PAS-C01 Technology Practice Test 14 — 15 Questions

Question 1

A company runs SAP Business Suite on AWS and wants to implement a disaster recovery (DR) solution with a Recovery Time Objective (RTO) of 4 hours and a Recovery Point Objective (RPO) of 1 hour. The primary site is in us-east-1, and DR site will be in us-west-2. The database is running on SAP ASE. The company wants to minimize changes to the existing SAP environment and avoid complex replication setups. What is the most suitable DR approach?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use AWS Backup to schedule snapshots of the EBS volumes and copy them to the DR region.. AWS Backup can schedule EBS snapshots every hour, meeting the RPO of 1 hour, and snapshots can be copied to the DR region (us-west-2). Restoring from these snapshots can be automated to achieve the RTO of 4 hours. This approach requires minimal changes to the existing SAP environment and avoids complex replication setups. Option A is incorrect because Multi-AZ replication is for high availability within a single region, not for disaster recovery across regions. Option B is incorrect because SAP ASE native replication would require significant changes to the database configuration and licensing, contradicting the requirement to minimize changes. Option D is incorrect because AWS Database Migration Service is designed for ongoing data replication and is not the best fit for a simple backup/restore DR strategy.

Answer

Deploy a Multi-AZ database in the primary region.

Answer

Set up SAP ASE native replication to a standby database in the DR region.

Answer

Use AWS Database Migration Service to continuously replicate data to the DR region.

Question 2

A company is running a business-critical SAP HANA database on an m5.24xlarge EC2 instance. The database stores 3 TB of data on EBS gp3 volumes. The system experiences high latency during peak hours. Which configuration change would most effectively reduce latency without increasing costs significantly?

Accepted Answer

Migrate the EBS volumes to io2 Block Express volumes with the same capacity.. Migrating to io2 Block Express volumes provides consistent, sub-millisecond latency and higher IOPS performance than gp3, which is essential for reducing high latency in a business-critical SAP HANA database during peak hours. This change addresses the latency issue without significantly increasing costs, as io2 Block Express offers a cost-effective balance of performance and durability for mission-critical workloads.

Answer

Increase the Provisioned IOPS of the gp3 volumes to the maximum supported.

Answer

Move the database to a larger instance type like x1e.32xlarge with more memory.

Answer

Increase the gp3 volume size to 4 TB to gain more baseline IOPS.

Question 3

An SAP system running on AWS is experiencing intermittent connectivity issues between the SAP application servers and the database server. Both are in the same VPC but different subnets. The security groups and network ACLs are correctly configured. The issue occurs only during peak hours. Which of the following is the most likely cause?

Accepted Answer

Network ACLs do not have rules to allow ephemeral ports for return traffic.. The intermittent connectivity issue during peak hours points to a resource exhaustion problem. Network ACLs are stateless, meaning they must explicitly allow both inbound and outbound traffic, including ephemeral ports (typically 1024-65535) used for return traffic. If the NACL outbound rules do not allow these ephemeral ports, return traffic from the database server to the application server will be dropped, especially under high load when many connections are established simultaneously.

Answer

Security group outbound rules are blocking return traffic.

Answer

The VPC peering connection is throttling traffic.

Answer

Security group inbound rules are misconfigured.

Question 4

A company wants to automate the backup of its SAP HANA database to Amazon S3. The database is running on an EC2 instance with a 500 GB gp3 volume. The backup should be encrypted at rest in S3. What is the most efficient way to achieve this with minimal operational overhead?

Accepted Answer

Use the SAP HANA Backup and Restore integration with Amazon S3 to back up directly to S3 buckets, enabling default S3 encryption.. SAP HANA natively supports direct backup to Amazon S3 via the SAP HANA Backup and Restore integration, which uses the S3 API to stream backup files directly to an S3 bucket. This eliminates the need for intermediate storage or additional services, and enabling default S3 encryption (SSE-S3 or SSE-KMS) ensures data is encrypted at rest with minimal configuration overhead, meeting the requirement for efficiency and low operational burden.

Answer

Back up to an EBS snapshot, then copy the snapshot to S3 using AWS Backup.

Answer

Schedule an AWS Backup plan to back up the EC2 instance and its EBS volumes.

Answer

Use AWS Storage Gateway to back up the database to S3, then enable S3 encryption.

Question 5

An SAP Basis team is planning to migrate an SAP ERP system from on-premises to AWS. The system currently uses Oracle Database and runs on a physical server with 256 GB RAM. The team wants to minimize downtime and ensure the migration is supported by SAP. Which AWS service or feature should they use to perform the migration?

Accepted Answer

Use SAP's Software Provisioning Manager (SWPM) to perform a homogeneous system copy to AWS.. SAP explicitly supports homogeneous system copies using Software Provisioning Manager (SWPM) for migrating SAP systems to AWS. This method allows the team to perform a database-level export/import while keeping the same operating system and database platform (Oracle), minimizing downtime by using SAP's validated tools and processes. AWS provides no native service that is SAP-certified for this specific migration scenario, making SWPM the only supported approach.

Answer

Use AWS VM Import/Export to migrate the physical server as an AMI.

Answer

Use AWS CloudEndure Migration to replicate the entire server to AWS.

Answer

Use AWS Database Migration Service (DMS) to replicate the Oracle database to Amazon RDS for Oracle.

Question 6

An SAP administrator is trying to set up an AWS CLI script that queries EC2 instance metadata. The script runs on an EC2 instance with an IAM role attached. The IAM role has the following policy:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "ec2:DescribeInstances",
      "Resource": "*"
    }
  ]
}

What is the most likely cause of the error?

Accepted Answer

The instance does not have an IAM instance profile associated, or the profile name does not match the role name.. The most likely cause is that the EC2 instance does not have an IAM instance profile associated, or the profile name does not match the role name. Without a properly attached instance profile, the AWS CLI cannot obtain temporary credentials from the instance metadata service (IMDS), so any API call—including ec2:DescribeInstances—will fail with an access denied or credential error, regardless of the IAM policy being correctly configured.

Answer

The IAM policy does not specify a resource ARN.

Answer

The IAM role does not have the ec2:DescribeInstances action allowed.

Answer

The AWS CLI is not configured with the correct region.

Question 7

A company is running SAP NetWeaver on AWS and wants to implement high availability for the ASCS instance. Which AWS service can be used to monitor and automatically restart the ASCS instance if it fails?

Accepted Answer

Amazon CloudWatch with EC2 Auto Recovery. Amazon CloudWatch with EC2 Auto Recovery is the correct choice because it monitors the health of an EC2 instance at the hypervisor level and can automatically recover a failed instance by restarting it on a new host. For SAP NetWeaver ASCS instances, which require persistent state and are typically tied to a single instance, Auto Recovery ensures the instance is restored with the same private IP, Elastic IP, and instance metadata, maintaining the SAP cluster quorum without manual intervention.

Answer

EC2 Auto Scaling group

Answer

AWS Lambda with a scheduled function

Answer

Elastic Load Balancing (ELB)

Question 8

An SAP system running on AWS is experiencing high CPU utilization on the database server. The database is SAP HANA running on an r5.8xlarge instance. Which metric in Amazon CloudWatch would best indicate whether the CPU is being consumed by the HANA process or by other OS processes?

Accepted Answer

Custom metrics collected by the CloudWatch agent for the hdbindexserver process. The CloudWatch agent can be configured to collect custom metrics for specific processes, such as hdbindexserver (the main SAP HANA index server process). By monitoring the CPU utilization of this specific process, you can directly determine whether the HANA database process itself is consuming the CPU, as opposed to other OS-level processes like kernel threads, system daemons, or other applications. This granularity is not available from the EC2 instance-level CPUUtilization metric.

Answer

CPUUtilization metric from the EC2 instance

Answer

HANA CPU metric from SAP HANA CloudWatch integration

Answer

CPUCreditUsage metric

Question 9

A company is running SAP S/4HANA on AWS and needs to ensure that the system can survive a single Availability Zone failure. The SAP HANA database is 1.5 TB in size. What is the most cost-effective high availability solution that meets SAP's support requirements?

Accepted Answer

Implement SAP HANA System Replication (HSR) with two EC2 instances in different Availability Zones.. SAP HANA System Replication (HSR) with two EC2 instances in different Availability Zones provides synchronous replication to meet SAP's support requirements for high availability (HA) while surviving a single AZ failure. This is the most cost-effective solution as it uses standard EC2 instances and does not require additional licensing or managed services, and it supports the 1.5 TB database size without the limitations of RDS for SAP HANA.

Answer

Deploy SAP HANA on Amazon RDS for SAP HANA in Multi-AZ.

Answer

Use Amazon RDS Multi-AZ for the SAP HANA database.

Answer

Use a single EC2 instance with EBS snapshots taken every 5 minutes.

Question 10

An administrator is setting up an SAP system on AWS and needs to assign a static private IP address to the SAP application server. Which AWS resource should be used to ensure the private IP address remains the same even after an instance stop/start?

Accepted Answer

Elastic Network Interface (ENI) with a primary private IP. An Elastic Network Interface (ENI) with a primary private IP address retains its private IP address across instance stop/start cycles because the ENI is a separate resource that persists independently of the instance lifecycle. When you attach an ENI to an SAP application server, the primary private IP (assigned from the VPC subnet) remains fixed even after the instance is stopped and started, ensuring consistent network addressing for SAP communication.

Answer

VPC endpoint

Answer

Secondary private IP address on the primary network interface

Answer

Elastic IP address

Question 11

A company is running SAP ERP on AWS and wants to implement a disaster recovery (DR) strategy with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. The primary site is in us-east-1, and the DR site is in us-west-2. Which TWO AWS features should be combined to achieve this? (Choose TWO.)

Accepted Answer

Amazon S3 Cross-Region Replication for database backups. Amazon S3 Cross-Region Replication (CRR) for database backups ensures that backup files are automatically replicated to the DR region within minutes, supporting an RPO of 15 minutes. EC2 AMI Copy allows you to copy pre-configured server images (including OS and SAP application layers) to the DR region, enabling rapid recovery of EC2 instances within the 2-hour RTO. Together, these two features provide a cost-effective, fully automated DR solution for SAP on AWS without requiring third-party tools.

Answer

Amazon RDS Multi-Region replication

Answer

AWS CloudEndure Disaster Recovery

Answer

Amazon EBS Multi-AZ snapshots

Question 12

A company is planning to migrate its SAP HANA database to AWS. The database is 5 TB in size and requires high IOPS for online transaction processing (OLTP) workloads. Which THREE AWS storage options are suitable for SAP HANA data volumes? (Choose THREE.)

Accepted Answer

EC2 instance store (NVMe SSD). EC2 instance store (NVMe SSD) provides very high IOPS and low latency directly attached to the host, which is suitable for SAP HANA data volumes that require high performance for OLTP workloads. However, instance store is ephemeral, so it must be used with replication or backup strategies for persistence.

Answer

Amazon S3

Answer

Amazon EFS

Question 13

An organization runs SAP on AWS and wants to encrypt all data at rest for the SAP HANA database. The encryption keys must be managed by the customer and rotated annually. Which THREE AWS services can be used together to meet these requirements? (Choose THREE.)

Accepted Answer

Amazon EBS encryption. Amazon EBS encryption is correct because SAP HANA databases on AWS typically store data on EBS volumes, and enabling EBS encryption ensures data at rest is encrypted using AWS KMS keys. This directly meets the requirement for encrypting the SAP HANA database storage.

Answer

Amazon S3 server-side encryption

Answer

AWS Certificate Manager (ACM)

Question 14

A company has deployed its SAP S/4HANA system on AWS in a single Availability Zone. The system consists of a primary application server (PAS), additional application servers (AAS), and a HANA database server, all running on EC2 instances. The company is experiencing occasional performance degradation during peak hours. The CloudWatch metrics show that the database server's CPU utilization spikes to 90% during these periods, while the application servers' CPU remains below 50%. The storage is configured with two EBS io1 volumes (each 1 TB, 10,000 IOPS) for HANA data and one io1 volume (500 GB, 5,000 IOPS) for log. The network throughput is not saturated. The company wants to resolve the performance issue without increasing costs significantly. Which course of action should the company take?

Accepted Answer

Implement SAP HANA System Replication with a secondary node in the same AZ to offload read operations.. Implementing SAP HANA System Replication with a secondary node in the same Availability Zone allows read-only queries to be offloaded to the secondary node, reducing CPU load on the primary database server. This directly addresses the CPU spike during peak hours without significantly increasing costs. Option B is wrong because the performance issue is CPU-bound, not I/O-bound; increasing IOPS would add cost without resolving the CPU bottleneck. Option C is wrong because switching from io1 to gp3 may reduce storage costs but does not improve CPU performance. Option D is wrong because upgrading to a larger instance is expensive and may not be necessary if HSR can distribute the load effectively.

Answer

Increase the Provisioned IOPS on the data volumes to 20,000 each.

Answer

Switch the EBS volumes from io1 to gp3 to reduce latency.

Answer

Upgrade the database instance to a larger type, such as r5.12xlarge.

Question 15

A company is running SAP Business Suite on AWS. The system includes a central services (ASCS) instance, a primary application server (PAS), and a database server running SAP HANA. The company recently experienced an outage when the EC2 instance hosting the ASCS instance failed due to a hardware issue. The system was down for 4 hours while the IT team manually recovered the ASCS instance from an AMI. The company wants to implement a highly available ASCS instance with automatic failover and a Recovery Time Objective (RTO) of less than 15 minutes. The system is currently running in a single Availability Zone. What should the company do to meet these requirements?

Accepted Answer

Deploy a second ASCS instance in a different Availability Zone, set up SAP enqueue replication, and use a virtual IP address with Route 53 health checks for failover.. Deploying a second ASCS instance in a different Availability Zone with SAP enqueue replication and a virtual IP address managed by Route 53 health checks provides automatic failover with an RTO under 15 minutes. This setup ensures that if the primary ASCS instance fails, the standby instance takes over quickly, maintaining enqueue state and minimizing downtime. Option A is wrong because an Application Load Balancer is not designed for SAP ASCS failover; it would not handle enqueue replication or virtual hostname. Option B is wrong because an Auto Scaling group with lifecycle hooks does not provide application-level clustering or enqueue state replication. Option D is wrong because CloudWatch EC2 Auto Recovery only restarts the instance in the same Availability Zone and does not address enqueue replication or cross-AZ failover, resulting in an RTO longer than 15 minutes.

Answer

Place the ASCS instance behind an Application Load Balancer and configure health checks.

Answer

Configure an Auto Scaling group for the ASCS instance with a minimum of 1 and maximum of 2, and use a lifecycle hook to attach an Elastic IP.

Answer

Enable CloudWatch EC2 Auto Recovery on the ASCS instance and configure it to start a new instance in a different AZ.