PAS-C01 Technology Practice Test 7 — 15 Questions

Question 1

An SAP administrator attaches the above IAM policy to a user. What actions can the user perform?

Accepted Answer

Describe, start, and stop EC2 instances, but not terminate them.. Option B is correct. The policy allows Describe* (read) and Start/Stop instances, and explicitly denies Terminate. Thus the user can start and stop instances but cannot terminate them. Option A is wrong because terminate is denied. Option C is wrong because start/stop are allowed. Option D is wrong because describe is allowed.

Answer

Perform all EC2 actions including terminate.

Answer

Only describe EC2 instances.

Answer

Only start and stop instances.

Question 2

An SAP administrator runs the above CLI command and sees the output. The EC2 instance i-0a1b2c3d4e5f6g7h8 is stopped. What will happen if the administrator attempts to start the instance?

Accepted Answer

The instance will start successfully and the volume will be attached.. Option A is correct. The volume is of type io2 with 10,000 IOPS, which is supported. The instance start will attach the volume and boot normally. Option B is wrong because volume type is supported. Option C is wrong because multi-attach is disabled but not required. Option D is wrong because size is acceptable.

Answer

The instance will fail to start because the volume type is not supported.

Answer

The instance will start but the volume will not attach because multi-attach is disabled.

Answer

The instance will start but the volume will be read-only.

Question 3

The above IAM policy is attached to a role named CrossAccountBackupRole in account 123456789012. What does this policy enable?

Accepted Answer

The SAPAdminRole can assume the CrossAccountBackupRole.. Option D is correct. This is a trust policy that allows the SAPAdminRole to assume the CrossAccountBackupRole. Option A is wrong because it's not a permissions policy for S3. Option B is wrong because it allows cross-account access, not blocking. Option C is wrong because it does not grant direct S3 access; only allows sts:AssumeRole.

Answer

The SAPAdminRole directly receives permissions to access S3.

Answer

The CrossAccountBackupRole can be assumed by any IAM user.

Answer

The SAPAdminRole can list S3 buckets in account 123456789012.

Question 4

Which TWO AWS services can be used to create a private, low-latency network connection between an on-premises data center and an SAP environment on AWS? (Choose two.)

Accepted Answer

AWS Site-to-Site VPN. Options A and C are correct. AWS Direct Connect provides a dedicated private connection, and AWS VPN provides encrypted tunnels over the internet. Option B is wrong because VPC peering is for VPC-to-VPC. Option D is wrong because AWS Transit Gateway is a hub for multiple VPCs, not a direct connection. Option E is wrong because PrivateLink is for service access within VPC.

Answer

VPC peering

Answer

AWS Transit Gateway

Answer

AWS PrivateLink

Question 5

Which THREE factors should be considered when choosing an EC2 instance type for an SAP HANA production system? (Choose three.)

Accepted Answer

The instance type must be certified by SAP for HANA.. Options A, C, and D are correct. SAP HANA requires certified instance types (A), sufficient memory (C), and high network bandwidth (D). Option B is wrong because HANA uses dedicated storage, not instance store. Option E is wrong because GPU is not required for standard HANA.

Answer

The instance type should include instance store volumes for data persistence.

Answer

The instance must include GPU acceleration for HANA operations.

Question 6

Which TWO AWS services can be used to automate the backup of SAP HANA databases? (Choose two.)

Accepted Answer

AWS Backup. Options A and B are correct. AWS Backup can automate EBS snapshots, and SAP HANA Backint with S3 can perform database-level backups. Option C is wrong because Lambda is not a backup service. Option D is wrong because RDS is for relational databases, not HANA. Option E is wrong because Storage Gateway is for on-premises backup.

Answer

Amazon RDS

Answer

AWS Lambda

Answer

AWS Storage Gateway

Question 7

A company is running a critical SAP application on SAP HANA in an AWS Single-AZ deployment. The application has experienced downtime twice in the last month due to underlying hardware failures. What is the MOST cost-effective solution to minimize future downtime without compromising performance?

Accepted Answer

Deploy the SAP HANA database in a Multi-AZ configuration using AWS services like Multi-AZ DB instance for SAP HANA.. Option A is correct because Multi-AZ deployment provides high availability by replicating data across Availability Zones, reducing downtime from hardware failures without needing additional SAP licenses. Option B (upgrading instance size) does not address AZ-level failures. Option C (manual snapshots) introduces longer recovery time. Option D (Dedicated Hosts) provides hardware isolation but still single-AZ.

Answer

Move the SAP HANA instance to a larger instance type to improve hardware reliability.

Answer

Use Dedicated Hosts to ensure physical isolation from other AWS customers.

Answer

Implement automated snapshots of the SAP HANA data volume and restore in case of failure.

Question 8

An SAP Basis administrator needs to migrate an on-premises SAP ERP system running on Oracle to AWS. The system has a 2 TB database and requires minimal downtime (less than 1 hour). The current on-premises network bandwidth to AWS is 1 Gbps. Which migration strategy is MOST appropriate?

Accepted Answer

Use AWS Database Migration Service (DMS) with ongoing replication from Oracle to Amazon RDS for Oracle, then perform a final cutover.. Option B is correct because AWS DMS can perform ongoing replication to keep the target in sync, then a short cutover achieves <1 hour downtime. Option A (AWS MGN) is for server-level replication, not optimized for database migration with minimal downtime. Option C (SAP HSR) is specific to SAP HANA. Option D (SAP DMO) is a methodology but typically used for system copy or upgrade, not real-time replication.

Answer

Export the database using SAP HANA System Replication (HSR) to an Amazon EC2 instance with HANA.

Answer

Perform a manual export/import using Oracle Data Pump and transfer the dump file via AWS Direct Connect.

Answer

Use AWS Application Migration Service (MGN) to replicate the entire server to AWS, then cut over.

Question 9

A company runs its SAP S/4HANA system on AWS using a multi-node HANA scale-out configuration. After a recent OS update, the application layer cannot connect to the HANA database. The HANA database processes are running, but the SAP application servers report 'communication failure' errors. Initial checks show that the security group rules allow traffic on the required ports. What is the MOST likely cause of the issue?

Accepted Answer

The OS update has reset the iptables firewall rules, blocking internal HANA ports.. Option D is correct because after OS updates, the firewall (iptables) rules may be reset or changed, blocking HANA internal communication even if security groups are correct. Option A (incorrect SAP license) would cause license errors, not communication failure. Option B (incorrect DNS resolution) is possible but less likely if hostnames are in /etc/hosts. Option C (NTP synchronization) would affect time, not connectivity.

Answer

The DNS resolution is misconfigured after the OS update, causing hostname lookup failures.

Answer

The NTP synchronization is off, causing time drift and authentication errors.

Answer

The SAP system is not correctly licensed for the new OS version.

Question 10

An organization wants to ensure that its SAP HANA database backups are stored in a separate AWS Region for disaster recovery. The backups are currently stored in Amazon S3 in the primary Region. Which AWS service should be used to replicate the backups to another Region automatically?

Accepted Answer

Amazon S3 Cross-Region Replication (CRR).. Option C is correct because S3 Cross-Region Replication is designed to automatically replicate objects to a destination bucket in another Region. Option A (AWS Backup) can copy backups but is not S3-specific and requires additional setup. Option B (S3 Transfer Acceleration) speeds up uploads but does not replicate. Option D (AWS Storage Gateway) is for on-premises integration.

Answer

AWS Storage Gateway with volume gateway.

Answer

AWS Backup with a cross-region backup plan.

Answer

Amazon S3 Transfer Acceleration.

Question 11

A company is planning to run SAP BusinessObjects (BOBJ) on AWS. The application servers require consistent low-latency access to a shared file system for storing reports and configuration files. Which AWS storage solution is BEST suited for this requirement?

Accepted Answer

Amazon Elastic File System (Amazon EFS).. Option A is correct because Amazon EFS provides a fully managed NFS file system that is accessible from multiple EC2 instances with low latency, suitable for shared file storage. Option B (S3) is object storage, not a file system. Option C (EBS) is block storage attached to a single instance. Option D (FSx for Windows) is for Windows-based workloads, but BOBJ typically runs on Linux.

Answer

Amazon Elastic Block Store (Amazon EBS) with a multi-attach enabled volume.

Answer

Amazon Simple Storage Service (Amazon S3).

Answer

Amazon FSx for Windows File Server.

Question 12

An SAP administrator notices that the SAP HANA database performance has degraded significantly during peak hours. The HANA instance is running on an r5.8xlarge EC2 instance with EBS gp2 volumes. Monitoring shows high I/O wait times on the data volume. Which change is MOST likely to improve performance?

Accepted Answer

Use Amazon EBS io2 Block Express volumes with high IOPS.. Option D is correct because switching to io2 volumes with provisioned IOPS provides consistent low-latency I/O, solving high I/O wait. Option A (increasing instance size) may not address I/O bottleneck. Option B (gp3) is better than gp2 but still burstable. Option C (enable Multi-AZ) does not improve I/O performance.

Answer

Enable Multi-AZ deployment for SAP HANA.

Answer

Upgrade the EC2 instance to a larger size like r5.16xlarge.

Answer

Change the EBS volume type from gp2 to gp3 with 3000 IOPS.

Question 13

A company is migrating its SAP landscape to AWS and wants to ensure that all SAP systems can communicate with each other using private IP addresses only. The systems are deployed in multiple VPCs. Which AWS solution should be used to enable private connectivity between these VPCs?

Accepted Answer

VPC Peering.. Option B is correct because VPC Peering allows direct private IP connectivity between VPCs. Option A (VPN) is used for on-premises to VPC. Option C (Direct Connect) is for dedicated connection to on-premises. Option D (VPC Endpoint) is for accessing AWS services privately.

Answer

VPC Endpoints.

Answer

AWS Site-to-Site VPN.

Answer

AWS Direct Connect.

Question 14

An SAP system uses a custom RFC destination to an external SOAP web service. After a recent network change, the RFC call fails with a timeout error. The SAP administrator has verified that the web service is reachable from the SAP application server using ping. What is the MOST likely cause of the timeout?

Accepted Answer

A firewall between the application server and the web service is blocking the required port.. Option C is correct because the firewall might block the specific port used by the SOAP service (e.g., 443 or 8080) even if ICMP (ping) is allowed. Option A (DNS) is unlikely if ping works. Option B (SAP router) is not involved. Option D (SSL certificate) would cause a different error (e.g., certificate validation failure).

Answer

The DNS resolution is incorrect for the web service hostname.

Answer

The SAP router configuration is blocking the connection.

Answer

The SSL certificate of the web service has expired.

Question 15

A company runs SAP HANA on AWS using a scale-up configuration. The system is experiencing high CPU utilization on the HANA server during peak load. The SAP administrator wants to add more CPU resources without disruption. Which action should be taken?

Accepted Answer

Add an additional HANA node to create a scale-out configuration and distribute the load.. Option B is correct because resizing an EC2 instance (changing the instance type) requires stopping the instance, which causes disruption. HANA scale-out (adding nodes) can be done online with HANA system replication, but requires additional instances. Option A (change instance type) requires stop/start. Option C (add EBS) does not add CPU. Option D (multi-AZ) is for HA.

Answer

Enable Multi-AZ deployment for high availability.

Answer

Change the EC2 instance type to a larger size using the AWS Management Console.

Answer

Increase the provisioned IOPS on the EBS volumes.

PAS-C01 Technology Practice Test 7 — 15 Questions

Exhibit

PAS-C01 Technology Practice Test 7 — 15 Questions

Exhibit