PAS-C01 Technology Practice Test 24 — 15 Questions

Question 1

Refer to the exhibit. An SAP administrator checks the configuration of an EBS volume. The volume is attached to an SAP HANA instance. What is the potential performance bottleneck?

Accepted Answer

The IOPS and throughput are too low for SAP HANA. The volume type is gp3 with 3000 IOPS and 125 MB/s throughput. SAP HANA requires high IOPS and throughput. With only 3000 IOPS and 125 MB/s, this volume may be a bottleneck for production HANA workloads. The DeleteOnTermination setting is not a performance issue. The size and snapshot are not immediate concerns.

Answer

The volume is attached to an instance in a different Availability Zone

Answer

The DeleteOnTermination flag is set to false

Answer

The volume is not encrypted

Question 2

A company is designing an SAP HANA disaster recovery solution using SAP HANA System Replication. Which TWO AWS services are required to enable automatic failover across AWS Regions?

Accepted Answer

AWS Elastic Load Balancing (NLB). AWS Route 53 provides DNS-based failover routing to redirect traffic to the DR region. AWS Elastic Load Balancing (NLB) is used to distribute traffic to the HANA instances and can be used with a floating IP. AWS Direct Connect is not required. AWS CloudFormation is not needed for automatic failover. AWS Shield is for DDoS protection.

Answer

AWS Direct Connect

Answer

AWS CloudFormation

Answer

AWS Shield

Question 3

An SAP system is running on AWS with a Multi-AZ deployment. The system uses an Amazon RDS for SAP HANA database. Which TWO actions should be taken to ensure high availability?

Accepted Answer

Configure automated backups with a retention period. Enabling Multi-AZ on RDS automatically provisions a standby in a different AZ and handles failover. Configuring automated backups allows point-in-time recovery. Read replicas are for read scaling, not HA. Manual snapshots are not automatic. Using a single AZ does not provide HA.

Answer

Create a read replica in a different region

Answer

Deploy the RDS instance in a single Availability Zone

Answer

Take manual snapshots every hour

Question 4

A company wants to monitor the performance of its SAP HANA database on AWS. Which THREE Amazon CloudWatch metrics should be monitored to ensure optimal database performance?

Accepted Answer

NetworkIn. CPUCreditBalance indicates if the instance is using burstable CPU. EBSIOBalance% shows I/O credit balance for EBS volumes. NetworkIn/Out monitor network traffic. These are key for HANA performance. MemoryUtilization is not a standard CloudWatch metric (needs custom agent). DiskReadOps is also not standard.

Answer

DiskReadOps

Answer

MemoryUtilization

Question 5

Refer to the exhibit. An SAP application load balancer (ALB) is configured with the CloudFormation snippet. The ALB is not distributing traffic to the EC2 instances. What is the most likely cause?

Accepted Answer

The target group is not associated with the load balancer. The snippet does not include a listener for the ALB. Without a listener, the ALB cannot accept traffic. The target group is defined but not associated with the ALB via a listener rule. The scheme is internet-facing, which is correct. The security group may allow traffic, but no listener exists.

Answer

The security group does not allow inbound traffic

Answer

The target type is instance but the instances are not registered

Answer

The load balancer scheme is internet-facing but instances are in private subnets

Question 6

A company is running SAP HANA on AWS and wants to encrypt the EBS volumes at rest. The company requires key rotation and audit logging of key usage. Which solution should be used?

Accepted Answer

Use EBS encryption with AWS KMS. Amazon EBS encryption with AWS KMS provides key management, rotation, and audit logging. S3 server-side encryption does not apply to EBS. AWS CloudHSM is for hardware-based key management but does not provide automatic key rotation. AWS Certificate Manager is for SSL/TLS certificates.

Answer

Use AWS Certificate Manager

Answer

Use AWS CloudHSM to manage keys

Answer

Use S3 server-side encryption

Question 7

An SAP system uses an Application Load Balancer (ALB) to distribute traffic to web servers. The ALB is configured with a health check that fails, causing the web servers to be marked as unhealthy. What is a possible reason for the health check failure?

Accepted Answer

The web server is not configured to respond to the health check path. A common health check failure is when the health check path (e.g., /health) returns a non-200 status code. The security group allowing traffic from the ALB is required. Instance type does not affect health check. The subnet is not a direct cause.

Answer

The instance is in a private subnet

Answer

The instance type is not supported by the ALB

Answer

The security group for the ALB does not allow outbound traffic

Question 8

A company runs production workloads on AWS. The Security Team requires that all Amazon S3 buckets with server access logging enabled must have logs delivered to a centralized S3 bucket in a separate account. Which solution meets this requirement?

Accepted Answer

Configure the source bucket to deliver logs to the destination bucket. Attach a bucket policy on the destination bucket that grants the log delivery group (e.g., Amazon S3 Log Delivery) write permissions.. S3 server access logs can be delivered to a bucket in another account (cross-account) by configuring the source bucket's logging settings to point to the destination bucket, and the destination bucket must have a bucket policy that grants the S3 log delivery group write permissions. Option A is incorrect because bucket policies do not restrict log delivery to only the source account; cross-account delivery is supported. Option B is incorrect because S3 replication copies objects to another bucket after they are logged, but it does not deliver the server access logs themselves. Option C is incorrect because AWS CloudTrail logs API calls, not the server access logs that record requests made to S3 buckets.

Answer

Use S3 bucket policies to restrict log delivery to only the source account.

Answer

Use S3 replication rules to copy objects from source buckets to the centralized bucket.

Answer

Enable AWS CloudTrail to log all S3 API calls and store logs in the centralized bucket.

Question 9

An SAP workload on AWS uses a Multi-AZ RDS for Oracle instance for its database. The application team reports that a recent batch job caused a spike in database connections and CPU utilization, leading to performance degradation. The database administrator wants to be notified when CPU utilization exceeds 80% for 5 minutes. Which combination of AWS services should be used to set up this monitoring and notification?

Accepted Answer

Amazon CloudWatch with an Amazon CloudWatch Alarm and Amazon SNS. Amazon CloudWatch can monitor the CPU utilization metric of the RDS instance. A CloudWatch alarm can be configured to trigger when CPU utilization exceeds 80% for 5 consecutive periods (each period is 1 minute by default), and the alarm can publish to an Amazon SNS topic to send notifications. Option A is incorrect because Amazon EventBridge with AWS Lambda would require custom code and is not the simplest monitoring solution for this use case. Option B is incorrect because AWS Trusted Advisor provides best practice checks and recommendations, not real-time metric monitoring and alerting. Option D is incorrect because Amazon Inspector is a security assessment service that scans for vulnerabilities, not a monitoring and notification service for metrics.

Answer

Amazon EventBridge with AWS Lambda

Answer

AWS Trusted Advisor with Amazon Simple Email Service (SES)

Answer

Amazon Inspector with Amazon Simple Notification Service (SNS)

Question 10

A company runs its SAP HANA database on an EC2 instance with EBS volumes. The database requires consistent low-latency I/O with a high number of IOPS. The current configuration uses EBS gp2 volumes. During peak loads, the application experiences performance degradation. Which change will provide the most consistent performance for SAP HANA?

Accepted Answer

Migrate to EBS io2 Block Express volumes with provisioned IOPS.. EBS io2 Block Express volumes (Option B) provide provisioned IOPS with consistent low latency, making them ideal for SAP HANA workloads that require high and predictable performance. st1 volumes (Option A) are throughput-optimized HDDs and not designed for high IOPS. RAID 0 with gp2 volumes (Option C) can increase IOPS but lacks the consistency and guaranteed performance of io2. Increasing gp2 volume size (Option D) improves baseline IOPS but does not guarantee consistent performance under peak load like provisioned IOPS.

Answer

Switch to EBS st1 (Throughput Optimized HDD) volumes.

Answer

Configure multiple EBS gp2 volumes in a RAID 0 array to increase IOPS.

Answer

Increase the size of the existing gp2 volumes to gain higher baseline IOPS.

Question 11

An SAP administrator needs to ensure that an Amazon RDS for SAP ASE database is automatically backed up daily and the backups are retained for 30 days. The database is currently in a Multi-AZ deployment. What is the simplest way to achieve this?

Accepted Answer

Configure automated backups with a retention period of 30 days in the RDS instance settings.. The simplest way to achieve daily automated backups with 30-day retention is to configure automated backups directly in the Amazon RDS instance settings. By setting the backup retention period to 30 days, RDS will automatically take daily snapshots and retain them for 30 days without any additional configuration. Option A is incorrect because manual snapshots are not automated and would require manual intervention. Option B is incorrect because while Multi-AZ provides high availability, it does not automatically create backups; backups are a separate feature. Option D is incorrect because using a scheduled Lambda function adds unnecessary complexity when the built-in automated backup feature is simpler and sufficient.

Answer

Create a manual snapshot every day using AWS Backup.

Answer

Enable Multi-AZ, which automatically backs up the database.

Answer

Set up a scheduled Lambda function to create snapshots.

Question 12

A company is migrating an SAP NetWeaver system to AWS. The system uses a shared file system for central transport directories and logs. Which AWS storage service should be used to provide a scalable, highly available, and shared file system that can be mounted by multiple EC2 instances across different Availability Zones?

Accepted Answer

Amazon EFS. Amazon EFS (Option B) is correct because it provides a scalable, highly available, shared NFS file system that can be mounted by multiple EC2 instances across different Availability Zones, making it suitable for SAP shared file systems. Option A (EBS with Multi-Attach) is incorrect because Multi-Attach only works within a single AZ and has limited attach instances (up to 16), not across AZs. Option C (EC2 Instance Store) is incorrect because it is ephemeral and cannot be shared across instances. Option D (Amazon S3 with S3 File Gateway) is incorrect because it is not a native shared file system; File Gateway provides NFS/SMB access to S3 but adds complexity and latency, and is not the recommended service for SAP shared directories.

Answer

Amazon EBS with Multi-Attach enabled

Answer

EC2 Instance Store

Answer

Amazon S3 with S3 File Gateway

Question 13

An SAP HANA database is running on an EC2 instance with 16 EBS volumes in a striped RAID 0 configuration. The system administrator notices that one of the volumes is degraded in the RAID array. How can the administrator recover the array with minimal downtime?

Accepted Answer

Detach the degraded volume, create a new volume of the same size and type, attach it to the instance, and add it to the RAID array.. It outlines the proper procedure to replace a degraded volume in a RAID 0 array with minimal downtime: detach the faulty volume, create a new EBS volume of the same size and type, attach it to the instance, and add it to the RAID array. This approach avoids disrupting the remaining volumes and allows the array to be rebuilt quickly. Option B is incomplete because simply attaching a new volume with the same device name does not automatically incorporate it into the RAID array. Option C is not optimal as creating a snapshot and restoring it introduces unnecessary steps and longer downtime. Option D is ineffective because filesystem repair cannot fix a physical volume failure.

Answer

Detach the degraded volume and attach a new volume with the same device name.

Answer

Take a snapshot of the degraded volume and restore it to a new volume.

Answer

Run a filesystem repair on the degraded volume while it is still attached.

Question 14

A company runs an SAP HANA system on AWS. The system uses a three-node cluster with HANA System Replication (HSR) in a scale-out configuration. The cluster spans three Availability Zones. Which architecture ensures the highest availability for the SAP HANA database?

Accepted Answer

Use a cluster of nodes across three Availability Zones with HANA System Replication and automatic failover.. Deploying a three-node cluster across three Availability Zones with HANA System Replication and automatic failover maximizes availability by distributing the data across multiple AZs and ensuring automatic failover in case of an AZ failure. Option B is incorrect because HANA System Replication in active/active mode is not supported for scale-out configurations; typical HSR implementations use active/standby or multi-target replication. Option C is incorrect because Amazon RDS for SAP HANA does not exist; SAP HANA on AWS must be deployed on EC2 instances. Option D is incorrect because deploying all nodes in a single Availability Zone introduces a single point of failure, reducing availability compared to a multi-AZ deployment.

Answer

Configure HANA System Replication in active/active mode across all nodes.

Answer

Use Amazon RDS for SAP HANA with Multi-AZ deployment.

Answer

Deploy all nodes in a single Availability Zone with synchronous replication.

Question 15

An SAP system administrator is troubleshooting an issue where an application cannot connect to an SAP HANA database running on an EC2 instance. The security group for the HANA instance allows inbound traffic on port 39013 (SQL) from the application server's security group. The network ACLs for the subnet allow all traffic. What could be the cause of the connectivity issue?

Accepted Answer

The network ACL for the HANA instance's subnet is missing an outbound rule to allow return traffic on ephemeral ports.. The network ACL is stateless and must allow both inbound and outbound traffic; the outbound rule for ephemeral ports may be missing. Option A is incorrect because the security group allows the port. Option B is incorrect because the NACL allows all inbound traffic. Option D is incorrect because the security group allows the application server's security group.

Answer

The security group for the HANA instance does not allow inbound traffic on port 39013 from the application server's IP address.

Answer

The network ACL for the application server's subnet does not allow outbound traffic on port 39013.

Answer

The security group for the application server does not allow outbound traffic on port 39013.