PAS-C01 Technology Practice Test 6 — 15 Questions

Question 1

An SAP environment uses Amazon CloudWatch to monitor EC2 instances. The operations team wants to receive a notification when the CPU utilization exceeds 90% for 5 consecutive minutes. Which AWS service should they use?

Accepted Answer

Amazon CloudWatch Alarms with Amazon SNS.. Option C is correct because CloudWatch Alarms can trigger Amazon SNS notifications. Option A is wrong because CloudWatch Logs is for log data. Option B is wrong because CloudTrail is for API auditing. Option D is wrong because Config is for resource compliance.

Answer

AWS Config.

Answer

Amazon CloudWatch Logs.

Answer

AWS CloudTrail.

Question 2

A company is migrating an SAP ERP system to AWS and needs to minimize downtime during the cutover. The database is SAP ASE. Which migration strategy is most appropriate?

Accepted Answer

Use SAP ASE replication to replicate data to an EC2 instance running ASE, then cut over.. Option D is correct because ASE replication can keep the target in sync and allow a fast cutover with minimal downtime. Option A is wrong because AWS DMS does not support ASE as a source. Option B is wrong because export/import requires downtime during export. Option C is wrong because copying EBS snapshots requires downtime for consistent snapshot.

Answer

Create a nightly backup of the on-premises database, copy to AWS, and restore.

Answer

Perform a full database export from on-premises and import into Amazon RDS for ASE.

Answer

Use AWS Database Migration Service (DMS) with ongoing replication.

Question 3

An SAP system on AWS needs to store sensitive configuration files securely and automatically rotate the encryption keys. Which AWS service should be used?

Accepted Answer

AWS Systems Manager Parameter Store with AWS KMS.. Option A is correct because AWS Systems Manager Parameter Store securely stores configuration and can integrate with KMS for key rotation. Option B is wrong because S3 does not automatically rotate keys. Option C is wrong because Secrets Manager is for secrets, not configuration with automatic rotation of keys. Option D is wrong because KMS manages keys, not configuration storage.

Answer

Amazon S3 with server-side encryption.

Answer

AWS Key Management Service (KMS) alone.

Answer

AWS Secrets Manager.

Question 4

Which TWO of the following are valid strategies to improve the availability of an SAP HANA database on AWS?

Accepted Answer

Implement automatic failover using SAP HANA System Replication.. Option A is correct: Multi-AZ HSR provides synchronous replication for failover. Option C is correct: Automatic failover with HSR in same region is a high availability pattern. Option B is wrong because HANA doesn't support Multi-AZ on RDS. Option D is wrong because backup is for disaster recovery, not high availability. Option E is wrong because large instance does not provide availability.

Answer

Use Amazon RDS for HANA with Multi-AZ deployment.

Answer

Take daily snapshots of the HANA data volume.

Answer

Use a larger EC2 instance type for the HANA server.

Question 5

Which THREE services can be used together to implement a disaster recovery solution for SAP S/4HANA on AWS with a recovery time objective (RTO) of less than 1 hour and a recovery point objective (RPO) of less than 15 minutes?

Accepted Answer

SAP HANA System Replication across regions.. Option A is correct: HANA System Replication provides low RPO. Option C is correct: S3 can store backups for log replay. Option D is correct: CloudEndure Disaster Recovery can replicate entire servers. Option B is wrong because DMS doesn't support HANA. Option E is wrong because Glacier has retrieval times > 1 hour.

Answer

AWS Database Migration Service (DMS) for ongoing replication.

Answer

Amazon S3 Glacier for long-term backups.

Question 6

Which TWO are best practices for securing SAP on AWS?

Accepted Answer

Use security groups to control traffic between SAP components.. Option B is correct: Security groups act as virtual firewalls. Option D is correct: IAM roles for EC2 provide secure credential management. Option A is wrong because default VPC is not recommended. Option C is wrong because public subnets expose instances. Option E is wrong because SSH key pair is for instance access, not security group.

Answer

Place all SAP systems in the default VPC.

Answer

Attach public IP addresses to all SAP EC2 instances for easy management.

Answer

Disable security groups and rely on SSH key pairs only.

Question 7

A company is running an SAP HANA database on an EC2 instance with EBS volumes. The database experiences high write latency during peak hours. Which configuration change would most effectively reduce latency?

Accepted Answer

Use EBS io2 Block Express volumes with multi-attach enabled.. Option B is correct because using EBS io2 Block Express volumes provides consistent low latency and high IOPS for demanding workloads like SAP HANA. Option A is wrong because gp3 volumes have lower performance compared to io2 Block Express. Option C is wrong because increasing instance size may not directly address storage latency. Option D is wrong because instance store volumes are ephemeral and not suitable for persistent database storage.

Answer

Switch to gp3 EBS volumes with maximum throughput.

Answer

Increase the EC2 instance size to a compute-optimized type.

Answer

Migrate the data to instance store volumes.

Question 8

An SAP system administrator notices that an SAP S/4HANA system on AWS is experiencing high network latency between the application server and the database server. Both servers are in the same VPC but in different Availability Zones. What is the most effective way to reduce latency?

Accepted Answer

Launch both instances in the same placement group and enable EBS optimization.. Option D is correct because using an EBS-optimized instance with dedicated network bandwidth and placement groups reduces latency and improves throughput. Option A is wrong because adding more ENIs increases complexity without guaranteed latency reduction. Option B is wrong because VPC peering is for cross-VPC communication, not within the same VPC. Option C is wrong because AWS Global Accelerator is for global traffic, not intra-VPC.

Answer

Set up VPC peering between the two subnets.

Answer

Deploy AWS Global Accelerator to optimize the traffic path.

Answer

Add multiple Elastic Network Interfaces (ENIs) to the instances.

Question 9

A company wants to set up an SAP HANA system replication across two AWS Regions for disaster recovery. Which AWS service should they use to achieve the lowest possible recovery point objective (RPO)?

Accepted Answer

Amazon S3 Transfer Acceleration. Option B is correct because Amazon S3 Transfer Acceleration uses optimized network paths for fast data transfer, reducing RPO for HANA replication. Option A is wrong because AWS Direct Connect is a private connection but does not inherently accelerate data transfer. Option C is wrong because VPN can be slower and less reliable over long distances. Option D is wrong because AWS Global Accelerator improves application performance but not specifically for data replication.

Answer

AWS Site-to-Site VPN

Answer

AWS Direct Connect

Answer

AWS Global Accelerator

Question 10

During an SAP system migration to AWS, the team needs to ensure that the SAP application can automatically restart if the EC2 instance fails. Which combination of AWS services should they use?

Accepted Answer

Amazon EC2 Auto Scaling and Amazon CloudWatch. Option A is correct because Auto Scaling with a fixed instance count can automatically replace failed instances, and CloudWatch alarms can trigger recovery. Option B is wrong because Lambda does not natively restart instances. Option C is wrong because Route 53 health checks do not restart instances. Option D is wrong because Elastic Beanstalk is for web applications, not SAP.

Answer

AWS Elastic Beanstalk and Amazon RDS

Answer

AWS Lambda and Amazon SQS

Answer

Amazon Route 53 and Elastic Load Balancing

Question 11

An SAP system on AWS uses a shared file system (e.g., /sapmnt) that must be accessible from multiple EC2 instances. Which storage solution provides the highest availability and scalability?

Accepted Answer

Amazon EFS. Option C is correct because Amazon EFS provides a fully managed, scalable NFS file system with high availability across multiple AZs. Option A is wrong because EBS volumes can only be attached to one instance at a time unless using multi-attach (limited). Option B is wrong because S3 does not support POSIX file system semantics required by SAP. Option D is wrong because a standalone EBS volume with multi-attach has limitations and is less scalable.

Answer

Amazon S3 with S3 File Gateway

Answer

AWS Storage Gateway file gateway

Answer

Amazon EBS with multi-attach enabled

Question 12

A company wants to ensure that their SAP HANA database backups are stored securely and can be retained for 7 years for compliance. Which AWS service should they use to archive the backups?

Accepted Answer

Amazon S3 Glacier Deep Archive. Option B is correct because S3 Glacier Deep Archive is the lowest-cost storage for long-term archival with retrieval times of 12 hours. Option A is wrong because S3 Standard is for frequent access, not archival. Option C is wrong because EBS Snapshots are incremental and not designed for long-term archival with compliance. Option D is wrong because S3 Intelligent-Tiering is for data with unknown access patterns, not purely archival.

Answer

Amazon EBS Snapshots

Answer

Amazon S3 Intelligent-Tiering

Answer

Amazon S3 Standard

Question 13

An SAP system administrator needs to monitor the CPU utilization of an EC2 instance running SAP NetWeaver and set an alarm when it exceeds 90% for 5 minutes. Which AWS service should they use?

Accepted Answer

Amazon CloudWatch. Option A is correct because CloudWatch can monitor EC2 metrics and trigger alarms based on CPU utilization. Option B is wrong because CloudTrail is for auditing API calls, not monitoring. Option C is wrong because Config is for resource configuration tracking. Option D is wrong because Trusted Advisor provides best practice checks, not monitoring.

Answer

AWS CloudTrail

Answer

AWS Trusted Advisor

Answer

AWS Config

Question 14

A company is running SAP Business Suite on AWS and wants to improve the disaster recovery posture by replicating data to another AWS Region. The solution must have a recovery time objective (RTO) of less than 15 minutes and a recovery point objective (RPO) of less than 5 minutes. Which approach should they take?

Accepted Answer

Configure SAP HANA system replication with synchronous mode.. Option D is correct because SAP HANA system replication with synchronous mode provides near-zero RPO and automatic failover in minutes. Option A is wrong because EBS snapshots have higher RPO (scheduled). Option B is wrong because cross-Region replication of S3 is slower. Option C is wrong because Database Migration Service is for migrations, not real-time replication.

Answer

Use AWS Database Migration Service for continuous replication.

Answer

Use Amazon S3 cross-Region replication for transaction logs.

Answer

Use AWS Backup to create cross-Region EBS snapshots every 5 minutes.

Question 15

An SAP system administrator needs to grant an external auditor read-only access to view EC2 instance configurations and CloudWatch logs. Which IAM policy should they use?

Accepted Answer

AWS managed policy: ReadOnlyAccess. Option A is correct because ReadOnlyAccess grants read-only permissions to all AWS services, including EC2 and CloudWatch Logs. Option B is wrong because AdministratorAccess grants full access. Option C is wrong because PowerUserAccess allows creating resources, violating read-only. Option D is wrong because SecurityAudit is limited to security services.

Answer

AWS managed policy: SecurityAudit

Answer

AWS managed policy: AdministratorAccess

Answer

AWS managed policy: PowerUserAccess