Courseiva

AWS Certified SAP on AWS Specialty PAS-C01 (PAS-C01) — Questions 676–750

1733 questions total · 24pages · All types, answers revealed

Take a mock examExam hub
Page 9

Page 10 of 24

Page 11
676
Multi-Selectmedium

A company runs an SAP HANA database on an EC2 instance with a 2 TB EBS gp3 volume. The instance type is r5.8xlarge. To improve disk performance for high-throughput write operations, the SAP administrator wants to increase IOPS. Which TWO actions should the administrator take to achieve the required IOPS? (Choose two.)

Select 2 answers
A.Configure the instance to use T2 unlimited credits.
B.Change the volume type to st1 (throughput optimized HDD).
C.Modify the volume to provision additional IOPS up to 16,000.
D.Enable EBS optimization on the EC2 instance.
E.Increase the EBS volume size to increase baseline IOPS.
AnswersC, E

gp3 allows independent IOPS provisioning.

Why this answer

Option A (increase volume size) is correct because gp3 volumes have a baseline IOPS-to-GiB ratio of 3 IOPS/GiB; increasing size increases baseline IOPS. Option E (modify IOPS) is correct because gp3 allows provisioning up to 16,000 IOPS independently of size. Option B is wrong because switching to st1 is for throughput-optimized workloads, not for high IOPS.

Option C is wrong because EBS optimization is enabled by default on r5 instances. Option D is wrong because Nitro T2 credits are not related to EBS performance.

Full explanation →
677
MCQeasy

A company wants to migrate its SAP ERP system from on-premises to AWS using the SAP Application Performance Standard (SAPS) sizing approach. The current on-premises system has a SAPS rating of 15,000. The company needs to select an EC2 instance type that can provide sufficient compute capacity. Which EC2 instance family is most suitable for SAP HANA workloads?

A.c5
B.p3
C.x1e
D.m5
AnswerC

x1e is memory-optimized and certified for SAP HANA.

Why this answer

Option A is correct because SAP HANA is memory-intensive and x1e instances are certified for HANA. Option B is wrong because c5 is compute-optimized, not memory-optimized. Option C is wrong because m5 is general purpose.

Option D is wrong because p3 is GPU-optimized.

Full explanation →
678
MCQeasy

The operations team deploys the CloudFormation template above. After the stack creation completes, the EC2 instance is launched but the SAP application is not running. What is the most likely reason?

A.The UserData script only installs httpd, not the SAP application
B.The security group does not allow inbound traffic to the SAP application port
C.The instance type is not suitable for SAP applications
D.The AMI ID is incorrect
AnswerA

UserData does not install SAP, so it is not running.

Why this answer

The UserData script installs httpd (Apache), not the SAP application. The template does not include any steps to install or start the SAP application. The security group is referenced but not shown; it is likely correct.

The instance type is appropriate for SAP. The AMI ID is valid.

Full explanation →
679
MCQmedium

Refer to the exhibit. An SAP HANA administrator runs the command to check the attached volume. The volume is attached to an instance but the database is reporting low IOPS. What should the administrator check next?

A.Check if the volume size is sufficient; increase to 1 TB.
B.Check if the EC2 instance is EBS-optimized and has sufficient network bandwidth.
C.Check if the volume type should be changed to gp2 for better burst performance.
D.Check if the instance is using the NVMe driver for the EBS volume.
AnswerB

If the instance is not EBS-optimized, it cannot deliver the provisioned IOPS.

Why this answer

Option D is correct because the volume is io1 with 10,000 IOPS, but the instance may not have EBS-optimized enabled, limiting throughput. Option A is wrong because the volume type is io1, not gp2. Option B is wrong because the volume size (500 GB) does not directly affect IOPS.

Option C is wrong because NVMe driver is for instance store volumes, not EBS.

Full explanation →
680
MCQeasy

An SAP Basis administrator needs to monitor the CPU utilization of all EC2 instances running SAP applications. The team wants to receive alerts when CPU utilization exceeds 80% for 5 consecutive minutes. Which AWS service should be used to set up this monitoring and alerting?

A.Amazon CloudWatch
B.AWS Trusted Advisor
C.AWS CloudTrail
D.AWS Config
AnswerA

CloudWatch can monitor CPU utilization and trigger alarms based on thresholds.

Why this answer

Option D is correct because CloudWatch can collect CPU utilization metrics from EC2 and trigger alarms based on thresholds. Option A is wrong because CloudTrail is for API auditing. Option B is wrong because Config is for resource configuration tracking.

Option C is wrong because Trusted Advisor provides best-practice recommendations but not custom metric alarms.

Full explanation →
681
MCQmedium

A company runs SAP on AWS and has configured automated snapshots of EBS volumes for backup. The operations team discovers that the snapshots are not being deleted after the retention period. Which action should be taken to ensure snapshots are automatically deleted?

A.Set an S3 Lifecycle policy on the snapshots.
B.Use Amazon Data Lifecycle Manager to create a snapshot lifecycle policy.
C.Create a CloudWatch Events rule to invoke a Lambda function for deletion.
D.Configure retention policy directly on the EBS volume.
AnswerB

DLM automates snapshot creation and deletion.

Why this answer

Option C is correct because Amazon Data Lifecycle Manager (DLM) can manage EBS snapshots and automate deletion. Option A is wrong because EBS does not have a native retention policy. Option B is wrong because CloudWatch Events can trigger Lambda, but DLM is the managed service.

Option D is wrong because S3 Lifecycle policies do not apply to EBS snapshots.

Full explanation →
682
MCQeasy

An SAP Basis administrator is migrating an SAP NetWeaver system from on-premises to AWS. They want to minimize downtime during the migration of the database. Which AWS service is best suited for this?

A.AWS Server Migration Service (SMS)
B.AWS CloudEndure Migration
C.AWS Database Migration Service (DMS)
D.AWS Snowball Edge
AnswerC

DMS supports ongoing replication for minimal downtime.

Why this answer

AWS DMS can perform live migration with minimal downtime by continuously replicating changes from the source database to the target RDS instance.

Full explanation →
683
MCQhard

An SAP system on AWS is experiencing high latency between the application and database tiers. Both tiers are in the same VPC but in different Availability Zones. What is the most effective way to reduce latency?

A.Move both tiers into the same Availability Zone.
B.Add an Application Load Balancer between tiers.
C.Increase the bandwidth of the EC2 instances.
D.Enable AWS Direct Connect.
AnswerA

Same AZ reduces network distance and latency.

Why this answer

Option C is correct because placing both tiers in the same AZ eliminates cross-AZ data transfer latency. Option A (increasing bandwidth) does not reduce latency. Option B (adding a load balancer) adds overhead.

Option D (using Direct Connect) is for on-premises connectivity, not within AWS.

Full explanation →
684
MCQmedium

A company runs SAP S/4HANA on AWS. The system uses an SAP HANA database with a single EC2 instance. The operations team needs to implement a disaster recovery (DR) strategy with a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 1 hour. The DR site is in a different AWS Region. The team currently takes daily EBS snapshots and sends them to the DR region using AWS Backup cross-region copy. However, the RPO is not met because snapshots are only taken daily. Which combination of actions should the team take to meet the RPO and RTO?

A.Increase the frequency of EBS snapshots to every hour and use cross-region copy. Also, pre-warm the DR instance by restoring the latest snapshot.
B.Use AWS CloudEndure Disaster Recovery to replicate the entire EC2 instance to the DR region.
C.Set up HANA System Replication (HSR) between the primary and DR regions. In the DR region, maintain a standby HANA instance in sync. Use automated failover scripts.
D.Use Amazon EBS multi-region replication for the HANA data volumes.
AnswerC

HSR provides low RPO (seconds to minutes) and with a pre-provisioned standby, RTO can be under 1 hour.

Why this answer

Option B is correct. HANA System Replication provides near-continuous data replication, meeting the 15-minute RPO. For RTO, having a pre-provisioned HANA instance in the DR region and using automated failover procedures can achieve 1-hour RTO.

Option A is wrong because increasing snapshot frequency to every hour still does not meet 15-minute RPO and RTO may be longer due to snapshot restore time. Option C is wrong because EBS replication does not guarantee database consistency. Option D is wrong because CloudEndure is designed for server-level replication but may not be optimized for HANA and could impact performance.

Full explanation →
685
MCQeasy

An SAP administrator needs to apply an OS-level security patch to all EC2 instances in an SAP landscape. The administrator wants to automate this process and track compliance. Which AWS service should be used?

A.AWS Systems Manager Patch Manager
B.AWS CodeDeploy
C.AWS OpsWorks
D.AWS Elastic Beanstalk
AnswerA

Patch Manager automates OS patching and provides compliance reporting.

Why this answer

AWS Systems Manager Patch Manager automates OS patching and tracks compliance. Elastic Beanstalk is for application deployments. OpsWorks is for configuration management.

CodeDeploy is for application code. Patch Manager is the correct service for OS patches.

Full explanation →
686
MCQhard

An SAP HANA administrator is troubleshooting a performance issue on an EC2 instance (r5.8xlarge) running SAP HANA. The instance has two EBS volumes attached. Based on the exhibit, which additional information is needed to determine if the instance is optimized for SAP HANA?

A.Whether the instance is EBS-optimized or has dedicated EBS bandwidth.
B.Whether the instance is in a placement group.
C.The volume type and IOPS of the attached EBS volumes.
D.Whether the AMI used is SAP-certified.
AnswerA

SAP HANA requires EBS optimization; the exhibit does not show this attribute (shown in describe-instances as 'EbsOptimized').

Why this answer

Option A is correct because SAP HANA requires high and consistent network throughput for data replication and client access, and the instance must be EBS-optimized or have dedicated EBS bandwidth to ensure that EBS I/O does not contend with network I/O. Without this confirmation, the administrator cannot guarantee that the instance meets SAP's performance requirements for HANA workloads, as non-optimized instances share the same network interface for both EBS and data traffic, leading to potential bottlenecks.

Exam trap

The trap here is that candidates often focus on storage parameters like volume type and IOPS (Option C) because they are directly tied to SAP HANA's performance, but the question specifically asks about the instance's optimization, which is a network-level attribute that controls how EBS traffic is handled, not the storage configuration itself.

How to eliminate wrong answers

Option B is wrong because a placement group affects network latency and throughput between instances, but it does not directly impact the instance's ability to handle EBS I/O or its optimization for SAP HANA. Option C is wrong because while volume type and IOPS are important for storage performance, the question specifically asks about the instance's optimization for SAP HANA, which is determined by EBS-optimization or dedicated bandwidth, not the volume specifications themselves. Option D is wrong because the AMI certification ensures the operating system and SAP HANA software are compatible, but it does not address the underlying instance's network and EBS I/O architecture required for optimized performance.

Full explanation →
687
MCQeasy

A company runs an SAP HANA database on an EC2 instance with a single EBS volume. The database is experiencing high I/O latency during peak hours. Which solution would provide consistent, low-latency performance without downtime?

A.Migrate the database to an instance with NVMe instance store volumes.
B.Replace the existing volume with an EBS io2 Block Express volume.
C.Attach an Elastic Fabric Adapter (EFA) to the instance to offload storage I/O.
D.Switch the volume type to EBS gp3 with maximum throughput.
AnswerC

EFA is for inter-instance communication, not storage. This would not help.

Why this answer

Option C is correct because AWS Elastic Fabric Adapter (EFA) is designed for HPC and not storage. Option A (EBS io2 Block Express volumes) provides high performance and can be attached without downtime. Option B (instance store) would require data migration.

Option D (EBS gp3) may not meet latency requirements.

Full explanation →
688
MCQmedium

A company is planning to migrate their SAP ECC system to AWS. They want to minimize downtime and use an automated approach. Which AWS service should be used for the migration?

A.AWS Application Discovery Service
B.AWS CloudFormation
C.AWS Launch Wizard
D.AWS Server Migration Service
AnswerC

Launch Wizard automates SAP deployment and migration with best practices.

Why this answer

Option B is correct because AWS Launch Wizard automates the deployment of SAP systems. Option A is wrong because AWS CloudFormation is for infrastructure as code, not a migration service. Option C is wrong because AWS Server Migration Service is for server-level migration, not SAP-specific.

Option D is wrong because AWS Application Discovery Service is for discovery, not migration.

Full explanation →
689
MCQmedium

An SAP system is running on AWS with a Multi-AZ RDS for SAP HANA database. The operations team notices that the database failover test takes longer than expected. What is the most likely cause of the prolonged failover time?

A.The VPC does not have DNS resolution enabled
B.The application caches the DNS name of the database
C.The RDS instance uses General Purpose SSD storage
D.The database instance size is too small
AnswerB

DNS caching can cause the application to continue using the old endpoint, delaying failover completion.

Why this answer

Multi-AZ failover involves DNS propagation. If the application caches the DNS resolution, it may continue to point to the old primary, causing delays until the cache expires. Database instance size, storage type, and VPC configuration do not directly affect failover time.

Full explanation →
690
Multi-Selectmedium

A company is migrating an SAP system to AWS. They need to ensure high availability for the SAP Central Services (ASCS/ERS). Which THREE components are required for a highly available SAP ASCS/ERS setup on AWS? (Choose THREE.)

Select 3 answers
A.A cluster manager (e.g., Pacemaker)
B.An Application Load Balancer
C.Amazon Route 53 health checks
D.Shared file system (e.g., Amazon FSx or EFS)
E.Elastic IP address for the virtual IP
AnswersA, D, E

Cluster manager orchestrates failover of ASCS/ERS.

Why this answer

For HA SAP ASCS/ERS, you need a cluster (Option A), shared storage (Option B), and Elastic IP for VIP (Option D). Option C (ELB) is not used for ASCS/ERS. Option E (Route 53) is optional for DNS.

Full explanation →
691
Multi-Selecthard

A company runs SAP HANA in a multi-node scale-out configuration on AWS. The system is experiencing network bottlenecks that impact performance. Which AWS services or features can be used to monitor and analyze network performance between the HANA nodes? (Choose THREE.)

Select 2 answers
A.VPC Flow Logs
B.AWS Trusted Advisor
C.Amazon Inspector
D.AWS X-Ray
E.Amazon CloudWatch (Network metrics)
AnswersA, E

VPC Flow Logs capture IP traffic information for network interfaces, useful for analyzing traffic patterns.

Why this answer

VPC Flow Logs capture network traffic metadata. Amazon CloudWatch provides metrics for network throughput and errors. AWS X-Ray traces application requests but not network-level.

AWS Trusted Advisor provides best practices but not detailed analysis. Amazon Inspector is for security assessment.

Full explanation →
692
MCQmedium

A company runs SAP on AWS and notices that the SAP application performance degrades during peak hours. The system uses a db.r5.4xlarge RDS for SAP HANA database. Which AWS service should be used to analyze the database performance metrics and identify bottlenecks?

A.AWS X-Ray
B.AWS CloudTrail
C.Amazon CloudWatch Logs
D.Amazon RDS Performance Insights
AnswerD

Performance Insights provides database performance analysis.

Why this answer

Option B is correct because Amazon RDS Performance Insights provides database performance analysis with easy-to-understand dashboards. Option A is wrong because CloudWatch Logs is for log data, not performance metrics. Option C is wrong because AWS X-Ray traces requests, not database performance.

Option D is wrong because CloudTrail logs API calls.

Full explanation →
693
MCQmedium

A company is deploying SAP Business Suite on AWS. They need to ensure that the SAP system can handle a sudden increase in user load without manual intervention. Which AWS service should be used to automatically scale the SAP application servers?

A.AWS Lambda
B.Amazon Elastic Container Service
C.Elastic Load Balancing
D.AWS Auto Scaling
AnswerD

Auto Scaling adjusts the number of EC2 instances automatically.

Why this answer

AWS Auto Scaling is the correct service because it automatically adjusts the number of SAP application server instances based on demand, using scaling policies tied to metrics like CPU utilization or memory. This ensures the SAP system can handle sudden user load spikes without manual intervention, which is a core requirement for elastic SAP deployments on AWS.

Exam trap

The trap here is that candidates often confuse Elastic Load Balancing with auto-scaling, thinking that load balancing alone provides elasticity, but ELB only distributes traffic and does not manage instance count.

How to eliminate wrong answers

Option A is wrong because AWS Lambda is a serverless compute service for event-driven code, not designed to run or scale SAP application servers, which require persistent, stateful operating system environments. Option B is wrong because Amazon Elastic Container Service (ECS) manages Docker containers, but SAP Business Suite is traditionally deployed on EC2 instances with specific OS and kernel requirements, not containerized. Option C is wrong because Elastic Load Balancing distributes incoming traffic across existing instances but does not automatically add or remove instances; it requires an external scaling mechanism like Auto Scaling to adjust capacity.

Full explanation →
694
MCQmedium

An SAP system administrator is troubleshooting an issue where the SAP HANA database is using more memory than expected on an Amazon EC2 instance. The instance type is an x1e.32xlarge with 3,904 GB of RAM. The HANA global.ini file includes the parameter 'memorymanager = global'. The administrator suspects that the HANA memory limit is not set correctly. What should the administrator check to confirm the memory limit?

A.Review Amazon CloudWatch metrics for HANA memory usage.
B.Run the SQL statement 'SELECT * FROM M_SERVICE_MEMORY' and compare with 'SELECT VALUE FROM M_INIFILE WHERE KEY='global_allocation_limit'.'
C.Check the output of 'free -g' command on the EC2 instance.
D.Check the 'global_allocation_limit' parameter in the global.ini file.
AnswerB

This shows effective allocation limit and actual usage.

Why this answer

Option C is correct because the effective memory limit is determined by the minimum of the global allocation limit and the physical memory. Option A is wrong because only checking the configuration file does not show effective limit. Option B is wrong because CloudWatch metrics show usage, not limit.

Option D is wrong because 'free -g' shows OS free memory, not HANA limit.

Full explanation →
695
MCQeasy

A company is migrating its SAP environment to AWS and wants to test the migration process before the final cutover. The company has a limited budget for the test environment. Which approach is MOST cost-effective?

A.Use AWS Database Migration Service (AWS DMS) to continuously replicate the database to a smaller RDS instance for testing.
B.Use AWS Elastic Disaster Recovery to replicate the on-premises servers to a staging area and launch test instances in a sandbox VPC.
C.Provision a full production-sized infrastructure in a separate AWS account and use AWS DMS to replicate the database.
D.Use AWS Migration Hub to track the migration progress and perform a trial migration using AWS CloudFormation templates.
AnswerB

AWS Elastic Disaster Recovery provides a cost-effective way to test migration with non-production instances.

Why this answer

AWS Elastic Disaster Recovery allows quick, cost-effective testing by replicating the source and launching instances in a sandbox network. Option A is wrong because spinning up full production-sized instances is expensive. Option B is wrong because AWS DMS is for databases, not full systems.

Option D is wrong because AWS Migration Hub orchestrates but doesn't provide a sandbox environment for testing.

Full explanation →
696
MCQeasy

A company wants to automate the backup of SAP HANA databases running on AWS. Which combination of AWS services is suitable for this task?

A.AWS Backup and the SAP HANA Backint agent
B.Amazon EBS snapshots and AWS Lambda
C.Amazon S3 and Amazon Glacier
D.Amazon CloudWatch Events and AWS Lambda
AnswerA

AWS Backup automates backups and Backint ensures HANA consistency.

Why this answer

AWS Backup can automate backups of EBS volumes, and Backint agent for SAP HANA integrates with S3 for HANA-specific backups. Option C is correct. Option A is wrong because S3 alone does not automate backups.

Option B is wrong because EBS snapshots alone don't handle HANA consistency. Option D is wrong because CloudWatch is not for backup.

Full explanation →
697
Multi-Selectmedium

Which TWO Amazon CloudWatch metrics are most useful for monitoring SAP HANA database performance on EC2?

Select 2 answers
A.CPUCreditBalance
B.NetworkIn
C.DiskWriteOps
D.VolumeQueueLength
E.StatusCheckFailed
AnswersA, D

Important for T2/T3 instances to avoid throttling.

Why this answer

CPUCreditBalance (A) is critical for monitoring SAP HANA on EC2 because HANA is a memory- and CPU-intensive in-memory database that can burst CPU usage. If the instance runs on a T-series burstable instance, a low CPUCreditBalance indicates the instance may soon be throttled, causing severe performance degradation for HANA queries. VolumeQueueLength (D) is essential because SAP HANA relies on fast, low-latency storage (e.g., io1/io2 EBS volumes) for data persistence; a high queue length signals that I/O requests are backing up, directly impacting HANA's savepoint and log write performance.

Exam trap

The trap here is that candidates often confuse general EC2 health metrics (like StatusCheckFailed) or high-level throughput metrics (NetworkIn, DiskWriteOps) with the specific performance indicators that directly impact SAP HANA's in-memory and I/O-sensitive workload, leading them to overlook the burst credit and queue depth metrics that AWS explicitly documents for HANA monitoring.

Full explanation →
698
Multi-Selectmedium

A company is designing a disaster recovery (DR) strategy for its SAP landscape on AWS. The DR site must be in a different AWS Region. Which TWO options can be used to replicate the SAP HANA database to the DR Region? (Choose TWO.)

Select 2 answers
A.Amazon RDS Multi-Region replica
B.Amazon S3 Cross-Region Replication for HANA backup files
C.AWS Database Migration Service (DMS) with ongoing replication
D.SAP HANA System Replication across Regions
E.Amazon EBS snapshot copy to the DR Region
AnswersC, D

DMS can replicate HANA data to another region.

Why this answer

Option A and Option D are correct. SAP HANA System Replication can replicate to a different region using log shipping. AWS DMS can also replicate data to a target in another region.

Option B is wrong because EBS snapshots are per-region and cannot be directly copied across regions without manual steps. Option C is wrong because S3 Cross-Region Replication replicates objects, not database transactions. Option E is wrong because RDS is not used for SAP HANA.

Full explanation →
699
Multi-Selecteasy

A company is migrating an SAP system to AWS and wants to monitor the performance of the SAP application servers. Which TWO AWS services can be used to collect and analyze SAP performance metrics?

Select 2 answers
A.AWS CloudTrail
B.AWS Systems Manager
C.Amazon CloudWatch with SAP monitoring agent
D.Amazon Inspector
E.AWS X-Ray
AnswersB, C

Systems Manager can run commands and collect OS metrics, complementing SAP monitoring.

Why this answer

Amazon CloudWatch can collect custom metrics, and AWS CloudTrail logs API calls but does not monitor performance. AWS X-Ray traces requests. Amazon Inspector is for security.

AWS Systems Manager can collect OS-level metrics but not SAP-specific. CloudWatch with SAP monitoring agent is a common solution. Option A (CloudTrail) is incorrect.

Option D (Inspector) is for security.

Full explanation →
700
MCQhard

A company is migrating an SAP HANA system to AWS using a homogeneous copy. The source database is SAP HANA 2.0 on SUSE Linux, and the target is also SAP HANA 2.0 on AWS. Which AWS service can be used to transfer the HANA backup files to Amazon S3 efficiently?

A.AWS DataSync
B.AWS Storage Gateway
C.AWS Direct Connect
D.Amazon S3 Transfer Acceleration
AnswerA

DataSync is designed for efficient, secure data transfer to S3.

Why this answer

AWS DataSync can efficiently transfer large files to S3. Option A (AWS Storage Gateway) is for hybrid storage. Option B (AWS DataSync) is correct.

Option C (AWS S3 Transfer Acceleration) speeds up S3 uploads but is not a managed transfer service like DataSync. Option D (AWS Direct Connect) is a network connection.

Full explanation →
701
MCQhard

An SAP application server repeatedly logs the error above. The database is an Oracle RDS instance. What is the most likely cause of this error?

A.The SAP application server is misconfigured.
B.The database connection is not properly established, or the session is in a bad state.
C.There is a network connectivity issue between the application server and the database.
D.The Oracle database is out of memory.
AnswerB

The error 'no statement parsed' typically occurs when a SQL statement is executed without a valid parse call, often due to connection issues.

Why this answer

Option A is correct because the error indicates that a SQL statement was not parsed before execution, often due to a connection issue or session state. Option B is wrong because insufficient memory usually causes different errors. Option C is wrong because the application server is not the database.

Option D is wrong because network connectivity would cause different errors.

Full explanation →
702
MCQmedium

A company runs SAP S/4HANA on AWS using a distributed architecture with separate instances for the database (DB) and application (ASCS, PAS, AAS). The application servers are in an Auto Scaling group. After a recent scaling event, users report that they cannot log in to the system. The SAP dispatcher logs show that the application servers cannot connect to the message server. What is the most likely cause?

A.The database connection string in the new application servers points to the wrong endpoint.
B.The new application servers are not registered in the SAP message server's configuration.
C.The SAP licenses are exhausted and need to be updated.
D.The security group of the application servers is not allowing outbound traffic to the DB server.
AnswerB

Auto Scaling instances must be registered in the SAP profile to communicate with the message server.

Why this answer

Auto Scaling instances need to be integrated with SAP's application server architecture. If the new instances are not registered in the SAP profile or the message server's configuration, they won't be recognized. Option A (security group) would block all traffic, not just after scaling.

Option B (licensing) is possible but less immediate. Option D (database connection) is not related to message server. Option C is the most typical cause.

Full explanation →
703
MCQmedium

A company runs SAP on AWS and needs to implement a disaster recovery strategy for their SAP NetWeaver system. The primary site is in us-east-1, and the DR site is in us-west-2. They want to minimize data loss and recovery time. Which approach meets these requirements?

A.Use SAP HANA System Replication in asynchronous mode across regions.
B.Use SAP HANA System Replication in synchronous mode across regions.
C.Use AWS Backup to back up the SAP HANA database and restore in us-west-2.
D.Use Amazon S3 cross-region replication for SAP HANA data files.
AnswerA

Async replication provides low RPO and RTO for cross-region DR.

Why this answer

SAP HANA System Replication in asynchronous mode across regions is the correct approach because it provides near-zero recovery point objective (RPO) with minimal impact on primary system performance, while enabling rapid failover to the DR region in us-west-2. Asynchronous replication is suitable for cross-region scenarios where network latency would make synchronous mode impractical, and it meets the requirement to minimize both data loss and recovery time for SAP NetWeaver.

Exam trap

The trap here is that candidates often confuse synchronous mode as always better for data protection, but fail to recognize that cross-region latency makes synchronous replication impractical, leading to transaction timeouts or severe performance degradation, while asynchronous mode is the standard for multi-region DR in SAP on AWS.

How to eliminate wrong answers

Option B is wrong because synchronous mode across regions would introduce high latency and potential transaction blocking due to network round-trip times, making it unsuitable for cross-region DR and potentially causing application performance degradation. Option C is wrong because AWS Backup for SAP HANA provides point-in-time recovery but has a higher recovery time objective (RTO) due to the need to restore full database backups, and it does not support continuous replication for minimal data loss. Option D is wrong because Amazon S3 cross-region replication only replicates object-level data files and does not provide the transaction-consistent, log-based replication required for SAP HANA database recovery, nor does it support automated failover.

Full explanation →
704
MCQmedium

A company is running an SAP HANA database on an EC2 instance with Amazon EBS volumes. The database is experiencing high write latency. The storage is configured as two gp2 volumes in a RAID 0 stripe. Which change is most likely to improve write performance?

A.Migrate to a RAID 0+1 configuration with four volumes.
B.Replace gp2 volumes with io1 volumes provisioned with sufficient IOPS for the workload.
C.Increase the volume size of each gp2 volume to 1 TB to increase baseline IOPS.
D.Move the data to instance store volumes attached to the EC2 instance.
AnswerB

io1 volumes provide provisioned IOPS, ensuring consistent low latency for write-intensive workloads.

Why this answer

Option C is correct because io1 volumes provide consistent IOPS performance, which is critical for write-heavy workloads like SAP HANA. Option A is wrong because RAID 0+1 increases cost and complexity without significant write benefit. Option B is wrong because increasing volume size increases baseline IOPS but not burst performance.

Option D is wrong because instance store provides ephemeral storage, which is not persistent.

Full explanation →
705
Multi-Selectmedium

A company is running SAP on AWS and wants to implement a centralized logging solution for all SAP components. The solution must be scalable and cost-effective. Which TWO services should the company use? (Choose TWO.)

Select 2 answers
A.Amazon Athena
B.Amazon Kinesis Data Firehose
C.Amazon CloudWatch Logs
D.Amazon Elastic File System (EFS)
E.Amazon Simple Storage Service (S3)
AnswersC, E

CloudWatch Logs can ingest and store log data from various sources.

Why this answer

A and C are correct. CloudWatch Logs can collect logs from EC2 instances and services. S3 can serve as a cost-effective storage for archived logs.

B is wrong because Kinesis Data Firehose is for real-time streaming, not needed here. D is wrong because Athena is for querying data in S3, not for logging itself. E is wrong because EFS is file storage, not suited for log aggregation.

Full explanation →
706
MCQhard

A company is migrating its SAP landscape to AWS. They have a mix of production and non-production systems. The SAP systems use a shared storage architecture for transport directories. Which AWS storage solution should be used for the SAP transport directory to provide low-latency access across multiple EC2 instances in the same region?

A.Amazon EFS
B.Amazon EBS with multi-attach
C.Amazon S3 with S3FS
D.Amazon FSx for Windows File Server
AnswerA

Amazon EFS provides a scalable, shared file system accessible from multiple EC2 instances with low latency, ideal for SAP transport directories.

Why this answer

Amazon EFS provides a scalable, shared file system accessible from multiple EC2 instances with low latency, ideal for SAP transport directories. Amazon S3 is object storage, not a file system. Amazon FSx for Windows File Server is for Windows workloads.

Amazon EBS volumes can only be attached to one instance at a time (except for multi-attach, which has limitations).

Full explanation →
707
MCQeasy

A company runs SAP HANA on AWS and wants to monitor the system for potential performance issues. Which metrics should be monitored to detect memory pressure?

A.Network throughput
B.SAP HANA memory usage (from SAP HANA metrics)
C.CPU utilization
D.EBS volume queue length
AnswerB

Direct measure of memory consumption in the HANA database.

Why this answer

Option C is correct because HANA memory usage directly indicates memory pressure. Option A is wrong because CPU is not memory. Option B is wrong because it shows storage latency, not memory.

Option D is wrong because it shows network, not memory.

Full explanation →
708
MCQhard

A company is migrating its SAP ERP system running on Oracle Database to SAP HANA on AWS. The current on-premises environment has a 5 TB Oracle database with high transaction volume. The migration must be completed within a 4-hour downtime window. The target environment on AWS uses an SAP-certified instance with 1 TB of RAM. The company has a 1 Gbps AWS Direct Connect connection. The migration team is considering using SAP DMO with SUM. However, during a test run, the database export took 6 hours, exceeding the downtime window. What should the migration team do to meet the 4-hour downtime window?

A.Perform a system copy to an Oracle database on AWS first, then migrate to HANA
B.Use the SAP HANA Database Migration Option (DMO) with the 'load and move' method
C.Upgrade to a larger EC2 instance type with more CPU and memory for the HANA database
D.Use AWS Snowball Edge to transfer the initial data and then perform a delta sync
AnswerB

DMO with 'load and move' allows pre-loading data before the downtime window, reducing the downtime to a delta transfer.

Why this answer

Option C is correct because using the SAP HANA Database Migration Option (DMO) with the 'load and move' approach allows initial data load during the migration preparation phase and then only a delta transfer during the downtime window, reducing downtime. Option A is wrong because a larger instance may speed up processing but the export time is limited by the network (1 Gbps). Option B is wrong because AWS Snowball would add time for shipping and data transfer, likely exceeding the window.

Option D is wrong because a homogenous migration to another Oracle database does not address the requirement to migrate to HANA.

Full explanation →
709
MCQhard

An SAP system running on AWS uses a shared file system via Amazon EFS. Recently, the file system has become slow. The administrator suspects that the burst credits are exhausted. What metric should the administrator check in Amazon CloudWatch to confirm this?

A.PermittedThroughput
B.BurstCreditBalance
C.Throughput
D.PercentIOLimit
AnswerB

This metric shows the number of burst credits remaining.

Why this answer

EFS has a BurstCreditBalance metric that tracks available burst credits. When exhausted, throughput drops. PercentIOLimit is not a valid metric.

Throughput is the actual throughput, not credit balance. PermittedThroughput is not a metric.

Full explanation →
710
MCQhard

An SAP system on AWS is experiencing high CPU utilization on the database server. The operations team suspects a specific query is causing the issue. Which combination of AWS services should be used to identify the query?

A.Amazon CloudWatch Metrics and AWS X-Ray
B.Amazon RDS Performance Insights and CloudWatch Logs
C.AWS CloudTrail and Amazon Athena
D.VPC Flow Logs and Amazon GuardDuty
AnswerB

Performance Insights identifies top queries consuming CPU.

Why this answer

Option A is correct because Amazon RDS Performance Insights provides database performance analysis and identifies top queries. Option B is wrong because CloudWatch Metrics show CPU but not specific queries. Option C is wrong because CloudTrail logs API calls.

Option D is wrong because VPC Flow Logs are for network traffic.

Full explanation →
711
MCQeasy

A company is migrating an SAP ERP system to AWS and needs to connect on-premises users to the SAP application securely. The SAP application is deployed in a VPC private subnet. Which service should be used to provide secure access for remote users?

A.AWS Site-to-Site VPN
B.AWS Transit Gateway
C.AWS Direct Connect
D.AWS Client VPN
AnswerD

Client VPN allows remote users to securely connect to the VPC.

Why this answer

AWS Client VPN provides secure access for individual remote users to resources in a VPC. AWS Direct Connect is for dedicated network connections, Site-to-Site VPN is for site-to-site connectivity, and Transit Gateway is for connecting multiple VPCs and on-premises networks.

Full explanation →
712
MCQmedium

A company is migrating its SAP ERP system to AWS. The system has strict high availability requirements with a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 2 hours. The SAP application and database (SAP HANA) must be in the same AWS Region but can be in different Availability Zones. Which architecture should the company use to meet these requirements?

A.Deploy SAP HANA in a single Availability Zone with asynchronous replication to a secondary instance in another AZ, and use manual failover.
B.Deploy SAP HANA in a Multi-AZ cluster using synchronous replication across two Availability Zones, with the SAP application servers in an Auto Scaling group across the same AZs.
C.Deploy SAP HANA on a single EC2 instance with EBS snapshots every 5 minutes, and use a secondary instance in another AZ with snapshots restored.
D.Deploy SAP HANA on a single EC2 instance with hourly backups to Amazon S3 and a script to restore the backup on a new instance in a different AZ.
AnswerB

Multi-AZ synchronous replication provides automatic failover and meets RPO and RTO.

Why this answer

Option B is correct because it uses synchronous replication for SAP HANA across two Availability Zones, which ensures zero data loss and meets the RPO of 15 minutes. The Multi-AZ cluster with automatic failover achieves the RTO of 2 hours, while the SAP application servers in an Auto Scaling group across the same AZs provide high availability and load balancing. This architecture aligns with AWS best practices for SAP HANA HA, leveraging HANA System Replication (HSR) in sync mode.

Exam trap

The trap here is that candidates confuse asynchronous replication (which risks data loss) with synchronous replication (which ensures zero RPO), or they underestimate the recovery time of snapshot-based or backup-based approaches, assuming they can meet strict RTO/RPO targets.

How to eliminate wrong answers

Option A is wrong because asynchronous replication can result in data loss exceeding the 15-minute RPO, and manual failover increases RTO beyond 2 hours. Option C is wrong because EBS snapshots every 5 minutes cannot guarantee an RPO of 15 minutes due to snapshot consistency delays and restore times that exceed the 2-hour RTO. Option D is wrong because hourly backups to S3 provide an RPO of up to 60 minutes, failing the 15-minute requirement, and restoring from S3 takes longer than 2 hours, violating the RTO.

Full explanation →
713
MCQmedium

A company runs SAP S/4HANA on AWS and needs to back up the SAP HANA database to Amazon S3. They want to automate backups and ensure they are encrypted at rest. Which solution should they use?

A.Use AWS Backup to schedule backups to S3
B.Use an S3 lifecycle policy to transition backups to S3
C.Configure SAP HANA Backint agent to back up directly to S3 with SSE-S3 encryption
D.Use AWS KMS to encrypt backups and store them manually
AnswerC

Backint agent integrates with SAP HANA and supports encryption.

Why this answer

SAP HANA backup to S3 can be done using the hdbbackint interface with the SAP HANA Backint agent for S3, which supports encryption. Option A is wrong because AWS Backup does not directly integrate with hdbbackint. Option B is wrong because S3 lifecycle does not handle backups.

Option D is wrong because AWS KMS alone does not perform backups.

Full explanation →
714
MCQmedium

A company is running a critical SAP HANA database on AWS. The database administrator wants to ensure that the SAP HANA backup files are stored in a secure, durable, and cost-effective manner. They need to retain backups for 7 years to meet compliance requirements. Which AWS service should be used for long-term backup storage?

A.AWS Backup
B.Amazon S3 Glacier Deep Archive
C.Amazon EBS Snapshots
D.Amazon S3 Standard
AnswerB

Amazon S3 Glacier Deep Archive is the lowest-cost storage class for long-term retention of data that is accessed rarely.

Why this answer

Option B is correct because Amazon S3 Glacier Deep Archive is the most cost-effective storage class for long-term archival of data that is rarely accessed, with a retention period of 7 years. Option A is wrong because Amazon S3 Standard is suitable for frequently accessed data but has higher costs for long-term retention. Option C is wrong because AWS Backup is a service to centralize backups, not a storage class.

Option D is wrong because Amazon EBS Snapshots are block-level backups, not designed for long-term archival with compliance retention.

Full explanation →
715
MCQmedium

During a migration of an SAP system to AWS, the team discovers that the on-premises storage uses a proprietary deduplication technology. The SAP database will be migrated to Amazon EBS volumes. How should the team address the storage space requirements on AWS?

A.Use OS-level compression on the EBS volumes
B.Provision EBS volumes based on the logical size of the database
C.Provision EBS volumes with the same physical size as on-premises
D.Use Amazon S3 for database storage
AnswerB

The logical size represents the actual data; EBS volumes should match that.

Why this answer

AWS does not support proprietary deduplication. The team should provision EBS volumes based on the logical size of the database after verifying the actual data size. Option A (using same physical size) is incorrect because deduplication reduces storage.

Option C (compression at OS level) may not be effective. Option D (using S3) is not block storage.

Full explanation →
716
MCQeasy

A company runs SAP HANA on AWS. The operations team needs to automate the creation of AMI backups for the HANA database server. Which AWS service should they use to schedule and manage these backups?

A.Amazon S3 Lifecycle policies
B.AWS Backup
C.AWS Systems Manager
D.Amazon CloudWatch Events
AnswerB

AWS Backup is a managed service for scheduling and managing backups, including AMIs.

Why this answer

Option A is correct because AWS Backup is a managed backup service that can schedule AMI backups. Option B is wrong because Systems Manager can automate tasks but is not specifically for backup scheduling. Option C is wrong because CloudWatch Events can trigger Lambda but is not a backup service.

Option D is wrong because S3 Lifecycle policies manage object lifecycle, not AMI creation.

Full explanation →
717
MCQmedium

A company is running a critical SAP HANA database on an EC2 instance with a single EBS volume for /hana/data. They need to ensure high durability and recoverability of the data. Which storage configuration meets SAP best practices?

A.Mount an Amazon EFS filesystem for /hana/data.
B.Configure RAID 0 over multiple EBS volumes for the /hana/data filesystem.
C.Use a single gp3 EBS volume with provisioned IOPS.
D.Use EBS Multi-Attach to attach the same volume to multiple instances.
AnswerB

RAID 0 striping across multiple EBS volumes provides the necessary throughput and IOPS.

Why this answer

SAP HANA requires striped volumes for /hana/data to achieve the required IOPS and throughput. EBS Multi-Attach is not supported for SAP HANA, and a single volume does not provide enough performance. RAID 0 over multiple EBS volumes is the recommended configuration.

Full explanation →
718
MCQmedium

An SAP system administrator needs to automate the creation of an SAP HANA database backup and copy it to another AWS Region for disaster recovery. The backup is stored in an Amazon S3 bucket. Which AWS service should be used to replicate the backup to another Region?

A.S3 Cross-Region Replication (CRR)
B.S3 Lifecycle Policies
C.S3 Batch Operations
D.S3 Transfer Acceleration
AnswerA

CRR automatically replicates objects across regions.

Why this answer

S3 Cross-Region Replication (CRR) automatically replicates objects from a source bucket to a destination bucket in a different region. S3 Batch Operations is for bulk actions, S3 Transfer Acceleration speeds up uploads, and S3 Lifecycle Policies manage storage tiers, not replication.

Full explanation →
719
MCQhard

An SAP system running on AWS experienced a database failure. The recovery plan uses cross-Region Amazon RDS snapshots. The RPO is 15 minutes and the RTO is 2 hours. Which AWS service should be used to automate snapshot replication across Regions?

A.AWS CloudFormation
B.AWS Backup
C.Amazon RDS automated backups
D.Amazon S3 Cross-Region Replication
AnswerB

AWS Backup can automate cross-Region snapshot copying with scheduled policies.

Why this answer

Option C is correct because AWS Backup can automate cross-Region snapshot copying with scheduling. Option A is incorrect because RDS automated backups are region-specific and cannot be cross-Region. Option B is incorrect because S3 Cross-Region Replication is for objects, not RDS snapshots.

Option D is incorrect because CloudFormation does not automate snapshot replication.

Full explanation →
720
MCQhard

A company runs SAP on AWS using an SAP HANA multi-node cluster. The operations team needs to apply an OS-level security patch that requires a reboot. How can they minimize downtime?

A.Use AWS Systems Manager Run Command to apply the patch without reboot.
B.Reboot all nodes simultaneously during the maintenance window.
C.Use HANA scale-out to move services to other nodes, then reboot each node sequentially.
D.Create a new EC2 instance with the patch applied, then update DNS to point to the new instance.
AnswerC

This allows zero or minimal downtime by leveraging cluster redundancy.

Why this answer

Option B is correct because in a multi-node cluster, nodes can be rebooted one at a time after moving HANA services to other nodes. Option A is incorrect because it causes downtime. Option C is incorrect because patching a clone and switching DNS can cause connectivity issues.

Option D is incorrect because it is complex and may not work with HANA.

Full explanation →
721
MCQeasy

Refer to the exhibit. An SAP administrator is reviewing the block device mappings of an EC2 instance. What is the impact of the DeleteOnTermination setting on /dev/sdf?

A.The volume will persist after the instance is terminated
B.The volume will be automatically deleted after 30 days
C.The volume will be deleted when the instance is terminated
D.The volume is a snapshot of the root volume
AnswerA

The volume will remain and can be attached to another instance.

Why this answer

Option B is correct because DeleteOnTermination is false for /dev/sdf, meaning the volume will persist after the instance is terminated. Option A is incorrect because the volume will not be deleted. Option C is incorrect because the volume is attached, not a snapshot.

Option D is incorrect because the volume will not be automatically deleted.

Full explanation →
722
Multi-Selecteasy

A company runs SAP on AWS and wants to ensure that all API calls to create, modify, or delete EC2 instances are logged for auditing. Which TWO AWS services can be used together to achieve this? (Choose two.)

Select 2 answers
A.AWS CloudTrail
B.Amazon S3 server access logs
C.AWS Config
D.Amazon CloudWatch Logs
E.Amazon VPC Flow Logs
AnswersA, D

CloudTrail records all EC2 API calls.

Why this answer

Options A and C are correct. AWS CloudTrail logs API calls. Amazon CloudWatch Logs can store the logs for analysis.

Option B (VPC Flow Logs) captures network traffic, not API calls. Option D (AWS Config) tracks configuration changes but not all API calls. Option E (S3 server access logs) logs access to S3 buckets.

Full explanation →
723
MCQhard

A company runs SAP BusinessObjects on AWS. The system includes a web application server and a CMS database on separate EC2 instances. The operations team receives alerts that the CMS database server's EBS volume is approaching its maximum capacity. The volume is a gp3 EBS volume with 3000 IOPS and 125 MB/s throughput. Upon investigation, the team finds that the volume is 90% full and write performance has degraded. The application is experiencing slow response times. What should the team do to resolve the issue without downtime?

A.Move the database to an instance store volume for better performance.
B.Migrate the database to an io2 Block Express volume with higher performance.
C.Increase the IOPS and throughput of the existing volume.
D.Expand the EBS volume size and extend the file system.
AnswerD

Expanding volume increases capacity and improves performance; online resize is possible.

Why this answer

Option B is correct because expanding the volume size increases available capacity and also increases baseline performance for gp3 (more capacity = more throughput). This can be done without downtime. Option A is wrong because modifying IOPS alone does not increase capacity.

Option C is wrong because converting to io2 might not be necessary and could increase cost. Option D is wrong because moving to instance store is not recommended for persistent data and requires downtime.

Full explanation →
724
MCQeasy

A company wants to set up an SAP HANA system replication across two AWS Regions for disaster recovery. Which AWS service should they use to achieve the lowest possible recovery point objective (RPO)?

A.Amazon S3 Transfer Acceleration
B.AWS Site-to-Site VPN
C.AWS Direct Connect
D.AWS Global Accelerator
AnswerA

S3 Transfer Acceleration uses AWS edge locations to accelerate uploads, reducing RPO for replication data.

Why this answer

Option B is correct because Amazon S3 Transfer Acceleration uses optimized network paths for fast data transfer, reducing RPO for HANA replication. Option A is wrong because AWS Direct Connect is a private connection but does not inherently accelerate data transfer. Option C is wrong because VPN can be slower and less reliable over long distances.

Option D is wrong because AWS Global Accelerator improves application performance but not specifically for data replication.

Full explanation →
725
Multi-Selectmedium

A company is running SAP HANA on AWS and wants to implement a disaster recovery strategy using a standby system in another AWS Region. Which THREE components are essential for this setup?

Select 3 answers
A.Amazon Route53
B.A secondary EC2 instance in the DR Region
C.AWS CloudEndure Migration
D.Cross-Region VPC Peering or Transit Gateway
E.SAP HANA System Replication
AnswersB, D, E

The DR system runs on an EC2 instance.

Why this answer

Option B is correct because a secondary EC2 instance in the DR Region is required to host the standby SAP HANA system. This instance must be sized and configured to match the primary, and it will receive replicated data via SAP HANA System Replication to enable failover.

Exam trap

The trap here is that candidates often confuse AWS CloudEndure Migration (a migration tool) with a disaster recovery solution, but SAP HANA has its own native replication mechanism that must be used for database-level DR, making CloudEndure irrelevant for this specific scenario.

Full explanation →
726
MCQeasy

A company wants to automate the deployment of SAP environments on AWS. Which AWS service should the company use to define the infrastructure as code?

A.AWS OpsWorks
B.AWS CodeDeploy
C.AWS Elastic Beanstalk
D.AWS CloudFormation
AnswerD

CloudFormation enables infrastructure as code.

Why this answer

Option A is correct because AWS CloudFormation allows defining infrastructure as code. Option B is wrong because AWS Elastic Beanstalk is for web applications, not SAP. Option C is wrong because OpsWorks is for Chef/Puppet.

Option D is wrong because CodeDeploy is for application deployment, not infrastructure.

Full explanation →
727
MCQhard

An SAP system running on AWS is configured with a Multi-AZ RDS for SAP HANA database. The primary database fails, but the automatic failover does not occur. What is the most likely reason?

A.The Multi-AZ configuration was not paid for
B.The standby instance was not configured with EBS snapshots
C.Multi-AZ is not supported for RDS for SAP HANA
D.The primary instance does not have an Elastic IP attached
AnswerC

RDS for SAP HANA does not support Multi-AZ; use native HANA replication.

Why this answer

Option B is correct because Multi-AZ for RDS for SAP HANA is not supported; RDS for SAP HANA does not have Multi-AZ capability. Option A is incorrect because RDS does not use Elastic IPs. Option C is incorrect because Multi-AZ is not a paid option; it incurs costs but is not disabled by billing.

Option D is incorrect because RDS for HANA does not use EBS snapshots for replication.

Full explanation →
728
Multi-Selectmedium

Which TWO AWS services can be used to create a private, low-latency network connection between an on-premises data center and an SAP environment on AWS? (Choose two.)

Select 2 answers
A.VPC peering
B.AWS Site-to-Site VPN
C.AWS Direct Connect
D.AWS Transit Gateway
E.AWS PrivateLink
AnswersB, C

Creates a secure connection over the internet between on-premises and AWS.

Why this answer

Options A and C are correct. AWS Direct Connect provides a dedicated private connection, and AWS VPN provides encrypted tunnels over the internet. Option B is wrong because VPC peering is for VPC-to-VPC.

Option D is wrong because AWS Transit Gateway is a hub for multiple VPCs, not a direct connection. Option E is wrong because PrivateLink is for service access within VPC.

Full explanation →
729
MCQmedium

A company is running SAP S/4HANA on AWS. They are experiencing high read latency on their EBS volumes used for /usr/sap. Which of the following is the MOST effective way to improve read performance?

A.Use io2 Block Express volumes with provisioned IOPS.
B.Change the volume type to gp3 with higher throughput.
C.Move to a larger instance type with more network bandwidth.
D.Configure RAID 0 across multiple volumes.
AnswerA

io2 Block Express provides consistent low latency.

Why this answer

The io2 Block Express volume type provides the highest durability and consistent low-latency performance for SAP workloads, with up to 256,000 provisioned IOPS per volume. For /usr/sap, which is sensitive to read latency due to frequent binary and configuration file access, io2 Block Express ensures predictable sub-millisecond latency even under high I/O demand, directly addressing the high read latency issue.

Exam trap

The trap here is that candidates often confuse throughput improvements (gp3 or RAID 0) with latency reduction, but the question specifically targets read latency, which requires a volume type designed for consistent low-latency performance like io2 Block Express.

How to eliminate wrong answers

Option B is wrong because gp3 volumes, while offering baseline performance and burst capability, cannot match the ultra-low latency and consistent IOPS of io2 Block Express for latency-sensitive SAP /usr/sap directories. Option C is wrong because moving to a larger instance type with more network bandwidth improves network throughput, not EBS volume read latency, which is a storage-level performance characteristic. Option D is wrong because RAID 0 across multiple volumes increases throughput and IOPS but does not inherently reduce read latency per I/O operation, and it introduces complexity and risk of data loss without addressing the underlying volume performance.

Full explanation →
730
MCQhard

An SAP system on AWS is configured with an Application Load Balancer (ALB) for health checks. The ALB marks all targets as unhealthy. The health check path is /sap/public/health.html, and the SAP Web Dispatcher is configured to serve this file. What is the most likely cause of the health check failure?

A.The health check path is incorrect.
B.The security group for the Web Dispatcher does not allow traffic from the ALB.
C.The health check port is wrong.
D.The ALB is in a different VPC.
AnswerB

Security groups must allow inbound traffic from the ALB.

Why this answer

ALB health checks originate from private IP addresses within the VPC. If the SAP Web Dispatcher's security group does not allow inbound traffic from the ALB's security group, the health check requests will be blocked. Path or port issues would also cause failures, but the most common cause is security group misconfiguration.

Full explanation →
731
MCQhard

A company runs its SAP S/4HANA system on AWS with a production environment consisting of a primary SAP HANA database on an r5.8xlarge instance and a secondary HANA instance for high availability in a different Availability Zone. The application tier includes multiple EC2 instances behind an Application Load Balancer. The operations team uses AWS Backup to create nightly snapshots of the HANA data volumes and stores them in a separate backup vault. Recently, a storage administrator accidentally deleted a critical SAP transport file from the HANA primary instance. The team needs to restore the file as quickly as possible with minimal data loss. The last backup completed 6 hours ago, and the file was deleted 2 hours ago. The team has enabled HANA backup logging to S3 every 30 minutes. Which option provides the fastest recovery with minimal data loss?

A.Restore the specific transport file from the HANA log backup stored in S3.
B.Restore the entire HANA data volume from the last AWS Backup snapshot.
C.Re-import the transport file from the original development system.
D.Fail over to the secondary HANA instance and retrieve the file from there.
AnswerA

Log backups are frequent and can recover the file with minimal data loss.

Why this answer

Option A is correct because restoring from the HANA log backup in S3 is the fastest and recovers data up to the time of the last log backup, which is 30 minutes before deletion. Option B is wrong because restoring from the nightly snapshot would lose 6 hours of data. Option C is wrong because using the secondary instance requires failover and may not have the latest data.

Option D is wrong because rebuilding the transport directory from scratch would take time and may not restore the specific file.

Full explanation →
732
MCQhard

An SAP system uses AWS Direct Connect to connect to on-premises networks. The SAP application servers are in a private subnet with a NAT gateway for outbound internet. The SAProuter instance is behind an Internet-facing Network Load Balancer (NLB). Connections from SAP support to the SAProuter timeout. What is the likely cause?

A.The NLB target group is configured with the wrong protocol or port for SAProuter.
B.The security group for the SAProuter instance does not allow inbound traffic from the NLB.
C.The Direct Connect virtual interface is not advertising the SAProuter's IP address.
D.The NAT gateway does not allow inbound traffic from the internet.
AnswerB

This is a possible cause, but the question asks for the most specific cause given the symptom.

Why this answer

Option D is correct because SAProuter requires TCP port 3298 to be open. Option A (NAT gateway) is for outbound traffic. Option B (Direct Connect) is for on-premises.

Option C (security group) is important but not the most specific cause.

Full explanation →
733
MCQhard

A company runs SAP HANA on AWS using a scale-up configuration. The system is experiencing high CPU utilization on the HANA server during peak load. The SAP administrator wants to add more CPU resources without disruption. Which action should be taken?

A.Add an additional HANA node to create a scale-out configuration and distribute the load.
B.Enable Multi-AZ deployment for high availability.
C.Change the EC2 instance type to a larger size using the AWS Management Console.
D.Increase the provisioned IOPS on the EBS volumes.
AnswerA

Scale-out can be added online if using HANA system replication, but involves new instances. However, among options, this is the only one that adds CPU without stopping existing instance (though new instances needed).

Why this answer

Option B is correct because resizing an EC2 instance (changing the instance type) requires stopping the instance, which causes disruption. HANA scale-out (adding nodes) can be done online with HANA system replication, but requires additional instances. Option A (change instance type) requires stop/start.

Option C (add EBS) does not add CPU. Option D (multi-AZ) is for HA.

Full explanation →
734
MCQhard

An organization is migrating a large SAP ERP system using SAP Landscape Virtualization Management (LVM) for system copy and refresh. During the migration, they encounter an error in LVM indicating that the target host is not reachable. What is the most likely cause?

A.The S3 bucket used for backup is not accessible.
B.The IAM role assigned to the LVM instance does not have sufficient permissions.
C.The AWS Database Migration Service is not configured correctly.
D.The security groups do not allow inbound traffic from the LVM instance to the target host.
AnswerD

Security groups control traffic; if not configured, the target is unreachable.

Why this answer

Security groups controlling traffic between source and target are a common cause. IAM roles affect AWS API calls, not network connectivity. S3 permissions are irrelevant.

AWS DMS is not used.

Full explanation →
735
MCQeasy

An organization runs SAP on AWS and needs to ensure that their SAP HANA database backups are encrypted at rest. Which AWS service should they use to manage the encryption keys?

A.AWS Key Management Service (KMS)
B.AWS CloudHSM
C.AWS Identity and Access Management (IAM)
D.AWS Certificate Manager
AnswerA

KMS manages encryption keys.

Why this answer

Option C is correct because AWS KMS is the key management service for encryption keys. Option A is wrong because CloudHSM is a hardware security module, but KMS is the standard for key management. Option B is wrong because IAM is for identity, not encryption keys.

Option D is wrong because ACM is for SSL/TLS certificates.

Full explanation →
736
MCQhard

A company is migrating its SAP ERP system to AWS using a heterogeneous migration where the source database is Oracle and the target is SAP HANA. Which AWS service is essential for converting the Oracle schema to SAP HANA schema?

A.AWS Database Migration Service (DMS)
B.AWS DataSync
C.AWS Schema Conversion Tool (SCT)
D.AWS Server Migration Service (SMS)
AnswerC

SCT converts schemas between different database engines.

Why this answer

AWS Schema Conversion Tool (SCT) is designed to convert database schemas from one engine to another, including Oracle to SAP HANA. Option A is correct. Option B (DMS) migrates data but does not convert schema.

Option C (SMS) is for server migration. Option D (DataSync) is for file transfer.

Full explanation →
737
MCQeasy

A company is planning to migrate its SAP ERP system to AWS. The database is SAP HANA with a size of 3 TB. The company wants to minimize downtime during the migration. Which migration strategy should the company use?

A.Use HANA System Replication to replicate the database to an EC2 instance running HANA in the target AWS environment, then perform a takeover.
B.Export the HANA database to flat files using SAP HANA Studio, upload the files to Amazon S3, and import them into an EC2 HANA instance.
C.Use AWS Database Migration Service (DMS) with ongoing replication to migrate the database to Amazon RDS for SAP HANA.
D.Use AWS Backup to take a full backup of the on-premises HANA database and restore it to an EC2 instance in AWS.
AnswerA

HSR provides continuous replication with minimal downtime during the final switchover.

Why this answer

HANA System Replication (HSR) is the optimal strategy for minimizing downtime because it continuously replicates data from the on-premises HANA database to an EC2 instance running HANA in AWS. When the migration window opens, a simple takeover (failover) occurs, typically completing in minutes, which meets the requirement for minimal downtime. This approach avoids the lengthy export/import or backup/restore processes that would take hours for a 3 TB database.

Exam trap

The trap here is that candidates may assume AWS DMS or backup/restore services are suitable for SAP HANA migrations, but DMS does not support HANA as a target, and backup/restore methods cause significant downtime, whereas HANA System Replication is the only AWS-recommended approach for near-zero downtime migrations.

How to eliminate wrong answers

Option B is wrong because exporting a 3 TB HANA database to flat files via SAP HANA Studio and then importing from S3 would take many hours or days, causing significant downtime, and does not support ongoing replication to minimize the cutover window. Option C is wrong because AWS DMS does not support SAP HANA as a target for ongoing replication; Amazon RDS for SAP HANA is not a valid service (RDS supports only certain database engines like MySQL, PostgreSQL, Oracle, SQL Server, and MariaDB, not SAP HANA). Option D is wrong because using AWS Backup to take a full backup and restore it would require the database to be offline during the backup and restore process, leading to extended downtime, and AWS Backup does not natively support SAP HANA for ongoing replication or near-zero downtime migrations.

Full explanation →
738
MCQmedium

A company is migrating a .NET application running on Windows Server to AWS. They plan to use Amazon EC2 with a Windows license included. The current application uses SQL Server Standard edition. Which migration strategy minimizes licensing costs?

A.Lift and shift to EC2 with SQL Server BYOL on Dedicated Hosts.
B.Use EC2 with SQL Server Standard on Dedicated Instances to ensure isolation.
C.Use Amazon RDS for SQL Server with License Included pricing.
D.Use EC2 with SQL Server Web edition, which is cheaper but may not support all features.
AnswerC

License Included pricing includes SQL Server license, minimizing costs.

Why this answer

Option C is correct because using RDS SQL Server with License Included eliminates the need for SQL Server licenses. Options A, B, and D are incorrect: BYOL requires existing licenses; Dedicated Hosts and Dedicated Instances are more expensive and unnecessary.

Full explanation →
739
MCQeasy

A company needs to set up a disaster recovery solution for SAP on AWS with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. Which strategy is most appropriate?

A.Deploy all SAP components in a single AWS Region.
B.Use cross-region backup and restore with AWS Backup.
C.Use Multi-AZ deployment for the database.
D.Set up a pilot light environment with database replication.
AnswerB

Backups to S3 can be restored in another region within RPO/RTO.

Why this answer

Option B is correct because using backups to S3 and restoring in another region can meet the RPO and RTO with proper planning. Option A is wrong because a single region cannot provide DR if the region fails. Option C is wrong because Multi-AZ is for HA, not DR across regions.

Option D is wrong because pilot light with replication can meet RPO/RTO but is more complex; however, backup/restore is simpler and can meet the targets if automated.

Full explanation →
740
Multi-Selectmedium

An SAP administrator is designing a backup strategy for an SAP HANA database on AWS. They want to use the Backint interface with Amazon S3. Which THREE components are required? (Choose three.)

Select 3 answers
A.EBS volumes for the backup catalog
B.IAM role with permissions to write to the S3 bucket
C.AWS Backint Agent for SAP HANA
D.S3 Transfer Acceleration enabled
E.An S3 bucket to store the backups
AnswersB, C, E

The EC2 instance needs an IAM role to access S3.

Why this answer

Option B is correct because the Backint interface for SAP HANA on AWS requires an IAM role that grants the AWS Backint Agent permissions to write backup data to the designated S3 bucket. Without this IAM role, the agent cannot authenticate or perform PutObject operations against S3, making the backup fail.

Exam trap

The trap here is that candidates may assume EBS volumes are required for the backup catalog or that S3 Transfer Acceleration is mandatory for performance, but the Backint interface only needs the agent, an S3 bucket, and an IAM role with write permissions.

Full explanation →
741
MCQhard

A company runs SAP on EC2 instances in a private subnet. The instances need to download patches from the internet but must not be directly accessible from the internet. Which configuration meets these requirements?

A.Place a proxy server on a bastion host in a public subnet
B.Attach an Internet Gateway to the VPC and add a route to the private subnet
C.Use a VPN connection to the on-premises network and route internet traffic through it
D.Deploy a NAT Gateway in a public subnet and route traffic from the private subnet to it
AnswerD

NAT Gateway enables outbound internet traffic while blocking inbound.

Why this answer

Option C is correct because a NAT Gateway in a public subnet allows outbound traffic while blocking inbound. Option A is incorrect because an Internet Gateway allows inbound traffic. Option B is incorrect because a VPN does not provide internet access.

Option D is incorrect because a Proxy on a bastion host is more complex and less secure.

Full explanation →
742
Multi-Selecthard

An SAP system is deployed on EC2 instances in a VPC. The security team requires that all traffic between the SAP application and database tiers must be encrypted in transit. Which TWO actions should be taken to meet this requirement? (Choose two.)

Select 2 answers
A.Attach an Internet Gateway to the VPC
B.Configure SSL/TLS certificates on the database and application servers
C.Restrict security group rules to only allow traffic from the application tier
D.Create a VPC Peering connection between the subnets
E.Use network ACLs to allow only database traffic
AnswersB, C

SSL/TLS encrypts data in transit between tiers.

Why this answer

Options A and D are correct: an SSL/TLS certificate enables encryption, and security group rules should restrict traffic to only necessary ports. Option B is incorrect because NACLs are stateless and do not encrypt traffic. Option C is incorrect because VPC Peering does not encrypt traffic by itself.

Option E is incorrect because Internet Gateway is for internet traffic.

Full explanation →
743
MCQhard

An SAP administrator notices that the SAP HANA database backups to Amazon S3 are failing intermittently with timeout errors. The backup script uses the AWS CLI to copy files to an S3 bucket. What is the most likely cause and solution?

A.The S3 bucket policy is too restrictive, modify the policy
B.The S3 bucket has a lifecycle policy that deletes objects too quickly
C.The backup files are large and the CLI command does not use multipart upload; use multipart upload and increase timeout values
D.S3 Transfer Acceleration is not enabled, enable it
AnswerC

Large files need multipart upload and appropriate timeouts.

Why this answer

Intermittent timeouts may be due to network connectivity issues or insufficient retries. Using multipart upload for large files and enabling retries can resolve this. Option A is wrong because S3 bucket policies do not cause timeouts.

Option B is wrong because S3 Transfer Acceleration is for speed, not timeouts. Option D is wrong because S3 lifecycle policies do not affect uploads.

Full explanation →
744
Multi-Selectmedium

A company is deploying SAP S/4HANA on AWS and needs to choose a storage solution for the HANA data volume that provides high IOPS and low latency. Which TWO storage options are suitable? (Choose TWO.)

Select 2 answers
A.Amazon EBS gp2 volumes
B.Amazon EC2 instance store (NVMe SSD)
C.Amazon EBS io2 Block Express volumes
D.Amazon Elastic File System (EFS)
E.Amazon S3
AnswersB, C

Instance store provides very low latency and high IOPS, but data is ephemeral; often used for /hana/log.

Why this answer

Options B and C are correct. Option B (EBS io2 Block Express) delivers high IOPS and low latency for HANA. Option C (Instance store NVMe SSD) provides very low latency but is ephemeral.

Option A (EBS gp2) is burstable and not suitable for production HANA. Option D (EFS) is file storage with higher latency. Option E (S3) is object storage, not block-level.

Full explanation →
745
MCQhard

An SAP Basis administrator notices that the SAP HANA database performance has degraded significantly after migrating to AWS. The database is running on an r5.8xlarge instance with 3.6 TB of Amazon EBS gp3 storage. The administrator checks Amazon CloudWatch metrics and finds that the Read/Write latency is consistently above 10 ms and the queue depth is averaging 32. What is the MOST likely cause of the performance degradation?

A.The EC2 instance type does not support enough EBS bandwidth for the workload.
B.The EC2 instance's EBS bandwidth is fully utilized, causing I/O queueing.
C.The gp3 volume burst credit balance is exhausted, causing throughput to drop to baseline.
D.The EBS gp3 volume size is too small, causing IOPS throttling.
AnswerB

High queue depth indicates I/O requests are waiting due to bandwidth saturation.

Why this answer

The r5.8xlarge instance provides a maximum EBS bandwidth of 4,750 Mbps and a maximum EBS IOPS of 60,000. With a queue depth averaging 32 and latency above 10 ms, the instance's EBS bandwidth is saturated, causing I/O requests to queue and wait. This is the classic symptom of hitting the instance-level EBS bandwidth limit, not a volume-level issue.

Exam trap

The trap here is that candidates confuse volume-level limits (gp3 baseline IOPS or gp2 burst credits) with instance-level EBS bandwidth limits, leading them to incorrectly select options C or D when the real bottleneck is the EC2 instance's aggregate EBS throughput capacity.

How to eliminate wrong answers

Option A is wrong because the r5.8xlarge instance type supports up to 4,750 Mbps of EBS bandwidth and 60,000 IOPS, which is more than sufficient for typical SAP HANA workloads; the problem is that this bandwidth is fully utilized, not that the instance type is insufficient. Option C is wrong because gp3 volumes do not use burst credits; they have a baseline performance of 3,000 IOPS and 125 MB/s throughput regardless of size, and burst credits are a feature of gp2, not gp3. Option D is wrong because gp3 volume IOPS are independent of volume size; you can provision up to 16,000 IOPS on any gp3 volume, and the 3.6 TB size is more than adequate to support the required IOPS without throttling.

Full explanation →
746
MCQhard

An SAP system administrator is troubleshooting a high CPU usage issue on an SAP application server (AS) running on an EC2 instance. The administrator suspects that a specific ABAP report is consuming excessive resources. Which AWS service can provide detailed CPU utilization metrics at the process level to confirm the suspicion?

A.AWS CloudTrail
B.Amazon CloudWatch agent with the 'procstat' plugin
C.AWS Systems Manager Inventory
D.AWS Compute Optimizer
AnswerB

The CloudWatch agent can collect per-process CPU, memory, and disk metrics and publish them as custom CloudWatch metrics.

Why this answer

Option B is correct because CloudWatch Agent can collect custom metrics, including per-process CPU utilization, and send them to CloudWatch. Option A (CloudTrail) logs API calls, not OS metrics. Option C (Systems Manager Inventory) collects software inventory, not real-time CPU metrics.

Option D (Compute Optimizer) provides recommendations but not per-process metrics.

Full explanation →
747
MCQeasy

An SAP administrator needs to monitor the CPU utilization of an EC2 instance running SAP NetWeaver. The administrator wants to receive an alert when CPU utilization exceeds 90% for 5 consecutive minutes. Which AWS service should be used?

A.AWS CloudTrail
B.AWS Config
C.Amazon VPC Flow Logs
D.Amazon CloudWatch Alarms
AnswerD

CloudWatch Alarms monitor metrics and trigger alerts.

Why this answer

Option C is correct because Amazon CloudWatch Alarms can monitor metrics and trigger actions. Option A is wrong because CloudTrail logs API calls. Option B is wrong because AWS Config tracks resource configuration.

Option D is wrong because VPC Flow Logs capture network traffic.

Full explanation →
748
MCQeasy

A company is migrating an SAP system and wants to use a storage solution that provides persistent, high-performance block storage for the SAP HANA database. Which AWS storage option should they choose?

A.Amazon EC2 Instance Store
B.Amazon Elastic File System (EFS)
C.Amazon EBS io2 Block Express
D.Amazon S3
AnswerC

io2 Block Express provides high-performance block storage for HANA.

Why this answer

Amazon EBS io2 Block Express volumes provide high performance and durability for HANA. EFS is file storage. S3 is object storage.

Instance store is ephemeral.

Full explanation →
749
MCQeasy

A company is migrating an SAP system to AWS and wants to use AWS Launch Wizard for deployment. They have an existing VPC and subnets. Launch Wizard requires the selection of a subnet for each component. What is the best practice for selecting subnets for high availability?

A.Use only private subnets without public access.
B.Select a single subnet in one Availability Zone for simplicity.
C.Create a new VPC and subnets specifically for Launch Wizard.
D.Select subnets in different Availability Zones to ensure high availability.
AnswerD

This meets best practices for SAP high availability on AWS.

Why this answer

For high availability, it is best to deploy SAP components across multiple Availability Zones by selecting subnets in different AZs. Launch Wizard supports this. Deploying all in one AZ creates a single point of failure.

Launch Wizard can use existing subnets.

Full explanation →
750
Multi-Selectmedium

Which THREE steps should be taken when recovering an SAP system from an EBS snapshot? (Choose 3.)

Select 3 answers
A.Attach the new volume to the EC2 instance
B.Terminate the existing EC2 instance
C.Mount the volume on the appropriate mount point
D.Reconfigure the S3 bucket for backup storage
E.Create an EBS volume from the snapshot
AnswersA, C, E

Attach to the original or replacement instance.

Why this answer

Option A, B, and D are correct. Option C is wrong because you don't need to terminate before restoring. Option E is wrong as S3 doesn't need to be mounted.

Full explanation →
Page 9

Page 10 of 24

Page 11

All pages

123456789101112131415161718192021222324

Practice PAS-C01 by domain

Target a specific domain to shore up weak areas.

Design of SAP Workloads on AWSTechnologyMigrationOperations and Maintenance
See all domains with question counts →