PAS-C01 Design of SAP Workloads on AWS Practice Test 24 — 15 Questions

Question 1

A company needs to back up its SAP HANA database running on AWS. The backup must be stored in a durable and cost-effective manner. Which AWS service should the company use for long-term backup storage?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Amazon S3. Amazon S3 is the correct choice for long-term backup storage of SAP HANA databases on AWS because it offers 99.999999999% durability, is cost-effective with lifecycle policies to transition data to lower-cost tiers like S3 Glacier Deep Archive, and supports native integration with SAP HANA backup tools via the SAP HANA Backint agent for S3. This allows direct backup to S3 without intermediate storage, meeting both durability and cost requirements.

Answer

Amazon EBS snapshots

Answer

Amazon Glacier

Answer

AWS Backup

Question 2

An SAP system on AWS uses a multi-AZ deployment with an Application Load Balancer (ALB) to distribute traffic across application servers. The ALB health checks are failing intermittently. What is the most likely cause?

Accepted Answer

The health check path is not configured correctly for the SAP application.. The most likely cause of intermittent health check failures in an SAP system on AWS is a misconfigured health check path. SAP applications often have specific endpoints (e.g., /sap/public/ping or a custom health check URL) that must return a 200 OK response. If the ALB health check path does not match the SAP application's expected endpoint, the ALB will intermittently mark targets as unhealthy, especially under load or during application state changes.

Answer

The security group for the ALB is blocking health check traffic.

Answer

The target group is not associated with the ALB.

Answer

The application servers are running on burstable instance types.

Question 3

An SAP environment on AWS uses a shared /sapmnt file system via Amazon EFS. The company wants to encrypt data at rest for the entire stack. Which services require separate encryption configurations?

Accepted Answer

EBS volumes and EFS file system. Amazon EBS volumes and Amazon EFS file systems each require separate encryption configurations because they use distinct encryption mechanisms. EBS uses AWS KMS keys per volume at the block level, while EFS uses a different KMS key configuration at the file system level. Both must be explicitly enabled to achieve full at-rest encryption for the SAP stack.

Answer

Application Load Balancer and EFS

Answer

EFS file system and S3 bucket

Answer

CloudWatch Logs and EBS volumes

Question 4

A company wants to automate the deployment of SAP environments on AWS. Which AWS service should the company use to define the infrastructure as code?

Accepted Answer

AWS CloudFormation. AWS CloudFormation is the correct choice because it allows you to define your entire SAP infrastructure—including EC2 instances, VPCs, security groups, and storage—as code using JSON or YAML templates. This enables repeatable, version-controlled, and automated deployments of SAP environments, which is essential for infrastructure as code (IaC) practices.

Answer

AWS OpsWorks

Answer

AWS CodeDeploy

Answer

AWS Elastic Beanstalk

Question 5

A company is designing a disaster recovery (DR) strategy for its SAP landscape on AWS. The DR site must be in a different AWS Region. Which TWO options can be used to replicate the SAP HANA database to the DR Region? (Choose TWO.)

Accepted Answer

AWS Database Migration Service (DMS) with ongoing replication. AWS DMS with ongoing replication can continuously replicate SAP HANA database changes to a target HANA instance in another Region using change data capture (CDC), enabling near-real-time synchronization for DR purposes. Option D is correct because SAP HANA System Replication can be configured across AWS Regions to replicate the HANA database synchronously or asynchronously, providing a native disaster recovery solution. Both methods are valid for replicating SAP HANA to a different AWS Region.

Answer

Amazon RDS Multi-Region replica

Answer

Amazon S3 Cross-Region Replication for HANA backup files

Answer

Amazon EBS snapshot copy to the DR Region

Question 6

An SAP system on AWS is experiencing performance issues due to high I/O wait times on the database server. The database runs on an EC2 instance with EBS volumes. Which THREE actions can improve the I/O performance? (Choose THREE.)

Accepted Answer

Use instance store SSDs for the database logs. Instance store SSDs provide very low latency and high IOPS directly attached to the EC2 host, which is ideal for database log files that require frequent, synchronous writes. By offloading the logs from EBS to instance store, you reduce contention on the EBS volumes and improve overall I/O performance for the SAP database.

Answer

Reduce the volume size to increase the burst duration

Answer

Configure RAID 0 of multiple gp2 volumes

Question 7

A company is deploying SAP on AWS and needs to ensure high availability for the SAP application servers. Which TWO strategies can be used to achieve this? (Choose TWO.)

Accepted Answer

Use an Auto Scaling group with an Application Load Balancer. Options C and E are correct. Option C uses an Auto Scaling group with an Application Load Balancer to automatically distribute traffic across multiple SAP application server instances and replace failed ones, ensuring high availability. Option E deploys application servers in multiple Availability Zones to eliminate a single point of failure, as AZs are independent failure domains. Both strategies are recommended for SAP on AWS.

Answer

Use Amazon RDS Multi-AZ for the application tier

Answer

Use a single large EC2 instance with an Elastic IP

Answer

Attach the same EBS volume to multiple instances

Question 8

An SAP administrator applies the IAM policy shown in the exhibit to an IAM user. The administrator reports that the user can start and stop EC2 instances but cannot tag them. Why is the user unable to tag instances?

Accepted Answer

The policy does not include the ec2:CreateTags action.. The IAM policy explicitly grants ec2:StartInstances and ec2:StopInstances actions but does not include ec2:CreateTags. Without the ec2:CreateTags action, the user lacks the required permission to create or modify tags on EC2 instances, even though they can start and stop them.

Answer

The user does not have permission to describe instances.

Answer

The resource ARN is too restrictive.

Answer

There is an implicit deny for all actions not listed.

Question 9

An SAP administrator runs the command shown in the exhibit. The volume is attached to an EC2 instance. The administrator plans to increase the volume size to 1000 GiB. After resizing, the volume type remains gp2. What is the expected baseline IOPS for the resized volume?

Accepted Answer

3000 IOPS. Gp2 volumes have a baseline IOPS of 3 IOPS per GiB, up to a maximum of 16,000 IOPS. For a 1000 GiB gp2 volume, the calculation is 1000 × 3 = 3000 IOPS, which is below the 16,000 IOPS cap, so the expected baseline IOPS is exactly 3000.

Answer

4500 IOPS

Answer

16,000 IOPS

Answer

1500 IOPS

Question 10

An SAP administrator is troubleshooting connectivity between SAP application servers and the SAP HANA database. The database security group has an inbound rule as shown in the exhibit. The application servers are in security group sg-12345. However, the application servers cannot connect to the database. What is the most likely reason?

Accepted Answer

The port number is incorrect for SAP HANA.. SAP HANA uses TCP port 30015 by default for client connections (3<instance>15). If the security group inbound rule specifies a different port, such as 30013 or 31015, the application servers will be unable to establish a TCP connection to the database. The exhibit likely shows an incorrect port number, making option D the most likely cause.

Answer

The source should be the IP address range of the application servers.

Answer

The rule uses the wrong protocol; it should be UDP.

Answer

The outbound rule on the application server security group is missing.

Question 11

A company is deploying SAP S/4HANA on AWS. They need to choose the appropriate storage for the database volume to meet high IOPS and low latency requirements. Which AWS storage service should they use?

Accepted Answer

Amazon EBS io2 Block Express volumes. Amazon EBS io2 Block Express volumes are designed for mission-critical SAP HANA workloads, offering up to 256,000 IOPS per volume and sub-millisecond latency. They provide 99.999% durability and meet the high-performance requirements for SAP S/4HANA database volumes on AWS.

Answer

Amazon EFS

Answer

Amazon S3

Answer

Amazon EBS gp3 volumes

Question 12

An SAP administrator is designing a disaster recovery plan for SAP NetWeaver on AWS. They want to minimize RTO and RPO while keeping costs low. Which strategy should they use?

Accepted Answer

Use AWS Elastic Disaster Recovery (DRS) with SAP HANA system replication. AWS Elastic Disaster Recovery (DRS) with SAP HANA system replication is the correct strategy because it provides continuous replication at the block level, enabling sub-minute RPO and RTO of minutes, while minimizing costs by using lower-cost staging resources and only spinning up full-scale instances during a failover. This combination meets the requirement for minimal RTO/RPO and cost efficiency for SAP NetWeaver on AWS.

Answer

Use AWS EC2 Image Builder to create daily AMIs

Answer

Take manual EBS snapshots every 12 hours

Answer

Replicate SAP application data to an S3 bucket in another region

Question 13

A company runs SAP Business Suite on AWS with a large SAP HANA database. They observe high memory utilization and need to scale up. Which instance type should they choose to provide the highest memory capacity for SAP HANA?

Accepted Answer

u-12tb1.112xlarge. The u-12tb1.112xlarge is the correct choice because it is part of AWS's bare metal 'u' instance family, specifically designed for large in-memory databases like SAP HANA, offering up to 12 TB of RAM. This instance type provides the highest memory capacity among AWS instances, making it suitable for scaling up SAP HANA when high memory utilization is observed.

Answer

r5.24xlarge

Answer

x1e.32xlarge

Answer

m5.24xlarge

Question 14

A company is migrating its SAP ERP system to AWS. They need to ensure high availability for the SAP Central Services (ASCS) instance. Which AWS architecture should they implement?

Accepted Answer

Configure a two-node cluster with a virtual IP (VIP) using AWS Route 53 health checks and failover. SAP ASCS requires a highly available cluster with a virtual IP (VIP) that can fail over between two EC2 instances. AWS Route 53 health checks can monitor the VIP and update DNS records to redirect traffic to the standby node upon failure, providing the necessary high availability for the ASCS instance without relying on a single point of failure.

Answer

Run ASCS on Amazon RDS for SAP with Multi-AZ

Answer

Deploy ASCS on a single large EC2 instance

Answer

Use an Auto Scaling group with a minimum of 2 instances

Question 15

An SAP administrator notices that the SAP HANA database backups to Amazon S3 are failing intermittently with timeout errors. The backup script uses the AWS CLI to copy files to an S3 bucket. What is the most likely cause and solution?

Accepted Answer

The backup files are large and the CLI command does not use multipart upload; use multipart upload and increase timeout values. The intermittent timeout errors when copying large SAP HANA backup files to Amazon S3 via the AWS CLI are most likely caused by the CLI not using multipart upload for large files. The AWS CLI automatically uses multipart upload for files over a certain threshold (default 8 MB), but if the upload is timing out, the default timeout values may be insufficient for very large files. Enabling multipart upload and increasing the `--cli-read-timeout` and `--cli-connect-timeout` values resolves the issue by splitting the file into smaller parts and allowing more time for each part to complete.

Answer

The S3 bucket policy is too restrictive, modify the policy

Answer

The S3 bucket has a lifecycle policy that deletes objects too quickly

Answer

S3 Transfer Acceleration is not enabled, enable it