PAS-C01 Design of SAP Workloads on AWS Practice Test 10 — 15 Questions

Question 1

An SAP administrator is creating an IAM policy for an automation script that needs to start and stop a specific SAP HANA EC2 instance. The policy is shown in the exhibit. However, the script fails with an authorization error when trying to start the instance. What is the most likely cause?

Accepted Answer

The ARN in the resource element does not match the actual instance ID.. The policy uses a resource ARN that specifies a particular instance ID. If the ARN does not match the actual instance ID of the SAP HANA EC2 instance, the `ec2:StartInstances` action will fail with an authorization error because IAM evaluates the resource ARN against the instance being started. AWS IAM policies require an exact match between the resource ARN in the policy and the instance ID for actions that operate on specific resources.

Answer

The policy is missing an effect for the specific instance.

Answer

The policy does not include ec2:DescribeInstances action.

Answer

The script does not have the correct region specified.

Question 2

An SAP administrator runs the AWS CLI command shown in the exhibit to check the configuration of an SAP HANA EC2 instance. The instance is running in us-east-1a. They need to deploy a second SAP HANA instance for high availability in a different Availability Zone. Which Availability Zone should be used?

Accepted Answer

us-east-1b. Option B is correct because for SAP HANA high availability, the secondary instance must be deployed in a different Availability Zone within the same AWS Region to achieve multi-AZ resilience. Since the primary instance is in us-east-1a, the correct choice is us-east-1b, which is a distinct Availability Zone in the same region (us-east-1). This ensures low-latency replication and compliance with SAP's requirement for synchronous replication within a single region.

Answer

us-west-2a

Answer

Any Availability Zone

Answer

us-east-1a

Question 3

An SAP administrator configures SAP HANA backup using Backint as shown in the exhibit. The backup job fails with an error indicating that the bucket 'sap-hana-backup-prod' does not exist. The administrator confirms that the bucket name is correct. What is the most likely cause of the failure?

Accepted Answer

The bucket is in a different AWS region than the EC2 instance.. The SAP HANA Backint agent communicates with Amazon S3 using the AWS SDK, which resolves the bucket endpoint based on the region configured in the agent or the instance metadata. If the bucket 'sap-hana-backup-prod' exists in a different AWS region than the EC2 instance, the Backint agent will attempt to access the bucket using the wrong regional endpoint, resulting in a 'bucket does not exist' error. This is a common misconfiguration when the Backint parameter file does not explicitly set the correct region or when the instance's default region differs from the bucket's region.

Answer

The IAM role used by the instance does not have s3:PutObject permission.

Answer

The chunk size is too large for the bucket.

Answer

The bucket has a bucket policy that denies access.

Question 4

A company is designing an SAP HANA multi-node scale-out deployment on AWS. The system requires high bandwidth and low latency between nodes. Which AWS networking feature should be used to meet these requirements?

Accepted Answer

Elastic Fabric Adapter (EFA). Elastic Fabric Adapter (EFA) is correct because it provides OS-bypass capabilities using the Libfabric API, enabling direct memory access (DMA) between SAP HANA nodes. This eliminates kernel overhead, delivering the high bandwidth (up to 100 Gbps per adapter) and ultra-low latency (microsecond-level) required for SAP HANA multi-node scale-out workloads, where inter-node communication is critical for table partitioning and data replication.

Answer

AWS Direct Connect

Answer

Transit Gateway

Answer

VPC Peering

Question 5

An SAP application on AWS is experiencing high network latency and packet loss between the SAP application server and the SAP HANA database. The application and database are in the same AWS Region and Availability Zone. What is the most likely cause?

Accepted Answer

TCP segmentation offloading (TSO) is enabled on the HANA database instance.. C is correct because TCP segmentation offloading (TSO) on the HANA database instance can cause the network interface to deliver oversized TCP segments to the SAP application server, which may not handle them correctly, leading to packet loss and high latency. This is a known issue in SAP on AWS environments where TSO offloads segmentation to the NIC, but if the receiving side lacks proper support or the network path has MTU mismatches, fragmentation and retransmissions occur.

Answer

Jumbo frames are enabled on the application server but not on the database server.

Answer

The instances are not in a placement group.

Answer

The Elastic Network Adapter (ENA) driver is not installed.

Question 6

A company is migrating an SAP S/4HANA system to AWS and needs to choose the storage for the HANA database. The database requires high IOPS and low latency. Which AWS storage solution is most suitable?

Accepted Answer

Amazon EBS io2 Block Express volumes. Amazon EBS io2 Block Express volumes are designed for mission-critical SAP HANA workloads, offering up to 256,000 IOPS per volume and sub-millisecond latency. They provide 99.999% durability and are the only EBS volume type certified by SAP for production HANA databases on AWS, meeting the high IOPS and low latency requirements.

Answer

Amazon EFS

Answer

Amazon S3

Answer

Amazon EBS st1 volumes

Question 7

An SAP NetWeaver system on AWS needs to be highly available across two Availability Zones. Which AWS service should be used to manage the floating IP address used by the SAP application servers?

Accepted Answer

Amazon Route 53 with failover routing. Amazon Route 53 with failover routing is the correct choice because it can manage a floating IP address by using DNS health checks to automatically route traffic to the healthy SAP application server in the active Availability Zone. When the primary server fails, Route 53 updates DNS resolution to point to the secondary server's IP, effectively providing a floating IP mechanism without requiring a static IP reassignment.

Answer

VPC Peering

Answer

AWS Global Accelerator

Answer

Elastic IP address

Question 8

A company runs SAP HANA on AWS and wants to implement a disaster recovery (DR) strategy with a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 2 hours. Which solution meets these requirements?

Accepted Answer

Use AWS Elastic Disaster Recovery (DRS) to replicate the HANA server to the DR region.. AWS Elastic Disaster Recovery (DRS) provides continuous block-level replication of the entire SAP HANA server, including OS, application, and data volumes, with sub-minute RPO and RTO of minutes to hours. This meets the 15-minute RPO and 2-hour RTO requirements by enabling rapid failover to a fully provisioned instance in the DR region without manual scaling or data loss from periodic snapshots.

Answer

Configure HANA System Replication (HSR) to a small instance in the DR region and scale up on failover.

Answer

Take daily EBS snapshots of the HANA data volumes and copy them to the DR region.

Answer

Use AWS Database Migration Service (DMS) to replicate HANA to an RDS instance in the DR region.

Question 9

An SAP customer wants to reduce the cost of running a non-production SAP system on AWS. The system is used only during business hours (8 AM to 6 PM) on weekdays. What is the most cost-effective solution?

Accepted Answer

Use AWS Instance Scheduler to stop instances outside business hours.. Option A is correct because using AWS Instance Scheduler automates starting and stopping instances on a schedule. Option B is wrong because Reserved Instances are for steady state, not for intermittent use. Option C is wrong because Savings Plans are also for consistent usage. Option D is wrong because On-Demand with no scheduling does not reduce cost.

Answer

Purchase Reserved Instances for 1-year term.

Answer

Purchase Compute Savings Plans for 3-year term.

Answer

Run the instances as On-Demand without any schedule.

Question 10

A company is deploying SAP S/4HANA on AWS and needs to ensure that the database and application servers are in the same placement group to minimize latency. However, the instance types required for the HANA database are not available in the same placement group due to insufficient capacity. What should the company do to maintain low latency?

Accepted Answer

Use a spread placement group instead of a cluster placement group.. A spread placement group is the correct choice because it spreads instances across distinct underlying hardware, reducing the risk of correlated failures while still keeping them in the same Availability Zone to minimize latency. Unlike a cluster placement group, which requires all instances to be on the same rack and can suffer from capacity constraints, a spread placement group does not enforce a single rack placement, so it can accommodate different instance types even when the cluster placement group lacks capacity. This ensures low latency for SAP S/4HANA communication between database and application servers without violating placement group constraints.

Answer

Place all instances in the same Availability Zone without a placement group.

Answer

Use a different instance type for the database that is available in the placement group.

Answer

Place the database in a different AWS Region and use AWS Direct Connect.

Question 11

An SAP system on AWS is experiencing performance degradation. The CloudWatch metrics show that the EBS volumes used for the HANA data files have an average queue length of 10 and average latency of 50 ms. What is the most likely cause?

Accepted Answer

The EBS volume's provisioned IOPS are insufficient for the workload.. An average EBS queue length of 10 and average latency of 50 ms indicate that the volume is saturated with I/O requests. The queue length persistently exceeds the recommended threshold (typically <1 for optimal performance), and latency spikes above the 1–10 ms range for gp3 or io2 volumes. This directly points to insufficient provisioned IOPS for the SAP HANA workload, causing requests to queue up and wait for service.

Answer

EBS encryption is causing additional overhead.

Answer

EBS snapshots are being taken too frequently.

Answer

EBS optimization is not enabled on the instance.

Question 12

A company wants to implement a backup strategy for SAP HANA on AWS. The backup must be stored securely and be accessible for restore to a different AWS Region. Which combination of AWS services should be used?

Accepted Answer

Use AWS Backup with cross-region backup copy. AWS Backup with cross-region backup copy is the correct choice because it provides a fully managed, policy-driven backup service that natively supports SAP HANA on Amazon EC2, including automated cross-region copy for disaster recovery. This ensures backups are stored securely (encrypted at rest and in transit) and can be restored in a different AWS Region without manual intervention.

Answer

Take EBS snapshots and copy them to another region

Answer

Store HANA backups in Amazon S3 Standard-IA

Answer

Use Amazon S3 Glacier Deep Archive

Question 13

Which TWO of the following are recommended best practices for running SAP HANA on AWS? (Choose two.)

Accepted Answer

Enable multi-attach on EBS volumes for HANA shared storage in scale-out. Option C is correct because SAP HANA scale-out configurations require shared storage for /hana/shared, and EBS multi-attach allows multiple EC2 instances to concurrently access the same EBS volume, which is necessary for the shared file system. Option D is correct because EBS io2 Block Express volumes provide the high IOPS, low latency, and consistent performance required for SAP HANA data and log volumes, meeting SAP's storage performance recommendations.

Answer

Install HANA on a separate EBS volume mounted under /hana/data

Answer

Configure swap space on the instance to handle memory pressure

Answer

Change the hostname after the HANA installation to match the DNS name

Question 14

Which THREE of the following are valid considerations for designing SAP workloads on AWS to achieve high availability within a single AWS Region? (Choose three.)

Accepted Answer

Use a cluster with a shared file system (e.g., Amazon EFS or FSx) for SAP ASCS. Option C is correct because SAP ASCS (ABAP Central Services) requires a shared file system for the global transport directory and instance profiles to enable failover between cluster nodes. Amazon EFS or FSx for NetApp ONTAP provide the necessary NFS-based shared storage that supports the SAP enqueue replication and message server services during a failover event.

Answer

Use AWS Network Load Balancer (NLB) for SAP Enqueue Replication 2 (ENSA2)

Answer

Use HANA scale-out with HSR across two nodes for high availability

Question 15

Which TWO of the following are valid methods to monitor SAP HANA performance on AWS? (Choose two.)

Accepted Answer

SAP HANA Studio. SAP HANA Studio is a native SAP tool that provides direct access to HANA system performance metrics, including memory usage, CPU load, and query execution times, via SQL and MDX connections. It is a valid method for monitoring SAP HANA performance because it interfaces directly with the HANA database's internal monitoring views and does not rely on AWS infrastructure.

Answer

AWS Config

Answer

Amazon Inspector

Answer

AWS Trusted Advisor

PAS-C01 Design of SAP Workloads on AWS Practice Test 10 — 15 Questions

Exhibit

PAS-C01 Design of SAP Workloads on AWS Practice Test 10 — 15 Questions

Exhibit