PAS-C01 Technology Practice Test 23 — 15 Questions

Question 1

An SAP system administrator is troubleshooting a performance issue on an SAP application server running on an EC2 instance. The /usr/sap directory is on an EBS volume. The administrator notices high I/O wait times. Which action should be taken to improve I/O performance?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Change the EBS volume type to io2 Block Express with provisioned IOPS. The io2 Block Express volume type provides up to 256,000 provisioned IOPS and sub-millisecond latency, which directly addresses high I/O wait times caused by insufficient IOPS on the EBS volume hosting /usr/sap. SAP application servers are sensitive to storage latency, and increasing provisioned IOPS reduces queue depth and wait times for database and log writes.

Answer

Migrate the /usr/sap directory to Amazon EFS

Answer

Move the /usr/sap directory to an instance store volume

Answer

Increase the instance size to a larger instance type

Question 2

A company is deploying SAP S/4HANA on AWS and needs to ensure that the system can be recovered within 4 hours in case of a disaster in the primary region. The secondary region is in a different AWS region. Which approach should be used to meet the recovery time objective (RTO)?

Accepted Answer

Configure SAP HANA system replication to a secondary region with a pre-provisioned standby instance. Replicating SAP HANA to a standby instance in another region using HANA system replication with pre-provisioned infrastructure allows fast failover. Cross-region EBS snapshots take time to restore. Backup and restore from S3 may be slower. Pilot light with application-level replication is not sufficient for HANA.

Answer

Use cross-region EBS snapshots and restore them in the secondary region

Answer

Back up SAP HANA to Amazon S3 and restore in the secondary region

Answer

Set up a pilot light environment using application-level replication

Question 3

An SAP administrator needs to ensure that the SAP landscape on AWS is compliant with the SAP license requirements. What is the responsibility of the customer regarding SAP licensing on AWS?

Accepted Answer

The customer must bring their own SAP licenses and ensure compliance with SAP licensing terms. Customers are responsible for bringing their own SAP licenses and ensuring compliance with SAP licensing terms. AWS does not provide SAP licenses. AWS provides the infrastructure. SAP licensing is not automatically covered by AWS Support.

Answer

AWS provides SAP licenses as part of the EC2 instance pricing

Answer

SAP licensing is automatically handled by AWS Support

Answer

SAP licenses are included when using SAP HANA on AWS

Question 4

A company is running SAP ERP on AWS with an Oracle database. The database is hosted on an EC2 instance with multiple EBS volumes. The company wants to encrypt the database at rest using AWS KMS. What is the correct procedure to enable encryption for the existing Oracle database without downtime?

Accepted Answer

Use Oracle Transparent Data Encryption (TDE) with AWS KMS as the key store. Enabling EBS encryption on a running instance requires creating an encrypted snapshot, restoring a new encrypted volume, and attaching it; this involves downtime. Oracle TDE can be enabled online with minimal impact. AWS KMS does not provide database-level encryption natively; it is used for EBS encryption. Changing to RDS Custom requires migration.

Answer

Enable EBS encryption on the existing volumes by modifying the volume attribute

Answer

Migrate the database to Amazon RDS Custom for Oracle with encryption enabled

Answer

Use AWS KMS to encrypt the EBS volumes by creating a new encrypted volume and attaching it

Question 5

An SAP Basis administrator is planning to migrate an SAP NetWeaver system from on-premises to AWS. The system uses a proprietary storage backend for the transport directory. Which AWS storage options are suitable for the SAP transport directory to provide shared access across multiple EC2 instances? (Choose TWO.)

Accepted Answer

Amazon FSx for Lustre. Amazon EFS provides a shared file system accessible from multiple Linux instances. Amazon FSx for Lustre is a high-performance file system for HPC and can be used for SAP transport directories if performance is critical. S3 is object storage, not a file system. EBS can only be attached to one instance at a time (except multi-attach which is limited). Instance store is ephemeral.

Answer

EC2 instance store

Answer

Amazon EBS with multi-attach

Answer

Amazon S3

Question 6

A company runs SAP HANA in a multi-node scale-out configuration on AWS. The system is experiencing network bottlenecks that impact performance. Which AWS services or features can be used to monitor and analyze network performance between the HANA nodes? (Choose THREE.)

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture IP traffic metadata to analyze network connections between HANA nodes. Amazon CloudWatch provides network metrics such as throughput and errors. AWS X-Ray helps trace application requests across nodes, which can identify performance bottlenecks including network latency. AWS Trusted Advisor offers best practice recommendations but not detailed network analysis. Amazon Inspector is for security assessment. Therefore, the three services that can be used to monitor and analyze network performance are VPC Flow Logs, CloudWatch, and X-Ray.

Answer

AWS Trusted Advisor

Answer

Amazon Inspector

Question 7

A company is designing a disaster recovery plan for SAP S/4HANA on AWS. The plan must have a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 2 hours. Which solutions can meet these requirements? (Choose TWO.)

Accepted Answer

SAP HANA log shipping to Amazon S3 every 15 minutes and restore in another region. SAP HANA log shipping to Amazon S3 every 15 minutes can achieve an RPO of 15 minutes by shipping transaction logs at that interval. RTO of 2 hours is achievable if the restore process is automated and tested. Option E: SAP HANA system replication to a secondary region with automatic failover provides near-zero RPO (seconds) and RTO in minutes, clearly meeting the requirements. Option D is incorrect because EBS snapshots are asynchronous and not a replication mechanism; they may not guarantee an RPO of 15 minutes due to snapshot scheduling delays, and restore times can exceed 2 hours, especially for large databases.

Answer

Multi-AZ deployment of SAP HANA within the same region

Answer

Cross-Region Amazon S3 backup and restore using AWS Backup

Answer

Synchronous storage-level replication using EBS snapshots every 15 minutes and automated restore

Question 8

An SAP administrator has created the IAM policy shown in the exhibit and attached it to an IAM role used by an EC2 instance running SAP HANA. The instance needs to download backup files from the S3 bucket 'sap-backup-bucket' and then stop itself after the backup is complete. However, the backup script fails with an access denied error when trying to list the bucket. What is the most likely cause? (Note: This question is reused from above but with correct exhibit now. I need to change the exhibit to have a mistake. Let me fix: remove the bucket ARN from the Resource list for S3 actions, so only the object ARN is present. That will cause the list operation to fail.)

Accepted Answer

The policy does not allow the s3:ListBucket action on the bucket ARN

Answer

The S3 bucket is encrypted and the policy does not allow kms:Decrypt

Answer

The instance does not have an internet gateway to reach S3

Answer

The policy does not include the ec2:StopInstances permission

Question 9

An SAP administrator runs the AWS CLI command shown in the exhibit to describe an EBS volume attached to an EC2 instance running SAP HANA. The instance is in the us-east-1a Availability Zone. The administrator needs to create a volume in us-east-1b and copy the data from the existing volume. What is the most efficient way to achieve this?

Accepted Answer

Create a snapshot of the volume and then create a new volume in us-east-1b from the snapshot. Creating a snapshot of the existing volume is the most efficient way to copy data across Availability Zones. Then, create a new volume in us-east-1b from that snapshot. Detaching the volume and attaching it to an instance in us-east-1b is not possible because the volume is tied to its AZ. Creating an AMI is unnecessary overhead. Using rsync over the network would require an instance in the same AZ and network bandwidth.

Answer

Use rsync to copy data from the instance to a new volume in us-east-1b over the network

Answer

Detach the volume from the instance and attach it to an instance in us-east-1b

Answer

Create an AMI from the instance and launch a new instance in us-east-1b

Question 10

An SAP system on AWS is experiencing high latency for database transactions. The system uses a single EBS volume for the SAP HANA data volume. The operations team needs to improve I/O performance without changing the instance type. Which action should be taken?

Accepted Answer

Switch to EBS io2 Block Express volumes. Switching to EBS io2 Block Express volumes provides higher IOPS and lower latency compared to gp3. Increasing volume size does not necessarily improve latency. Using a single volume for log and data is not recommended. Enabling EBS optimization is already enabled on current generation instances.

Answer

Use a single EBS volume for both data and log

Answer

Increase the EBS volume size to gain more IOPS

Answer

Enable EBS optimization on the instance

Question 11

Refer to the exhibit. An SAP administrator has the IAM policy shown. The administrator needs to attach an EBS volume to an EC2 instance that is tagged with SAPSystem=DEV. Will the administrator be able to perform the attach operation?

Accepted Answer

No, because the condition requires the tag SAPSystem=PRD. The policy allows AttachVolume and DetachVolume actions, but only when the volume or instance resource has the tag SAPSystem=PRD. Since the instance is tagged DEV, the condition is not met, and the operation will be denied.

Answer

No, because the policy does not allow attaching volumes

Answer

Yes, because the policy allows the actions

Answer

Yes, because the resource is not restricted

Question 12

An SAP system on AWS is using a Multi-AZ deployment for high availability. The SAP Central Services (ASCS) and Enqueue Replication Server (ERS) are running on separate EC2 instances. During a failover test, the ASCS instance fails, but the ERS does not take over. What is the most likely cause?

Accepted Answer

The floating IP address is not configured to move to the ERS instance. SAP Enqueue Replication requires a floating IP address (using AWS Elastic IP or Route 53) that moves from ASCS to ERS during failover. If the floating IP is not properly configured, the ERS cannot take over. DNS resolution is not the primary method. Health checks are not the issue. Instance type is irrelevant.

Answer

The ERS instance does not have the required security group rules

Answer

The DNS TTL is set too high

Answer

The ERS instance is in a different subnet

Question 13

A company runs SAP BusinessObjects on AWS and needs to scale the application tier based on CPU utilization. Which AWS service should be used to automatically add or remove EC2 instances?

Accepted Answer

AWS Auto Scaling. AWS Auto Scaling can automatically adjust the number of EC2 instances based on CloudWatch alarms for CPU utilization. AWS Elastic Load Balancing distributes traffic but does not scale instances. AWS Lambda is for serverless, not EC2 scaling. AWS CloudFormation is for infrastructure provisioning, not auto-scaling.

Answer

AWS Elastic Load Balancing

Answer

AWS Lambda

Answer

AWS CloudFormation

Question 14

An SAP HANA database is running on an EC2 instance with EBS volumes. The operations team needs to take nightly backups of the database. Which AWS service provides the most cost-effective backup solution for long-term retention?

Accepted Answer

Amazon S3 Glacier Deep Archive. Amazon S3 Glacier Deep Archive is the most cost-effective storage class for long-term retention of backups that are accessed infrequently. Amazon EBS Snapshots are stored in S3 but cost more for long-term retention. AWS Backup is a service but does not change storage class. Amazon S3 Standard is expensive for long-term.

Answer

Amazon EBS Snapshots

Answer

Amazon S3 Standard

Answer

AWS Backup

Question 15

A company is running SAP ERP on AWS and using a shared file system for the SAP transport directory. The file system must be accessible from multiple EC2 instances in different Availability Zones. Which AWS storage solution should be used?

Accepted Answer

Amazon EFS. Amazon EFS provides a scalable, shared file system that can be mounted from multiple EC2 instances across Availability Zones. Amazon S3 is object storage, not a file system. Amazon FSx for Windows File Server is for Windows-based environments. Amazon EBS cannot be shared across instances.

Answer

Amazon FSx for Windows File Server

Answer

Amazon S3

Answer

Amazon EBS