PAS-C01 Design of SAP Workloads on AWS Practice Test 7 — 15 Questions

Question 1

An SAP system running on AWS is experiencing high latency to its S3-backed backup destination. Which architectural change would most effectively reduce backup latency?

Accepted Answer

Configure an S3 Gateway Endpoint in the VPC to route traffic to S3 privately.. An S3 Gateway Endpoint provides a private, low-latency path from the SAP EC2 instance to S3 without traversing the public internet or NAT gateways. This eliminates network hops and reduces latency by keeping traffic within the AWS network, directly addressing the high-latency issue for S3-backed backups.

Answer

Increase the size of the EC2 instance running SAP to improve I/O throughput.

Answer

Move the SAP instance to a different Availability Zone closer to the S3 bucket.

Answer

Enable S3 Transfer Acceleration on the backup bucket.

Question 2

A company runs SAP on AWS with an Oracle database. They want to implement a disaster recovery strategy with a Recovery Point Objective (RPO) of less than 15 minutes and a Recovery Time Objective (RTO) of less than 2 hours. Which combination of AWS services should they use?

Accepted Answer

AWS Database Migration Service (DMS) for ongoing replication to a DR instance, and automated snapshots for fast recovery.. AWS DMS can perform ongoing replication from an Oracle source database to a target DR instance with minimal latency, enabling an RPO of less than 15 minutes. Automated snapshots of the DR instance allow fast recovery within the 2-hour RTO. This combination meets the stated RPO and RTO requirements without relying on Oracle-specific licensing or complex manual scripts.

Answer

Oracle Data Guard for replication and Amazon Route 53 for DNS failover.

Answer

Amazon S3 cross-region replication for database files and a script to import them.

Answer

AWS Backup to take weekly snapshots and restore in the DR region.

Question 3

A company is deploying SAP NetWeaver on AWS and needs to ensure that the SAP application servers can automatically scale based on CPU utilization. Which AWS service should they use?

Accepted Answer

AWS Auto Scaling groups with CloudWatch alarms. AWS Auto Scaling groups with CloudWatch alarms allow SAP application servers to automatically scale in or out based on CPU utilization thresholds. This is the correct approach because Auto Scaling groups can dynamically adjust the number of EC2 instances in response to CloudWatch metric alarms, which is essential for handling variable SAP workload demands without manual intervention.

Answer

Amazon CloudWatch to monitor CPU and send alerts

Answer

AWS Lambda to start and stop instances based on a schedule

Answer

Elastic Load Balancing (ELB) with health checks

Question 4

A company has a large SAP HANA database running on an r5.8xlarge instance. They are planning to migrate to a new instance type that supports more memory for future growth. Which migration approach minimizes downtime and requires no data reload?

Accepted Answer

Stop the instance, change the instance type, and start the instance.. Stopping the instance, changing the instance type, and starting the instance preserves all attached EBS volumes, including the HANA data and log volumes. This approach requires no data backup or restore, minimizing downtime to just the stop/start cycle. Option D is incorrect because SAP HANA data is typically stored on separate EBS volumes (not the root volume), so an EBS snapshot of only the root volume would not capture the HANA data, necessitating a full data reload. Options A and B both involve time-consuming data replication or backup/restore, resulting in more downtime.

Answer

Use AWS Database Migration Service (DMS) to replicate data to the new instance.

Answer

Perform a full HANA database backup and restore to the new instance.

Answer

Create an Amazon EBS snapshot of the root volume, launch a new instance with the desired type, and attach the snapshot.

Question 5

An SAP system administrator needs to ensure that all SAP application logs are centrally collected and monitored for errors. Which AWS service should they use to aggregate logs from multiple EC2 instances?

Accepted Answer

Amazon CloudWatch Logs. Amazon CloudWatch Logs is the correct service because it provides a centralized, agent-based log aggregation solution. The CloudWatch Logs agent (or unified CloudWatch agent) can be installed on each EC2 instance to automatically collect, encrypt, and stream SAP application logs to a central CloudWatch Logs group. This allows the administrator to monitor logs in real time, set metric filters for error patterns, and trigger alarms without needing to build custom infrastructure.

Answer

Amazon S3 with server access logs

Answer

Amazon Kinesis Data Firehose

Answer

AWS Lambda to process logs from each instance

Question 6

A company runs SAP on AWS with a shared storage solution for transport files. They need a highly available, scalable, and POSIX-compliant file system. Which AWS storage service should they use?

Accepted Answer

Amazon FSx for NetApp ONTAP. Amazon FSx for NetApp ONTAP provides a fully managed, POSIX-compliant shared file system that supports the NFS, SMB, and iSCSI protocols required by SAP transport directories. It offers high availability across multiple Availability Zones, automatic failover, and scalable throughput, making it the correct choice for SAP transport files on AWS.

Answer

Amazon Elastic File System (EFS)

Answer

Amazon S3

Answer

Amazon Elastic Block Store (EBS) with Multi-Attach enabled

Question 7

An SAP environment on AWS is using a single Availability Zone. The company wants to achieve high availability for SAP Central Services (ASCS) and Enqueue Replication Server (ERS). Which architecture should they implement?

Accepted Answer

Deploy ASCS and ERS in separate Availability Zones using AWS Launch Wizard for SAP.. Achieving high availability for SAP Central Services (ASCS) and Enqueue Replication Server (ERS) on AWS requires deploying them in separate Availability Zones (AZs) to protect against an entire AZ failure. AWS Launch Wizard for SAP automates the deployment of a multi-AZ SAP system, including the necessary infrastructure components like Elastic Load Balancing and Amazon EFS, ensuring that the ASCS and ERS instances are in different AZs with a replicated enqueue table. This architecture aligns with SAP's recommendation for a high-availability setup using a Pacemaker cluster with STONITH fencing, which is supported by AWS.

Answer

Deploy ASCS and ERS in the same Availability Zone with a second instance as passive.

Answer

Place ASCS and ERS on the same instance to reduce complexity.

Answer

Use Auto Scaling groups to automatically replace failed instances.

Question 8

A company is designing an SAP HANA disaster recovery solution on AWS across two regions. Which TWO actions meet the requirement of a Recovery Point Objective (RPO) of less than 5 minutes?

Accepted Answer

Set up AWS Database Migration Service (DMS) with ongoing replication from the primary to the DR region.. AWS Database Migration Service (DMS) with ongoing replication can continuously capture and apply changes from the SAP HANA source database to a target in the DR region, achieving sub-5-minute RPO by replicating transactions in near real-time. Option D is correct because SAP HANA System Replication with asynchronous mode replicates data at the database level, typically achieving RPO of seconds to a few minutes, well under the 5-minute requirement.

Answer

Use Amazon S3 Cross-Region Replication to copy HANA data files to the DR region every minute.

Answer

Schedule a script to run every minute that exports HANA data and uploads to S3 in the DR region.

Answer

Configure automated nightly snapshots of the HANA database and copy them to the DR region using AWS Backup.

Question 9

A company is migrating SAP applications to AWS and needs to ensure that the environment meets SAP certification. Which TWO AWS services are specifically designed to help validate SAP workloads on AWS?

Accepted Answer

AWS Launch Wizard for SAP. AWS Launch Wizard for SAP (Option B) is specifically designed to guide you through the sizing, configuration, and deployment of SAP systems on AWS, automatically generating a CloudFormation template that adheres to SAP certification requirements. AWS Trusted Advisor (Option E) provides checks for SAP-specific best practices, such as verifying that your EC2 instances are SAP-certified and that your storage configuration meets SAP's performance requirements. Both services directly help validate that your SAP workload meets SAP's certification criteria on AWS.

Answer

AWS Config

Answer

Amazon Inspector

Answer

AWS Well-Architected Tool

Question 10

An SAP administrator is creating an IAM policy for an EC2 instance that performs SAP database backups to S3 and creates EBS snapshots. The policy as shown fails to allow the EC2 instance to perform backup operations. What is the most likely reason?

Accepted Answer

The policy does not include the 's3:ListBucket' action for the bucket itself.. The policy lacks the `s3:ListBucket` action for the bucket itself (ARN without `/*`). When an EC2 instance performs SAP database backups to S3, the AWS SDK or CLI first issues a `ListBucket` request to verify the bucket exists and to list objects before uploading. Without this permission, the backup operation fails at the initial listing step, even if `s3:PutObject` is allowed on the object ARN.

Answer

The S3 resource ARN is incorrect; it should be 'arn:aws:s3:::sap-backup-bucket' without the '/*'.

Answer

The S3 actions are too permissive; they should be restricted to specific prefixes.

Answer

The ec2:CreateSnapshot action must be restricted to specific volume ARNs.

Question 11

An SAP HANA administrator is troubleshooting a performance issue on an EC2 instance (r5.8xlarge) running SAP HANA. The instance has two EBS volumes attached. Based on the exhibit, which additional information is needed to determine if the instance is optimized for SAP HANA?

Accepted Answer

Whether the instance is EBS-optimized or has dedicated EBS bandwidth.. SAP HANA requires high and consistent network throughput for data replication and client access, and the instance must be EBS-optimized or have dedicated EBS bandwidth to ensure that EBS I/O does not contend with network I/O. Without this confirmation, the administrator cannot guarantee that the instance meets SAP's performance requirements for HANA workloads, as non-optimized instances share the same network interface for both EBS and data traffic, leading to potential bottlenecks.

Answer

Whether the instance is in a placement group.

Answer

The volume type and IOPS of the attached EBS volumes.

Answer

Whether the AMI used is SAP-certified.

Question 12

An SAP administrator is deploying an SAP ASCS instance using CloudFormation. The deployment fails because the instance cannot be reached from other SAP components. Based on the exhibit, what is the most likely cause?

Accepted Answer

The security group does not allow inbound traffic on the required SAP ports.. The SAP ASCS instance must be reachable by other SAP components (e.g., PAS, AAS) on specific ports for services like the SAP Message Server (port 36xx/TCP) and SAP Enqueue Server (port 32xx/TCP). The exhibit shows the security group lacks inbound rules for these ports, so traffic from other components is blocked, causing the deployment to fail. Without proper inbound access, the ASCS instance cannot participate in the SAP system's communication, leading to the unreachability error.

Answer

The instance type m5.large is not certified for SAP ASCS.

Answer

The instance lacks an IAM role to join the SAP domain.

Answer

The root volume is too small and uses gp2, which is not supported for SAP.

Question 13

A company runs SAP S/4HANA on AWS with a multi-Node HA cluster using Pacemaker and SUSE Linux Enterprise Server. The SAP application and database are on separate EC2 instances. After a planned failover test, the secondary node fails to take over the database role. What is the most likely cause?

Accepted Answer

STONITH fencing is not configured for the cluster.. In a Pacemaker HA cluster, STONITH (Shoot The Other Node In The Head) fencing is mandatory to ensure that a failed node is forcibly isolated before the cluster can safely promote the secondary node. Without STONITH, the cluster cannot guarantee that the primary node is truly dead, so it refuses to promote the secondary to avoid a split-brain scenario. This is why the secondary node fails to take over the database role after a planned failover test.

Answer

The SAP HANA system replication is using asynchronous mode.

Answer

The EBS volumes are not configured with multi-attach enabled.

Answer

The SAP HANA system replication is not configured with ENSA2.

Question 14

A company is migrating SAP ECC to AWS and needs to ensure low-latency connectivity between the SAP application and database servers. Which AWS service is most appropriate to achieve this?

Accepted Answer

Placement groups for the application and database instances.. Placement groups, specifically cluster placement groups, provide low-latency, high-throughput network connectivity by placing instances in a single Availability Zone within a low-latency, 10 Gbps network. This is ideal for SAP ECC where the application and database servers require consistent, sub-millisecond latency for optimal performance.

Answer

VPC peering between the application and database subnets.

Answer

AWS Direct Connect to connect the application and database servers.

Answer

AWS Transit Gateway to connect the application and database subnets.

Question 15

An SAP administrator needs to back up an SAP HANA database running on an EC2 instance with EBS volumes. The backup must be consistent and restorable to any point in time. Which approach meets these requirements?

Accepted Answer

Use AWS Backup with pre and post scripts for application-consistent snapshots and enable continuous backup.. AWS Backup with pre and post scripts enables application-consistent snapshots by quiescing the SAP HANA database (via commands like hdbsql to trigger a snapshot or log flush) before taking the EBS snapshot, ensuring crash-consistent data. Enabling continuous backup (using AWS Backup's continuous backup and point-in-time recovery for EBS snapshots) allows restoration to any point in time within the retention window, meeting the requirement for point-in-time recovery.

Answer

Use S3 lifecycle policies to transition backups to Glacier.

Answer

Take manual EBS snapshots of the database volumes before each backup.

Answer

Use AWS Backup with EBS snapshots every hour.