PAS-C01 Technology Practice Test 22 — 15 Questions

Question 1

An SAP system administrator needs to ensure that an EC2 instance running SAP can access an S3 bucket containing installation media. The instance is in a private subnet without internet access. What is the recommended way to provide access to S3?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create a VPC Gateway Endpoint for S3.. A VPC Gateway Endpoint for S3 allows instances in a private subnet to access S3 without internet access. NAT Gateway is for internet access, Direct Connect is for on-premises connectivity, and VPN is for site-to-site.

Answer

Set up a VPN connection to S3.

Answer

Set up a NAT Gateway in the public subnet.

Answer

Use AWS Direct Connect to connect to S3.

Question 2

A company is running SAP HANA on AWS and needs to perform a backup to S3 using the SAP HANA BACKUP command. The backup fails with an error indicating that the S3 bucket cannot be accessed. The EC2 instance has an IAM role assigned with the necessary S3 permissions. What is the most likely cause of the failure?

Accepted Answer

The S3 bucket policy denies access from the instance's VPC.. SAP HANA backup to S3 requires a properly configured S3 bucket and the backup tool must be able to write to it. The error is likely due to the bucket policy blocking the request. IAM role permissions are correct, but bucket policies can override them.

Answer

The S3 bucket is in a different region.

Answer

The instance does not have internet access.

Answer

The IAM role does not have the correct trust policy.

Question 3

An SAP system on AWS is configured with an Application Load Balancer (ALB) for health checks. The ALB marks all targets as unhealthy. The health check path is /sap/public/health.html, and the SAP Web Dispatcher is configured to serve this file. What is the most likely cause of the health check failure?

Accepted Answer

The security group for the Web Dispatcher does not allow traffic from the ALB.. ALB health checks originate from private IP addresses within the VPC. If the SAP Web Dispatcher's security group does not allow inbound traffic from the ALB's security group, the health check requests will be blocked. Path or port issues would also cause failures, but the most common cause is security group misconfiguration.

Answer

The health check path is incorrect.

Answer

The health check port is wrong.

Answer

The ALB is in a different VPC.

Question 4

A company wants to migrate its SAP HANA database to AWS and needs to minimize downtime. Which AWS service should be used for a near-zero downtime migration?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) supports ongoing replication and can migrate SAP HANA to AWS with minimal downtime. Server Migration Service (SMS) is for server migrations, Snowball is for large data transfers offline, and Direct Connect is for network connectivity.

Answer

AWS Direct Connect

Answer

AWS Snowball

Answer

AWS Server Migration Service (SMS)

Question 5

A company is deploying SAP NetWeaver on AWS and needs to ensure high availability for the SAP Central Services (ASCS) instance. Which TWO AWS features should be used together to achieve this?

Accepted Answer

Network Load Balancer (NLB). Amazon EFS provides a shared filesystem for the ASCS cluster, and a Network Load Balancer (NLB) is used to distribute traffic to the active ASCS instance. S3 is not suitable for shared files, and Multi-AZ for RDS is for databases, not ASCS.

Answer

Amazon RDS Multi-AZ

Answer

Application Load Balancer (ALB)

Answer

Amazon S3

Question 6

An SAP HANA database is running on an EC2 instance with multiple EBS volumes for /hana/data, /hana/log, and /hana/shared. Which TWO AWS features should be used to ensure that the EBS volumes are backed up consistently?

Accepted Answer

EBS snapshots. EBS snapshots are the standard backup method for EBS volumes. However, to ensure consistency across multiple volumes (e.g., for a striped filesystem), the volumes should be snapshotted at the same point in time. AWS Backup can automate this with snapshot consistency groups. While AWS Backup can create consistent snapshots, it also supports application-consistent backups. The two correct options are EBS snapshots and AWS Backup. Lifecycle Manager can create snapshots but does not ensure cross-volume consistency by default.

Answer

Amazon S3

Answer

AWS Storage Gateway

Answer

EBS Lifecycle Manager

Question 7

A company is running SAP HANA on AWS and wants to implement a disaster recovery strategy using a standby system in another AWS Region. Which THREE components are essential for this setup?

Accepted Answer

A secondary EC2 instance in the DR Region. A secondary EC2 instance in the DR Region is required to host the standby SAP HANA system. This instance must be sized and configured to match the primary, and it will receive replicated data via SAP HANA System Replication to enable failover.

Answer

Amazon Route53

Answer

AWS CloudEndure Migration

Question 8

Refer to the exhibit. An IAM policy is attached to an EC2 instance role used by SAP HANA backup scripts. The backup script attempts to upload a file to the S3 bucket without specifying server-side encryption. What will happen?

Accepted Answer

The upload fails because of the Deny statement.. The first statement allows PutObject only if encryption is AES256. The second statement denies PutObject if encryption is not AES256. Since the request does not specify encryption, it does not match the condition in the Allow statement (so not allowed) and it matches the Deny statement because encryption is not AES256 (StringNotEquals). Therefore, the request is denied.

Answer

The upload fails because there is no Allow statement without condition.

Answer

The upload succeeds because there is an Allow statement.

Answer

The upload succeeds because the Deny condition does not match.

Question 9

Refer to the exhibit. An SAP administrator is reviewing the EBS volume configuration for a SAP HANA /hana/data volume. The volume is 500 GB gp2 with DeleteOnTermination set to false. The instance is in us-east-1a. Which action should the administrator take to improve performance for SAP HANA?

Accepted Answer

Modify the volume to gp3 and provision 5000 IOPS.. SAP HANA requires a minimum of 5000 IOPS for /hana/data. The gp2 volume provides 1500 IOPS (3 IOPS per GB). The administrator should either increase the volume size to at least 1667 GB to get 5000 IOPS, or change to gp3 with provisioned IOPS of 5000 or more. The best practice for SAP HANA is to use multiple volumes in RAID 0, but the question asks about improving performance for this volume. Changing to gp3 with higher IOPS is a direct improvement.

Answer

Take a snapshot and create a new volume in us-east-1b.

Answer

Enable encryption on the volume.

Answer

Set DeleteOnTermination to true.

Question 10

Refer to the exhibit. An SAP system administrator checks disk usage on an SAP HANA instance. The /hana/log volume is at 80% usage. What is the recommended course of action to prevent issues?

Accepted Answer

Increase the size of the EBS volume for /hana/log and extend the filesystem.. SAP HANA requires that the log volume have sufficient free space to avoid transaction log overflow. The best practice is to increase the size of the log volume. Deleting logs manually is risky, and moving data volumes is not appropriate. The recommended action is to increase the EBS volume size and extend the filesystem.

Answer

Take a snapshot of the instance and terminate it.

Answer

Delete old backup files from /hana/log.

Answer

Move some data from /hana/log to /hana/data.

Question 11

A company runs an SAP HANA database on an AWS EC2 instance. The database experiences high latency during peak hours. The operations team suspects network bottlenecks. Which AWS service should be used to analyze network traffic patterns and identify the source of latency?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture IP traffic information for network interfaces, enabling analysis of traffic patterns and bottlenecks. AWS CloudTrail logs API calls, not network traffic. AWS Trusted Advisor provides best-practice checks but not detailed network analysis. AWS X-Ray traces application requests, not network-level traffic.

Answer

AWS X-Ray

Answer

AWS Trusted Advisor

Answer

AWS CloudTrail

Question 12

An SAP system administrator needs to ensure high availability for an SAP HANA database using AWS services. What is the recommended architecture?

Accepted Answer

Deploy SAP HANA on EC2 instances in a cluster across multiple Availability Zones with synchronous replication. SAP HANA can be deployed as a multi-node cluster using EC2 instances in different Availability Zones with synchronous replication and automatic failover using cluster software like Pacemaker. RDS does not support SAP HANA. A single EC2 instance in one AZ is not highly available. Multi-AZ RDS is for other databases, not SAP HANA.

Answer

Use Amazon RDS for SAP HANA with Multi-AZ deployment

Answer

Use Amazon RDS Multi-AZ for SAP HANA database

Answer

Deploy a single EC2 instance in one Availability Zone and take daily snapshots

Question 13

A company is migrating its SAP landscape to AWS. They have a mix of production and non-production systems. The SAP systems use a shared storage architecture for transport directories. Which AWS storage solution should be used for the SAP transport directory to provide low-latency access across multiple EC2 instances in the same region?

Accepted Answer

Amazon EFS. Amazon EFS provides a scalable, shared file system accessible from multiple EC2 instances with low latency, ideal for SAP transport directories. Amazon S3 is object storage, not a file system. Amazon FSx for Windows File Server is for Windows workloads. Amazon EBS volumes can only be attached to one instance at a time (except for multi-attach, which has limitations).

Answer

Amazon EBS with multi-attach

Answer

Amazon S3 with S3FS

Answer

Amazon FSx for Windows File Server

Question 14

An SAP system administrator is setting up monitoring for SAP NetWeaver on AWS. They want to send custom SAP application metrics to CloudWatch for alerting. What is the most efficient way to achieve this?

Accepted Answer

Install the Amazon CloudWatch Agent on the EC2 instance and configure it to collect SAP metrics. The CloudWatch Agent can collect custom metrics from the OS and applications, including SAP, and publish them to CloudWatch. AWS Lambda can be used but requires custom code and more overhead. SAP Solution Manager does not natively integrate with CloudWatch. AWS Systems Manager is for management, not custom metric publishing.

Answer

Use SAP Solution Manager to export metrics to CloudWatch via API

Answer

Use AWS Lambda to periodically query SAP and push metrics to CloudWatch

Answer

Configure AWS Systems Manager to collect SAP metrics

Question 15

A company is planning to run SAP Business Suite on AWS. They need to ensure that the SAP systems are backed up according to best practices. Which backup strategy is recommended for SAP HANA databases on AWS?

Accepted Answer

Schedule HANA backups to Amazon S3 using the HANA backup tool. SAP HANA backups should be stored on Amazon S3 for durability and cost-effectiveness. EBS snapshots are not sufficient for HANA because they are crash-consistent but not application-consistent for HANA. Combining EBS snapshots with HANA backups ensures both crash consistency and recoverability. Daily full backups are not required; incremental/differential backups are more efficient.

Answer

Use AWS Backup to automatically back up the HANA database

Answer

Perform daily full EBS snapshots and store them in Glacier

Answer

Use only EBS snapshots for all SAP HANA volumes