PAS-C01 Design of SAP Workloads on AWS Practice Test 29 — 15 Questions

Question 1

A company is migrating its SAP HANA database to AWS. The SAP HANA database requires high throughput and low latency for data persistence. Which AWS storage solution should be used for the HANA data volume to meet performance requirements?

Accepted Answer

Use Provisioned IOPS SSD (io1 or io2) EBS volumes for the data volume.. Option B is correct because SAP HANA on AWS requires high-performance storage for the data volume, and AWS recommends using Provisioned IOPS SSD (io1 or io2) EBS volumes for HANA data to ensure consistent low latency and high throughput. Option A is incorrect because General Purpose SSD (gp2) does not provide sufficient IOPS for production HANA workloads. Option C is incorrect because Throughput Optimized HDD (st1) is not suitable for database workloads due to variable performance. Option D is incorrect because Amazon FSx for Lustre is optimized for high-performance computing, not for persistent database storage.

Answer

Use Amazon FSx for Lustre as primary persistent storage for HANA data.

Answer

Use General Purpose SSD (gp2) EBS volumes for the data volume.

Answer

Use Throughput Optimized HDD (st1) EBS volumes for the data volume.

Question 2

A company is implementing an SAP S/4HANA system on AWS. The system must be highly available across multiple Availability Zones. Which of the following strategies should the company implement for the SAP Central Services (ASCS) instance to meet high availability requirements?

Accepted Answer

Deploy a Pacemaker cluster with two EC2 instances across Availability Zones using a shared file system.. Option C is correct because SAP Central Services (ASCS) requires a highly available cluster that can manage the Enqueue and Message Server processes. A Pacemaker cluster across two Availability Zones, using a shared file system (e.g., Amazon EFS or a replicated file system), provides the necessary fencing, resource monitoring, and failover for ASCS. This architecture ensures that if the primary ASCS instance fails, the secondary instance in the other AZ can take over with minimal downtime, meeting the high availability requirement.

Answer

Deploy a single EC2 instance with a large instance type to handle failover.

Answer

Configure SAP HANA System Replication between two Availability Zones.

Answer

Use Amazon RDS for SAP Central Services with Multi-AZ deployment.

Question 3

A company is running SAP NetWeaver on AWS. The SAP application server instances need to be distributed across multiple Availability Zones for high availability. Which AWS feature should be used to ensure low-latency connectivity between these instances?

Accepted Answer

Placement Group (cluster). Option C is correct because placing EC2 instances in the same placement group (cluster placement group) ensures low-latency network connectivity between them, which is beneficial for SAP application servers. Option A is incorrect because an Internet Gateway is for internet access, not internal connectivity. Option B is incorrect because a Network ACL controls traffic at the subnet level, not connectivity. Option D is incorrect because VPC Peering connects different VPCs, not within the same VPC.

Answer

Network ACL

Answer

Internet Gateway

Answer

VPC Peering

Question 4

A company is designing a disaster recovery (DR) strategy for its SAP HANA database on AWS. The primary site is in us-east-1. The DR site must be in us-west-2. The company requires a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 2 hours. Which AWS service should be used for replicating HANA data?

Accepted Answer

SAP HANA System Replication to an EC2 instance in us-west-2.. Option B is correct because SAP HANA System Replication with HANA replication over AWS Direct Connect or VPN to a different region can achieve an RPO of seconds and RTO of minutes, meeting the requirements. Option A is incorrect because Amazon EBS Snapshots are not real-time and cannot achieve 15-minute RPO. Option C is incorrect because S3 Cross-Region Replication is for S3 objects, not for HANA database files. Option D is incorrect because AWS Database Migration Service is for one-time migrations, not continuous replication.

Answer

AWS Database Migration Service with ongoing replication.

Answer

Amazon EBS Snapshots copied to us-west-2 every hour.

Answer

Amazon S3 Cross-Region Replication for HANA data files.

Question 5

A company is running SAP Business Suite on AWS. The SAP application servers are behind an Application Load Balancer (ALB). Users are experiencing session timeouts because the ALB is distributing requests to different application servers. What should the company configure on the ALB to maintain session stickiness?

Accepted Answer

Enable sticky sessions using the ALB-generated cookie.. Option C is correct because Application Load Balancers support sticky sessions using cookies (either application-generated or AWS-generated). This ensures that a user's requests are sent to the same target group member. Option A is incorrect because path-based routing is for routing requests based on URL path, not for session stickiness. Option B is incorrect because cross-zone load balancing distributes traffic across all zones, but does not ensure stickiness. Option D is incorrect because a Network Load Balancer does not natively support sticky sessions for SAP.

Answer

Use a Network Load Balancer instead of an Application Load Balancer.

Answer

Enable cross-zone load balancing on the ALB.

Answer

Enable path-based routing to route all requests from a user to the same server.

Question 6

A company is planning to migrate its SAP landscape to AWS. The landscape includes development, quality assurance, and production systems. The company wants to minimize costs by reusing resources across environments. Which AWS feature should be used to enforce resource tagging and compliance?

Accepted Answer

AWS Service Catalog with tag options.. Option D is correct because AWS Service Catalog allows organizations to create and manage a catalog of approved IT services, with tagging and compliance policies enforced. Option A is incorrect because AWS Config is for monitoring resource configuration, not for provisioning. Option B is incorrect because AWS Resource Access Manager is for sharing resources, not for governance. Option C is incorrect because AWS CloudFormation is a provisioning tool but does not enforce tagging policies on its own.

Answer

AWS CloudFormation templates with required tags.

Answer

AWS Resource Access Manager to share resources.

Answer

AWS Config rules to enforce tagging.

Question 7

A company is running SAP ERP on AWS. The SAP application servers are in private subnets, and the database is in a separate private subnet. The company needs to allow the application servers to communicate with the database. Which AWS networking component should be configured to allow this traffic?

Accepted Answer

Security Group rules allowing traffic between the security groups.. Option B is correct because Security Groups act as a virtual firewall for EC2 instances, and adding a rule to the database security group that allows inbound traffic from the application server security group is the recommended way to control traffic between instances. Option A is incorrect because an Internet Gateway is for internet access. Option C is incorrect because a Network ACL is stateless and more complex to manage. Option D is incorrect because VPC Peering is for connecting different VPCs.

Answer

VPC Peering connection between subnets.

Answer

Internet Gateway

Answer

Network ACL with inbound rules for the database subnet.

Question 8

A company is running SAP HANA on AWS. The HANA database is deployed on an r5.8xlarge instance. The company notices high CPU utilization on the instance during peak loads. The SAP team confirms that the HANA workload requires more CPU capacity. What is the most cost-effective way to increase CPU capacity without changing the instance family?

Accepted Answer

Resize the instance to a larger instance type in the r5 family.. Option D is correct because r5.8xlarge is a fixed instance size. To increase CPU capacity, the company can move to a larger instance in the same family (r5.12xlarge or r5.24xlarge) using instance resizing (stop the instance, change instance type, start). Option A is incorrect because adding EBS volumes does not increase CPU. Option B is incorrect because launching additional instances would require a distributed HANA setup which may not be cost-effective. Option C is incorrect because auto scaling is not applicable for a single HANA instance.

Answer

Add more EBS volumes with higher IOPS to offload CPU.

Answer

Launch additional r5.8xlarge instances and configure HANA scale-out.

Answer

Configure Auto Scaling to add instances during peak load.

Question 9

A company is designing a backup strategy for SAP HANA on AWS. The HANA database is 2 TB in size. The company requires daily full backups and hourly incremental backups. Which AWS service should be used to store the backups cost-effectively with high durability?

Accepted Answer

Amazon S3 with lifecycle policies to transition to Glacier.. Option A is correct because Amazon S3 provides 99.999999999% durability and is cost-effective for storing backups. S3 lifecycle policies can move older backups to Glacier for further cost savings. Option B is incorrect because Amazon EBS Snapshots are stored in S3 but are more expensive for long-term retention. Option C is incorrect because Amazon EFS is a file system, not optimized for backup storage. Option D is incorrect because AWS Storage Gateway is for on-premises integration.

Answer

Amazon EBS Snapshots stored in Amazon S3.

Answer

AWS Storage Gateway with volume gateway.

Answer

Amazon EFS for shared backup storage.

Question 10

Which THREE of the following are best practices for securing SAP systems on AWS?

Accepted Answer

Encrypt EBS volumes using AWS KMS.. Options A, B, and D are correct. A: Using AWS KMS to encrypt EBS volumes ensures data at rest is encrypted. B: Security groups are stateful firewalls that control traffic between instances. D: IAM roles provide temporary credentials for EC2 instances to access AWS services securely. Option C is incorrect because public subnets expose instances to the internet, which is not a security best practice. Option E is incorrect because root user credentials should not be used for daily operations; IAM users are preferred.

Answer

Place all SAP instances in public subnets for easier access.

Answer

Store AWS credentials in the SAP application code for API access.

Question 11

Which TWO of the following are valid options for implementing high availability for SAP NetWeaver on AWS?

Accepted Answer

Deploy two EC2 instances across Availability Zones with a shared file system (EFS) and a cluster manager.. Options A and C are correct. A: SAP NetWeaver can use a multi-AZ deployment with Amazon EFS as a shared file system for the SAP transport directory, and a cluster manager (e.g., Pacemaker) to handle failover. C: SAP NW HA can also be achieved using a Windows Server Failover Cluster with shared storage (e.g., Amazon FSx for Windows File Server). Option B is incorrect because Amazon RDS does not support SAP NetWeaver. Option D is incorrect because a single EC2 instance does not provide HA. Option E is incorrect because S3 is not a file system suitable for SAP transport directory.

Answer

Use Amazon RDS Multi-AZ for SAP Central Services.

Answer

Use Amazon S3 for shared storage and configure manual failover.

Answer

Run SAP Central Services on a single large EC2 instance.

Question 12

Which TWO of the following are required when integrating SAP HANA with AWS Direct Connect for hybrid connectivity?

Accepted Answer

A Virtual Private Gateway attached to the VPC.. A Virtual Private Gateway (VGW) is required to attach the VPC to the Direct Connect connection, enabling private IP traffic between on-premises and the VPC. Without a VGW, the Direct Connect virtual interface cannot terminate within the VPC, making hybrid connectivity impossible for SAP HANA workloads that require low-latency, private network paths.

Answer

A Public Virtual Interface to access the VPC.

Answer

A Direct Connect Gateway for the connection.

Answer

A VPN tunnel between on-premises and AWS.

Question 13

A company is running a large SAP S/4HANA production system on AWS. The system consists of a single HANA database instance running on an r5.24xlarge EC2 instance (with 768 GB of RAM), and multiple application server instances behind an Application Load Balancer. The database uses six EBS io1 volumes for data and log files, each with 20,000 provisioned IOPS. The application servers are in an Auto Scaling group. Recently, the company experienced a prolonged database outage when the primary EC2 instance failed. The recovery took over 4 hours because a new instance had to be launched and snapshots restored. The company wants to improve the Recovery Time Objective (RTO) to less than 30 minutes for the HANA database. They also want to minimize data loss with an RPO of less than 5 minutes. The company has a second AWS region (us-west-2) available for disaster recovery but prefers to keep costs low for the DR site. Which solution should the company implement?

Accepted Answer

Set up SAP HANA System Replication to a standby HANA instance in a different Availability Zone. Use a smaller instance type for the standby to reduce costs. Automate failover using a cluster manager like Pacemaker.. Option C is correct because SAP HANA System Replication (HSR) provides near-synchronous replication with a typical RPO of seconds and can be configured with automatic takeover to a standby instance in another Availability Zone. The standby can be a smaller instance (e.g., r5.12xlarge) to reduce costs. The takeover can be automated with Pacemaker, achieving RTO of minutes. Option A is incorrect because a new EC2 instance launch and snapshot restore cannot achieve 30-minute RTO. Option B is incorrect because Multi-AZ RDS is not for HANA. Option D is incorrect because HSR to a smaller instance in the same region provides DR but does not use the second region as specified.

Answer

Configure SAP HANA System Replication to a standby instance in the same region but use a larger instance to ensure capacity.

Answer

Configure automated Amazon EBS snapshots every 5 minutes and create an AMI for the HANA instance. In the event of a failure, launch a new instance from the AMI in the same Availability Zone.

Answer

Use Amazon RDS for SAP HANA with Multi-AZ deployment to automatically failover to a standby in another Availability Zone.

Question 14

A company is preparing to migrate its SAP ECC 6.0 system to SAP S/4HANA on AWS. The current on-premises system includes a single application server and a database server running Oracle. The total database size is 1.5 TB. The company plans to use a homogeneous migration approach by exporting the existing Oracle database and importing it into a new SAP HANA database running on AWS. The migration must be completed within a tight weekend window. The company has established a 1 Gbps AWS Direct Connect connection to AWS. Which migration strategy should the company use to minimize downtime?

Accepted Answer

Use the SAP Software Update Manager (SUM) with Database Migration Option (DMO). Perform the migration in a weekend window using the delta replication feature.. Option B is correct because SAP HANA Database Migration Option (DMO) with System Move is the recommended tool for migrating from any source database to SAP HANA. It can perform the migration online with minimal downtime by using a delta replication phase. The DMO tool is included in SAP Software Update Manager (SUM). Option A is incorrect because exporting and importing using SAP HANA Studio is a manual process that would take longer and require more downtime. Option C is incorrect because AWS Database Migration Service (DMS) does not support Oracle to HANA migrations with schema conversion. Option D is incorrect because using an Application Load Balancer is not a migration strategy.

Answer

Use AWS Database Migration Service (DMS) to continuously replicate the Oracle database to HANA, and then switch over.

Answer

Use an Application Load Balancer to redirect traffic to the new HANA system after exporting the data to S3.

Answer

Use the SAP HANA Studio migration wizard to export the Oracle database and import it into HANA. This is the simplest method.

Question 15

A company runs SAP Business Warehouse (BW) on AWS. The BW system uses a single HANA database instance on an r5.12xlarge EC2 instance with 4 EBS io1 volumes for data. The company has noticed that during peak data loads, the CPU utilization on the HANA instance reaches 90%. An SAP consultant recommends increasing the CPU capacity. The company wants to minimize costs and avoid over-provisioning. What is the most cost-effective solution to increase CPU capacity for the HANA instance?

Accepted Answer

Change the EC2 instance type to a larger size in the r5 family, such as r5.16xlarge, to add more vCPUs.. Option A is correct because the simplest and most cost-effective way to increase CPU capacity is to resize the EC2 instance to a larger instance type within the same family (e.g., r5.16xlarge or r5.24xlarge). This provides more vCPUs without needing to change the architecture. Option B is incorrect because increasing EBS volume IOPS does not add CPU capacity. Option C is incorrect because launching additional HANA instances for scale-out is complex and more expensive. Option D is incorrect because using a different instance family (e.g., compute-optimized) may require reconfiguration and is not as straightforward as resizing within the same family.

Answer

Increase the provisioned IOPS on the EBS volumes to improve I/O performance.

Answer

Deploy additional HANA worker nodes and configure a scale-out system.

Answer

Migrate the HANA instance to a compute-optimized instance family, such as c5.