PAS-C01 Technology Practice Test 24 — 15 Questions

Question 1

An SAP system uses an Application Load Balancer (ALB) to distribute traffic to web servers. The ALB is configured with a health check that fails, causing the web servers to be marked as unhealthy. What is a possible reason for the health check failure?

Accepted Answer

The web server is not configured to respond to the health check path. A common health check failure is when the health check path (e.g., /health) returns a non-200 status code. The security group allowing traffic from the ALB is required. Instance type does not affect health check. The subnet is not a direct cause.

Answer

The instance is in a private subnet

Answer

The instance type is not supported by the ALB

Answer

The security group for the ALB does not allow outbound traffic

Question 2

A company runs production workloads on AWS. The Security Team requires that all Amazon S3 buckets with server access logging enabled must have logs delivered to a centralized S3 bucket in a separate account. Which solution meets this requirement?

Accepted Answer

Configure the source bucket to deliver logs to the destination bucket. Attach a bucket policy on the destination bucket that grants the log delivery group (e.g., Amazon S3 Log Delivery) write permissions.. Option A is correct because S3 server access logs can be delivered to a bucket in another account if the destination bucket policy grants the log delivery group write permissions. Option B is incorrect as bucket policies are not limited to the same account; cross-account delivery is supported. Option C is incorrect because CloudTrail is for API activity, not S3 access logs. Option D is incorrect because replication copies objects after they are logged, not the logs themselves.

Answer

Use S3 bucket policies to restrict log delivery to only the source account.

Answer

Use S3 replication rules to copy objects from source buckets to the centralized bucket.

Answer

Enable AWS CloudTrail to log all S3 API calls and store logs in the centralized bucket.

Question 3

An SAP workload on AWS uses a Multi-AZ RDS for Oracle instance for its database. The application team reports that a recent batch job caused a spike in database connections and CPU utilization, leading to performance degradation. The database administrator wants to be notified when CPU utilization exceeds 80% for 5 minutes. Which combination of AWS services should be used to set up this monitoring and notification?

Accepted Answer

Amazon CloudWatch with an Amazon CloudWatch Alarm and Amazon SNS. Option B is correct: CloudWatch can monitor RDS CPU utilization, and with a metric alarm, it can trigger an SNS notification. Option A is incorrect because Inspector is for security assessments. Option C is incorrect because Trusted Advisor is for best practices, not real-time metrics. Option D is incorrect because EventBridge would require custom events.

Answer

Amazon EventBridge with AWS Lambda

Answer

AWS Trusted Advisor with Amazon Simple Email Service (SES)

Answer

Amazon Inspector with Amazon Simple Notification Service (SNS)

Question 4

A company runs its SAP HANA database on an EC2 instance with EBS volumes. The database requires consistent low-latency I/O with a high number of IOPS. The current configuration uses EBS gp2 volumes. During peak loads, the application experiences performance degradation. Which change will provide the most consistent performance for SAP HANA?

Accepted Answer

Migrate to EBS io2 Block Express volumes with provisioned IOPS.. Option D is correct: EBS io2 Block Express volumes provide high, consistent IOPS and low latency, suitable for SAP HANA. Option A is incorrect because RAID 0 increases risk and doesn't guarantee consistency. Option B is incorrect because throughput-optimized volumes (st1) are not designed for high IOPS. Option C is incorrect because increasing volume size for gp2 only increases baseline IOPS but not consistently under high load.

Answer

Switch to EBS st1 (Throughput Optimized HDD) volumes.

Answer

Configure multiple EBS gp2 volumes in a RAID 0 array to increase IOPS.

Answer

Increase the size of the existing gp2 volumes to gain higher baseline IOPS.

Question 5

An SAP administrator needs to ensure that an Amazon RDS for SAP ASE database is automatically backed up daily and the backups are retained for 30 days. The database is currently in a Multi-AZ deployment. What is the simplest way to achieve this?

Accepted Answer

Configure automated backups with a retention period of 30 days in the RDS instance settings.. Option B is correct: Automated backups are enabled by default with a retention period of up to 35 days. Option A is incorrect because manual snapshots are not automated. Option C is incorrect because the default backup window is sufficient. Option D is incorrect because Multi-AZ does not replace backups.

Answer

Create a manual snapshot every day using AWS Backup.

Answer

Enable Multi-AZ, which automatically backs up the database.

Answer

Set up a scheduled Lambda function to create snapshots.

Question 6

A company is migrating an SAP NetWeaver system to AWS. The system uses a shared file system for central transport directories and logs. Which AWS storage service should be used to provide a scalable, highly available, and shared file system that can be mounted by multiple EC2 instances across different Availability Zones?

Accepted Answer

Amazon EFS. Option C is correct: Amazon EFS provides a scalable, shared NFS file system accessible from multiple AZs. Option A is incorrect because EBS cannot be attached to multiple instances simultaneously. Option B is incorrect because S3 is object storage, not a file system. Option D is incorrect because Instance Store is ephemeral and not shared.

Answer

Amazon EBS with Multi-Attach enabled

Answer

EC2 Instance Store

Answer

Amazon S3 with S3 File Gateway

Question 7

An SAP HANA database is running on an EC2 instance with 16 EBS volumes in a striped RAID 0 configuration. The system administrator notices that one of the volumes is degraded in the RAID array. How can the administrator recover the array with minimal downtime?

Accepted Answer

Detach the degraded volume, create a new volume of the same size and type, attach it to the instance, and add it to the RAID array.. Option C is correct: Detach the degraded volume, replace it with a new volume, and re-add it to the RAID array. Option A is incorrect because you cannot repair a physical volume. Option B is incorrect because you cannot replace an attached volume. Option D is incorrect because snapshots are not needed for a degraded volume.

Answer

Detach the degraded volume and attach a new volume with the same device name.

Answer

Take a snapshot of the degraded volume and restore it to a new volume.

Answer

Run a filesystem repair on the degraded volume while it is still attached.

Question 8

An SAP system administrator needs to store application logs for a minimum of 3 years for compliance. The logs are currently stored in Amazon S3 Standard and are accessed infrequently after 30 days. Which lifecycle policy should the administrator implement to minimize costs while meeting compliance?

Accepted Answer

Transition to S3 Standard-IA after 30 days, then to S3 Glacier Deep Archive after 1 year, and delete after 3 years.. Option D is correct: transition to S3 Standard-IA after 30 days, then to S3 Glacier Deep Archive after 1 year, and expire after 3 years. Option A is incorrect because immediate transition to Glacier may incur retrieval costs. Option B is incorrect because S3 One Zone-IA is not durable enough for compliance. Option C is incorrect because deleting after 30 days violates retention.

Answer

Transition to S3 One Zone-IA after 30 days and delete after 3 years.

Answer

Transition to S3 Glacier after 30 days and delete after 3 years.

Answer

Delete logs after 30 days to save costs.

Question 9

A company runs an SAP HANA system on AWS. The system uses a three-node cluster with HANA System Replication (HSR) in a scale-out configuration. The cluster spans three Availability Zones. Which architecture ensures the highest availability for the SAP HANA database?

Accepted Answer

Use a cluster of nodes across three Availability Zones with HANA System Replication and automatic failover.. Option B is correct: for HSR scale-out, a multi-AZ cluster with automatic failover provides high availability. Option A is incorrect because a single AZ is a single point of failure. Option C is incorrect because HSR active/active is not supported for scale-out. Option D is incorrect because Multi-AZ is for RDS, not HANA on EC2.

Answer

Configure HANA System Replication in active/active mode across all nodes.

Answer

Use Amazon RDS for SAP HANA with Multi-AZ deployment.

Answer

Deploy all nodes in a single Availability Zone with synchronous replication.

Question 10

An SAP system administrator is troubleshooting an issue where an application cannot connect to an SAP HANA database running on an EC2 instance. The security group for the HANA instance allows inbound traffic on port 39013 (SQL) from the application server's security group. The network ACLs for the subnet allow all traffic. What could be the cause of the connectivity issue?

Accepted Answer

The network ACL for the HANA instance's subnet is missing an outbound rule to allow return traffic on ephemeral ports.. Option C is correct: The network ACL is stateless and must allow both inbound and outbound traffic; the outbound rule for ephemeral ports may be missing. Option A is incorrect because the security group allows the port. Option B is incorrect because the NACL allows all inbound traffic. Option D is incorrect because the security group allows the application server's security group.

Answer

The security group for the HANA instance does not allow inbound traffic on port 39013 from the application server's IP address.

Answer

The network ACL for the application server's subnet does not allow outbound traffic on port 39013.

Answer

The security group for the application server does not allow outbound traffic on port 39013.

Question 11

A company is designing a disaster recovery (DR) strategy for its SAP HANA database on AWS. The primary site is in us-east-1, and the DR site is in us-west-2. Which TWO actions are required to enable HANA System Replication (HSR) across AWS Regions? (Choose 2)

Accepted Answer

Set up a VPN or Direct Connect connection between the Regions for secure, low-latency communication.. Options B and D are correct. B: HSR requires low-latency network connectivity. D: For cross-region HSR, the log shipping must be asynchronous to avoid performance impact. A is incorrect because EBS snapshots are not used for HSR. C is incorrect because HSR does not use S3. E is incorrect because HSR is a database-level replication, not an application-level load balancer.

Answer

Enable cross-Region replication of EBS snapshots.

Answer

Use S3 Cross-Region Replication to copy HANA data files.

Answer

Deploy an Application Load Balancer in front of the HANA instances in both Regions.

Question 12

An SAP system administrator is planning to migrate an on-premises SAP ERP system to AWS. The system uses Oracle Database. Which THREE AWS services can be used to migrate the Oracle database to Amazon RDS for Oracle with minimal downtime? (Choose 3)

Accepted Answer

Oracle Data Guard. Options A, C, and D are correct. A: AWS DMS can perform live migration with minimal downtime. C: Oracle Data Guard can be used for cross-database replication. D: AWS SCT helps convert schemas. B is incorrect because Snowball is for large data transfer, not minimal downtime live migration. E is incorrect because CloudEndure is for server migration, not database migration.

Answer

AWS Snowball Edge

Answer

AWS CloudEndure Migration

Question 13

A company runs its SAP HANA database on an EC2 instance with EBS volumes. The database requires consistent high IOPS and low latency. The system is currently using EBS gp2 volumes, but performance is inconsistent during peak loads. Which TWO steps should the administrator take to improve storage performance? (Choose 2)

Accepted Answer

Configure multiple EBS volumes in a RAID 0 stripe set.. Options B and D are correct. B: io2 Block Express provides consistent high IOPS. D: Configuring multiple EBS volumes in a RAID 0 striping can increase throughput. A is incorrect because increasing gp2 size only increases baseline IOPS but not consistently. C is incorrect because EBS-optimized instances are enabled by default for current generation. E is incorrect because snapshots degrade performance during creation.

Answer

Increase the size of the existing gp2 volumes to increase baseline IOPS.

Answer

Take regular EBS snapshots to improve performance.

Answer

Enable EBS-optimized on the EC2 instance.

Question 14

An SAP administrator executed the AWS CLI command shown in the exhibit. The EC2 instance i-0abcd1234efgh5678 is a SAP HANA database server. Which statement about the storage configuration is correct?

Accepted Answer

The data volume (/dev/sdf) will persist after instance termination.. Option B is correct: /dev/sdf has DeleteOnTermination set to false, meaning it will not be deleted when the instance is terminated, preserving the data. Option A is incorrect because /dev/xvda will be deleted. Option C is incorrect because the command only shows block device mappings, not root device type. Option D is incorrect because /dev/sdf is an EBS volume, not instance store.

Answer

The root volume (/dev/xvda) will persist after instance termination.

Answer

The volume /dev/sdf is an instance store volume.

Answer

The instance is booting from an instance store volume.

Question 15

An IAM policy is attached to a user who manages SAP HANA volumes. The policy is shown in the exhibit. What is the effect of this policy?

Accepted Answer

The user can attach and detach volumes that have the tag Environment=production, but cannot delete any volume.. Option D is correct: The first statement allows AttachVolume and DetachVolume only if the volume has tag Environment=production. The second statement denies DeleteVolume for all volumes. However, the Deny statement is not conditional, so it applies to all volumes. Option A is incorrect because AttachVolume is allowed with the condition. Option B is incorrect because DeleteVolume is denied for all volumes. Option C is incorrect because the Allow statement has a condition.

Answer

The user can attach and detach any volume regardless of tags.

Answer

The user can delete any volume.

Answer

The user can attach and detach any volume in the production environment.