PAS-C01 Technology Practice Test 3 — 15 Questions

Question 1

A company is running an SAP HANA database on an Amazon EC2 instance. The instance type is r5.4xlarge with 16 vCPUs and 128 GiB of memory. The storage is configured with a single 400 GB gp2 EBS volume for /hana/data and a separate 100 GB gp2 volume for /hana/log. The database experiences high latency during peak loads. Which change will most likely improve performance?

Accepted Answer

Change the EBS volumes to io2 Block Express volumes with provisioned IOPS.. Option A is correct because SAP HANA requires low latency I/O. io2 Block Express volumes provide higher IOPS and lower latency compared to gp2. Option B is incorrect because increasing instance size may help but does not address the storage bottleneck directly. Option C is incorrect because RAID 0 on gp2 volumes can improve throughput but not as effectively as io2. Option D is incorrect because disabling caching does not improve performance.

Answer

Increase the instance size to r5.8xlarge.

Answer

Disable the EBS volume caching.

Answer

Create a RAID 0 stripe of multiple gp2 volumes.

Question 2

An organization uses AWS Systems Manager to run automation documents on their SAP EC2 instances. Recently, some automation runbooks have failed because the EC2 instances did not have the required SSM Agent version. The operations team wants to ensure all existing and future instances automatically have the latest SSM Agent. Which solution meets this requirement?

Accepted Answer

Create an AWS Systems Manager State Manager association that runs the AWS-UpdateSSMAgent document on the instances.. Option B is correct because the AWS-UpdateSSMAgent document can be used as a step in State Manager associations to update the agent on targeted instances. Option A is incorrect because running the document manually does not provide automation. Option C is incorrect because the SSM Agent is automatically updated by default only for new instances in certain regions, but not guaranteed. Option D is incorrect because patching is for OS updates, not SSM Agent.

Answer

Use an automation document to update the SSM Agent and schedule it via a cron job on each instance.

Answer

Enable the 'Auto-update SSM Agent' option in the EC2 launch settings for all instances.

Answer

Configure AWS Systems Manager Patch Manager to update the SSM Agent.

Question 3

A company wants to migrate its on-premises SAP system to AWS. The system consists of an SAP NetWeaver application server and an SAP HANA database. The database requires ultra-low latency storage. Which AWS storage solution is most suitable for the SAP HANA data volume?

Accepted Answer

Amazon EBS io2 Block Express volumes. Option A is correct because io2 Block Express volumes are designed for high-performance databases like SAP HANA, offering sub-millisecond latency and high IOPS. Option B is incorrect because EFS is a shared file system, not block storage. Option C is incorrect because S3 is object storage with higher latency. Option D is incorrect because Instance Store is ephemeral, which is not suitable for persistent database data.

Answer

EC2 Instance Store

Answer

Amazon S3

Answer

Amazon EFS file system

Question 4

A company runs SAP on AWS and wants to automate the failover of their SAP HANA database across Availability Zones using a multi-AZ setup. They are using Pacemaker and STONITH fencing. Which AWS resource is commonly used as a fencing device for SAP HANA multi-AZ clusters?

Accepted Answer

Amazon CloudWatch alarm and EC2 API. Option A is correct because AWS provides a STONITH agent that uses EC2 API to stop/fence instances (e.g., via CloudWatch alarm). Option B is incorrect because SQS is a queue service, not a fencing mechanism. Option C is incorrect because RDS is a managed database service, not used for EC2 fencing. Option D is incorrect because SNS is a notification service.

Answer

Amazon Simple Notification Service (SNS)

Answer

Amazon Simple Queue Service (SQS)

Answer

Amazon RDS

Question 5

An SAP Basis administrator needs to monitor the performance of their SAP HANA database running on an EC2 instance. The administrator wants to visualize key metrics such as CPU utilization, memory usage, and disk I/O in a single dashboard. Which AWS service should be used to create this dashboard?

Accepted Answer

Amazon CloudWatch Dashboards. Option B is correct because CloudWatch Dashboards can display metrics from EC2, EBS, and other services. Option A is incorrect because CloudTrail is for auditing API calls. Option C is incorrect because Config is for resource compliance. Option D is incorrect because Trusted Advisor provides best practice checks, not customizable dashboards.

Answer

AWS Config

Answer

AWS Trusted Advisor

Answer

AWS CloudTrail

Question 6

A company is deploying SAP NetWeaver on AWS and needs to ensure high availability for the ASCS instance. They plan to use a shared file system for the transport directory. Which AWS storage service is most appropriate for this shared file system?

Accepted Answer

Amazon EFS. Option C is correct because Amazon EFS is a managed NFS file system that can be mounted on multiple EC2 instances across AZs, suitable for shared storage like the SAP transport directory. Option A is incorrect because EBS volumes can only be attached to one instance at a time (unless using multi-attach, which is limited). Option B is incorrect because S3 is object storage, not a file system. Option D is incorrect because Instance Store is ephemeral.

Answer

Amazon EBS volumes with multi-attach

Answer

EC2 Instance Store

Answer

Amazon S3

Question 7

An administrator needs to back up an SAP HANA database running on an EC2 instance. The backup must be stored in a durable, cost-effective storage solution. Which AWS service is best suited for storing the backup files?

Accepted Answer

Amazon S3. Option A is correct because Amazon S3 is designed for durable, cost-effective object storage, ideal for backups. Option B is incorrect because EBS snapshots are stored in S3 but are not directly accessible as files. Option C is incorrect because EFS is a file system, not optimized for backup storage. Option D is incorrect because Glacier is a lower-cost archival storage, but S3 is more appropriate for general backups with faster retrieval.

Answer

Amazon S3 Glacier

Answer

Amazon EFS

Answer

Amazon EBS snapshots

Question 8

A company is using AWS Systems Manager to manage their SAP environment. They want to ensure that only specific users can run automation documents on production SAP instances. Which IAM policy action should be used to control access to executing automation documents?

Accepted Answer

ssm:StartAutomationExecution. Option B is correct because the ssm:StartAutomationExecution action allows starting an automation execution. Option A is for running commands (not automations). Option C is for getting parameters. Option D is for listing documents.

Answer

ssm:SendCommand

Answer

ssm:GetParameter

Answer

ssm:ListDocuments

Question 9

A company is planning to migrate its SAP ERP system to AWS. The system uses Oracle Database as its backend. The company wants to minimize licensing costs and administrative overhead. Which AWS database service is most suitable for this migration?

Accepted Answer

Amazon RDS for Oracle. Option A is correct because Amazon RDS for Oracle supports Oracle Database with automated administration and can be used for SAP ERP. Option B is incorrect because Aurora is a MySQL/PostgreSQL-compatible database, not Oracle. Option C is incorrect because DynamoDB is NoSQL. Option D is incorrect because Redshift is a data warehouse.

Answer

Amazon Redshift

Answer

Amazon DynamoDB

Answer

Amazon Aurora

Question 10

An SAP administrator is configuring high availability for SAP HANA on AWS. Which TWO components are essential for a Pacemaker-based cluster?

Accepted Answer

A quorum device (e.g., STONITH). A and B are correct. A quorum device (like STONITH) is required to avoid split-brain, and a virtual IP (VIP) is needed for client failover. C and D are not required for Pacemaker. E (CloudWatch) is optional for monitoring.

Answer

An Application Load Balancer

Answer

Amazon Route 53 health checks

Answer

Amazon CloudWatch alarms

Question 11

A company is deploying SAP S/4HANA on AWS and needs to choose instance types that are certified by SAP. Which THREE instance families are SAP-certified for production SAP HANA workloads?

Accepted Answer

R5. A, B, and D are SAP-certified for HANA. C (T3) is burstable and not certified for production HANA. E (P3) is GPU-optimized and not certified for HANA.

Answer

T3

Answer

P3

Question 12

An SAP administrator needs to set up disaster recovery for an SAP system on AWS. Which TWO AWS services can be used to replicate data across regions?

Accepted Answer

Amazon EBS snapshots copied to another region. Amazon EBS snapshots can be copied to another AWS region, providing a reliable mechanism for disaster recovery of SAP systems by creating point-in-time backups of critical volumes. This allows the SAP administrator to restore the system in a different region if the primary region fails, ensuring data durability and recoverability.

Answer

Amazon CloudFront

Answer

Amazon EFS replication

Answer

Amazon RDS read replicas in another region

Question 13

An SAP administrator attaches this IAM policy to a user. Which action will the user be allowed to perform on an EC2 instance with the tag 'Environment: Production'?

Accepted Answer

Reboot the instance. Option A is correct because the policy allows StartInstances, StopInstances, and RebootInstances on instances with the tag Environment=Production. TerminateInstances is denied. B and C are denied. D is allowed but not listed in the options; however, only reboot is correct among the given.

Answer

Start the instance

Answer

Terminate the instance

Answer

Modify the instance type

Question 14

An administrator runs the AWS CLI command shown and receives the output. The administrator wants to retrieve the private IP address of the ASCS instance using CloudFormation stack outputs. What is the most efficient way to get this IP address?

Accepted Answer

Modify the CloudFormation template to add the private IP as an output.. Option B is correct because CloudFormation stack outputs can be passed as parameter values or referenced in other stacks. The ASCS instance ID is available, but the private IP is not directly in outputs. However, the question asks for 'most efficient way to get this IP address' using CloudFormation. Option A is incorrect because the output does not include IP. Option C is incorrect because it's a different approach (EC2 API). Option D is incorrect because Systems Manager can get IP but is not using CloudFormation.

Answer

Check the CloudFormation stack events for the private IP.

Answer

Use the AWS CLI to describe the EC2 instance using the instance ID.

Answer

Use AWS Systems Manager to find the IP from the instance ID.

Question 15

An administrator receives this error when trying to register an SAP system in AWS Systems Manager. What is the likely cause?

Accepted Answer

The SAP Host Agent is not installed on the EC2 instance.. Option A is correct because the SAP Host Agent must be installed on the EC2 instance for Systems Manager to manage the SAP system. Option B is incorrect because SSM Agent may be installed but the error specifically says SAPHostAgent. Option C is incorrect because the error is not about the SAP application itself. Option D is incorrect because IAM role issues would give a different error (e.g., access denied).

Answer

The IAM role assigned to the instance does not have the required permissions.

Answer

The AWS Systems Manager Agent (SSM Agent) is not running.

Answer

The SAP system is not installed correctly.