PAS-C01 Design of SAP Workloads on AWS Practice Test 23 — 15 Questions

Question 1

A company is migrating its SAP ERP system to AWS. The system requires high availability for the SAP central services (ASCS) and must support automatic failover. Which AWS architecture should the company use to meet these requirements?

Accepted Answer

Deploy ASCS on an EC2 instance in an Auto Scaling group with a lifecycle hook that triggers a Lambda function to reattach the ASCS cluster resources.. Option A is correct because an Auto Scaling group with a lifecycle hook and custom AMI can automate the recovery of ASCS after a failure, ensuring high availability. Option B is wrong because a multi-AZ RDS instance is for databases, not ASCS. Option C is wrong because a Network Load Balancer distributes traffic but does not provide automatic failover for ASCS. Option D is wrong because a single EC2 instance in one AZ offers no high availability.

Answer

Configure a Network Load Balancer in front of two ASCS instances in different Availability Zones.

Answer

Use Amazon RDS Multi-AZ to host the SAP central services.

Answer

Run ASCS on a single EC2 instance in a single Availability Zone with an Elastic IP address.

Question 2

An SAP administrator notices that the SAP application server performance degrades during peak hours. The application servers are running on EC2 instances with gp2 EBS volumes. The administrator suspects the EBS volumes are experiencing burst bucket depletion. Which action should the administrator take to improve performance?

Accepted Answer

Change the volume type to gp3 and adjust the IOPS and throughput settings.. Option C is correct because changing the volume type to gp3 provides baseline performance without burst credits, eliminating burst bucket depletion. Option A is wrong because gp2 volumes still use burst credits. Option B is wrong because Provisioned IOPS is more expensive and may not be needed. Option D is wrong because instance store volumes are ephemeral and not suitable for persistent data.

Answer

Increase the size of the gp2 volumes to increase the baseline IOPS.

Answer

Move the data to instance store volumes for better performance.

Answer

Change the volume type to io1 and provision high IOPS.

Question 3

A company is planning to run SAP HANA on AWS and needs to ensure that the database meets the required memory and CPU performance. Which instance family should the company choose for the SAP HANA database?

Accepted Answer

X1e instances. Option B is correct because SAP HANA is certified on X1, X1e, and newer high-memory instances like u-6tb1. Option A is wrong because M5 instances are general-purpose and not certified for SAP HANA. Option C is wrong because C5 instances are compute-optimized. Option D is wrong because T3 instances are burstable and not suitable.

Answer

T3 instances

Answer

M5 instances

Answer

C5 instances

Question 4

An SAP system is running on AWS and uses Amazon EFS for the /sapmnt directory. The system is experiencing high latency during file operations. Which configuration change could improve the performance of the EFS file system?

Accepted Answer

Enable the Max I/O performance mode on the EFS file system.. Option D is correct because enabling EFS Max I/O performance mode allows higher throughput for large workloads. Option A is wrong because Provisioned Throughput increases cost but may not address latency. Option B is wrong because changing to General Purpose mode is the default and may not help. Option C is wrong because EBS is not shared across multiple instances like EFS.

Answer

Change the performance mode from Max I/O to General Purpose.

Answer

Migrate the /sapmnt directory to an Amazon EBS volume.

Answer

Increase the provisioned throughput of the EFS file system.

Question 5

An SAP system uses a shared file system via Amazon FSx for Windows File Server. The system administrators report that file locks are not being released properly, causing application errors. What is the most likely cause and solution?

Accepted Answer

Enable the file lock duration feature on the FSx file system to automatically release stale locks.. Option C is correct because stale file locks can be released by enabling automatic file lock duration or using the FSx file lock command. Option A is wrong because S3 does not support file locking. Option B is wrong because EFS supports NFSv4 locks but this is Windows. Option D is wrong because increasing throughput does not address lock issues.

Answer

Increase the throughput capacity of the FSx file system.

Answer

The file system is using NFSv3 protocol; switch to NFSv4.

Answer

The file system is using Amazon S3 as the backing store; migrate to EFS.

Question 6

A company needs to back up its SAP HANA database running on AWS. The backup must be stored in a durable and cost-effective manner. Which AWS service should the company use for long-term backup storage?

Accepted Answer

Amazon S3. Option A is correct because Amazon S3 is durable, cost-effective, and suitable for long-term backup storage. Option B is wrong because Amazon Glacier is for archival, not regular backups. Option C is wrong because Amazon EBS snapshots are stored in S3 but are not directly accessible as files. Option D is wrong because AWS Backup can orchestrate backups but uses S3 as the storage target.

Answer

Amazon EBS snapshots

Answer

Amazon Glacier

Answer

AWS Backup

Question 7

An SAP system on AWS uses a multi-AZ deployment with an Application Load Balancer (ALB) to distribute traffic across application servers. The ALB health checks are failing intermittently. What is the most likely cause?

Accepted Answer

The health check path is not configured correctly for the SAP application.. Option B is correct because ALB health checks require a specific path (e.g., /health) and may fail if the path is incorrect or the application is not responding. Option A is wrong because security groups are static and would cause consistent failures. Option C is wrong because ALB health checks are independent of instance types. Option D is wrong because health checks are configured at the ALB level, not the target group.

Answer

The security group for the ALB is blocking health check traffic.

Answer

The target group is not associated with the ALB.

Answer

The application servers are running on burstable instance types.

Question 8

An SAP environment on AWS uses a shared /sapmnt file system via Amazon EFS. The company wants to encrypt data at rest for the entire stack. Which services require separate encryption configurations?

Accepted Answer

EBS volumes and EFS file system. Option A is correct because EBS volumes, EFS file systems, and RDS databases each have their own encryption settings. Option B is wrong because S3 is not used. Option C is wrong because CloudWatch does not store persistent data. Option D is wrong because ALB does not store data.

Answer

Application Load Balancer and EFS

Answer

EFS file system and S3 bucket

Answer

CloudWatch Logs and EBS volumes

Question 9

A company wants to automate the deployment of SAP environments on AWS. Which AWS service should the company use to define the infrastructure as code?

Accepted Answer

AWS CloudFormation. Option A is correct because AWS CloudFormation allows defining infrastructure as code. Option B is wrong because AWS Elastic Beanstalk is for web applications, not SAP. Option C is wrong because OpsWorks is for Chef/Puppet. Option D is wrong because CodeDeploy is for application deployment, not infrastructure.

Answer

AWS OpsWorks

Answer

AWS CodeDeploy

Answer

AWS Elastic Beanstalk

Question 10

A company is designing a disaster recovery (DR) strategy for its SAP landscape on AWS. The DR site must be in a different AWS Region. Which TWO options can be used to replicate the SAP HANA database to the DR Region? (Choose TWO.)

Accepted Answer

AWS Database Migration Service (DMS) with ongoing replication. Option A and Option D are correct. SAP HANA System Replication can replicate to a different region using log shipping. AWS DMS can also replicate data to a target in another region. Option B is wrong because EBS snapshots are per-region and cannot be directly copied across regions without manual steps. Option C is wrong because S3 Cross-Region Replication replicates objects, not database transactions. Option E is wrong because RDS is not used for SAP HANA.

Answer

Amazon RDS Multi-Region replica

Answer

Amazon S3 Cross-Region Replication for HANA backup files

Answer

Amazon EBS snapshot copy to the DR Region

Question 11

An SAP system on AWS is experiencing performance issues due to high I/O wait times on the database server. The database runs on an EC2 instance with EBS volumes. Which THREE actions can improve the I/O performance? (Choose THREE.)

Accepted Answer

Use instance store SSDs for the database logs. Option A, Option C, and Option D are correct. Using EBS-optimized instances ensures dedicated bandwidth. Increasing EBS IOPS provides more throughput. Using instance store SSDs offers very low latency. Option B is wrong because RAID 0 of gp2 volumes still uses burst credits. Option E is wrong because reducing volume size decreases performance.

Answer

Reduce the volume size to increase the burst duration

Answer

Configure RAID 0 of multiple gp2 volumes

Question 12

A company is deploying SAP on AWS and needs to ensure high availability for the SAP application servers. Which TWO strategies can be used to achieve this? (Choose TWO.)

Accepted Answer

Use an Auto Scaling group with an Application Load Balancer. Option A and Option B are correct. Deploying across multiple Availability Zones and using an Auto Scaling group with a load balancer provides HA and scalability. Option C is wrong because a single instance does not provide HA. Option D is wrong because EBS Multi-Attach is limited and not for application servers. Option E is wrong because RDS is for databases, not application servers.

Answer

Use Amazon RDS Multi-AZ for the application tier

Answer

Use a single large EC2 instance with an Elastic IP

Answer

Attach the same EBS volume to multiple instances

Question 13

An SAP administrator applies the IAM policy shown in the exhibit to an IAM user. The administrator reports that the user can start and stop EC2 instances but cannot tag them. Why is the user unable to tag instances?

Accepted Answer

The policy does not include the ec2:CreateTags action.. Option B is correct because the policy does not include ec2:CreateTags action. Option A is wrong because ec2:DescribeInstances is allowed but does not grant tagging. Option C is wrong because the resource is set to instance/* but tagging is an action, not a resource constraint. Option D is wrong because there is no explicit deny.

Answer

The user does not have permission to describe instances.

Answer

The resource ARN is too restrictive.

Answer

There is an implicit deny for all actions not listed.

Question 14

An SAP administrator runs the command shown in the exhibit. The volume is attached to an EC2 instance. The administrator plans to increase the volume size to 1000 GiB. After resizing, the volume type remains gp2. What is the expected baseline IOPS for the resized volume?

Accepted Answer

3000 IOPS. Option C is correct because gp2 baseline IOPS is 3 IOPS per GiB for volumes up to 533 GiB, then 16,000 IOPS maximum. For 1000 GiB, baseline IOPS = min(1000 * 3, 16000) = 3000 IOPS. Option A is wrong because 1500 is the previous IOPS. Option B is wrong because 16000 is the max, not baseline. Option D is wrong because 4500 is incorrect calculation.

Answer

4500 IOPS

Answer

16,000 IOPS

Answer

1500 IOPS

Question 15

An SAP administrator is troubleshooting connectivity between SAP application servers and the SAP HANA database. The database security group has an inbound rule as shown in the exhibit. The application servers are in security group sg-12345. However, the application servers cannot connect to the database. What is the most likely reason?

Accepted Answer

The port number is incorrect for SAP HANA.. Option D is correct because the rule allows traffic from sg-12345 but only on port 3300. SAP HANA default port is 3<instance_number>15, not 3300. Option A is wrong because the rule is for TCP. Option B is wrong because source is a security group, not IP. Option C is wrong because the rule is inbound, not outbound.

Answer

The source should be the IP address range of the application servers.

Answer

The rule uses the wrong protocol; it should be UDP.

Answer

The outbound rule on the application server security group is missing.