PAS-C01 Technology Practice Test 23 — 15 Questions

Question 1

An SAP administrator runs the AWS CLI command shown in the exhibit to describe an EBS volume attached to an EC2 instance running SAP HANA. The instance is in the us-east-1a Availability Zone. The administrator needs to create a volume in us-east-1b and copy the data from the existing volume. What is the most efficient way to achieve this?

Accepted Answer

Create a snapshot of the volume and then create a new volume in us-east-1b from the snapshot. Creating a snapshot of the existing volume is the most efficient way to copy data across Availability Zones. Then, create a new volume in us-east-1b from that snapshot. Detaching the volume and attaching it to an instance in us-east-1b is not possible because the volume is tied to its AZ. Creating an AMI is unnecessary overhead. Using rsync over the network would require an instance in the same AZ and network bandwidth.

Answer

Use rsync to copy data from the instance to a new volume in us-east-1b over the network

Answer

Detach the volume from the instance and attach it to an instance in us-east-1b

Answer

Create an AMI from the instance and launch a new instance in us-east-1b

Question 2

A company is migrating its on-premises SAP HANA database to AWS. The database size is 2 TB, and the acceptable downtime is 4 hours. The company needs to ensure minimal data loss during the migration. Which AWS service should be used for the initial data transfer?

Accepted Answer

AWS Snowball Edge. AWS Snowball Edge is designed for large data transfers where network bandwidth is limited or downtime is constrained. It can transfer 2 TB within the required time frame. AWS Direct Connect requires setup time and may not meet the 4-hour downtime. AWS DataSync is for smaller transfers over the network. AWS Storage Gateway is not optimized for initial large-scale migrations.

Answer

AWS Storage Gateway

Answer

AWS Direct Connect

Answer

AWS DataSync

Question 3

An SAP system on AWS is experiencing high latency for database transactions. The system uses a single EBS volume for the SAP HANA data volume. The operations team needs to improve I/O performance without changing the instance type. Which action should be taken?

Accepted Answer

Switch to EBS io2 Block Express volumes. Switching to EBS io2 Block Express volumes provides higher IOPS and lower latency compared to gp3. Increasing volume size does not necessarily improve latency. Using a single volume for log and data is not recommended. Enabling EBS optimization is already enabled on current generation instances.

Answer

Use a single EBS volume for both data and log

Answer

Increase the EBS volume size to gain more IOPS

Answer

Enable EBS optimization on the instance

Question 4

A company runs SAP NetWeaver on AWS and needs to implement a disaster recovery (DR) strategy with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. The primary region is us-east-1 and DR region is us-west-2. Which AWS service should be used for SAP HANA database replication?

Accepted Answer

SAP HANA System Replication. SAP HANA System Replication with AWS is the recommended approach for database-level DR with low RPO and RTO. AWS Database Migration Service is for migration, not ongoing replication. Storage Gateway is not for HANA replication. EBS Snapshots have higher RPO.

Answer

AWS Database Migration Service (DMS)

Answer

AWS Storage Gateway

Answer

EBS Snapshots

Question 5

Refer to the exhibit. An SAP administrator has the IAM policy shown. The administrator needs to attach an EBS volume to an EC2 instance that is tagged with SAPSystem=DEV. Will the administrator be able to perform the attach operation?

Accepted Answer

No, because the condition requires the tag SAPSystem=PRD. The policy allows AttachVolume and DetachVolume actions, but only when the volume or instance resource has the tag SAPSystem=PRD. Since the instance is tagged DEV, the condition is not met, and the operation will be denied.

Answer

No, because the policy does not allow attaching volumes

Answer

Yes, because the policy allows the actions

Answer

Yes, because the resource is not restricted

Question 6

An SAP system on AWS is using a Multi-AZ deployment for high availability. The SAP Central Services (ASCS) and Enqueue Replication Server (ERS) are running on separate EC2 instances. During a failover test, the ASCS instance fails, but the ERS does not take over. What is the most likely cause?

Accepted Answer

The floating IP address is not configured to move to the ERS instance. SAP Enqueue Replication requires a floating IP address (using AWS Elastic IP or Route 53) that moves from ASCS to ERS during failover. If the floating IP is not properly configured, the ERS cannot take over. DNS resolution is not the primary method. Health checks are not the issue. Instance type is irrelevant.

Answer

The ERS instance does not have the required security group rules

Answer

The DNS TTL is set too high

Answer

The ERS instance is in a different subnet

Question 7

A company runs SAP BusinessObjects on AWS and needs to scale the application tier based on CPU utilization. Which AWS service should be used to automatically add or remove EC2 instances?

Accepted Answer

AWS Auto Scaling. AWS Auto Scaling can automatically adjust the number of EC2 instances based on CloudWatch alarms for CPU utilization. AWS Elastic Load Balancing distributes traffic but does not scale instances. AWS Lambda is for serverless, not EC2 scaling. AWS CloudFormation is for infrastructure provisioning, not auto-scaling.

Answer

AWS Elastic Load Balancing

Answer

AWS Lambda

Answer

AWS CloudFormation

Question 8

An SAP HANA database is running on an EC2 instance with EBS volumes. The operations team needs to take nightly backups of the database. Which AWS service provides the most cost-effective backup solution for long-term retention?

Accepted Answer

Amazon S3 Glacier Deep Archive. Amazon S3 Glacier Deep Archive is the most cost-effective storage class for long-term retention of backups that are accessed infrequently. Amazon EBS Snapshots are stored in S3 but cost more for long-term retention. AWS Backup is a service but does not change storage class. Amazon S3 Standard is expensive for long-term.

Answer

Amazon EBS Snapshots

Answer

Amazon S3 Standard

Answer

AWS Backup

Question 9

A company is running SAP ERP on AWS and using a shared file system for the SAP transport directory. The file system must be accessible from multiple EC2 instances in different Availability Zones. Which AWS storage solution should be used?

Accepted Answer

Amazon EFS. Amazon EFS provides a scalable, shared file system that can be mounted from multiple EC2 instances across Availability Zones. Amazon S3 is object storage, not a file system. Amazon FSx for Windows File Server is for Windows-based environments. Amazon EBS cannot be shared across instances.

Answer

Amazon FSx for Windows File Server

Answer

Amazon S3

Answer

Amazon EBS

Question 10

Refer to the exhibit. An SAP administrator checks the configuration of an EBS volume. The volume is attached to an SAP HANA instance. What is the potential performance bottleneck?

Accepted Answer

The IOPS and throughput are too low for SAP HANA. The volume type is gp3 with 3000 IOPS and 125 MB/s throughput. SAP HANA requires high IOPS and throughput. With only 3000 IOPS and 125 MB/s, this volume may be a bottleneck for production HANA workloads. The DeleteOnTermination setting is not a performance issue. The size and snapshot are not immediate concerns.

Answer

The volume is attached to an instance in a different Availability Zone

Answer

The DeleteOnTermination flag is set to false

Answer

The volume is not encrypted

Question 11

A company is designing an SAP HANA disaster recovery solution using SAP HANA System Replication. Which TWO AWS services are required to enable automatic failover across AWS Regions?

Accepted Answer

AWS Elastic Load Balancing (NLB). AWS Route 53 provides DNS-based failover routing to redirect traffic to the DR region. AWS Elastic Load Balancing (NLB) is used to distribute traffic to the HANA instances and can be used with a floating IP. AWS Direct Connect is not required. AWS CloudFormation is not needed for automatic failover. AWS Shield is for DDoS protection.

Answer

AWS Direct Connect

Answer

AWS CloudFormation

Answer

AWS Shield

Question 12

An SAP system is running on AWS with a Multi-AZ deployment. The system uses an Amazon RDS for SAP HANA database. Which TWO actions should be taken to ensure high availability?

Accepted Answer

Configure automated backups with a retention period. Enabling Multi-AZ on RDS automatically provisions a standby in a different AZ and handles failover. Configuring automated backups allows point-in-time recovery. Read replicas are for read scaling, not HA. Manual snapshots are not automatic. Using a single AZ does not provide HA.

Answer

Create a read replica in a different region

Answer

Deploy the RDS instance in a single Availability Zone

Answer

Take manual snapshots every hour

Question 13

A company wants to monitor the performance of its SAP HANA database on AWS. Which THREE Amazon CloudWatch metrics should be monitored to ensure optimal database performance?

Accepted Answer

NetworkIn. CPUCreditBalance indicates if the instance is using burstable CPU. EBSIOBalance% shows I/O credit balance for EBS volumes. NetworkIn/Out monitor network traffic. These are key for HANA performance. MemoryUtilization is not a standard CloudWatch metric (needs custom agent). DiskReadOps is also not standard.

Answer

DiskReadOps

Answer

MemoryUtilization

Question 14

Refer to the exhibit. An SAP application load balancer (ALB) is configured with the CloudFormation snippet. The ALB is not distributing traffic to the EC2 instances. What is the most likely cause?

Accepted Answer

The target group is not associated with the load balancer. The snippet does not include a listener for the ALB. Without a listener, the ALB cannot accept traffic. The target group is defined but not associated with the ALB via a listener rule. The scheme is internet-facing, which is correct. The security group may allow traffic, but no listener exists.

Answer

The security group does not allow inbound traffic

Answer

The target type is instance but the instances are not registered

Answer

The load balancer scheme is internet-facing but instances are in private subnets

Question 15

A company is running SAP HANA on AWS and wants to encrypt the EBS volumes at rest. The company requires key rotation and audit logging of key usage. Which solution should be used?

Accepted Answer

Use EBS encryption with AWS KMS. Amazon EBS encryption with AWS KMS provides key management, rotation, and audit logging. S3 server-side encryption does not apply to EBS. AWS CloudHSM is for hardware-based key management but does not provide automatic key rotation. AWS Certificate Manager is for SSL/TLS certificates.

Answer

Use AWS Certificate Manager

Answer

Use AWS CloudHSM to manage keys

Answer

Use S3 server-side encryption