PAS-C01 Technology Practice Test 9 — 15 Questions

Question 1

An SAP system uses a custom RFC destination to an external SOAP web service. After a recent network change, the RFC call fails with a timeout error. The SAP administrator has verified that the web service is reachable from the SAP application server using ping. What is the MOST likely cause of the timeout?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

A firewall between the application server and the web service is blocking the required port.. The RFC call uses a specific port (e.g., 443 for HTTPS or 80 for HTTP) to communicate with the SOAP web service. A firewall blocking that port would cause a timeout, as the ping test (ICMP) succeeds but the TCP handshake on the required port fails. The SAP administrator's verification of reachability via ping only confirms ICMP-level connectivity, not application-layer port access.

Answer

The DNS resolution is incorrect for the web service hostname.

Answer

The SAP router configuration is blocking the connection.

Answer

The SSL certificate of the web service has expired.

Question 2

A company runs SAP HANA on AWS using a scale-up configuration. The system is experiencing high CPU utilization on the HANA server during peak load. The SAP administrator wants to add more CPU resources without disruption. Which action should be taken?

Accepted Answer

Add an additional HANA node to create a scale-out configuration and distribute the load.. Adding an additional HANA node to create a scale-out configuration allows the system to distribute the workload across multiple nodes, providing additional CPU resources without downtime. SAP HANA supports scale-out configurations where new nodes can be added online using the 'ALTER SYSTEM ADD WORKER' command, enabling CPU scaling without restarting the existing system.

Answer

Enable Multi-AZ deployment for high availability.

Answer

Change the EC2 instance type to a larger size using the AWS Management Console.

Answer

Increase the provisioned IOPS on the EBS volumes.

Question 3

A company is designing an SAP HANA disaster recovery solution on AWS. The primary system is in us-east-1, and the DR system must be in us-west-2. The RPO is 15 minutes, and RTO is 1 hour. Which TWO approaches meet these requirements? (Choose TWO.)

Accepted Answer

Use AWS Database Migration Service (DMS) with ongoing replication from the primary HANA database to a target HANA database in us-west-2.. AWS DMS with ongoing replication can capture and apply changes from the primary SAP HANA database to a target HANA database in us-west-2 with low latency, supporting an RPO of 15 minutes. DMS uses log-based CDC (Change Data Capture) to replicate transactions continuously, making it suitable for near-real-time replication. This approach meets the RTO of 1 hour because the target database can be promoted quickly.

Answer

Take EBS snapshots of HANA data volumes every 15 minutes and copy them to us-west-2.

Answer

Use Amazon S3 Cross-Region Replication to copy HANA backup files to us-west-2.

Answer

Use AWS Application Migration Service (MGN) to replicate the entire HANA server to us-west-2.

Question 4

An SAP system running on AWS is experiencing high latency in the application layer. The system uses a load balancer to distribute traffic across multiple EC2 instances. Which THREE actions could help diagnose the latency issue? (Choose THREE.)

Accepted Answer

Monitor the EC2 instance CPU and memory utilization using Amazon CloudWatch metrics.. High application-layer latency in an SAP system on AWS can stem from insufficient CPU or memory resources on the EC2 instances. Amazon CloudWatch metrics for CPU utilization and memory utilization (via the CloudWatch agent) directly reveal whether the instances are resource-constrained, which is a common cause of slow request processing. Monitoring these metrics helps isolate whether the latency is due to compute bottlenecks rather than network or load balancer issues.

Answer

Check AWS Config rules for any non-compliant resources.

Answer

Review VPC Flow Logs to check for packet loss or throttling.

Question 5

A company is planning to run SAP NetWeaver on AWS and needs to ensure that the system is highly available. Which TWO AWS services should be combined to achieve HA for the SAP central services (ASCS/SCS) and the database? (Choose TWO.)

Accepted Answer

Elastic Load Balancing (ELB) to distribute traffic across multiple application server instances.. Elastic Load Balancing (ELB) is correct because it distributes incoming traffic across multiple SAP application server (AS) instances, ensuring that if one AS fails, the ELB redirects traffic to healthy instances. This provides high availability for the SAP application tier, which is essential for the overall system's resilience.

Answer

Amazon CloudFront to cache static content.

Answer

Amazon S3 to store the SAP system configuration files.

Answer

Amazon Route 53 health checks with failover routing.

Question 6

An SAP administrator created the IAM policy shown in the exhibit. When trying to terminate an EC2 instance with ID i-abc123 in us-west-2, the action fails. What is the reason?

Accepted Answer

The ec2:TerminateInstances action is restricted to instances in us-east-1 only.. The policy includes a condition that restricts the ec2:TerminateInstances action to the us-east-1 region using the ec2:Region condition key. Since the instance i-abc123 is in us-west-2, the condition is not satisfied, causing the action to fail. AWS IAM policies evaluate conditions before allowing an action, and if the condition is not met, the action is denied.

Answer

There is an implicit Deny for all actions not explicitly allowed.

Answer

The policy is missing a condition key to allow termination in us-west-2.

Answer

The ec2:StartInstances and ec2:StopInstances actions are not granted for the specific instance.

Question 7

An SAP administrator runs the AWS CLI command shown in the exhibit. The SAP HANA instance is running on an r5.4xlarge in us-east-1a. The administrator wants to change the instance type to r5.8xlarge to improve performance. What must the administrator do first?

Accepted Answer

Stop the instance from the AWS Management Console.. To change the instance type of an EC2 instance, the instance must first be stopped. While stopped, you can modify the instance type via the AWS Management Console, CLI, or SDK. After the instance is stopped, the administrator can change the type from r5.4xlarge to r5.8xlarge and then start the instance again.

Answer

Create an AMI of the instance and launch a new instance with the larger type.

Answer

Detach the EBS volumes and attach them to a new instance.

Answer

Modify the instance type in the instance settings while it is running.

Question 8

An SAP HANA administrator sees the error log entry shown in the exhibit. The error occurs when a scheduled job tries to insert data into the BKPF table. What is the MOST likely cause?

Accepted Answer

The credentials used by the scheduled job are incorrect.. The error log entry indicates that the scheduled job is failing during an INSERT operation on the BKPF table. In SAP HANA, when a scheduled job fails with an authentication or authorization error, the most common cause is incorrect credentials being used by the job's connection to the database. This is because the job's runtime context does not have the correct user or password to establish a valid session, leading to a failure before any SQL operation is attempted.

Answer

The user does not have INSERT privilege on the BKPF table.

Answer

The SQL statement has a syntax error.

Answer

The table BKPF is full and cannot accept new rows.

Question 9

A company is running an SAP HANA database on an Amazon EC2 instance. The storage is configured with multiple EBS volumes striped using LVM. The company wants to ensure the database performance is consistent and can detect potential bottlenecks. Which AWS service should be used to monitor the EBS volume metrics such as Average Queue Length and Throughput?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch is the correct service because it provides detailed, granular monitoring of EBS volume metrics such as Average Queue Length (AverageQueueLength) and Throughput (VolumeReadBytes/VolumeWriteBytes). These metrics are collected at 1-minute intervals by default for EBS volumes attached to Nitro-based EC2 instances, enabling you to detect performance bottlenecks like high queue depths or throughput saturation. CloudWatch also allows you to set alarms and create dashboards for proactive monitoring of SAP HANA database storage performance.

Answer

AWS Trusted Advisor

Answer

Amazon Inspector

Answer

AWS CloudTrail

Question 10

A company is migrating its SAP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS/ERS) instance. The solution must support automatic failover in case of an instance failure. Which AWS service should be used to manage the floating IP address required for the SAP high availability setup?

Accepted Answer

Amazon Route 53. Amazon Route 53 can be configured with health checks and DNS failover to manage the floating IP address required for SAP Central Services (ASCS/ERS) high availability. When the primary ASCS instance fails, Route 53 automatically updates DNS resolution to point to the secondary instance's IP address, enabling automatic failover without requiring a static floating IP.

Answer

Elastic IP address

Answer

Amazon CloudFront

Answer

AWS Global Accelerator

Question 11

A company is implementing SAP HANA on AWS and needs to ensure that the storage configuration meets the required IOPS and throughput. The SAP HANA system uses a scale-out architecture with multiple worker nodes. Which type of Amazon EBS volume is recommended for the /hana/data and /hana/log volumes in a production environment?

Accepted Answer

Provisioned IOPS SSD (io1 or io2). For SAP HANA production workloads on AWS, the /hana/data and /hana/log volumes require consistent, high IOPS and low latency. Provisioned IOPS SSD (io1 or io2) volumes are recommended because they allow you to specify a guaranteed IOPS rate independent of volume size, meeting SAP's strict performance requirements for scale-out architectures. General Purpose SSD volumes (gp2/gp3) cannot provide the sustained, predictable IOPS needed for critical SAP HANA operations, especially under burst conditions.

Answer

Throughput Optimized HDD (st1)

Answer

General Purpose SSD (gp2 or gp3)

Answer

Cold HDD (sc1)

Question 12

A company is running SAP on AWS and needs to back up the SAP HANA database daily. The database is 1 TB in size and the backup must be completed within 2 hours. The backup will be stored in Amazon S3. Which approach provides the fastest backup time while minimizing cost?

Accepted Answer

Use the SAP HANA Backint agent to stream backups directly to S3. The SAP HANA Backint agent is the native, certified integration for SAP HANA backups to Amazon S3. It streams backup data directly to S3 via the Backint API, eliminating intermediate storage and minimizing data transfer overhead. This approach achieves the fastest backup time because it avoids the latency of writing to instance store, EBS, or EFS before reaching S3, and it incurs only S3 storage costs without additional compute or storage fees.

Answer

Copy the backup files to an EC2 instance store, then upload to S3

Answer

Take EBS snapshots of the volume

Answer

Mount an Amazon EFS file system and write backups to it

Question 13

A company is deploying SAP NetWeaver on AWS and needs to configure the SAP application server instances for high availability. Which AWS feature is used to distribute traffic across multiple application server instances in different Availability Zones?

Accepted Answer

Application Load Balancer. The Application Load Balancer (ALB) is the correct AWS service for distributing traffic across multiple SAP application server instances in different Availability Zones. ALB operates at Layer 7, supports health checks, and can route HTTP/HTTPS traffic to target groups spanning multiple AZs, which is essential for SAP NetWeaver's stateless application layer high availability.

Answer

Auto Scaling group

Answer

Amazon Route 53 weighted routing

Answer

NAT Gateway

Question 14

A company is running SAP HANA on a bare metal EC2 instance. The system experiences a hardware failure that causes an instance stop. The company needs to recover the instance quickly. What should the company do to minimize recovery time?

Accepted Answer

Configure an Amazon CloudWatch alarm to automatically recover the instance. Amazon CloudWatch can automatically recover an impaired EC2 instance by restarting it on new underlying hardware, preserving the instance ID, private IP, Elastic IP, and EBS attachments. This minimizes recovery time by eliminating manual intervention and leveraging AWS's automated recovery mechanism, which is specifically designed for hardware failures on bare metal instances like those running SAP HANA.

Answer

Use AWS CloudFormation to recreate the instance

Answer

Manually start the instance from the EC2 console

Answer

Restore the instance from the latest EBS snapshot

Question 15

A company is running SAP on AWS and wants to implement encryption at rest for all data. The company uses AWS KMS with Customer Managed Keys (CMKs) for the EBS volumes. The SAP application servers need to access an S3 bucket that contains sensitive data. How should the company ensure that the S3 bucket is encrypted with the same CMK?

Accepted Answer

Configure the S3 bucket to use SSE-KMS with the same CMK. SSE-KMS (Server-Side Encryption with AWS KMS) allows you to specify a Customer Managed Key (CMK) to encrypt objects in S3. By configuring the S3 bucket to use the same CMK that is already used for EBS volumes, the company ensures a unified encryption key strategy for all data at rest, meeting the requirement for consistent encryption across services.

Answer

Use client-side encryption before uploading to S3

Answer

Add a bucket policy that denies if encryption is not present

Answer

Enable default encryption on the S3 bucket with SSE-S3