PAS-C01 Technology Practice Test 21 — 15 Questions

Question 1

Refer to the exhibit. A CloudFormation template is used to launch an SAP application server. The stack creation succeeds, but the application server fails to start correctly. What is the most likely reason?

Accepted Answer

The UserData script may not be executed due to timing issues; the sleep command may be insufficient.. Option B is correct because the UserData script includes a 'sleep 30' command, which may not be sufficient if the instance takes longer to become ready. Option A is wrong because r5.2xlarge is supported for SAP. Option C is wrong because there is no output parameter causing issues. Option D is wrong because the AMI ID is just an example; the assumption is it's valid.

Answer

The template is missing an output parameter to verify the instance status.

Answer

The instance type r5.2xlarge is not supported for SAP application servers.

Answer

The AMI ID is invalid because it contains numeric characters.

Question 2

A company is running a critical SAP HANA database on an EC2 instance with a single EBS volume for /hana/data. They need to ensure high durability and recoverability of the data. Which storage configuration meets SAP best practices?

Accepted Answer

Configure RAID 0 over multiple EBS volumes for the /hana/data filesystem.. SAP HANA requires striped volumes for /hana/data to achieve the required IOPS and throughput. EBS Multi-Attach is not supported for SAP HANA, and a single volume does not provide enough performance. RAID 0 over multiple EBS volumes is the recommended configuration.

Answer

Mount an Amazon EFS filesystem for /hana/data.

Answer

Use a single gp3 EBS volume with provisioned IOPS.

Answer

Use EBS Multi-Attach to attach the same volume to multiple instances.

Question 3

An SAP system is experiencing high CPU utilization on the application server. CloudWatch metrics show that the CPU credit balance for the T3 instance is frequently depleted. What is the most cost-effective solution to resolve this issue while maintaining performance?

Accepted Answer

Enable T3 unlimited on the instance.. T3 instances are burstable and may run out of CPU credits under sustained load. Changing to a T3 unlimited instance avoids performance throttling but incurs additional charges if credits are exhausted. M5 instances are non-burstable and provide consistent performance. The most cost-effective solution is to switch to a T3 unlimited configuration if the workload is intermittent; however, for sustained high CPU, an M5 instance is more appropriate. The best answer here is to use T3 unlimited because it is cost-effective for variable workloads.

Answer

Add more vCPUs by changing to a C5 instance.

Answer

Change the instance type to M5.large.

Answer

Increase the size of the EBS volumes.

Question 4

A company is migrating an SAP ERP system to AWS and needs to connect on-premises users to the SAP application securely. The SAP application is deployed in a VPC private subnet. Which service should be used to provide secure access for remote users?

Accepted Answer

AWS Client VPN. AWS Client VPN provides secure access for individual remote users to resources in a VPC. AWS Direct Connect is for dedicated network connections, Site-to-Site VPN is for site-to-site connectivity, and Transit Gateway is for connecting multiple VPCs and on-premises networks.

Answer

AWS Site-to-Site VPN

Answer

AWS Transit Gateway

Answer

AWS Direct Connect

Question 5

An SAP system administrator needs to automate the creation of an SAP HANA database backup and copy it to another AWS Region for disaster recovery. The backup is stored in an Amazon S3 bucket. Which AWS service should be used to replicate the backup to another Region?

Accepted Answer

S3 Cross-Region Replication (CRR). S3 Cross-Region Replication (CRR) automatically replicates objects from a source bucket to a destination bucket in a different region. S3 Batch Operations is for bulk actions, S3 Transfer Acceleration speeds up uploads, and S3 Lifecycle Policies manage storage tiers, not replication.

Answer

S3 Lifecycle Policies

Answer

S3 Batch Operations

Answer

S3 Transfer Acceleration

Question 6

A company runs SAP on AWS and is experiencing high latency for database queries after moving the SAP HANA database to a larger instance type. CloudWatch metrics show that the EBS volume queue length is consistently high. What is the most likely cause of the latency?

Accepted Answer

The EBS volume does not have enough provisioned IOPS.. High EBS queue length indicates that the volume is not keeping up with I/O requests. This can be due to insufficient IOPS provisioned for the EBS volume. While network bandwidth or CPU could be factors, the queue length specifically points to I/O bottleneck.

Answer

The instance's network bandwidth is saturated.

Answer

The instance's CPU is under-provisioned.

Answer

The EBS volume is not encrypted.

Question 7

An SAP system administrator needs to ensure that an EC2 instance running SAP can access an S3 bucket containing installation media. The instance is in a private subnet without internet access. What is the recommended way to provide access to S3?

Accepted Answer

Create a VPC Gateway Endpoint for S3.. A VPC Gateway Endpoint for S3 allows instances in a private subnet to access S3 without internet access. NAT Gateway is for internet access, Direct Connect is for on-premises connectivity, and VPN is for site-to-site.

Answer

Set up a VPN connection to S3.

Answer

Set up a NAT Gateway in the public subnet.

Answer

Use AWS Direct Connect to connect to S3.

Question 8

A company is running SAP HANA on AWS and needs to perform a backup to S3 using the SAP HANA BACKUP command. The backup fails with an error indicating that the S3 bucket cannot be accessed. The EC2 instance has an IAM role assigned with the necessary S3 permissions. What is the most likely cause of the failure?

Accepted Answer

The S3 bucket policy denies access from the instance's VPC.. SAP HANA backup to S3 requires a properly configured S3 bucket and the backup tool must be able to write to it. The error is likely due to the bucket policy blocking the request. IAM role permissions are correct, but bucket policies can override them.

Answer

The S3 bucket is in a different region.

Answer

The instance does not have internet access.

Answer

The IAM role does not have the correct trust policy.

Question 9

An SAP system on AWS is configured with an Application Load Balancer (ALB) for health checks. The ALB marks all targets as unhealthy. The health check path is /sap/public/health.html, and the SAP Web Dispatcher is configured to serve this file. What is the most likely cause of the health check failure?

Accepted Answer

The security group for the Web Dispatcher does not allow traffic from the ALB.. ALB health checks originate from private IP addresses within the VPC. If the SAP Web Dispatcher's security group does not allow inbound traffic from the ALB's security group, the health check requests will be blocked. Path or port issues would also cause failures, but the most common cause is security group misconfiguration.

Answer

The health check path is incorrect.

Answer

The health check port is wrong.

Answer

The ALB is in a different VPC.

Question 10

A company wants to migrate its SAP HANA database to AWS and needs to minimize downtime. Which AWS service should be used for a near-zero downtime migration?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) supports ongoing replication and can migrate SAP HANA to AWS with minimal downtime. Server Migration Service (SMS) is for server migrations, Snowball is for large data transfers offline, and Direct Connect is for network connectivity.

Answer

AWS Direct Connect

Answer

AWS Snowball

Answer

AWS Server Migration Service (SMS)

Question 11

A company is deploying SAP NetWeaver on AWS and needs to ensure high availability for the SAP Central Services (ASCS) instance. Which TWO AWS features should be used together to achieve this?

Accepted Answer

Network Load Balancer (NLB). Amazon EFS provides a shared filesystem for the ASCS cluster, and a Network Load Balancer (NLB) is used to distribute traffic to the active ASCS instance. S3 is not suitable for shared files, and Multi-AZ for RDS is for databases, not ASCS.

Answer

Amazon RDS Multi-AZ

Answer

Application Load Balancer (ALB)

Answer

Amazon S3

Question 12

An SAP HANA database is running on an EC2 instance with multiple EBS volumes for /hana/data, /hana/log, and /hana/shared. Which TWO AWS features should be used to ensure that the EBS volumes are backed up consistently?

Accepted Answer

EBS snapshots. EBS snapshots are the standard backup method for EBS volumes. However, to ensure consistency across multiple volumes (e.g., for a striped filesystem), the volumes should be snapshotted at the same point in time. AWS Backup can automate this with snapshot consistency groups. While AWS Backup can create consistent snapshots, it also supports application-consistent backups. The two correct options are EBS snapshots and AWS Backup. Lifecycle Manager can create snapshots but does not ensure cross-volume consistency by default.

Answer

Amazon S3

Answer

AWS Storage Gateway

Answer

EBS Lifecycle Manager

Question 13

A company is running SAP HANA on AWS and wants to implement a disaster recovery strategy using a standby system in another AWS Region. Which THREE components are essential for this setup?

Accepted Answer

A secondary EC2 instance in the DR Region. Option B is correct because a secondary EC2 instance in the DR Region is required to host the standby SAP HANA system. This instance must be sized and configured to match the primary, and it will receive replicated data via SAP HANA System Replication to enable failover.

Answer

Amazon Route53

Answer

AWS CloudEndure Migration

Question 14

Refer to the exhibit. An IAM policy is attached to an EC2 instance role used by SAP HANA backup scripts. The backup script attempts to upload a file to the S3 bucket without specifying server-side encryption. What will happen?

Accepted Answer

The upload fails because of the Deny statement.. The first statement allows PutObject only if encryption is AES256. The second statement denies PutObject if encryption is not AES256. Since the request does not specify encryption, it does not match the condition in the Allow statement (so not allowed) and it matches the Deny statement because encryption is not AES256 (StringNotEquals). Therefore, the request is denied.

Answer

The upload fails because there is no Allow statement without condition.

Answer

The upload succeeds because there is an Allow statement.

Answer

The upload succeeds because the Deny condition does not match.

Question 15

Refer to the exhibit. An SAP administrator is reviewing the EBS volume configuration for a SAP HANA /hana/data volume. The volume is 500 GB gp2 with DeleteOnTermination set to false. The instance is in us-east-1a. Which action should the administrator take to improve performance for SAP HANA?

Accepted Answer

Modify the volume to gp3 and provision 5000 IOPS.. SAP HANA requires a minimum of 5000 IOPS for /hana/data. The gp2 volume provides 1500 IOPS (3 IOPS per GB). The administrator should either increase the volume size to at least 1667 GB to get 5000 IOPS, or change to gp3 with provisioned IOPS of 5000 or more. The best practice for SAP HANA is to use multiple volumes in RAID 0, but the question asks about improving performance for this volume. Changing to gp3 with higher IOPS is a direct improvement.

Answer

Take a snapshot and create a new volume in us-east-1b.

Answer

Enable encryption on the volume.

Answer

Set DeleteOnTermination to true.

PAS-C01 Technology Practice Test 21 — 15 Questions

Exhibit

PAS-C01 Technology Practice Test 21 — 15 Questions

Exhibit