PAS-C01 Design of SAP Workloads on AWS Practice Test 20 — 15 Questions

Question 1

A company is planning to run SAP S/4HANA on AWS. The architect needs to ensure that the EC2 instances are SAP certified for the specific SAP HANA version. Where should the architect verify the instance certification?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

SAP Certified and Supported SAP HANA Hardware Directory. The SAP Certified and Supported SAP HANA Hardware Directory is the authoritative source maintained by SAP that lists all certified hardware configurations, including specific AWS EC2 instance types and their supported SAP HANA versions. This directory is the only place where SAP officially validates that an EC2 instance meets the exact hardware and firmware requirements for a given SAP HANA release, ensuring compliance with SAP's certification standards.

Answer

SAP Support Portal

Answer

AWS Management Console under EC2 instance types

Answer

AWS documentation for SAP on AWS

Question 2

An architect is designing a disaster recovery plan for an SAP system using SAP HANA. The primary site is in us-east-1 and the DR site is in us-west-2. The RPO is 15 minutes and RTO is 1 hour. Which TWO AWS services or features should the architect use to meet these requirements? (Choose TWO.)

Accepted Answer

AWS Elastic Disaster Recovery (AWS DRS). SAP HANA System Replication (option D) is the native SAP mechanism for replicating HANA databases synchronously or asynchronously, supporting an RPO of 15 minutes with asynchronous replication. AWS Elastic Disaster Recovery (option B) provides continuous block-level replication for the entire SAP system (including OS and application volumes) and enables automated failover within the 1-hour RTO. Together, they ensure both database consistency and full infrastructure recovery.

Answer

AWS Transit Gateway with VPC peering

Answer

Amazon S3 Cross-Region Replication

Answer

AWS CloudEndure Disaster Recovery

Question 3

A company runs SAP ERP on AWS with an Oracle database. The architect wants to implement a backup strategy that provides point-in-time recovery (PITR) with an RPO of 5 minutes and an RTO of 2 hours. Which TWO solutions should the architect consider? (Choose TWO.)

Accepted Answer

AWS Database Migration Service (DMS) with ongoing replication to an Oracle instance in another AZ. AWS DMS with ongoing replication can continuously replicate changes from the Oracle source database to a target Oracle instance in another Availability Zone, enabling point-in-time recovery with an RPO as low as 5 minutes. This approach supports near-real-time replication and can be combined with automatic failover to meet the RTO of 2 hours, as the target instance is already synchronized and ready.

Answer

Amazon S3 Lifecycle policies to move backups to Glacier

Answer

Amazon S3 Transfer Acceleration for backup uploads

Answer

EBS snapshots every 5 minutes

Question 4

An architect is designing a highly available SAP NetWeaver architecture on AWS. The system uses an SAP Central Services (ASCS) instance. Which THREE components are required to achieve high availability for the SAP environment? (Choose THREE.)

Accepted Answer

Shared file storage (e.g., Amazon EFS or EBS Multi-Attach). A cluster manager like Pacemaker is required to orchestrate failover between the two ASCS nodes. Shared file storage (e.g., Amazon EFS or EBS Multi-Attach) provides a shared file system for /sapmnt and /usr/sap, which must be accessible from both nodes. A Network Load Balancer (NLB) distributes traffic to the active ASCS instance and performs health checks to detect failures. Options C and D are incorrect because a NAT Gateway and Internet Gateway are not required for SAP HA; they are used for outbound/inbound internet connectivity.

Answer

A NAT Gateway for outbound traffic

Answer

An Internet Gateway for inbound traffic

Question 5

A company is running SAP S/4HANA on AWS and needs to ensure high availability for the database layer. Which AWS service should be used to replicate the database to a standby instance in a different Availability Zone?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) supports ongoing replication from an SAP HANA source database to a standby instance in a different Availability Zone using change data capture (CDC). This allows continuous data synchronization without requiring native SAP HANA replication features, making it suitable for high-availability setups where the database layer must be replicated across AZs.

Answer

EC2 Auto Scaling

Answer

Amazon S3

Answer

Amazon RDS Multi-AZ

Question 6

A company is planning to migrate their SAP ECC system to AWS. They want to minimize downtime and use an automated approach. Which AWS service should be used for the migration?

Accepted Answer

AWS Launch Wizard. AWS Launch Wizard for SAP is the correct choice because it provides a guided, automated deployment of SAP ECC on AWS, including infrastructure provisioning, OS configuration, and SAP installation. It minimizes downtime by automating the entire migration process, from sizing to deployment, using predefined best practices.

Answer

AWS Application Discovery Service

Answer

AWS CloudFormation

Answer

AWS Server Migration Service

Question 7

An SAP administrator notices that the SAP HANA database is running on an EC2 instance with a single EBS volume for /hana/data and /hana/log. The system is experiencing high latency during write operations. What is the most cost-effective design change to improve performance?

Accepted Answer

Create separate EBS volumes for /hana/data and /hana/log, attaching them to the instance. SAP HANA requires separate EBS volumes for /hana/data and /hana/log to avoid I/O contention. When both directories share a single volume, write operations to the log (sequential) and data (random) compete for the same queue depth and bandwidth, causing high latency. Separating them allows each workload to use dedicated IOPS and throughput, which is the most cost-effective fix without upgrading to premium volume types.

Answer

Use an Instance Store volume for /hana/data

Answer

Modify the EBS volume to use Provisioned IOPS (io2) with higher IOPS

Answer

Increase the size of the existing EBS volume to gain more throughput

Question 8

A company is running SAP Business Suite on AWS and needs to back up the SAP HANA database daily. Which AWS service can be used to automate HANA backups to Amazon S3?

Accepted Answer

AWS Backup. AWS Backup is the correct service because it provides a fully managed, policy-based backup solution that natively supports SAP HANA databases running on Amazon EC2. It automates the creation, retention, and deletion of HANA backups directly to Amazon S3 using the Backint agent, eliminating the need for custom scripts or manual intervention.

Answer

AWS Storage Gateway

Answer

Amazon EBS snapshots

Answer

AWS DataSync

Question 9

An SAP system on AWS is experiencing performance degradation. The SAP administrator wants to monitor the EC2 instance's CPU utilization and memory usage. Which AWS service should be used to collect memory metrics?

Accepted Answer

Amazon CloudWatch Agent. Amazon CloudWatch by default collects only basic metrics like CPU utilization, not memory usage. The Amazon CloudWatch Agent is required to collect custom metrics such as memory utilization from EC2 instances by sending data to CloudWatch via the PutMetricData API. This agent can be installed on the SAP EC2 instance to capture both CPU and memory metrics for performance monitoring.

Answer

Amazon CloudWatch (default metrics)

Answer

AWS Systems Manager Inventory

Answer

AWS Trusted Advisor

Question 10

A company is deploying SAP S/4HANA on AWS and needs to ensure that the system can survive a single Availability Zone failure. Which architecture meets this requirement?

Accepted Answer

Deploy an active-passive setup with the primary in one AZ and a standby in another AZ, using replication. An active-passive SAP HANA setup with the primary in one Availability Zone (AZ) and a standby in another AZ, using HANA System Replication (HSR) in synchronous mode, ensures zero data loss and automatic failover if a single AZ fails. This architecture meets the SAP S/4HANA requirement for high availability (HA) across AZs, as HSR replicates data at the database level, and the standby can take over within minutes.

Answer

Store the database files on Amazon S3 and mount them to the EC2 instance

Answer

Use Amazon RDS Multi-AZ for the SAP HANA database

Answer

Deploy a single EC2 instance in one Availability Zone with EBS snapshots

Question 11

An SAP system is running on AWS and needs to be accessible over the internet securely. Which AWS service should be used to provide secure remote access for administrators?

Accepted Answer

Use AWS Systems Manager Session Manager. AWS Systems Manager Session Manager provides secure, auditable, browser-based or CLI-based remote access to EC2 instances without opening inbound ports, managing SSH keys, or using bastion hosts. It leverages the AWS SSM Agent and IAM policies to authenticate and authorize administrators, making it the most secure and operationally efficient option for SAP system administration on AWS.

Answer

Set up an AWS Site-to-Site VPN connection from the corporate network

Answer

Use Amazon WorkSpaces to provide a virtual desktop for administrators

Answer

Configure the EC2 instance in a public subnet with SSH access from the internet

Question 12

A company is migrating its SAP ERP system to AWS and wants to use storage that offers the highest IOPS for the SAP HANA database. Which storage option should be used?

Accepted Answer

Provisioned IOPS SSD (io2) volumes. For SAP HANA databases on AWS, the highest IOPS is achieved using Provisioned IOPS SSD (io2) volumes, which are designed for latency-sensitive, I/O-intensive workloads. io2 volumes offer up to 256,000 IOPS per volume with 99.999% durability, making them the optimal choice for SAP HANA's demanding performance requirements.

Answer

General Purpose SSD (gp3) volumes

Answer

Instance Store volumes

Answer

Throughput Optimized HDD (st1) volumes

Question 13

Which TWO options are best practices for securing SAP systems on AWS?

Accepted Answer

Enable encryption at rest for EBS volumes and RDS databases. Enabling encryption at rest for EBS volumes and RDS databases ensures that SAP data stored on disk is protected using AWS Key Management Service (KMS) or a customer-managed key. This is a fundamental security best practice to meet compliance requirements and protect sensitive SAP data from unauthorized access if the underlying storage is compromised.

Answer

Use the AWS account root user for daily administration

Answer

Place SAP application servers in a public subnet with direct internet access

Answer

Store SAP transport files in a public S3 bucket

Question 14

Which THREE considerations are important when designing a disaster recovery (DR) strategy for SAP on AWS?

Accepted Answer

Copy Amazon Machine Images (AMIs) to the DR Region. Amazon Machine Images (AMIs) must be copied to the DR Region to ensure that the exact EC2 instance configuration, including the operating system, SAP application binaries, and any custom patches, is available for recovery. Without copying AMIs, you cannot launch identical instances in the DR Region, which is essential for a consistent SAP environment.

Answer

Use EBS snapshots in the same Region for recovery

Answer

Deploy all SAP resources in a single AWS Region

Question 15

Which TWO AWS services can be used to monitor the performance of an SAP system running on EC2?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch (C) is correct because it provides detailed monitoring of EC2 instances, including CPU, memory, disk I/O, and network metrics, which are essential for tracking SAP system performance. Amazon CloudWatch Logs (D) is correct because it allows you to collect, monitor, and analyze log files from SAP applications and the underlying OS, enabling you to detect errors, performance bottlenecks, and system health issues in real time.

Answer

AWS CloudTrail

Answer

AWS Shield

Answer

AWS Config