PAS-C01 Technology Practice Test 36 — 15 Questions

Question 1

A company runs SAP S/4HANA on AWS with the primary application server on an EC2 instance in a private subnet. The security team requires that all outbound internet traffic from the instance be routed through a NAT gateway for patching, but the instance currently has no route to the internet. The VPC has an internet gateway attached and a NAT gateway in a public subnet. What should the company do to allow the instance to reach the internet while keeping it in the private subnet?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Add a route in the private subnet's route table with destination 0.0.0.0/0 and target the NAT gateway.. The private subnet needs a default route pointing to the NAT gateway so that instances can initiate outbound traffic to the internet without being directly accessible. This preserves the private subnet isolation while enabling patching and other outbound needs. Using an internet gateway directly or moving the instance to a public subnet would break the security requirement.

Answer

Move the instance to a public subnet and assign a public IP address so it can reach the internet directly.

Answer

Create a VPC peering connection to a VPC that has an internet gateway and route traffic through that VPC.

Answer

Associate an Elastic IP address with the instance and add a route to the internet gateway in the private subnet's route table.

Question 2

A company is deploying SAP HANA on a single Amazon EC2 instance in AWS. The SAP HANA database requires high availability and disaster recovery. The company wants to use native AWS services to minimize cost and operational overhead. Which TWO configurations should a SAP on AWS specialist recommend to meet these requirements? (Choose two.)

Accepted Answer

Configure SAP HANA system replication between two EC2 instances in different Availability Zones within the same AWS Region.. SAP HANA system replication across Availability Zones provides high availability by enabling failover to a secondary instance in another AZ. Amazon S3 Cross-Region Replication provides disaster recovery by copying backups to another Region. Together, they form a native AWS HA/DR solution with minimal operational overhead. The other options either do not provide HA/DR or are not native AWS services for this purpose.

Answer

Deploy SAP HANA on an Amazon EC2 instance with a cluster placement group and enable detailed monitoring.

Answer

Configure an Amazon Route 53 health check to automatically restart the EC2 instance if it fails.

Answer

Use AWS Storage Gateway to replicate SAP HANA data to on-premises storage.

Question 3

A company is running SAP HANA on AWS and wants to implement a high availability (HA) solution across two Availability Zones. The company has deployed SAP HANA with synchronous in-memory replication using SAP HANA System Replication (HSR). They need to ensure that the HA setup meets SAP's requirements for automatic failover and split-brain prevention. Which TWO additional components are required? (Choose two.)

Accepted Answer

A cluster manager such as Pacemaker with Corosync and SBD fencing.. The two required components are a cluster manager such as Pacemaker with Corosync and SBD fencing, and an overlay IP address. The cluster manager automates failover and prevents split-brain, while the overlay IP allows clients to connect to the active node seamlessly. These are essential for SAP HANA HA on AWS.

Answer

AWS Global Accelerator to route traffic to the active node.

Answer

A shared Amazon EFS file system for SAP HANA data and log volumes.

Answer

Amazon Route 53 health checks with DNS failover.

Question 4

A company is planning to migrate an SAP ERP Central Component (ECC) system running on Oracle Database to AWS. The database will be re-platformed to SAP HANA on an Amazon EC2 instance. The migration team must validate that the target instance and storage meet SAP HANA requirements before cutover. Which TWO validation activities should the team perform on the target EC2 instance? (Choose two.)

Accepted Answer

Verify that the EC2 instance type appears in the SAP HANA Certified and Supported SAP HANA Hardware Directory for the planned AWS Region and that the EBS volume types match SAP's published storage recommendations.. Before cutover, the team must confirm both that the target platform is certified for HANA and that the actual instance and storage deliver the required KPIs. Checking the SAP HANA Certified and Supported SAP HANA Hardware Directory against the chosen instance type and EBS volume types establishes supportability, while running SAP's hardware and cloud measurement tools against the live EC2 instance and its volumes produces empirical performance evidence for the specific deployment.

Answer

Run the SAP NetWeaver transport management system consistency check against the target instance to confirm that the HANA database can accept ABAP transports after cutover.

Answer

Configure SAP HANA system replication between the source Oracle Database and the target HANA instance so that data is continuously synchronized during the validation period.

Answer

Enable Oracle Automatic Storage Management (ASM) on the target EBS volumes to provide the striping and mirroring that SAP HANA requires for /hana/data.

Question 5

A company is planning to migrate its SAP ERP Central Component (ECC) system to AWS. The system uses an Oracle database. The company wants to use AWS Database Migration Service (AWS DMS) to migrate the database to Amazon RDS for Oracle. The company needs to ensure minimal downtime during the migration. Which TWO actions should be taken to achieve this? (Choose two.)

Accepted Answer

Pre-create the target Amazon RDS for Oracle database with sufficient storage and performance.. To minimize downtime when migrating an Oracle database to Amazon RDS for Oracle using AWS DMS, you should configure a CDC task to replicate ongoing changes and pre-create the target database with adequate resources. CDC allows the source to remain operational while changes are continuously applied to the target, and a properly sized target ensures the replication keeps up. Other options like Active Data Guard, AWS SCT, or VPN are not required for this homogeneous migration.

Answer

Enable Oracle Active Data Guard on the source database to allow continuous replication.

Answer

Use AWS Schema Conversion Tool (AWS SCT) to convert the Oracle schema to Amazon RDS for Oracle.

Answer

Set up a VPN connection between on-premises and AWS to ensure secure data transfer.

Question 6

A company is migrating an SAP ERP Central Component (ECC) system to AWS. The database is Oracle on Amazon EC2, and the application servers run on separate EC2 instances. The company must ensure that the database can be recovered to any point in time within the last 35 days and that backups are stored durably. Which combination of actions should the solutions architect take?

Accepted Answer

Configure Oracle RMAN with archived redo log backups to Amazon S3, set the recovery window to 35 days, and use a recovery catalog stored in Amazon RDS for Oracle.. Point-in-time recovery for Oracle requires archived redo logs and a backup strategy that retains them for the desired window. Configuring RMAN to back up archived redo logs to Amazon S3 and setting a 35-day recovery window provides the ability to recover to any second within that period. A recovery catalog in Amazon RDS for Oracle centralizes metadata and supports the retention policy. Snapshots and AWS Backup alone cannot deliver PITR.

Answer

Enable automated backups on the EC2 instance using Amazon EBS snapshots with a 35-day retention policy.

Answer

Use AWS Backup to create daily backups of the EC2 instances and retain them for 35 days.

Answer

Configure Oracle RMAN to write backups to an Amazon S3 bucket and enable S3 Versioning and Object Lock.

Question 7

A company is running SAP NetWeaver on AWS with multiple application servers and a central SAP HANA database. The company needs to ensure that the SAP application servers can automatically discover and connect to the database after a failover. Which AWS service should be used to manage the database connection endpoint?

Accepted Answer

An overlay IP address managed by a cluster manager such as SUSE Linux Enterprise High Availability Extension or Red Hat Enterprise Linux High Availability Add-On.. In SAP on AWS high-availability architectures, a cluster manager (such as SUSE Linux Enterprise High Availability Extension or Red Hat Enterprise Linux High Availability Add-On) manages an overlay IP address that is associated with the active database instance. SAP application servers connect to this virtual IP, so when a failover occurs, the IP moves to the new primary, and the application servers automatically reconnect without manual reconfiguration. This is the standard and recommended approach.

Answer

AWS Global Accelerator with an endpoint group for the database instances.

Answer

Amazon Route 53 with a private hosted zone and a CNAME record pointing to the active database instance.

Answer

AWS Cloud Map

Question 8

A company is running an SAP NetWeaver application server on AWS. The application server uses a shared file system for SAP transport directory and global files. The company wants to use a fully managed, scalable, and highly available file system that supports the SMB protocol for Windows-based SAP application servers. Which AWS service should they use?

Accepted Answer

Amazon FSx for Windows File Server.. For Windows-based SAP application servers requiring SMB, Amazon FSx for Windows File Server is the appropriate choice. It is fully managed, supports SMB, integrates with Active Directory, and provides high availability and scalability. It is specifically designed for Windows workloads and is recommended for SAP NetWeaver shared file systems. Other options either do not support SMB natively or are not optimized for this use case.

Answer

Amazon EFS with SMB access point.

Answer

Amazon S3 with SMB gateway.

Answer

Amazon FSx for Lustre.

Question 9

A company is running SAP HANA on AWS with a scale-out deployment across multiple Amazon EC2 instances. They need to ensure that the SAP HANA system can tolerate the failure of a single Availability Zone (AZ) without data loss and with minimal downtime. The HANA system uses synchronous in-memory replication between sites. Which configuration should they implement?

Accepted Answer

Deploy the HANA scale-out nodes across two AZs with synchronous mode and enable automatic failover using an overlay IP address and a cluster manager like Pacemaker.. Synchronous replication across AZs ensures no data loss, and a cluster manager like Pacemaker with an overlay IP provides automatic failover. This combination is the standard SAP HANA high-availability configuration on AWS for multi-AZ resilience. Other options either compromise data integrity or lack automatic failover mechanisms.

Answer

Deploy the HANA scale-out nodes within a single AZ and use asynchronous replication to a secondary site in another AZ.

Answer

Deploy the HANA scale-out nodes across two AZs with synchronous mode and use Amazon Route 53 failover routing to redirect clients to the secondary site.

Answer

Deploy the HANA scale-out nodes across two AZs with synchronous mode and use an Application Load Balancer to distribute connections to all nodes.

Question 10

A company is running an SAP HANA database on an Amazon EC2 instance. The company needs to back up the database to Amazon S3. The backup must be consistent and integrated with SAP HANA's backup catalog. Which tool should the company use?

Accepted Answer

AWS Backint Agent for SAP HANA. AWS Backint Agent for SAP HANA is specifically designed to back up SAP HANA databases to Amazon S3 in a consistent manner while integrating with the SAP HANA backup catalog. It is SAP-certified and supports advanced features. The other options either do not provide consistency or are not designed for SAP HANA backups.

Answer

AWS Database Migration Service (DMS)

Answer

SAP HANA hdbsql with a custom script to export data to CSV and upload to S3

Answer

Amazon S3 sync command from the AWS CLI

Question 11

A company runs an SAP NetWeaver application on AWS with multiple application servers behind an Application Load Balancer (ALB). The company wants to ensure that the application servers are automatically replaced if they fail health checks. The company also wants to minimize costs by using a mix of On-Demand and Spot Instances. Which solution should the company implement?

Accepted Answer

Create an Auto Scaling group with a launch template that specifies a mixed instances policy, and attach the Auto Scaling group to the ALB target group.. An Auto Scaling group with a mixed instances policy and attachment to the ALB target group provides automatic replacement of unhealthy instances and allows a mix of On-Demand and Spot Instances for cost savings. The ALB health checks ensure that only healthy instances receive traffic, and the Auto Scaling group maintains the desired capacity. Other options either lack automatic replacement or are not suitable for SAP NetWeaver deployments.

Answer

Use an EC2 Fleet with a diversified allocation strategy and configure the ALB to route traffic only to healthy instances.

Answer

Configure an AWS Lambda function to monitor EC2 instance health and replace instances using AWS Systems Manager Automation.

Answer

Deploy the application servers as an Amazon ECS service with an Application Load Balancer and use AWS Fargate Spot.

Question 12

A company is planning to migrate an SAP ERP Central Component (ECC) system to AWS. The database is Oracle. They want to use AWS Database Migration Service (DMS) for the migration. Which prerequisite must be met for DMS to perform the migration?

Accepted Answer

The source Oracle database must be configured with supplemental logging enabled.. AWS DMS requires supplemental logging on the source Oracle database to capture changes for ongoing replication. This is a mandatory configuration for Oracle sources when using CDC. Other options are not prerequisites; the target can be various databases, the source can remain online, and the replication instance does not need to be in the same AZ.

Answer

The source database must be stopped during the entire migration to ensure consistency.

Answer

The target database must be an Amazon RDS for Oracle instance with the same version as the source.

Answer

The AWS DMS replication instance must be deployed in the same Availability Zone as the source database.

Question 13

A company runs SAP NetWeaver on Amazon EC2 instances behind an Application Load Balancer. The SAP application servers must serve different content based on the URL path, and session persistence is required for the SAP GUI. The company wants to minimize administrative overhead and ensure that the load balancer can route traffic to the correct application server. Which solution should a SAP on AWS specialist recommend?

Accepted Answer

Configure an Application Load Balancer with path-based routing rules and enable sticky sessions using application-based cookie stickiness.. The Application Load Balancer provides layer 7 routing, including path-based rules, and supports application-based cookie stickiness that keeps SAP GUI sessions bound to a specific instance. This combination meets both the routing and session persistence requirements without custom application changes or additional infrastructure, reducing administrative effort.

Answer

Configure a Network Load Balancer with a TCP listener and enable sticky sessions using source IP affinity.

Answer

Use an Application Load Balancer with host-based routing and disable session persistence, relying on the SAP application to store session state in a shared database.

Answer

Deploy a Classic Load Balancer with TCP listeners and enable sticky sessions using duration-based cookies.

Question 14

A company is running SAP HANA on AWS and needs to configure high availability across two Availability Zones. The company wants to use SAP HANA System Replication with automatic failover. Which two actions should the company take to meet these requirements? (Choose two.)

Accepted Answer

Configure HANA System Replication between the primary and secondary instances.. To enable automatic failover for SAP HANA System Replication on AWS, you must configure HANA System Replication itself and deploy a Pacemaker cluster with the SAPHana resource agent. These two components work together to replicate data and automate failover. Other options are either not required or not applicable to SAP HANA on EC2.

Answer

Use an overlay IP address with a Network Load Balancer to route traffic to the active HANA instance.

Answer

Create an Amazon S3 bucket to store the HANA configuration files for failover.

Answer

Enable Multi-AZ deployment for the Amazon RDS for SAP HANA database.

Question 15

A company is deploying SAP S/4HANA on AWS and needs to ensure high availability for the SAP HANA database across two Availability Zones. They plan to use SAP HANA system replication. Which two additional components are required to automate failover and ensure clients reconnect seamlessly? (Choose two.)

Accepted Answer

A cluster manager such as Pacemaker with a STONITH mechanism to manage resources and prevent split-brain.. To automate failover and ensure seamless client reconnection in a SAP HANA system replication setup across two AZs, a cluster manager like Pacemaker with STONITH is required to manage resources and fence failed nodes. Additionally, an overlay IP (e.g., Elastic IP or virtual IP) is needed to allow clients to reconnect to the new primary without manual changes. Other options like ALB or Route 53 are not suitable or sufficient for this purpose.

Answer

Amazon Route 53 with a failover routing policy that points to the primary and secondary instances.

Answer

An Application Load Balancer configured with a target group for the SAP HANA database, with health checks on port 30015.

Answer

SAP HANA's built-in multi-tier system replication with a third site for disaster recovery.