PAS-C01 Technology Practice Test 6 — 15 Questions

Question 1

An SAP administrator is reviewing a CloudFormation template snippet shown in the exhibit. The template creates an EC2 instance for SAP. What is missing from the template to ensure the instance is placed in a specific subnet?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The SubnetId property is not specified in the NetworkInterface. The CloudFormation template snippet shows a NetworkInterface property being used to attach the EC2 instance to a VPC network. When you specify a NetworkInterface, you must include the SubnetId within that interface definition to place the instance in a specific subnet. Without SubnetId, the instance will be launched into the default subnet of the default VPC, which may not be the intended subnet for SAP workloads requiring specific network segmentation or latency constraints.

Answer

The InstanceType is not suitable for SAP

Answer

The ImageId is invalid

Answer

The SecurityGroup reference is missing

Question 2

An SAP HANA database on AWS requires a backup strategy that includes incremental backups to minimize storage costs. The database is large (2 TB) and the backup window is short. Which AWS service or feature is most suitable for performing incremental backups of SAP HANA?

Accepted Answer

Amazon EBS Snapshots. D is correct because Amazon EBS Snapshots provide native incremental backup capability at the block level, which is ideal for large SAP HANA databases (2 TB) with short backup windows. Snapshots capture only changed blocks since the last snapshot, minimizing storage costs and backup time, and can be automated via AWS Backup or custom scripts.

Answer

Amazon S3 Lifecycle policies

Answer

AWS Backup

Answer

SAP HANA backup to Amazon S3

Question 3

A company is deploying a new SAP S/4HANA system on AWS and needs to ensure that the application servers can communicate with the database servers securely and with low latency. The application servers and database servers are in different VPCs. Which AWS service should be used to connect these VPCs?

Accepted Answer

VPC Peering. VPC Peering is the correct choice because it establishes a direct network connection between two VPCs using AWS's internal infrastructure, enabling private IPv4 or IPv6 traffic with low latency and high throughput. For SAP S/4HANA, where application-to-database communication requires consistent sub-millisecond latency and avoids internet transit, VPC Peering provides the necessary Layer-3 connectivity without bandwidth bottlenecks or single points of failure. Unlike VPN or Direct Connect, VPC Peering does not introduce additional hop latency or third-party hardware, making it ideal for this intra-region, cross-VPC scenario.

Answer

AWS VPN

Answer

Amazon API Gateway

Answer

AWS Direct Connect

Question 4

Which TWO AWS services can be used to automate the backup of SAP HANA databases? (Choose two.)

Accepted Answer

Amazon EBS Snapshots. Amazon EBS Snapshots (C) is correct because SAP HANA databases running on AWS typically store their data and log volumes on Amazon EBS, and EBS snapshots provide point-in-time, incremental backups of those volumes that can be automated via Amazon Data Lifecycle Manager or scripts. AWS Backup (E) is correct because it is a fully managed, policy-based backup service that natively supports Amazon EBS volumes (and thus SAP HANA data/log volumes), enabling scheduled, automated backups with retention and lifecycle rules across accounts and regions. AWS Lambda (A) is a compute service for running code, not a backup mechanism itself, though it can trigger backups. AWS Storage Gateway (B) provides hybrid storage integration (file, volume, tape) and is not a backup automation service for SAP HANA. Amazon S3 (D) is object storage and can hold backup files, but it does not itself automate SAP HANA database backups.

Answer

AWS Lambda

Answer

AWS Storage Gateway

Answer

Amazon S3

Question 5

Which THREE AWS services are commonly used to implement high availability for SAP HANA databases on AWS? (Choose three.)

Accepted Answer

Amazon EC2 Auto Recovery. Amazon EC2 Auto Recovery (A) is correct because it automatically recovers an impaired EC2 instance, including SAP HANA database hosts, by moving the instance to healthy hardware within the same Availability Zone, preserving instance ID, private IP, and Elastic IP, which supports high availability with minimal manual intervention. Multi-AZ deployment of SAP HANA (C) is correct because SAP HANA system replication across two Availability Zones provides synchronous or asynchronous data replication to a secondary node, enabling failover and protecting against AZ-level failures. Elastic Load Balancing (E) is correct because it distributes client or application traffic across multiple SAP HANA nodes or SAP application servers, performs health checks, and routes traffic only to healthy targets, which is a core component of a highly available SAP architecture. AWS Global Accelerator (B) is not correct because it optimizes global traffic routing over the AWS backbone but does not itself provide SAP HANA database high availability or replication. Amazon Route 53 (D) is not correct because, while DNS failover can redirect clients, it is not one of the commonly used services for implementing SAP HANA database high availability itself.

Answer

AWS Global Accelerator

Answer

Amazon Route 53

Question 6

Refer to the exhibit. An IAM policy is attached to an IAM role used by an SAP automation script. The script is failing to start an EC2 instance. What is the most likely cause?

Accepted Answer

The script is not using HTTPS, so the Deny statement blocks all actions.. The Deny statement in the policy blocks all actions unless the request uses HTTPS. Since the SAP automation script is failing to start an EC2 instance, the most likely cause is that the script is making HTTP requests instead of HTTPS, triggering the Deny and preventing any action, including ec2:StartInstances. This is a common security control to enforce encryption in transit.

Answer

The policy does not grant permission to start instances.

Answer

The policy does not allow ec2:DescribeInstances.

Answer

The script does not have access to the S3 bucket.

Question 7

Refer to the exhibit. An administrator runs the AWS CLI command shown and receives the output. The instance is running, but the SAP application on the instance is not accessible. Which additional AWS CLI command should the administrator run to troubleshoot the network connectivity?

Accepted Answer

aws ec2 describe-instances --instance-ids i-0abcd1234efgh5678 --query 'Reservations[0].Instances[0].NetworkInterfaces'. The correct command, `describe-instances` with a filter on `NetworkInterfaces`, retrieves the detailed network interface configuration attached to the specific instance, including the subnet ID, security group IDs, and public/private IP addresses. This allows the administrator to verify whether the instance is attached to the correct subnet and security groups, which are the most common causes of network connectivity issues for an SAP application. The other commands either do not filter to the specific instance or do not provide the necessary network interface details to diagnose the problem.

Answer

aws ec2 describe-subnets

Answer

aws ec2 describe-network-interfaces

Answer

aws ec2 describe-security-groups

Question 8

An SAP administrator needs to migrate an on-premises SAP ERP system to AWS. The current system runs on a single Windows Server with SQL Server and uses 2 TB of storage. The migration must minimize downtime and use native AWS tools. Which service should be used to replicate the on-premises server to AWS?

Accepted Answer

AWS Server Migration Service (SMS). AWS Server Migration Service (SMS) is the correct choice because it is designed to automate the replication of on-premises live server volumes (including Windows Server with SQL Server) to AWS as Amazon Machine Images (AMIs), enabling incremental replication with minimal downtime. It uses agentless replication via the AWS Replication Agent or hypervisor-level integration, making it ideal for migrating the entire server, including the OS and SQL Server database, without requiring separate database-level tools.

Answer

AWS CloudFormation

Answer

AWS Snowball

Answer

AWS Database Migration Service (DMS)

Question 9

A company runs SAP on AWS and uses SAP HANA as its database. The system is experiencing high latency during peak hours. The SAP HANA administrator wants to identify performance bottlenecks at the CPU, memory, and disk I/O levels. Which TWO AWS services can be used together to monitor and correlate these metrics?

Accepted Answer

Amazon CloudWatch Logs. Amazon CloudWatch (D) is correct because it collects and stores time-series metrics for the underlying EC2 instances and EBS volumes hosting SAP HANA — including CPUUtilization, memory metrics via the CloudWatch agent, and EBS disk I/O metrics like VolumeReadOps, VolumeWriteOps, and VolumeQueueLength — which is exactly what is needed to spot CPU, memory, and disk I/O bottlenecks during peak hours. Amazon CloudWatch Logs (B) is correct because it captures the SAP HANA database trace files, alert logs, and OS-level logs, letting the administrator correlate log events with the metric spikes seen in CloudWatch to pinpoint the root cause of latency. Together, CloudWatch metrics plus CloudWatch Logs provide the metric-and-log correlation the scenario requires. AWS Config (A) is not appropriate because it records resource configuration changes and compliance, not runtime performance metrics. Amazon Inspector (C) is a vulnerability management service that scans for software vulnerabilities and unintended network exposure, not performance monitoring. AWS X-Ray (E) traces requests through distributed applications and is not designed to monitor SAP HANA database CPU, memory, or disk I/O.

Answer

AWS Config

Answer

Amazon Inspector

Answer

AWS X-Ray

Question 10

An SAP administrator created the IAM policy shown in the exhibit for a team managing SAP HANA instances. What is the effective permission for the team regarding an EC2 instance with the tag 'Environment=Production'?

Accepted Answer

The team can start and stop the instance, but cannot terminate it.. The IAM policy explicitly denies the 'ec2:TerminateInstances' action for instances with the tag 'Environment=Production', while allowing 'ec2:StartInstances' and 'ec2:StopInstances' via a separate Allow statement. Since an explicit Deny overrides any Allow, the team can start and stop the instance but cannot terminate it.

Answer

The team can start, stop, and terminate the instance.

Answer

The team cannot start, stop, or terminate the instance.

Answer

The team can only describe the instance.

Question 11

A company is running SAP on AWS and wants to ensure high availability for the SAP Central Services (ASCS) instance. They have two EC2 instances in different Availability Zones within a single AWS Region. Which AWS service should be used to automatically fail over the ASCS instance if the primary instance fails?

Accepted Answer

Amazon Route 53. Amazon Route 53 can be configured with a health check that monitors the primary ASCS instance. When the health check fails, Route 53 automatically updates DNS records to point to the secondary instance in the other Availability Zone, enabling failover routing. This provides a DNS-level failover mechanism that is suitable for SAP Central Services, which requires a stable IP address or hostname for client connections.

Answer

Application Load Balancer (ALB)

Answer

AWS Auto Scaling

Answer

AWS CloudFormation

Question 12

A company is planning to migrate a large SAP HANA database to AWS using AWS Snowball Edge devices. The database size is 50 TB and the migration must be completed within a week. Which TWO actions should the company take to ensure a successful migration?

Accepted Answer

Order multiple Snowball Edge devices to transfer data in parallel.. Option B is correct because a single Snowball Edge device cannot practically move 50 TB within a one-week window, so ordering multiple devices and running the transfers in parallel increases aggregate throughput and lets the job finish on time. Option E is correct because compressing the HANA data files reduces the total bytes that must be written to the devices and later uploaded to Amazon S3, which shortens transfer time and helps meet the one-week deadline. Option A is not correct because Direct Connect is a network link between on-premises infrastructure and AWS, not a mechanism to accelerate the physical shipping and ingestion of Snowball Edge data. Option C is not correct because a Snowball Edge device provides roughly 80 TB of usable capacity, not 10 TB, so 50 TB does not need to be split for capacity reasons. Option D is not correct because the Snowball Edge client is used to copy data onto the device and manage the job, not to copy data directly to an S3 bucket before the device is returned to AWS.

Answer

Use AWS Direct Connect to accelerate data transfer from Snowball Edge to AWS.

Answer

Split the data into smaller chunks because each Snowball Edge can only hold 10 TB.

Answer

Copy the data directly to an Amazon S3 bucket using the Snowball Edge client.

Question 13

An SAP Basis administrator is troubleshooting a performance issue on an SAP NetWeaver application server running on Amazon EC2. The administrator notices that the CPU utilization is low but the application response times are high. The system is using an Amazon EBS gp2 volume. Which configuration change is most likely to improve performance?

Accepted Answer

Increase the IOPS of the EBS gp2 volume or switch to io1.. Low CPU utilization with high application response times on an SAP NetWeaver server indicates that the bottleneck is I/O latency, not compute capacity. Amazon EBS gp2 volumes have a baseline IOPS performance that scales with volume size, and if the volume is small or the workload exceeds the burst balance, throughput can be throttled. Increasing the IOPS (by resizing the gp2 volume or switching to io1/io2 with provisioned IOPS) directly addresses the I/O bottleneck, reducing latency and improving application response times.

Answer

Change the EBS volume to instance store.

Answer

Move the EC2 instance to a larger instance family.

Answer

Increase the number of vCPUs on the EC2 instance.

Question 14

An SAP administrator is configuring backups for an SAP HANA database running on Amazon EC2. The backup must be stored in Amazon S3 for long-term retention. Which AWS service should be used to automate the backup process?

Accepted Answer

AWS Backup. AWS Backup is the correct choice because it provides a fully managed, policy-driven backup service that can automate and centralize backups for SAP HANA databases running on Amazon EC2. It integrates natively with SAP HANA using Backint agents, enabling automated, consistent, and application-aware backups directly to Amazon S3 for long-term retention without custom scripting.

Answer

Amazon S3 Lifecycle policies

Answer

AWS Lambda

Answer

Amazon EBS Snapshots

Question 15

A company is deploying SAP NetWeaver on AWS and needs to configure high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). The solution must use AWS native services. Which TWO actions should be taken?

Accepted Answer

Associate an Elastic IP address with the active ASCS instance using a script.. Option A is correct because SAP ASCS/ERS high availability on AWS typically requires an overlay IP address that can be moved between cluster nodes; associating an Elastic IP with the active ASCS instance via a script (often triggered by the cluster's failover mechanism) provides a native AWS way to redirect traffic to the newly active node. Option E is correct because Amazon Route 53 health checks combined with a failover routing policy can automatically redirect clients to the standby ASCS/ERS endpoint when the primary becomes unhealthy, using AWS-native DNS-based failover. Option B is not appropriate because an Application Load Balancer operates at Layer 7 and does not support the non-HTTP protocols and floating-IP semantics required by SAP ASCS/ERS enqueue traffic. Option C is not required because Direct Connect provides dedicated network connectivity, not high availability for the ASCS/ERS cluster itself. Option D is not suitable because AWS Global Accelerator is designed for global traffic acceleration and endpoint failover for TCP/UDP workloads, but it does not provide the cluster-level floating IP behavior needed for SAP ASCS/ERS.

Answer

Place an Application Load Balancer in front of the ASCS instances.

Answer

Set up AWS Direct Connect for redundant connectivity.

Answer

Deploy AWS Global Accelerator for failover.