PAS-C01 Technology Practice Test 29 — 15 Questions

Question 1

An SAP system needs to send email notifications from the SAP application server running on EC2. Which AWS service should be used?

Accepted Answer

Amazon Simple Email Service (SES). Amazon Simple Email Service (SES) is the correct choice because it is a cloud-based email sending service designed specifically for sending transactional and notification emails from applications, including SAP systems running on EC2. SES supports SMTP and API-based integration, allowing the SAP application server to send outbound email notifications reliably without managing on-premises email infrastructure.

Answer

Amazon Pinpoint

Answer

Amazon Simple Queue Service (SQS)

Answer

Amazon Simple Notification Service (SNS)

Question 2

A company is running SAP HANA on EC2 instances with EBS volumes. They need to ensure data durability and backup. Which THREE actions should be taken?

Accepted Answer

Enable SAP HANA System Replication to a secondary instance.. SAP HANA System Replication provides synchronous or asynchronous data replication to a secondary EC2 instance, ensuring high availability and data durability by maintaining a real-time copy of the HANA database. This is a native SAP feature that protects against instance failure and supports automatic failover, which is critical for production HANA workloads.

Answer

Disable automated backups to reduce costs.

Answer

Use instance store volumes for HANA data.

Question 3

A company is running an SAP HANA database on an EC2 instance with Amazon EBS volumes. The database is experiencing high write latency. The storage is configured as two gp2 volumes in a RAID 0 stripe. Which change is most likely to improve write performance?

Accepted Answer

Replace gp2 volumes with io1 volumes provisioned with sufficient IOPS for the workload.. SAP HANA is an I/O-intensive application that requires predictable, low-latency storage performance. gp2 volumes use a burst-bucket model that can lead to performance degradation under sustained high write loads, whereas io1 volumes allow you to provision a specific number of IOPS independently of volume size, ensuring consistent throughput. By provisioning sufficient IOPS for the workload, you eliminate the write latency caused by gp2's burst credit exhaustion.

Answer

Migrate to a RAID 0+1 configuration with four volumes.

Answer

Increase the volume size of each gp2 volume to 1 TB to increase baseline IOPS.

Answer

Move the data to instance store volumes attached to the EC2 instance.

Question 4

A company is migrating its SAP ERP system to AWS and needs to maintain high availability. The SAP Central Services (ASCS) and ERS instances are currently on two separate physical servers. The company wants to use a single EC2 instance for both roles with Pacemaker clustering. Which configuration ensures that both instances can run simultaneously on the same host?

Accepted Answer

Install both ASCS and ERS on the same EC2 instance using the SAP NetWeaver 7.4 or later 'same host' capability.. SAP NetWeaver 7.4 and later support the 'same host' configuration for ASCS and ERS, allowing both instances to run simultaneously on the same EC2 instance without requiring separate virtual servers or complex networking. Option A is incorrect because a Dedicated Host is not needed; the 'same host' capability works on any EC2 instance. Option B is incorrect because two ENIs are not required; a single ENI suffices. Option C is incorrect because although assigning multiple private IPs is possible, it is not the standard or necessary configuration; SAP's built-in 'same host' feature handles the binding without manual IP assignment.

Answer

Use a Dedicated Host and configure two separate virtual servers using VMware on AWS.

Answer

Configure two network interfaces (ENIs) on the instance, one for ASCS and one for ERS.

Answer

Assign multiple private IP addresses to the same ENI and configure ASCS and ERS to bind to different IPs.

Question 5

A company is designing a disaster recovery (DR) strategy for its SAP environment on AWS. The primary region is us-east-1 and the DR region is us-west-2. The SAP application and database must be recoverable within 4 hours (RTO) and with a maximum data loss of 15 minutes (RPO). The database is SAP HANA. Which combination of services meets these requirements?

Accepted Answer

Configure HANA System Replication (HSR) between the primary and DR regions, with a standby EC2 instance in us-west-2.. HANA System Replication (HSR) with log shipping provides near real-time data replication to the DR region, achieving an RPO of 15 minutes or less. The standby EC2 instance in us-west-2 can be promoted to primary within 4 hours (RTO) by performing a takeover. Option A is incorrect because EBS snapshots are typically taken every few hours and cross-region copy time adds latency, making it difficult to meet a 15-minute RPO. Option B is incorrect because Amazon S3 cross-region replication for HANA backups is asynchronous and may not ensure consistent log backups every 15 minutes, also requiring manual restore steps that exceed the RTO. Option D is incorrect because AWS DMS does not support SAP HANA as a target for ongoing replication; RDS for SAP HANA is not a supported service, and DMS is designed for homogeneous database migrations, not SAP HANA replication.

Answer

Use Amazon EBS snapshots replicated across regions, restoring in the DR region with a CloudFormation template.

Answer

Back up the HANA database to Amazon S3 and copy the backup to the DR region using cross-region replication.

Answer

Use AWS Database Migration Service (DMS) with ongoing replication to an RDS for SAP HANA instance in the DR region.

Question 6

A company is setting up SAP HANA database backups to Amazon S3. Which TWO actions are required to ensure secure and efficient backup operations? (Choose TWO.)

Accepted Answer

Create an IAM role for the EC2 instance running SAP HANA with permissions to write to the S3 bucket.. The EC2 instance running SAP HANA must assume an IAM role that grants permissions to write backup files to the S3 bucket. This follows the principle of least privilege and avoids embedding long-term credentials in the instance, which is a security best practice for automated backup operations.

Answer

Enable S3 Transfer Acceleration on the backup bucket.

Answer

Enable server-side encryption with AWS KMS for the S3 bucket.

Answer

Set up an S3 Lifecycle policy to move older backups to Amazon Glacier.

Question 7

A company is designing a highly available SAP NetWeaver system on AWS. The architecture includes two EC2 instances running the ABAP application server in an Auto Scaling group. Which THREE components are required to maintain session persistence and distribute traffic? (Choose THREE.)

Accepted Answer

Health checks on the target group to detect unhealthy instances. Health checks on the target group are required to detect unhealthy EC2 instances running the ABAP application server. When an instance fails a health check, the load balancer automatically stops routing traffic to it, ensuring that only healthy instances serve requests. This is critical for maintaining high availability in an SAP NetWeaver environment, as it prevents session failures caused by underlying instance issues.

Answer

A shared file system (e.g., Amazon EFS) for /sapmnt

Answer

A Multi-AZ deployment for the SAP application servers

Question 8

A company is running SAP HANA on an EC2 instance. The storage is provided by multiple EBS volumes. Which THREE considerations are important when configuring EBS volumes for SAP HANA? (Choose THREE.)

Accepted Answer

Use RAID 0 striping across multiple EBS volumes to increase throughput.. Option A is correct because SAP HANA is an in-memory database that generates heavy sequential and random I/O, and RAID 0 striping across multiple EBS volumes aggregates their IOPS and throughput into a single logical device, which is the AWS-recommended way to reach HANA's required performance levels. Option C is correct because HANA writes to data volumes and log volumes with different access patterns, and placing them on separate EBS volumes prevents log write latency from being degraded by data I/O contention, which is critical for HANA's recovery point objective. Option E is correct because EBS performance is provisioned per volume, so each volume must be sized with enough IOPS (for example, using io1/io2 or gp3 with provisioned IOPS) to satisfy SAP HANA's KPIs, since under-provisioned volumes cause unacceptable database latency. Option B is not appropriate because gp2 burst credits are a shared, best-effort mechanism that cannot guarantee sustained high IOPS for a production HANA workload, and SAP guidance favors provisioned-performance volumes. Option D is not appropriate because there is no generic 'EBS bursting' feature to enable on all volumes; burst behavior is specific to certain volume types and cannot be relied upon to deliver guaranteed throughput for HANA.

Answer

Use gp2 volumes with burst credits to handle peak IOPS.

Answer

Enable EBS bursting for all volumes to ensure high throughput.

Question 9

Refer to the exhibit. An IAM policy is created for an automated script that starts and stops EC2 instances. The script is failing to stop an instance with the tag 'Environment: non-production'. What is the most likely cause?

Accepted Answer

The EC2 instance does not have the tag 'Environment' with value 'non-production'.. The IAM policy is configured with a condition that requires the EC2 instance to have the tag 'Environment' with value 'non-production' for both StartInstances and StopInstances actions. If the instance does not have this exact tag, the action is denied. Option B is incorrect because the policy likely includes the ec2:StopInstances action, but the condition is not met. Option C is incorrect because the policy does not require ec2:Describe* actions for the stop operation to work. Option D is incorrect because the condition is applied equally to both StartInstances and StopInstances.

Answer

The policy does not include ec2:StopInstances action.

Answer

The policy does not allow ec2:Describe* actions for instances.

Answer

The condition is applied to the ec2:StartInstances action but not ec2:StopInstances.

Question 10

A company is migrating an SAP ERP system to AWS and needs to connect on-premises users to the SAP application securely. The SAP application is deployed in a VPC private subnet. Which service should be used to provide secure access for remote users?

Accepted Answer

AWS Client VPN. AWS Client VPN is a managed service that allows remote users to securely connect to AWS resources using OpenVPN-based VPN clients. Since the SAP application is in a private subnet, remote users need individual encrypted tunnels to access it, which Client VPN provides by authenticating users and routing traffic through a VPC endpoint.

Answer

AWS Site-to-Site VPN

Answer

AWS Transit Gateway

Answer

AWS Direct Connect

Question 11

An SAP system administrator needs to automate the creation of an SAP HANA database backup and copy it to another AWS Region for disaster recovery. The backup is stored in an Amazon S3 bucket. Which AWS service should be used to replicate the backup to another Region?

Accepted Answer

S3 Cross-Region Replication (CRR). S3 Cross-Region Replication (CRR) is the correct service because it automatically replicates objects from a source S3 bucket in one AWS Region to a destination bucket in another Region, meeting the requirement to copy the SAP HANA database backup to a different Region for disaster recovery. CRR operates asynchronously and can be configured with the appropriate IAM role to replicate existing and new objects, ensuring the backup is continuously available in the DR Region.

Answer

S3 Lifecycle Policies

Answer

S3 Batch Operations

Answer

S3 Transfer Acceleration

Question 12

A company runs SAP on AWS and is experiencing high latency for database queries after moving the SAP HANA database to a larger instance type. CloudWatch metrics show that the EBS volume queue length is consistently high. What is the most likely cause of the latency?

Accepted Answer

The EBS volume does not have enough provisioned IOPS.. A consistently high EBS volume queue length indicates that the volume is receiving more I/O requests than it can process, causing requests to queue up. Since the SAP HANA database was moved to a larger instance type, the workload likely demands more IOPS than the EBS volume is provisioned for, leading to throttling and increased latency. Option C correctly identifies that insufficient provisioned IOPS is the most likely cause.

Answer

The instance's network bandwidth is saturated.

Answer

The instance's CPU is under-provisioned.

Answer

The EBS volume is not encrypted.

Question 13

An SAP system administrator needs to ensure that an EC2 instance running SAP can access an S3 bucket containing installation media. The instance is in a private subnet without internet access. What is the recommended way to provide access to S3?

Accepted Answer

Create a VPC Gateway Endpoint for S3.. A VPC Gateway Endpoint for S3 provides private connectivity from the VPC to S3 without requiring an internet gateway, NAT device, VPN, or Direct Connect. It works by adding a prefix list route to the route table that directs S3 traffic through the gateway endpoint, keeping traffic on the AWS private network. This is the recommended, cost-effective solution for private subnet instances needing S3 access.

Answer

Set up a VPN connection to S3.

Answer

Set up a NAT Gateway in the public subnet.

Answer

Use AWS Direct Connect to connect to S3.

Question 14

A company is running SAP HANA on AWS and wants to implement a disaster recovery strategy using a standby system in another AWS Region. Which THREE components are essential for this setup?

Accepted Answer

A secondary EC2 instance in the DR Region. A secondary EC2 instance in the DR Region is required to host the standby SAP HANA system. This instance must be sized and configured to match the primary, and it will receive replicated data via SAP HANA System Replication to enable failover.

Answer

Amazon Route53

Answer

AWS CloudEndure Migration

Question 15

A company runs an SAP HANA database on an AWS EC2 instance. The database experiences high latency during peak hours. The operations team suspects network bottlenecks. Which AWS service should be used to analyze network traffic patterns and identify the source of latency?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture IP traffic information going to and from network interfaces in a VPC. By analyzing flow logs, you can identify traffic patterns, detect anomalies, and pinpoint sources of network latency, such as dropped packets or high traffic volumes between specific instances. This makes it the appropriate service for analyzing network traffic patterns.

Answer

AWS X-Ray

Answer

AWS Trusted Advisor

Answer

AWS CloudTrail