PAS-C01 Technology Practice Test 8 — 15 Questions

Question 1

A company is designing an SAP HANA disaster recovery solution on AWS. The primary system is in us-east-1, and the DR system must be in us-west-2. The RPO is 15 minutes, and RTO is 1 hour. Which TWO approaches meet these requirements? (Choose TWO.)

Accepted Answer

Use AWS Database Migration Service (DMS) with ongoing replication from the primary HANA database to a target HANA database in us-west-2.. Option A and Option D are correct. SAP HANA System Replication provides synchronous or asynchronous replication with low RPO. Cross-Region replication to us-west-2 meets RPO of 15 minutes. AWS DMS can also replicate HANA data with ongoing replication, achieving low RPO. Option B (S3 CRR) is for object replication, not HANA. Option C (EBS snapshots) cannot achieve 15-minute RPO due to frequency. Option E (Application Migration Service) is for server replication but RPO may not be as low.

Answer

Take EBS snapshots of HANA data volumes every 15 minutes and copy them to us-west-2.

Answer

Use Amazon S3 Cross-Region Replication to copy HANA backup files to us-west-2.

Answer

Use AWS Application Migration Service (MGN) to replicate the entire HANA server to us-west-2.

Question 2

An SAP system running on AWS is experiencing high latency in the application layer. The system uses a load balancer to distribute traffic across multiple EC2 instances. Which THREE actions could help diagnose the latency issue? (Choose THREE.)

Accepted Answer

Monitor the EC2 instance CPU and memory utilization using Amazon CloudWatch metrics.. Options A, B, and D are correct. CloudWatch metrics help identify resource bottlenecks. ALB access logs show request-level details. Detailed monitoring provides high-resolution metrics. Option C (VPC Flow Logs) helps with network analysis but not application latency. Option E (AWS Config) tracks configuration changes, not performance.

Answer

Check AWS Config rules for any non-compliant resources.

Answer

Review VPC Flow Logs to check for packet loss or throttling.

Question 3

A company is planning to run SAP NetWeaver on AWS and needs to ensure that the system is highly available. Which TWO AWS services should be combined to achieve HA for the SAP central services (ASCS/SCS) and the database? (Choose TWO.)

Accepted Answer

Elastic Load Balancing (ELB) to distribute traffic across multiple application server instances.. Options A and B are correct. Elastic Load Balancing distributes traffic to multiple application servers. EC2 Auto Recovery automatically recovers an instance from hardware failure. Option C (S3) is for storage. Option D (CloudFront) is a CDN. Option E (Route 53) is for DNS, not HA for services.

Answer

Amazon CloudFront to cache static content.

Answer

Amazon S3 to store the SAP system configuration files.

Answer

Amazon Route 53 health checks with failover routing.

Question 4

An SAP administrator created the IAM policy shown in the exhibit. When trying to terminate an EC2 instance with ID i-abc123 in us-west-2, the action fails. What is the reason?

Accepted Answer

The ec2:TerminateInstances action is restricted to instances in us-east-1 only.. Option B is correct because the TerminateInstances action is restricted to a specific resource ARN that includes the region us-east-1 and account 123456789012. The instance i-abc123 in us-west-2 does not match that ARN, so the action is denied. Option A is incorrect because StartInstances and StopInstances are allowed on all resources. Option C is incorrect because the condition key is not used. Option D is incorrect because the policy does not have a Deny effect.

Answer

There is an implicit Deny for all actions not explicitly allowed.

Answer

The policy is missing a condition key to allow termination in us-west-2.

Answer

The ec2:StartInstances and ec2:StopInstances actions are not granted for the specific instance.

Question 5

An SAP administrator runs the AWS CLI command shown in the exhibit. The SAP HANA instance is running on an r5.4xlarge in us-east-1a. The administrator wants to change the instance type to r5.8xlarge to improve performance. What must the administrator do first?

Accepted Answer

Stop the instance from the AWS Management Console.. Option D is correct. To change the instance type, the instance must be in the stopped state. Option A is incorrect because you cannot change instance type while running. Option B is incorrect because r5.4xlarge and r5.8xlarge are in the same instance family. Option C is incorrect because you can change instance type to any size within the same family without re-attaching volumes.

Answer

Create an AMI of the instance and launch a new instance with the larger type.

Answer

Detach the EBS volumes and attach them to a new instance.

Answer

Modify the instance type in the instance settings while it is running.

Question 6

An SAP HANA administrator sees the error log entry shown in the exhibit. The error occurs when a scheduled job tries to insert data into the BKPF table. What is the MOST likely cause?

Accepted Answer

The credentials used by the scheduled job are incorrect.. Option C is correct because the error message clearly states 'authentication failed: invalid user or password'. Option A is incorrect because there is no indication of missing privileges. Option B is incorrect because the error is not about table space. Option D is incorrect because the statement is an INSERT, not a SELECT.

Answer

The user does not have INSERT privilege on the BKPF table.

Answer

The SQL statement has a syntax error.

Answer

The table BKPF is full and cannot accept new rows.

Question 7

A company is running an SAP HANA database on an Amazon EC2 instance. The storage is configured with multiple EBS volumes striped using LVM. The company wants to ensure the database performance is consistent and can detect potential bottlenecks. Which AWS service should be used to monitor the EBS volume metrics such as Average Queue Length and Throughput?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch provides metrics for EBS volumes including Average Queue Length (VolumeQueueLength) and Throughput (VolumeReadBytes/VolumeWriteBytes). Option A is correct. AWS CloudTrail records API calls, not performance metrics. AWS Trusted Advisor provides best-practice checks but not detailed EBS metrics. Amazon Inspector is for security assessments.

Answer

AWS Trusted Advisor

Answer

Amazon Inspector

Answer

AWS CloudTrail

Question 8

A company is migrating its SAP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS/ERS) instance. The solution must support automatic failover in case of an instance failure. Which AWS service should be used to manage the floating IP address required for the SAP high availability setup?

Accepted Answer

Amazon Route 53. Amazon Route 53 with health checks and failover routing can be used to manage a DNS-based floating IP. Option B is correct. Elastic IP addresses are static public IPs but do not automatically reassign on instance failure without custom scripting. AWS Global Accelerator provides static IP addresses but is designed for traffic optimization, not SAP HA failover. Amazon CloudFront is a CDN service.

Answer

Elastic IP address

Answer

Amazon CloudFront

Answer

AWS Global Accelerator

Question 9

A company runs SAP on AWS and uses a Multi-AZ RDS for SAP HANA as the database. The database instance is m5.8xlarge with 1000 GB of gp2 storage. The application team reports that write latency spikes during peak hours. The average write throughput is 200 MB/s. Which change would most effectively reduce write latency?

Accepted Answer

Change the volume type to Provisioned IOPS (io1 or io2). gp2 volumes have a baseline of 3 IOPS per GB. 1000 GB provides 3000 IOPS baseline. Burst balance depletes if sustained IOPS exceed baseline. The maximum throughput for gp2 is 250 MB/s, but 200 MB/s is high. Provisioned IOPS (io1/io2) provides consistent performance and higher throughput. Option B is correct. Increasing volume size would increase baseline but may not be cost-effective. Changing to st1 is throughput-optimized but not for HANA. Enabling Auto Scaling only increases size when burst credits depleted but still uses gp2.

Answer

Increase the volume size to 2000 GB

Answer

Enable EBS Auto Scaling on the volume

Answer

Change the volume type to Throughput Optimized (st1)

Question 10

A company is implementing SAP HANA on AWS and needs to ensure that the storage configuration meets the required IOPS and throughput. The SAP HANA system uses a scale-out architecture with multiple worker nodes. Which type of Amazon EBS volume is recommended for the /hana/data and /hana/log volumes in a production environment?

Accepted Answer

Provisioned IOPS SSD (io1 or io2). For SAP HANA, AWS recommends Provisioned IOPS (io1 or io2) volumes for /hana/data and /hana/log to ensure consistent high performance. Option B is correct. gp2/gp3 are burstable and may not sustain required performance. st1/sc1 are throughput-optimized and not suitable for HANA data or log.

Answer

Throughput Optimized HDD (st1)

Answer

General Purpose SSD (gp2 or gp3)

Answer

Cold HDD (sc1)

Question 11

A company is running SAP on AWS and needs to back up the SAP HANA database daily. The database is 1 TB in size and the backup must be completed within 2 hours. The backup will be stored in Amazon S3. Which approach provides the fastest backup time while minimizing cost?

Accepted Answer

Use the SAP HANA Backint agent to stream backups directly to S3. Storing backups directly to S3 via the SAP HANA Backint interface using an AWS Backint agent is the fastest and most cost-effective method. Option C is correct. EBS snapshots are slower for database backup and require additional steps. Using EC2 instance store is not durable. NFS on EFS adds latency.

Answer

Copy the backup files to an EC2 instance store, then upload to S3

Answer

Take EBS snapshots of the volume

Answer

Mount an Amazon EFS file system and write backups to it

Question 12

A company is designing a disaster recovery (DR) strategy for SAP on AWS. The primary region is us-east-1 and the DR region is us-west-2. The SAP HANA database is 2 TB. The recovery point objective (RPO) is 15 minutes and the recovery time objective (RTO) is 4 hours. Which solution meets these requirements most cost-effectively?

Accepted Answer

HANA System Replication in asynchronous mode. HANA system replication in sync mode over a reasonable distance (us-east-1 to us-west-2) can achieve sub-15 minute RPO. However, latency may cause performance impact. Async mode is typically used for long distance. Option A (HANA System Replication in async mode) meets RPO and RTO cost-effectively. Option B (sync mode) may not be feasible due to latency. Option C (EBS snapshots) has higher RPO. Option D (RTO too high).

Answer

HANA System Replication in synchronous mode

Answer

Log shipping to an S3 bucket in DR region

Answer

EBS snapshot replication to DR region using AWS Backup

Question 13

A company is deploying SAP NetWeaver on AWS and needs to configure the SAP application server instances for high availability. Which AWS feature is used to distribute traffic across multiple application server instances in different Availability Zones?

Accepted Answer

Application Load Balancer. An Application Load Balancer (ALB) can distribute HTTP/HTTPS traffic across multiple targets in different AZs. Option D is correct. Route 53 is a DNS service, not a load balancer. NAT Gateway is for outbound traffic. Auto Scaling groups manage instance count, not traffic distribution.

Answer

Auto Scaling group

Answer

Amazon Route 53 weighted routing

Answer

NAT Gateway

Question 14

A company is running SAP HANA on a bare metal EC2 instance. The system experiences a hardware failure that causes an instance stop. The company needs to recover the instance quickly. What should the company do to minimize recovery time?

Accepted Answer

Configure an Amazon CloudWatch alarm to automatically recover the instance. For bare metal instances, automatic recovery via CloudWatch alarm can restart the instance on healthy hardware if the instance is configured with an Elastic IP or is part of an ASG. Option B is correct. Manual restart (A) is slower. EBS snapshots (C) require restore time. Changing to a virtualized instance (D) may not be immediate.

Answer

Use AWS CloudFormation to recreate the instance

Answer

Manually start the instance from the EC2 console

Answer

Restore the instance from the latest EBS snapshot

Question 15

A company is running SAP on AWS and wants to implement encryption at rest for all data. The company uses AWS KMS with Customer Managed Keys (CMKs) for the EBS volumes. The SAP application servers need to access an S3 bucket that contains sensitive data. How should the company ensure that the S3 bucket is encrypted with the same CMK?

Accepted Answer

Configure the S3 bucket to use SSE-KMS with the same CMK. S3 supports server-side encryption with KMS keys (SSE-KMS). To use the same CMK, the S3 bucket must be configured with SSE-KMS and the key must be specified. Option A is correct. Default encryption (B) may use a different KMS key. Bucket policy (C) can enforce encryption but not specify the key. Client-side encryption (D) uses client-managed keys.

Answer

Use client-side encryption before uploading to S3

Answer

Add a bucket policy that denies if encryption is not present

Answer

Enable default encryption on the S3 bucket with SSE-S3