PAS-C01 Technology Practice Question
A company is troubleshooting an issue where SAP users cannot log in to the SAP GUI. The SAP application server is running on an EC2 instance behind an Application Load Balancer (ALB). The ALB is configured to use the HTTPS listener on port 443. Which configuration is most likely causing the issue?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The ALB is terminating HTTPS connections, but the SAP application server expects unencrypted DIAG protocol.
SAP GUI uses the DIAG protocol over TCP port 3200, not HTTPS. The ALB terminates HTTPS connections, but the backend SAP application server expects unencrypted DIAG traffic, so the protocol mismatch prevents successful login. Option A is incorrect because health checks affect target availability, not user authentication. Option B is incorrect because port 3300 is not the standard DIAG port (3200 is), and security group rules are not the primary cause. Option D is incorrect because stickiness settings influence session persistence but do not block initial login when protocol mismatch exists.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The ALB's target group is not configured with health checks.
Why it's wrong here
Health checks affect routing but not the protocol mismatch; the main issue is the wrong listener type.
- ✗
The security group for the ALB does not allow inbound traffic on port 3300.
Why it's wrong here
SAP GUI uses port 3200, not 3300; also, the issue is the protocol, not the port.
- ✓
The ALB is terminating HTTPS connections, but the SAP application server expects unencrypted DIAG protocol.
Why this is correct
SAP GUI uses DIAG (TCP 3200), not HTTP/HTTPS; an ALB is not suitable for non-HTTP traffic.
- ✗
The ALB's stickiness settings are misconfigured, causing session persistence issues.
Why it's wrong here
Stickiness is important for SAP but not the root cause; the protocol mismatch is the primary problem.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,616 original PAS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PAS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PAS-C01 exam.