PAS-C01 Design of SAP Workloads on AWS Practice Test 13 — 15 Questions

Question 1

An SAP administrator wants to ensure that the SAP application server can communicate with the HANA database using the private IP address within the same VPC. What configuration is necessary?

Accepted Answer

Configure a security group rule allowing traffic on the HANA database port from the application server's security group.. Within the same VPC, AWS resources can communicate using private IP addresses without internet or VPN connectivity. The key requirement is that the security group attached to the HANA database must allow inbound traffic on the HANA database port (typically 31517 or 30015 for HANA) from the security group associated with the SAP application server. This ensures that only traffic originating from the application server is permitted, maintaining security while enabling private IP communication.

Answer

Attach an Internet Gateway to the VPC.

Answer

Set up a NAT Gateway for the database subnet.

Answer

Establish a VPN connection to the on-premises network.

Question 2

Which TWO of the following are best practices for running SAP HANA on AWS?

Accepted Answer

Deploy the HANA database in multiple Availability Zones for high availability.. Deploying the HANA database in multiple Availability Zones is a best practice for high availability because it protects against an entire AZ failure. SAP HANA supports system replication (HSR) in synchronous or synchronous-memory mode across AZs, enabling automatic failover with minimal data loss. This aligns with the AWS Well-Architected Framework's reliability pillar for critical SAP workloads.

Answer

Use RAID 0 across multiple EBS volumes to increase IOPS.

Answer

Store HANA data and log files on Amazon S3.

Answer

Use burstable instance types for cost savings.

Question 3

Which THREE of the following are valid considerations when designing a SAP landscape on AWS?

Accepted Answer

The EBS volumes for HANA data and logs must be provisioned with the correct IOPS and throughput.. SAP HANA is extremely sensitive to storage performance; EBS volumes for HANA data and log must be provisioned with sufficient IOPS and throughput to meet SAP's documented sizing guidelines. Inadequate IOPS can cause HANA to abort transactions or crash, and AWS allows you to use Provisioned IOPS (io1/io2) or gp3 volumes with custom IOPS and throughput settings to meet these requirements.

Answer

AWS Managed Services (AMS) is mandatory for running SAP on AWS.

Answer

All SAP instances must be launched in a cluster placement group.

Question 4

Which TWO of the following are valid storage options for SAP HANA data files on AWS?

Accepted Answer

Amazon EBS gp3 volumes with sufficient IOPS. Amazon EBS gp3 volumes are a valid storage option for SAP HANA data files because they provide consistent baseline performance of 3,000 IOPS and 125 MB/s throughput, with the ability to provision additional IOPS independently of storage capacity. SAP HANA requires high IOPS and low latency for its data persistence layer, and gp3 volumes meet these requirements when configured with sufficient IOPS, making them a cost-effective choice for many HANA workloads on AWS.

Answer

Amazon S3

Answer

Instance Store volumes

Answer

Amazon EFS

Question 5

An SAP administrator is creating an IAM policy to allow SAP basis users to manage their own SAP EC2 instances. The policy above is intended to allow users to start, stop, and reboot instances tagged with their username. However, users report that they cannot start instances. What is the MOST likely reason?

Accepted Answer

The ec2:StartInstances action does not support resource-level permissions; it requires a separate condition or a wildcard resource.. The ec2:StartInstances action does not support resource-level permissions in IAM policies. This means that even if the policy specifies a condition based on tags, the condition is ignored for StartInstances, and the action will be denied unless the resource element is set to a wildcard ('*'). AWS documentation explicitly states that StartInstances, StopInstances, and RebootInstances require a wildcard resource or a separate condition to allow the action, making option D the correct answer.

Answer

The condition references ${aws:username} which is not available in the context.

Answer

The condition key ec2:ResourceTag/SAPSystem is not valid.

Answer

The actions are not correct for managing instances.

Question 6

An SAP Basis administrator is troubleshooting a performance issue on a SAP HANA database running on an r5.4xlarge instance with dedicated tenancy. The instance is part of a placement group named 'sap-cluster'. The administrator suspects network throughput is suboptimal. Based on the exhibit, what is the MOST likely reason?

Accepted Answer

The instance is using the Xen paravirtual network driver (xen-net) instead of Enhanced Networking with ENA, resulting in suboptimal throughput.. The exhibit shows the network driver is 'xen-net', indicating the instance is using the Xen PV (paravirtual) driver instead of the Elastic Network Adapter (ENA). While the r5.4xlarge instance uses the Nitro hypervisor, launching with an older AMI that lacks ENA support results in the Xen PV driver being used. This driver does not provide the advanced networking features of ENA, leading to suboptimal network throughput. Therefore, the most likely reason is option D, as the instance is effectively using a Xen-based driver configuration that does not support ENA.

Answer

Dedicated tenancy prevents the use of Enhanced Networking.

Answer

The instance type r5.4xlarge does not support Enhanced Networking.

Answer

The placement group 'sap-cluster' restricts network throughput.

Question 7

An SAP administrator is configuring the /hana/data volume for SAP HANA on an EC2 instance. The exhibit shows the /etc/fstab entry. What is the purpose of the 'noatime' mount option?

Accepted Answer

To disable updating the access time on files, improving performance.. The 'noatime' mount option disables the update of inode access timestamps (atime) on every file read. For SAP HANA, which performs high-frequency I/O operations on the /hana/data volume, this eliminates unnecessary metadata writes, reducing disk I/O overhead and improving overall filesystem performance.

Answer

To enable swap space on the volume.

Answer

To enable disk quotas.

Answer

To mount the volume as read-only.

Question 8

A company is migrating its SAP ERP system to AWS and needs to minimize network latency between the SAP application servers and the database. Which AWS service or feature should be used to meet this requirement?

Accepted Answer

Place the application and database servers in the same placement group.. Placement groups in AWS, specifically cluster placement groups, provide low-latency network performance by ensuring that EC2 instances are placed in close physical proximity within a single Availability Zone. This minimizes network latency between SAP application servers and the database, meeting the requirement for high-throughput, low-latency communication critical for SAP ERP workloads.

Answer

Use AWS Global Accelerator for the application servers.

Answer

Set up VPC peering between the application and database VPCs.

Answer

Use an Elastic Load Balancer in front of the application servers.

Question 9

A company runs its SAP HANA database on an EC2 instance with Amazon EBS volumes. The system is experiencing high write latency. The current EBS volume type is gp2. Which change should a solutions architect recommend to improve write performance for the SAP HANA data volume?

Accepted Answer

Use an io2 Block Express volume with sufficient IOPS.. SAP HANA requires consistently low-latency, high-IOPS storage for its data volume. The io2 Block Express volume is the only EBS volume type that can deliver up to 256,000 IOPS per volume with sub-millisecond latency, meeting SAP HANA's demanding performance requirements. In contrast, gp2 volumes have burst limitations and cannot sustain the high write throughput needed for SAP HANA workloads.

Answer

Migrate the data to an instance store volume.

Answer

Change the volume type to gp3 with increased IOPS.

Answer

Use a Throughput Optimized HDD (st1) volume.

Question 10

A company is designing a disaster recovery (DR) strategy for its SAP system on AWS. The primary site is in us-east-1 and the DR site in us-west-2. The RTO is 4 hours and RPO is 1 hour. Which AWS service should be used for cross-region replication of the SAP HANA database backups stored in Amazon S3?

Accepted Answer

Amazon S3 Cross-Region Replication (CRR).. Amazon S3 Cross-Region Replication (CRR) is the correct choice because it automatically replicates objects (including SAP HANA database backups) from a source S3 bucket in us-east-1 to a destination bucket in us-west-2, meeting the 1-hour RPO by ensuring backups are available in the DR region within minutes of upload. CRR operates asynchronously at the object level, requires no additional infrastructure, and directly supports the stated requirement for cross-region replication of S3-stored backups without introducing extra latency or complexity.

Answer

AWS Backup with a cross-region backup plan.

Answer

Use AWS Storage Gateway to replicate backups.

Answer

Enable S3 Versioning on the source bucket.

Question 11

An SAP system on AWS needs to be highly available across multiple Availability Zones (AZs). The SAP Central Services (ASCS) and the database are both critical. Which architecture should be used?

Accepted Answer

Deploy ASCS with a cluster across two AZs, and use HANA System Replication across two AZs.. SAP ASCS requires a cluster (e.g., Pacemaker with SBD fencing) across two AZs to provide failover for the central services, while HANA System Replication (HSR) synchronously replicates the database to a secondary AZ for automatic failover. This dual-cluster architecture ensures both critical components remain highly available, meeting SAP's certified HA patterns on AWS.

Answer

Use an Application Load Balancer to distribute traffic across AZs.

Answer

Place all components in a single AZ to avoid cross-AZ latency.

Answer

Use Amazon RDS Multi-AZ for the database and a single ASCS instance.

Question 12

An SAP system uses Amazon EFS for shared file storage for transport directories. The system is deployed across multiple Availability Zones. Which EFS performance mode is most suitable for this workload?

Accepted Answer

General Purpose performance mode.. General Purpose performance mode is the most suitable for SAP transport directories because it provides the lowest latency for file operations, which is critical for the frequent, small I/O operations typical of SAP transport processes. Max I/O mode, while offering higher throughput for large sequential I/O, introduces higher latency that can degrade SAP performance. General Purpose mode is the default and recommended mode for most EFS workloads, including SAP shared file systems.

Answer

Max I/O performance mode.

Answer

Provisioned Throughput mode.

Answer

Bursting Throughput mode.

Question 13

A company is planning to run SAP NetWeaver on AWS and wants to use Auto Scaling for the application server tier. Which consideration is critical when implementing Auto Scaling for SAP application servers?

Accepted Answer

Automatically register new instances with the SAP Central Services instance.. SAP application servers must be registered with the SAP Central Services instance (ASCS/SCS) to be recognized as part of the SAP system. Auto Scaling can launch new instances, but without automatic registration via sapstartsrv or the SAP Host Agent, the new instances will not be able to communicate with the Central Services instance, and the SAP system will not utilize them for workload.

Answer

Ensure the database can scale automatically with the application tier.

Answer

Enable termination protection on all Auto Scaling instances.

Answer

Use encrypted EBS volumes for all instances.

Question 14

A company has an SAP HANA database on an r5.8xlarge EC2 instance. The database is experiencing high CPU utilization during peak hours. The company wants to improve performance without changing the instance family. Which action should be taken?

Accepted Answer

Scale up to a larger instance size within the r5 family, such as r5.12xlarge.. The r5.8xlarge instance is experiencing high CPU utilization, and the requirement is to improve performance without changing the instance family. Scaling up to a larger instance size within the same r5 family, such as r5.12xlarge, provides more vCPUs and memory while maintaining compatibility with the existing SAP HANA workload and AWS architecture. This approach avoids the complexity of migrating to a different instance family and ensures that the SAP HANA database can leverage additional compute resources directly.

Answer

Change the instance type to x1e.32xlarge for more CPU.

Answer

Use a burstable performance instance like t3.2xlarge.

Answer

Enable CPU hyper-threading on the instance.

Question 15

An SAP system on AWS needs to send alerts when the CPU utilization of the application server exceeds 90% for more than 5 minutes. Which AWS service should be used to set up this monitoring?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch is the correct service because it can monitor CPU utilization metrics for EC2 instances and trigger alarms based on thresholds. You can configure a CloudWatch alarm to evaluate the CPUUtilization metric over a 5-minute period and send notifications via Amazon SNS when the 90% threshold is breached.

Answer

AWS Config

Answer

Amazon Inspector

Answer

AWS CloudTrail