/Cockpit. AWS Backup and EBS snapshots operate at the block layer and do not provide HANA-consistent backups unless the DB is quiesced.

Answer

Use AWS Backup to automatically back up the HANA database

Answer

Perform daily full EBS snapshots and store them in Glacier

Answer

Use only EBS snapshots for all SAP HANA volumes

Question 13

A company is running SAP ERP on AWS with an Oracle database. The database is hosted on an EC2 instance with multiple EBS volumes. The company wants to encrypt the database at rest using AWS KMS. What is the correct procedure to enable encryption for the existing Oracle database without downtime?

Accepted Answer

Use Oracle Transparent Data Encryption (TDE) with AWS KMS as the key store. Oracle Transparent Data Encryption (TDE) with AWS KMS as the external key store is the SAP-certified, zero-downtime method to encrypt an existing Oracle database on EC2 at rest. TDE encrypts data at the database layer (tablespaces, redo logs, temp) and integrates with AWS KMS via Oracle's PKCS#11 or TDE keystore, so no volume detach, migration, or downtime is required. This is the approach documented in SAP on AWS guidance for Oracle encryption.

Answer

Enable EBS encryption on the existing volumes by modifying the volume attribute

Answer

Migrate the database to Amazon RDS Custom for Oracle with encryption enabled

Answer

Use AWS KMS to encrypt the EBS volumes by creating a new encrypted volume and attaching it

Question 14

An SAP Basis administrator is planning to migrate an SAP NetWeaver system from on-premises to AWS. The system uses a proprietary storage backend for the transport directory. Which AWS storage options are suitable for the SAP transport directory to provide shared access across multiple EC2 instances? (Choose TWO.)

Accepted Answer

Amazon FSx for Lustre. Amazon EFS provides a shared file system accessible from multiple Linux instances. Amazon FSx for Lustre is a high-performance file system for HPC and can be used for SAP transport directories if performance is critical. S3 is object storage, not a file system. EBS can only be attached to one instance at a time (except multi-attach which is limited). Instance store is ephemeral.

Answer

EC2 instance store

Answer

Amazon EBS with multi-attach

Answer

Amazon S3

Question 15

A company runs SAP HANA in a multi-node scale-out configuration on AWS. The system is experiencing network bottlenecks that impact performance. Which AWS services or features can be used to monitor and analyze network performance between the HANA nodes? (Choose THREE.)

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture IP traffic metadata to analyze network connections between HANA nodes. Amazon CloudWatch provides network metrics such as throughput and errors. AWS X-Ray helps trace application requests across nodes, which can identify performance bottlenecks including network latency. AWS Trusted Advisor offers best practice recommendations but not detailed network analysis. Amazon Inspector is for security assessment. Therefore, the three services that can be used to monitor and analyze network performance are VPC Flow Logs, CloudWatch, and X-Ray.

Answer

AWS Trusted Advisor

Answer

Amazon Inspector