PAS-C01 Technology Practice Test 35 — 15 Questions

Question 1

A company is deploying SAP NetWeaver on AWS and needs to ensure that the SAP application servers can automatically recover from an EC2 instance failure. The application servers are stateless and run behind an Application Load Balancer (ALB). The company wants to minimize manual intervention. Which solution should be implemented?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure an Auto Scaling group with a launch template that includes the SAP application server installation and user data script.. An Auto Scaling group with a launch template and user data script enables automatic replacement of failed SAP application server instances. This is the standard AWS pattern for stateless, horizontally scalable tiers. The ALB ensures traffic is only routed to healthy instances. CloudWatch alarms, placement groups, and Elastic Disaster Recovery do not provide automatic recovery in the same seamless manner.

Answer

Enable detailed monitoring on the EC2 instances and create a CloudWatch alarm that sends an SNS notification to the operations team.

Answer

Use AWS Elastic Disaster Recovery to replicate the application servers to a secondary Region.

Answer

Place the EC2 instances in a spread placement group to ensure they are on distinct hardware.

Question 2

A company is migrating an SAP NetWeaver ABAP system to AWS. The system uses a shared file system for /sapmnt and /usr/sap/trans. The company requires a highly available, POSIX-compliant shared file system that supports SMB and NFS protocols and can be accessed by both Linux and Windows application servers. The solution must provide automatic failover across Availability Zones. Which AWS storage service should the company use?

Accepted Answer

Amazon FSx for NetApp ONTAP. Amazon FSx for NetApp ONTAP is the correct choice because it supports both NFS and SMB protocols, provides POSIX-compliant file systems, and can be configured for Multi-AZ high availability with automatic failover. This meets all the requirements for a shared SAP NetWeaver file system accessed by Linux and Windows application servers.

Answer

Amazon Elastic File System (Amazon EFS)

Answer

Amazon FSx for Windows File Server

Answer

Amazon S3 with AWS Storage Gateway File Gateway

Question 3

A company is migrating an SAP HANA database to AWS. The database will run on an Amazon EC2 instance with multiple Amazon EBS volumes. The company wants to ensure that the EBS volumes provide consistent performance and are optimized for SAP HANA. Which action should be taken when configuring the EBS volumes?

Accepted Answer

Stripe multiple EBS volumes together using RAID 0 for the data volume to increase IOPS and throughput.. To achieve the required IOPS and throughput for SAP HANA on AWS, multiple EBS volumes should be striped together using RAID 0 for the data volume. This aggregates performance and is a standard configuration. The log volume should also be on separate high-performance volumes. Encryption and single-volume configurations do not address performance, and magnetic volumes are too slow for HANA.

Answer

Use a single large EBS volume for all HANA data and log files to simplify management.

Answer

Enable EBS encryption on all volumes to improve I/O performance.

Answer

Use Amazon EBS magnetic volumes for the log volume to reduce costs.

Question 4

A company is migrating an SAP NetWeaver system to AWS. The system consists of a central services instance, multiple application servers, and a database. The company wants to ensure that the application servers can be automatically replaced if they fail, and that the system can scale out during peak periods. Which AWS service should a solutions architect use to meet these requirements?

Accepted Answer

Amazon EC2 Auto Scaling group. An EC2 Auto Scaling group is designed to automatically replace unhealthy instances and scale the number of instances based on demand. For SAP NetWeaver application servers, you can create a launch template with the necessary SAP binaries and configuration, and use an Auto Scaling group to manage the fleet. This provides both automatic replacement and scale-out capabilities, meeting the company's requirements.

Answer

Amazon ECS with AWS Fargate

Answer

AWS Lambda

Answer

AWS Elastic Beanstalk

Question 5

A company is deploying SAP S/4HANA on AWS using a scale-out architecture with multiple application servers and a single SAP HANA database. The company needs to ensure that the SAP application servers can communicate with the database using the SAP HANA client and that the database can be accessed securely. Which TWO configurations are required to meet these requirements? (Choose two.)

Accepted Answer

Install the SAP HANA client on each application server and configure the connection using the database's private IP address and instance number.. The SAP HANA database should reside in a private subnet and be accessible only via private IPs. Security groups must restrict access to the application servers. The SAP HANA client on each application server enables connectivity using the private IP and instance number. These two configurations ensure secure and functional communication.

Answer

Configure the SAP HANA database to use a public subnet and attach an Elastic IP address for high availability.

Answer

Set up an AWS Site-to-Site VPN between the application servers and the database to encrypt traffic.

Answer

Enable public IP addresses on the SAP HANA database instance and allow access from the application servers' public IPs.

Question 6

A company is migrating an SAP ERP system to AWS. The SAP application servers will run on Amazon EC2 instances in a private subnet. The SAP HANA database will run on a separate EC2 instance in another private subnet. The company needs to ensure that the application servers can resolve the database hostname and that the database is not accessible from the internet. Which AWS services should be used to meet these requirements?

Accepted Answer

Use Amazon Route 53 private hosted zone for DNS resolution, and place the database in a private subnet with a security group that allows traffic only from the application servers' security group.. Amazon Route 53 private hosted zones provide DNS resolution within a VPC without exposing records to the internet. Security groups can reference other security groups, allowing the database to accept traffic only from the application servers. This combination ensures that the application servers can resolve the database hostname and that the database remains inaccessible from the internet.

Answer

Use AWS Direct Connect to connect to the VPC, and configure a public hosted zone for DNS resolution.

Answer

Use an internet-facing Application Load Balancer to distribute traffic to the database, and use Amazon Route 53 public DNS for resolution.

Answer

Use AWS Transit Gateway to route traffic between subnets, and use Amazon Route 53 Resolver for DNS resolution.

Question 7

A company is migrating an SAP NetWeaver application to AWS. The application servers will run on Amazon EC2 instances and require a shared file system for SAP transport files and interfaces. The company wants a fully managed, highly available file system that supports the SMB protocol. Which AWS service should the solutions architect recommend?

Accepted Answer

Amazon FSx for Windows File Server. Amazon FSx for Windows File Server is a fully managed file storage service that supports SMB and integrates with Active Directory, making it ideal for SAP transport directories. It provides high availability and scalability, meeting the requirements for SAP NetWeaver on AWS.

Answer

Amazon Elastic File System (Amazon EFS)

Answer

Amazon FSx for Lustre

Answer

Amazon S3 with AWS Storage Gateway File Gateway

Question 8

A company is running SAP HANA on AWS and needs to ensure that the database can be recovered quickly in the event of a failure. They want to implement a backup strategy that includes both database backups and storage snapshots. Which TWO actions should they take to meet this requirement? (Choose two.)

Accepted Answer

Create Amazon EBS snapshots of the SAP HANA data and log volumes on a regular schedule using Amazon Data Lifecycle Manager.. To ensure quick recovery, a combination of database-level backups and storage snapshots is recommended. Using AWS Backint Agent to back up SAP HANA to Amazon S3 provides durable, off-instance backups. Additionally, scheduling EBS snapshots with Amazon Data Lifecycle Manager offers fast volume-level recovery. Together, these actions meet the requirement for a robust backup strategy. Other options are either not backup mechanisms or not supported for SAP HANA on AWS.

Answer

Configure SAP HANA to write backups directly to an Amazon S3 bucket using the S3 API without the AWS Backint Agent.

Answer

Use AWS Storage Gateway to create a cached volume gateway that stores SAP HANA backups on-premises.

Answer

Enable SAP HANA System Replication to a secondary instance in another Availability Zone and use that as the primary backup mechanism.

Question 9

A company is deploying SAP HANA on AWS using an EC2 instance with a memory-optimized instance type. The company wants to ensure that the storage for the HANA data and log volumes meets SAP's performance requirements. The company has chosen Amazon EBS gp3 volumes. What should the company do to ensure that the gp3 volumes provide the required IOPS and throughput for SAP HANA?

Accepted Answer

Provision additional IOPS and throughput on the gp3 volumes.. Amazon EBS gp3 volumes allow independent provisioning of IOPS and throughput. To meet SAP HANA performance requirements, you must explicitly provision the necessary IOPS and throughput on the gp3 volumes. Increasing volume size does not automatically scale performance for gp3, and while RAID 0 or io2 volumes could provide performance, the direct action for gp3 is to provision the required IOPS and throughput.

Answer

Increase the volume size to automatically increase IOPS and throughput.

Answer

Use io2 Block Express volumes instead of gp3.

Answer

Enable EBS optimized instances and attach multiple gp3 volumes in a RAID 0 configuration.

Question 10

A company is running SAP HANA on AWS and needs to ensure that the database can be recovered to a specific point in time within the last 7 days. The HANA database is using continuous log backups to Amazon S3. Which additional configuration is required to enable point-in-time recovery?

Accepted Answer

Enable HANA's automatic log backup and ensure that the log backups are retained for at least 7 days in Amazon S3.. Point-in-time recovery for SAP HANA requires continuous log backups that are retained for the desired recovery window. Enabling automatic log backup to Amazon S3 with a retention policy of at least 7 days ensures that the logs are available. Full backups alone or system replication do not provide PITR. S3 versioning is a data protection feature but not a substitute for proper log retention.

Answer

Enable Amazon S3 versioning on the bucket used for HANA backups.

Answer

Schedule daily full backups of the HANA database to Amazon S3 and retain them for 7 days.

Answer

Configure HANA system replication to a secondary instance in another Availability Zone.

Question 11

A company is running SAP S/4HANA on AWS with the database on an Amazon EC2 instance and the application servers on separate EC2 instances. The company wants to ensure that the application servers can automatically discover and connect to the database after a failover or restart. Which AWS service should be used to provide a stable endpoint for the database?

Accepted Answer

Amazon Route 53 private hosted zone with a DNS record for the database endpoint.. For application servers to automatically discover the database after failover, a stable DNS endpoint is needed. Amazon Route 53 private hosted zones allow you to create a DNS record that points to the database's current IP address. When the database moves, the DNS record can be updated, enabling seamless reconnection without changing application configuration. This is a standard approach for SAP on AWS.

Answer

AWS Direct Connect

Answer

AWS Global Accelerator

Answer

Amazon CloudFront

Question 12

A company runs SAP NetWeaver on AWS with the database on an Amazon EC2 instance. The database is a single point of failure. The company wants to implement a high-availability solution for the database that automatically fails over to a standby EC2 instance in a different Availability Zone. The database is SAP HANA. Which AWS service should be used to manage the failover and ensure the standby instance is available?

Accepted Answer

SUSE Linux Enterprise High Availability Extension (pacemaker/corosync). For SAP HANA high availability on AWS with automatic failover across Availability Zones, a certified cluster manager such as SUSE Linux Enterprise High Availability Extension is required. It handles the orchestration of SAP HANA system replication, virtual IP movement, and storage takeover. Other AWS services like Route 53 or Systems Manager do not provide the necessary database-aware clustering and cannot ensure a consistent failover with minimal data loss.

Answer

Amazon Route 53 with health checks and DNS failover

Answer

AWS Systems Manager Automation with runbooks

Answer

AWS Elastic Disaster Recovery (DRS)

Question 13

A company is running SAP HANA on AWS and needs to ensure that the database can be backed up to Amazon S3 without impacting performance. The SAP administrator wants to use SAP HANA's native backup tools. Which method should the administrator use to back up the SAP HANA database directly to Amazon S3?

Accepted Answer

Use the SAP HANA backup command with a backint configuration that points to an AWS Backint Agent for SAP HANA.. The AWS Backint Agent for SAP HANA is a certified backint provider that enables SAP HANA to back up directly to Amazon S3 using native backup tools. It supports features like parallel uploads, compression, and encryption, and is the recommended method for S3 backups. Other options are either not native, not application-consistent, or not supported.

Answer

Use Amazon EBS snapshots of the SAP HANA data and log volumes, and copy the snapshots to Amazon S3.

Answer

Create a cron job that runs hdbsql to export the database to a local file and then uses the AWS CLI to copy the file to Amazon S3.

Answer

Configure SAP HANA to use the Amazon S3 REST API directly by specifying the S3 bucket URL in the backup command.

Question 14

A company is running an SAP HANA database on an Amazon EC2 instance. The database is experiencing performance issues during peak load. Monitoring shows high CPU utilization on the database instance. Which action should be taken to resolve the performance issue while maintaining SAP support?

Accepted Answer

Resize the EC2 instance to a larger memory-optimized instance type that is certified for SAP HANA, such as an R5 or X1e instance.. High CPU utilization on an SAP HANA database instance indicates insufficient compute resources. Scaling up to a larger, SAP-certified memory-optimized instance type increases vCPU count and memory, directly addressing the bottleneck. This maintains SAP support and resolves the performance issue.

Answer

Enable detailed monitoring with Amazon CloudWatch to identify the cause of high CPU.

Answer

Add an additional EBS volume to the instance and move the HANA log files to it.

Answer

Enable burstable performance by changing the instance type to a T3 instance.

Question 15

A company is running an SAP S/4HANA system on AWS. The application servers are on Amazon EC2 instances in a private subnet, and the SAP HANA database is on an Amazon EC2 instance in another private subnet. The company wants to ensure that the application servers can resolve the database hostname and that traffic between them is encrypted in transit. The company also wants to minimize management overhead. Which solution should be implemented?

Accepted Answer

Use Amazon Route 53 private hosted zone for DNS resolution and enable encryption using TLS on the SAP HANA database.. Using a Route 53 private hosted zone provides internal DNS resolution for the SAP HANA database hostname, and enabling TLS on SAP HANA encrypts communication between the application servers and the database. This combination is fully managed and requires minimal operational effort, unlike solutions involving Direct Connect, load balancers, or PrivateLink, which are either irrelevant or add unnecessary complexity.

Answer

Use AWS Cloud Map for service discovery and enable encryption using AWS PrivateLink.

Answer

Use AWS Direct Connect with a public virtual interface for DNS and enable IPsec VPN for encryption.

Answer

Configure an Application Load Balancer to distribute traffic to the database and use AWS Certificate Manager for encryption.