PAS-C01 Design of SAP Workloads on AWS Practice Test 19 — 15 Questions

Question 1

An architect is designing a disaster recovery plan for an SAP system using SAP HANA. The primary site is in us-east-1 and the DR site is in us-west-2. The RPO is 15 minutes and RTO is 1 hour. Which TWO AWS services or features should the architect use to meet these requirements? (Choose TWO.)

Accepted Answer

AWS Elastic Disaster Recovery (AWS DRS). SAP HANA System Replication (option D) is the native SAP mechanism for replicating HANA databases synchronously or asynchronously, supporting an RPO of 15 minutes with asynchronous replication. AWS Elastic Disaster Recovery (option B) provides continuous block-level replication for the entire SAP system (including OS and application volumes) and enables automated failover within the 1-hour RTO. Together, they ensure both database consistency and full infrastructure recovery.

Answer

AWS Transit Gateway with VPC peering

Answer

Amazon S3 Cross-Region Replication

Answer

AWS CloudEndure Disaster Recovery

Question 2

A company runs SAP ERP on AWS with an Oracle database. The architect wants to implement a backup strategy that provides point-in-time recovery (PITR) with an RPO of 5 minutes and an RTO of 2 hours. Which TWO solutions should the architect consider? (Choose TWO.)

Accepted Answer

AWS Database Migration Service (DMS) with ongoing replication to an Oracle instance in another AZ. Option A is correct because AWS DMS with ongoing replication can continuously replicate changes from the Oracle source database to a target Oracle instance in another Availability Zone, enabling point-in-time recovery with an RPO as low as 5 minutes. This approach supports near-real-time replication and can be combined with automatic failover to meet the RTO of 2 hours, as the target instance is already synchronized and ready.

Answer

Amazon S3 Lifecycle policies to move backups to Glacier

Answer

Amazon S3 Transfer Acceleration for backup uploads

Answer

EBS snapshots every 5 minutes

Question 3

An architect is designing a highly available SAP NetWeaver architecture on AWS. The system uses an SAP Central Services (ASCS) instance. Which THREE components are required to achieve high availability for the SAP environment? (Choose THREE.)

Accepted Answer

Shared file storage (e.g., Amazon EFS or EBS Multi-Attach). A cluster manager like Pacemaker handles failover. Shared storage (e.g., Amazon EFS or EBS) is needed for /sapmnt and /usr/sap. A Network Load Balancer distributes traffic and detects failures. Option B is wrong because NAT Gateway is for outbound internet. Option D is wrong because an Internet Gateway is for inbound internet. Option E is wrong because an ALB is not suitable for ASCS health checks; NLB is preferred.

Answer

A NAT Gateway for outbound traffic

Answer

An Internet Gateway for inbound traffic

Question 4

A company is running SAP S/4HANA on AWS and needs to ensure high availability for the database layer. Which AWS service should be used to replicate the database to a standby instance in a different Availability Zone?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) supports ongoing replication from an SAP HANA source database to a standby instance in a different Availability Zone using change data capture (CDC). This allows continuous data synchronization without requiring native SAP HANA replication features, making it suitable for high-availability setups where the database layer must be replicated across AZs.

Answer

EC2 Auto Scaling

Answer

Amazon S3

Answer

Amazon RDS Multi-AZ

Question 5

A company is planning to migrate their SAP ECC system to AWS. They want to minimize downtime and use an automated approach. Which AWS service should be used for the migration?

Accepted Answer

AWS Launch Wizard. Option B is correct because AWS Launch Wizard automates the deployment of SAP systems. Option A is wrong because AWS CloudFormation is for infrastructure as code, not a migration service. Option C is wrong because AWS Server Migration Service is for server-level migration, not SAP-specific. Option D is wrong because AWS Application Discovery Service is for discovery, not migration.

Answer

AWS Application Discovery Service

Answer

AWS CloudFormation

Answer

AWS Server Migration Service

Question 6

An SAP administrator notices that the SAP HANA database is running on an EC2 instance with a single EBS volume for /hana/data and /hana/log. The system is experiencing high latency during write operations. What is the most cost-effective design change to improve performance?

Accepted Answer

Create separate EBS volumes for /hana/data and /hana/log, attaching them to the instance. Option A is correct because SAP HANA requires separate EBS volumes for /hana/data and /hana/log to avoid I/O contention. When both directories share a single volume, write operations to the log (sequential) and data (random) compete for the same queue depth and bandwidth, causing high latency. Separating them allows each workload to use dedicated IOPS and throughput, which is the most cost-effective fix without upgrading to premium volume types.

Answer

Use an Instance Store volume for /hana/data

Answer

Modify the EBS volume to use Provisioned IOPS (io2) with higher IOPS

Answer

Increase the size of the existing EBS volume to gain more throughput

Question 7

A company is running SAP Business Suite on AWS and needs to back up the SAP HANA database daily. Which AWS service can be used to automate HANA backups to Amazon S3?

Accepted Answer

AWS Backup. AWS Backup is the correct service because it provides a fully managed, policy-based backup solution that natively supports SAP HANA databases running on Amazon EC2. It automates the creation, retention, and deletion of HANA backups directly to Amazon S3 using the Backint agent, eliminating the need for custom scripts or manual intervention.

Answer

AWS Storage Gateway

Answer

Amazon EBS snapshots

Answer

AWS DataSync

Question 8

An SAP system on AWS is experiencing performance degradation. The SAP administrator wants to monitor the EC2 instance's CPU utilization and memory usage. Which AWS service should be used to collect memory metrics?

Accepted Answer

Amazon CloudWatch Agent. Option B is correct because CloudWatch Agent can collect memory metrics from EC2 instances. Option A is wrong because CloudWatch by default only collects CPU, disk, and network metrics. Option C is wrong because AWS Systems Manager Inventory collects software inventory, not memory metrics. Option D is wrong because AWS Trusted Advisor provides recommendations, not metrics.

Answer

Amazon CloudWatch (default metrics)

Answer

AWS Systems Manager Inventory

Answer

AWS Trusted Advisor

Question 9

A company is deploying SAP S/4HANA on AWS and needs to ensure that the system can survive a single Availability Zone failure. Which architecture meets this requirement?

Accepted Answer

Deploy an active-passive setup with the primary in one AZ and a standby in another AZ, using replication. Option B is correct because an active-passive SAP HANA setup with the primary in one Availability Zone (AZ) and a standby in another AZ, using HANA System Replication (HSR) in synchronous mode, ensures zero data loss and automatic failover if a single AZ fails. This architecture meets the SAP S/4HANA requirement for high availability (HA) across AZs, as HSR replicates data at the database level, and the standby can take over within minutes.

Answer

Store the database files on Amazon S3 and mount them to the EC2 instance

Answer

Use Amazon RDS Multi-AZ for the SAP HANA database

Answer

Deploy a single EC2 instance in one Availability Zone with EBS snapshots

Question 10

An SAP system is running on AWS and needs to be accessible over the internet securely. Which AWS service should be used to provide secure remote access for administrators?

Accepted Answer

Use AWS Systems Manager Session Manager. Option C is correct because AWS Systems Manager Session Manager allows secure shell access without bastion hosts. Option A is wrong because a public subnet with SSH from the internet is insecure. Option B is wrong because a VPN connection is for site-to-site, not remote admin. Option D is wrong because Amazon WorkSpaces is a virtual desktop, not a remote administration tool for SAP.

Answer

Set up an AWS Site-to-Site VPN connection from the corporate network

Answer

Use Amazon WorkSpaces to provide a virtual desktop for administrators

Answer

Configure the EC2 instance in a public subnet with SSH access from the internet

Question 11

A company is migrating its SAP ERP system to AWS and wants to use storage that offers the highest IOPS for the SAP HANA database. Which storage option should be used?

Accepted Answer

Provisioned IOPS SSD (io2) volumes. For SAP HANA databases on AWS, the highest IOPS is achieved using Provisioned IOPS SSD (io2) volumes, which are designed for latency-sensitive, I/O-intensive workloads. io2 volumes offer up to 256,000 IOPS per volume with 99.999% durability, making them the optimal choice for SAP HANA's demanding performance requirements.

Answer

General Purpose SSD (gp3) volumes

Answer

Instance Store volumes

Answer

Throughput Optimized HDD (st1) volumes

Question 12

An SAP NetWeaver system on AWS is configured with a shared file system between the application servers. Which AWS storage service should be used for this shared file system?

Accepted Answer

Amazon EFS. Amazon EFS is the correct choice because it provides a fully managed, NFS-based shared file system that can be mounted concurrently by multiple EC2 instances, making it ideal for SAP NetWeaver application servers that require a common file system for shared data such as transport directories, logs, and profile files. EFS supports the NFSv4.1 and NFSv4.0 protocols, ensuring POSIX-compliant file locking and consistency across the cluster.

Answer

AWS Storage Gateway File Gateway

Answer

Amazon S3

Answer

Amazon EBS with multi-attach

Question 13

Which TWO options are best practices for securing SAP systems on AWS?

Accepted Answer

Enable encryption at rest for EBS volumes and RDS databases. Option B is correct because security groups act as virtual firewalls for EC2 instances. Option C is correct because encryption at rest is a security best practice. Option A is wrong because direct internet access is not recommended. Option D is wrong because public S3 buckets are insecure. Option E is wrong because using the root user is not a best practice.

Answer

Use the AWS account root user for daily administration

Answer

Place SAP application servers in a public subnet with direct internet access

Answer

Store SAP transport files in a public S3 bucket

Question 14

Which THREE considerations are important when designing a disaster recovery (DR) strategy for SAP on AWS?

Accepted Answer

Copy Amazon Machine Images (AMIs) to the DR Region. Amazon Machine Images (AMIs) must be copied to the DR Region to ensure that the exact EC2 instance configuration, including the operating system, SAP application binaries, and any custom patches, is available for recovery. Without copying AMIs, you cannot launch identical instances in the DR Region, which is essential for a consistent SAP environment.

Answer

Use EBS snapshots in the same Region for recovery

Answer

Deploy all SAP resources in a single AWS Region

Question 15

Which TWO AWS services can be used to monitor the performance of an SAP system running on EC2?

Accepted Answer

Amazon CloudWatch. Option A is correct because CloudWatch provides monitoring for EC2. Option B is correct because Amazon CloudWatch Logs can collect application logs. Option C is wrong because AWS Config is for configuration compliance. Option D is wrong because AWS CloudTrail is for API auditing. Option E is wrong because AWS Shield is for DDoS protection.

Answer

AWS CloudTrail

Answer

AWS Shield

Answer

AWS Config