PAS-C01 Technology Practice Test 30 — 15 Questions

Question 1

An SAP system administrator is setting up monitoring for SAP NetWeaver on AWS. They want to send custom SAP application metrics to CloudWatch for alerting. What is the most efficient way to achieve this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Install the Amazon CloudWatch Agent on the EC2 instance and configure it to collect SAP metrics. The CloudWatch Agent can collect custom metrics from the OS and applications, including SAP, and publish them to CloudWatch. AWS Lambda can be used but requires custom code and more overhead. SAP Solution Manager does not natively integrate with CloudWatch. AWS Systems Manager is for management, not custom metric publishing.

Answer

Use SAP Solution Manager to export metrics to CloudWatch via API

Answer

Use AWS Lambda to periodically query SAP and push metrics to CloudWatch

Answer

Configure AWS Systems Manager to collect SAP metrics

Question 2

An SAP system administrator is troubleshooting a performance issue on an SAP application server running on an EC2 instance. The /usr/sap directory is on an EBS volume. The administrator notices high I/O wait times. Which action should be taken to improve I/O performance?

Accepted Answer

Change the EBS volume type to io2 Block Express with provisioned IOPS. The io2 Block Express volume type provides up to 256,000 provisioned IOPS and sub-millisecond latency, which directly addresses high I/O wait times caused by insufficient IOPS on the EBS volume hosting /usr/sap. SAP application servers are sensitive to storage latency, and increasing provisioned IOPS reduces queue depth and wait times for database and log writes.

Answer

Migrate the /usr/sap directory to Amazon EFS

Answer

Move the /usr/sap directory to an instance store volume

Answer

Increase the instance size to a larger instance type

Question 3

A company is deploying SAP S/4HANA on AWS and needs to ensure that the system can be recovered within 4 hours in case of a disaster in the primary region. The secondary region is in a different AWS region. Which approach should be used to meet the recovery time objective (RTO)?

Accepted Answer

Configure SAP HANA system replication to a secondary region with a pre-provisioned standby instance. Replicating SAP HANA to a standby instance in another region using HANA system replication with pre-provisioned infrastructure allows fast failover. Cross-region EBS snapshots take time to restore. Backup and restore from S3 may be slower. Pilot light with application-level replication is not sufficient for HANA.

Answer

Use cross-region EBS snapshots and restore them in the secondary region

Answer

Back up SAP HANA to Amazon S3 and restore in the secondary region

Answer

Set up a pilot light environment using application-level replication

Question 4

An SAP administrator needs to ensure that the SAP landscape on AWS is compliant with the SAP license requirements. What is the responsibility of the customer regarding SAP licensing on AWS?

Accepted Answer

The customer must bring their own SAP licenses and ensure compliance with SAP licensing terms. AWS operates under a bring-your-own-license (BYOL) model for SAP software. The customer is responsible for procuring SAP licenses, ensuring they are valid for the AWS environment, and complying with SAP's licensing terms, including any restrictions on virtualization, CPU cores, and memory. AWS provides the infrastructure, but not the SAP licenses themselves.

Answer

AWS provides SAP licenses as part of the EC2 instance pricing

Answer

SAP licensing is automatically handled by AWS Support

Answer

SAP licenses are included when using SAP HANA on AWS

Question 5

An SAP administrator runs the AWS CLI command shown in the exhibit to describe an EBS volume attached to an EC2 instance running SAP HANA. The instance is in the us-east-1a Availability Zone. The administrator needs to create a volume in us-east-1b and copy the data from the existing volume. What is the most efficient way to achieve this?

Accepted Answer

Create a snapshot of the volume and then create a new volume in us-east-1b from the snapshot. EBS snapshots are stored in Amazon S3 and are region-scoped but can be used to create new EBS volumes in any Availability Zone within the same region. Creating a snapshot of the us-east-1a volume and then creating a new volume in us-east-1b from that snapshot is the most efficient, native AWS method to copy data across AZs. This avoids network transfer overhead and leverages AWS's internal snapshot copy mechanism.

Answer

Use rsync to copy data from the instance to a new volume in us-east-1b over the network

Answer

Detach the volume from the instance and attach it to an instance in us-east-1b

Answer

Create an AMI from the instance and launch a new instance in us-east-1b

Question 6

An SAP system on AWS is using a Multi-AZ deployment for high availability. The SAP Central Services (ASCS) and Enqueue Replication Server (ERS) are running on separate EC2 instances. During a failover test, the ASCS instance fails, but the ERS does not take over. What is the most likely cause?

Accepted Answer

The floating IP address is not configured to move to the ERS instance. In SAP on AWS Multi-AZ HA designs, the ASCS and ERS instances share a floating (virtual) IP address that must move from the failed ASCS to the ERS during failover, typically managed by a cluster agent (e.g., Pacemaker or SIOS LifeKeeper). If the floating IP is not configured to move, the ERS never takes over even though it is healthy — this is the most likely cause of the described failure.

Answer

The ERS instance does not have the required security group rules

Answer

The DNS TTL is set too high

Answer

The ERS instance is in a different subnet

Question 7

A company runs SAP BusinessObjects on AWS and needs to scale the application tier based on CPU utilization. Which AWS service should be used to automatically add or remove EC2 instances?

Accepted Answer

AWS Auto Scaling. AWS Auto Scaling can automatically adjust the number of EC2 instances based on CloudWatch alarms for CPU utilization. AWS Elastic Load Balancing distributes traffic but does not scale instances. AWS Lambda is for serverless, not EC2 scaling. AWS CloudFormation is for infrastructure provisioning, not auto-scaling.

Answer

AWS Elastic Load Balancing

Answer

AWS Lambda

Answer

AWS CloudFormation

Question 8

A company is running SAP ERP on AWS and using a shared file system for the SAP transport directory. The file system must be accessible from multiple EC2 instances in different Availability Zones. Which AWS storage solution should be used?

Accepted Answer

Amazon EFS. Amazon EFS is a fully managed, scalable, elastic NFS file system that can be mounted on multiple EC2 instances across multiple Availability Zones within a region. It is ideal for shared file systems like the SAP transport directory, which must be accessible from multiple instances in different AZs. EFS provides the required cross-AZ accessibility and POSIX compliance.

Answer

Amazon FSx for Windows File Server

Answer

Amazon S3

Answer

Amazon EBS

Question 9

A company is running SAP HANA on AWS and wants to encrypt the EBS volumes at rest. The company requires key rotation and audit logging of key usage. Which solution should be used?

Accepted Answer

Use EBS encryption with AWS KMS. EBS encryption with AWS KMS provides encryption at rest for EBS volumes, supports key rotation, and integrates with CloudTrail for audit logging of key usage. This meets the requirements for key rotation and audit logging. AWS KMS allows automatic annual key rotation and logs all key usage to CloudTrail.

Answer

Use AWS Certificate Manager

Answer

Use AWS CloudHSM to manage keys

Answer

Use S3 server-side encryption

Question 10

An SAP system uses an Application Load Balancer (ALB) to distribute traffic to web servers. The ALB is configured with a health check that fails, causing the web servers to be marked as unhealthy. What is a possible reason for the health check failure?

Accepted Answer

The web server is not configured to respond to the health check path. The ALB health check sends HTTP/HTTPS requests to a specific path (default '/') on each target. If the web server is not configured to respond with a 200 OK status to that path, the health check fails and the target is marked unhealthy. This is the most common application-level cause of health check failures, as the ALB relies on the target's response to determine health.

Answer

The instance is in a private subnet

Answer

The instance type is not supported by the ALB

Answer

The security group for the ALB does not allow outbound traffic

Question 11

A company runs production workloads on AWS. The Security Team requires that all Amazon S3 buckets with server access logging enabled must have logs delivered to a centralized S3 bucket in a separate account. Which solution meets this requirement?

Accepted Answer

Configure the source bucket to deliver logs to the destination bucket. Attach a bucket policy on the destination bucket that grants the log delivery group (e.g., Amazon S3 Log Delivery) write permissions.. S3 server access logging delivers logs directly from the source bucket to a destination bucket, and cross-account delivery requires a bucket policy on the destination granting the S3 Log Delivery group (or the source bucket's ACL) write permissions. This is the standard, documented pattern for centralizing access logs across accounts.

Answer

Use S3 bucket policies to restrict log delivery to only the source account.

Answer

Use S3 replication rules to copy objects from source buckets to the centralized bucket.

Answer

Enable AWS CloudTrail to log all S3 API calls and store logs in the centralized bucket.

Question 12

An SAP workload on AWS uses a Multi-AZ RDS for Oracle instance for its database. The application team reports that a recent batch job caused a spike in database connections and CPU utilization, leading to performance degradation. The database administrator wants to be notified when CPU utilization exceeds 80% for 5 minutes. Which combination of AWS services should be used to set up this monitoring and notification?

Accepted Answer

Amazon CloudWatch with an Amazon CloudWatch Alarm and Amazon SNS. Amazon CloudWatch monitors RDS metrics such as CPU utilization. A CloudWatch Alarm can be set to trigger when CPU utilization exceeds 80% for 5 minutes. The alarm can then publish a notification to an Amazon SNS topic, which can deliver email or other notifications to the database administrator. This combination provides the required monitoring and alerting.

Answer

Amazon EventBridge with AWS Lambda

Answer

AWS Trusted Advisor with Amazon Simple Email Service (SES)

Answer

Amazon Inspector with Amazon Simple Notification Service (SNS)

Question 13

A company runs its SAP HANA database on an EC2 instance with EBS volumes. The database requires consistent low-latency I/O with a high number of IOPS. The current configuration uses EBS gp2 volumes. During peak loads, the application experiences performance degradation. Which change will provide the most consistent performance for SAP HANA?

Accepted Answer

Migrate to EBS io2 Block Express volumes with provisioned IOPS.. Migrating to EBS io2 Block Express volumes with provisioned IOPS provides the most consistent performance for SAP HANA. io2 Block Express volumes are designed for high-performance, low-latency workloads, offering up to 256,000 IOPS and sub-millisecond latency, with durability of 99.999%. They also support multi-attach and are ideal for critical databases like SAP HANA.

Answer

Switch to EBS st1 (Throughput Optimized HDD) volumes.

Answer

Configure multiple EBS gp2 volumes in a RAID 0 array to increase IOPS.

Answer

Increase the size of the existing gp2 volumes to gain higher baseline IOPS.

Question 14

An SAP administrator needs to ensure that an Amazon RDS for SAP ASE database is automatically backed up daily and the backups are retained for 30 days. The database is currently in a Multi-AZ deployment. What is the simplest way to achieve this?

Accepted Answer

Configure automated backups with a retention period of 30 days in the RDS instance settings.. The simplest way to achieve daily automated backups with 30-day retention is to configure automated backups directly in the Amazon RDS instance settings. By setting the backup retention period to 30 days, RDS will automatically take daily snapshots and retain them for 30 days without any additional configuration. Option A is incorrect because manual snapshots are not automated and would require manual intervention. Option B is incorrect because while Multi-AZ provides high availability, it does not automatically create backups; backups are a separate feature. Option D is incorrect because using a scheduled Lambda function adds unnecessary complexity when the built-in automated backup feature is simpler and sufficient.

Answer

Create a manual snapshot every day using AWS Backup.

Answer

Enable Multi-AZ, which automatically backs up the database.

Answer

Set up a scheduled Lambda function to create snapshots.

Question 15

A company is migrating an SAP NetWeaver system to AWS. The system uses a shared file system for central transport directories and logs. Which AWS storage service should be used to provide a scalable, highly available, and shared file system that can be mounted by multiple EC2 instances across different Availability Zones?

Accepted Answer

Amazon EFS. Amazon EFS is a fully managed, elastic NFS file system that can be mounted concurrently by thousands of EC2 instances across multiple Availability Zones in a region. It provides the shared, scalable, highly available file system SAP NetWeaver requires for central transport directories and logs.

Answer

Amazon EBS with Multi-Attach enabled

Answer

EC2 Instance Store

Answer

Amazon S3 with S3 File Gateway