PAS-C01 Design of SAP Workloads on AWS Practice Test 14 — 15 Questions

Question 1

A company is running SAP HANA on AWS. They want to ensure that the database is backed up automatically and the backups are stored securely and durably. Which AWS service should be used to store the backup files?

Accepted Answer

Amazon S3. Amazon S3 is the correct service for storing SAP HANA backup files because it provides a highly durable (99.999999999% durability), scalable, and secure object storage platform. SAP HANA supports backing up directly to S3 using the Backint agent or via third-party backup tools, and S3 offers features like server-side encryption (SSE-S3 or SSE-KMS) and lifecycle policies for cost-effective long-term retention.

Answer

Amazon EBS Snapshots

Answer

Amazon RDS

Answer

Amazon Elastic File System

Question 2

An SAP on AWS environment is experiencing intermittent connectivity issues between the SAP application servers and the SAP HANA database. Both are in the same VPC but in different Availability Zones. The network team has confirmed that the security groups allow traffic on the required ports. What is a likely cause of the issue?

Accepted Answer

Network ACLs are misconfigured, blocking return traffic.. Network ACLs are stateless, meaning they evaluate inbound and outbound traffic separately. Even if inbound rules allow traffic from the SAP application servers to the HANA database, the outbound rules on the database subnet's NACL must explicitly allow the return traffic (ephemeral ports) back to the application servers. Misconfigured outbound rules in the NACL can drop the response packets, causing intermittent connectivity issues between the application and database tiers across Availability Zones.

Answer

AWS Shield Advanced is blocking legitimate traffic.

Answer

VPC Flow Logs are enabled and dropping packets.

Answer

The VPC is using AWS Direct Connect, which adds latency.

Question 3

A company is running SAP ERP on AWS and needs to encrypt data at rest for all SAP-related storage. Which combination of AWS services can be used to achieve this? (Select TWO.)

Accepted Answer

Amazon S3 server-side encryption. Amazon EBS encryption (Option D) provides at-rest encryption for the block storage volumes used by SAP EC2 instances, ensuring data on the underlying disks is encrypted. Amazon S3 server-side encryption (Option B) encrypts data at rest in S3 buckets, which can be used for SAP backups, log archives, or other SAP-related object storage. Together, they cover the primary storage types for SAP on AWS.

Answer

AWS Identity and Access Management (IAM)

Answer

AWS WAF

Answer

Amazon CloudWatch Logs

Question 4

A company is planning to migrate its SAP landscape to AWS. The environment includes SAP HANA databases for production and non-production. Which AWS service can be used to automate the provisioning of the SAP HANA infrastructure? (Select TWO.)

Accepted Answer

AWS CloudFormation. AWS CloudFormation (Option A) is correct because it allows you to define SAP HANA infrastructure as code using templates, automating the provisioning of EC2 instances, storage, networking, and security groups required for SAP HANA. This aligns with SAP's deployment best practices on AWS, enabling repeatable and consistent infrastructure setup for both production and non-production environments.

Answer

Amazon Macie

Answer

AWS OpsWorks

Answer

AWS CodePipeline

Question 5

An SAP HANA database on AWS is running on an EC2 instance with multiple EBS volumes striped using LVM. The database administrator needs to increase the total storage capacity without downtime. Which approach should be taken? (Select TWO.)

Accepted Answer

Add the new volumes to the LVM volume group and extend the logical volume.. Option C is correct because LVM (Logical Volume Manager) allows you to add new EBS volumes to an existing volume group and extend the logical volume without unmounting the filesystem or stopping the database. This enables online storage expansion for SAP HANA, which requires zero downtime for production workloads.

Answer

Create a new larger instance and attach the existing volumes.

Answer

Modify the existing volumes to a higher IOPS volume type.

Answer

Take a snapshot of the existing volumes and restore to larger volumes.

Question 6

A company is deploying SAP NetWeaver on AWS and needs to ensure high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). Which AWS services can be used to implement a failover cluster for ASCS and ERS? (Select THREE.)

Accepted Answer

Elastic Load Balancing. Elastic Load Balancing (ELB) is correct because it can be used in conjunction with a Network Load Balancer (NLB) to provide a stable endpoint for SAP ASCS and ERS failover. The NLB supports static IP addresses and can be configured with health checks that monitor the SAP service, automatically routing traffic to the healthy node in the cluster. This eliminates the need for a traditional floating IP and integrates with AWS-native failover mechanisms.

Answer

AWS CloudTrail

Answer

AWS Config

Question 7

A company is running SAP HANA in a production environment on AWS. The database administrator wants to implement automated backups using AWS Backup. Which of the following are supported by AWS Backup for SAP HANA? (Select THREE.)

Accepted Answer

Amazon RDS databases. AWS Backup supports Amazon RDS databases, including Amazon RDS for SAP HANA, enabling automated backup management. This allows the database administrator to centralize backup policies and retention rules for RDS instances, which is a key requirement for SAP HANA production environments.

Answer

SAP HANA database backups

Answer

Amazon S3 buckets

Question 8

A company is running a mission-critical SAP S/4HANA system on AWS in the us-east-1 region. The system uses a two-tier architecture with the SAP application server and HANA database on the same EC2 instance. The instance type is an r5.24xlarge with 12 x 2 TB gp3 EBS volumes striped using LVM. The HANA data volume is 10 TB. The company has a disaster recovery (DR) requirement with an RPO of 15 minutes and an RTO of 4 hours. The DR site must be in us-west-2. The company currently takes daily EBS snapshots of the data volume and copies them to us-west-2. However, they are not meeting the RPO. The operations team is considering implementing SAP HANA System Replication (HSR) asynchronously to the DR region. However, network latency between us-east-1 and us-west-2 averages 60 ms. The SAP HANA database has a heavy write workload, with average log writes of 500 MB/sec. The team is concerned that the replication may fall behind and cause data loss. What should the team do to meet the DR requirements while minimizing data loss?

Accepted Answer

Implement HSR asynchronously and also enable HANA log backups to an S3 bucket in us-west-2.. Option A is correct because combining asynchronous HANA System Replication (HSR) with HANA log backups to an S3 bucket in us-west-2 provides a dual-layer protection strategy. Asynchronous HSR will replicate log changes in near real-time, but given the 60 ms latency and 500 MB/sec write workload, it may fall behind; the log backups act as a safety net to capture any log data that hasn't been replicated yet, allowing recovery with minimal data loss while still meeting the 15-minute RPO.

Answer

Switch to synchronous replication to ensure zero data loss.

Answer

Increase the HANA log buffer size to reduce the frequency of log flushes, so that less data is sent over the network.

Answer

Use HSR with multiple replicas in us-west-2 to improve replication speed.

Question 9

A company is migrating its SAP Business Warehouse (BW) system to AWS. The source system runs on an on-premises IBM AIX server with an Oracle database. The target AWS environment will use SAP HANA as the database. The migration tool is SAP Software Provisioning Manager (SWPM). The company has a requirement to minimize downtime during the migration. The SAP BW system has 5 TB of data. The network bandwidth between on-premises and AWS is 1 Gbps. The migration team plans to use AWS Direct Connect for the data transfer. They estimate that the initial data load will take approximately 12 hours. However, the cutover window is limited to 8 hours. What should the migration team do to meet the cutover window?

Accepted Answer

Use SAP Landscape Transformation (SLT) to replicate data in real-time after the initial load, and then perform a final delta sync during the cutover window.. Option B is correct because SAP Landscape Transformation (SLT) can replicate data in near real-time from the source Oracle database to the target SAP HANA using trigger-based replication. After the initial 12-hour data load is completed before the cutover window, SLT captures ongoing changes and applies them during the final delta sync within the 8-hour cutover window, minimizing downtime. This approach decouples the lengthy initial load from the limited cutover period, meeting the requirement.

Answer

Use AWS DataSync to accelerate the data transfer and then import into HANA.

Answer

Perform a HANA system replication from the source to the target after the initial load.

Answer

Request a higher bandwidth Direct Connect connection to reduce the initial load time to under 8 hours.

Question 10

An SAP Basis administrator is troubleshooting a performance issue on an SAP HANA database running on AWS. The database is on an EC2 instance of type r5.12xlarge with 8 x 1 TB EBS io2 Block Express volumes configured for maximum IOPS. The application team reports that batch jobs are taking longer than expected. The administrator checks Amazon CloudWatch metrics and sees that the EBS write latency averages 2 ms, which is within the expected range. However, the CPU utilization is at 95% consistently during batch runs. The HANA index server is using 70% of the CPU. The administrator also notices that the HANA threads are mostly waiting on 'lock wait' events. What is the MOST likely cause of the performance issue?

Accepted Answer

There are SQL statement contention and locking issues in the HANA database.. The high CPU utilization (95%) combined with HANA threads waiting on 'lock wait' events indicates that SQL statement contention and locking issues are the primary bottleneck. Lock waits occur when multiple transactions compete for the same database resources, causing threads to spin or block, which consumes CPU cycles without making progress. This explains why CPU is saturated despite EBS write latency being normal (2 ms) and IOPS being sufficient.

Answer

The EBS volumes are not providing enough IOPS for the workload.

Answer

The HANA parameter 'max_concurrency' is set too low.

Answer

The EC2 instance type is undersized for the HANA workload.

Question 11

A company is planning to migrate SAP S/4HANA to AWS. The system has a high transaction rate and requires low network latency between SAP application servers and the database. Which AWS infrastructure design minimizes network latency between the SAP application tier and the database tier?

Accepted Answer

Place all SAP application servers and the database server in the same Availability Zone.. Option D is correct because placing all SAP application servers and the database server in the same Availability Zone (AZ) minimizes network latency by keeping traffic within a single, high-bandwidth, low-latency AWS data center. SAP S/4HANA with a high transaction rate is sensitive to inter-AZ latency (typically 1-2 ms), which can degrade performance for synchronous database calls. Co-locating all tiers in one AZ ensures the lowest possible round-trip time for SAP's dialog work processes and database commits.

Answer

Place the database server in one Availability Zone and application servers in another to improve fault tolerance.

Answer

Use a cluster placement group for the application servers and a separate placement group for the database.

Answer

Use a mix of instance types optimized for compute and memory across different Availability Zones.

Question 12

A company runs SAP Business Suite on AWS. The database size is 2 TB. They need to restore the database to a point-in-time from the last 24 hours. Which AWS service should be used to achieve this with minimal impact on production performance?

Accepted Answer

Configure SAP HANA Backup & Recovery using Backint agent to Amazon S3.. Option C is correct because SAP HANA Backup & Recovery using the Backint agent to Amazon S3 is the native, AWS-integrated method for performing point-in-time recovery (PITR) of SAP HANA databases. Backint offloads backup and restore operations directly to S3, bypassing the EC2 instance's I/O stack, which minimizes performance impact on production workloads. This approach supports incremental and log backups, enabling precise PITR within the last 24 hours without requiring full-volume snapshots.

Answer

Use AWS Backup with a backup plan for the EC2 instance.

Answer

Use Amazon EBS snapshots of the database volume.

Answer

Use AWS Database Migration Service (DMS) for continuous replication.

Question 13

An SAP system on AWS experiences intermittent connectivity issues between the SAP Central Services (SCS) instance and the application servers. The SCS instance is in a private subnet in us-east-1a, and the application servers are spread across us-east-1a and us-east-1b. Security groups allow traffic on all required ports. What is the MOST likely cause of the intermittent connectivity?

Accepted Answer

The network ACLs are blocking the traffic.. Network ACLs are stateless and must explicitly allow both inbound and outbound traffic on ephemeral ports. If the outbound rules for the SCS subnet's NACL do not allow return traffic on high ports (e.g., 1024–65535), or if the application servers' subnet NACL blocks inbound traffic from the SCS instance, connections will intermittently fail. Security groups are stateful and automatically allow return traffic, but NACLs are not, making them the likely culprit for intermittent connectivity across different Availability Zones.

Answer

The route tables do not have a route for the SCS subnet.

Answer

The Internet Gateway is misconfigured.

Answer

The VPC peering connection is not established correctly.

Question 14

A company is designing an SAP HANA disaster recovery (DR) solution on AWS. The primary site is in us-east-1, and the DR site is in us-west-2. The RPO is 15 minutes, and the RTO is 2 hours. Which AWS service should be used for replicating the SAP HANA database to the DR site?

Accepted Answer

SAP HANA System Replication with log shipping using Amazon S3 or direct VPN connection.. SAP HANA System Replication (HSR) is the native, SAP-supported mechanism for real-time database replication, capable of achieving sub-minute RPOs by continuously shipping log entries to a secondary system. When combined with a direct VPN connection or Amazon S3 as a log shipping target, it meets the 15-minute RPO and 2-hour RTO requirements for disaster recovery across AWS regions. This is the only option that provides synchronous or near-synchronous replication of the HANA database itself, not just backups or snapshots.

Answer

Amazon S3 Cross-Region Replication for database backup files.

Answer

Amazon EBS snapshots replicated to us-west-2 via Amazon Data Lifecycle Manager.

Answer

AWS Database Migration Service (DMS) with ongoing replication.

Question 15

An SAP workload on AWS uses a single Availability Zone deployment. The company wants to improve high availability without changing the existing architecture significantly. Which action should be taken?

Accepted Answer

Add a second SAP application server in a different Availability Zone and configure load balancing.. Adding a second SAP application server in a different Availability Zone and configuring load balancing provides high availability by distributing traffic across multiple AZs, ensuring that if one AZ fails, the application remains accessible. This approach aligns with SAP's recommended architecture for multi-AZ deployments without requiring significant changes to the existing single-AZ setup, as it only adds an additional application tier instance and a load balancer.

Answer

Use an Amazon EBS volume attached to multiple instances across AZs.

Answer

Increase the size of the EC2 instances to handle failover.

Answer

Enable EBS Multi-Attach on the database volume.