AWS Certified SAP on AWS Specialty PAS-C01 (PAS-C01) — Questions 9761050

1733 questions total · 24pages · All types, answers revealed

Page 13

Page 14 of 24

Page 15
976
MCQmedium

Refer to the exhibit. An administrator is creating an IAM policy for a user who will manage SAP application servers during migration. The policy currently allows starting and stopping EC2 instances. What additional permission is required to allow the user to terminate instances?

A.ec2:ModifyInstanceAttribute
B.ec2:TerminateInstances
C.ec2:RebootInstances
D.ec2:DeleteInstances
AnswerB

TerminateInstances is the correct action for terminating EC2 instances.

Why this answer

The action 'ec2:TerminateInstances' is needed to terminate instances. Option A (ec2:DeleteInstances) is not a valid action. Option C (ec2:ModifyInstanceAttribute) is unrelated.

Option D (ec2:RebootInstances) is for reboot.

977
MCQmedium

A company runs SAP HANA on AWS and needs to restore a database from a backup stored in Amazon S3. The backup was created using the SAP HANA backup to S3 feature (backint). Which AWS service is required to facilitate this restore?

A.AWS Database Migration Service (DMS)
B.AWS Backup
C.AWS Snowball Edge
D.AWS Storage Gateway
AnswerB

AWS Backup can manage and restore SAP HANA databases from S3 backups using backint.

Why this answer

AWS Backup is the correct service because it natively integrates with SAP HANA's backint interface to manage backups stored in Amazon S3. When a backup is created using the SAP HANA backup to S3 feature (backint), AWS Backup provides the necessary orchestration and lifecycle management to restore the database from those S3 objects, including handling the metadata and catalog required for SAP HANA to recognize and apply the backup.

Exam trap

The trap here is that candidates often confuse AWS Backup with generic S3 access or assume that simply having the backup files in S3 is sufficient for a restore, overlooking that SAP HANA requires a backint-compatible service to interpret the backup metadata and execute the restore operation.

How to eliminate wrong answers

Option A is wrong because AWS Database Migration Service (DMS) is designed for migrating databases between engines or to AWS, not for restoring SAP HANA backups created via backint; DMS does not interface with SAP HANA's native backup format or S3-based backint backups. Option C is wrong because AWS Snowball Edge is a physical data transfer device used for large-scale offline data migration, not for facilitating online restore operations from S3 to a running SAP HANA instance. Option D is wrong because AWS Storage Gateway provides on-premises access to cloud storage (e.g., file, volume, tape gateways) but does not integrate with SAP HANA's backint API to orchestrate database restores from S3.

978
MCQhard

A company runs SAP on AWS using a multi-AZ deployment. The database is an SAP HANA system replicated across two Availability Zones. During a recent failure, the standby HANA instance did not take over automatically. The operations team finds that the HANA replication status was 'ERROR' before the failure. What is the most likely reason for the failed takeover?

A.The standby HANA instance had a different instance number than the primary.
B.The fencing mechanism was not configured correctly in the cluster.
C.The HANA system replication was not in sync; data was not fully replicated to the standby.
D.The network latency between the two Availability Zones was too high.
AnswerC

An error status means replication is broken; the standby cannot take over safely.

Why this answer

Option C is correct because if the HANA system replication status is in error, automatic takeover cannot occur. The replication link must be healthy for the standby to have the latest data. Option A is wrong because network connectivity issues would be reflected in replication status.

Option B is wrong because a misconfigured fencing mechanism would not cause replication error. Option D is wrong because different instance numbers would prevent replication setup entirely.

979
Multi-Selectmedium

A company is migrating a legacy on-premises application to AWS. The application uses a MySQL database with a complex stored procedure that runs every hour and takes approximately 10 minutes to complete. The company wants to minimize downtime during migration. Which TWO approaches should the company use to migrate the database?

Select 2 answers
A.Use AWS DMS with a full load only, without ongoing replication, and schedule a cutover window.
B.Use AWS Database Migration Service (DMS) with ongoing replication from the source MySQL database to an Amazon RDS for MySQL instance.
C.Set up an Amazon Aurora MySQL DB cluster and use AWS DMS with the on-premises MySQL database as the source and the Aurora cluster as the target, enabling ongoing replication.
D.Take a full database dump using mysqldump and import it into an Amazon RDS for MySQL instance during a planned maintenance window.
E.Create an Amazon RDS for MySQL read replica from the on-premises database.
AnswersB, C

This approach minimizes downtime by continuously replicating changes until cutover.

Why this answer

Option B is correct because AWS DMS with ongoing replication allows continuous synchronization from the source MySQL database to Amazon RDS for MySQL, minimizing downtime during migration. The complex stored procedure that runs hourly and takes 10 minutes is handled seamlessly as DMS captures ongoing changes, enabling a controlled cutover with minimal disruption.

Exam trap

The trap here is that candidates often assume mysqldump or a full-load-only DMS task is sufficient for minimizing downtime, overlooking the need for ongoing replication to handle continuous changes during the migration window.

980
MCQhard

An SAP system running on AWS uses a shared file system via Amazon EFS for transport directories. The system administrator notices that file operations are slow across multiple application servers. The EFS file system is configured with Bursting Throughput mode. What is the most effective way to improve performance?

A.Switch the file system to Provisioned Throughput mode and set a higher throughput value.
B.Use EFS Access Points to enforce a different UID/GID for each application server.
C.Increase the burst credit balance by reducing file operations during off-peak hours.
D.Create additional mount targets in each Availability Zone to distribute load.
AnswerA

Provisioned Throughput eliminates the need for burst credits and provides consistent performance.

Why this answer

Option B is correct because EFS Provisioned Throughput mode can provide consistent higher throughput. Option A (increase burst credit) is not directly configurable. Option C (multiple mount targets) does not increase throughput.

Option D (EFS Access Points) does not affect performance.

981
MCQmedium

A company is planning to run SAP BusinessObjects (BOBJ) on AWS. The application servers require consistent low-latency access to a shared file system for storing reports and configuration files. Which AWS storage solution is BEST suited for this requirement?

A.Amazon Elastic Block Store (Amazon EBS) with a multi-attach enabled volume.
B.Amazon Elastic File System (Amazon EFS).
C.Amazon Simple Storage Service (Amazon S3).
D.Amazon FSx for Windows File Server.
AnswerB

EFS provides a scalable, shared NFS file system for Linux instances.

Why this answer

Option A is correct because Amazon EFS provides a fully managed NFS file system that is accessible from multiple EC2 instances with low latency, suitable for shared file storage. Option B (S3) is object storage, not a file system. Option C (EBS) is block storage attached to a single instance.

Option D (FSx for Windows) is for Windows-based workloads, but BOBJ typically runs on Linux.

982
MCQeasy

A company is migrating an SAP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS) instance. Which AWS service is best suited for this?

A.Amazon RDS Multi-AZ deployment
B.EC2 Auto Scaling group
C.Amazon Route 53 weighted routing policy
D.Amazon S3 cross-region replication
AnswerA

Provides automatic failover for the ASCS database with a standby replica.

Why this answer

Option A is correct because a Multi-AZ deployment of Amazon RDS provides automatic failover for the ASCS database. Option B (EC2 Auto Scaling) is for horizontal scaling, not for stateful services. Option C (Amazon Route 53 routing policy) can redirect traffic but doesn't ensure instance availability.

Option D (Amazon S3) is for storage, not high-availability failover.

983
MCQhard

An SAP environment on AWS uses a shared /sapmnt file system via Amazon EFS. The company wants to encrypt data at rest for the entire stack. Which services require separate encryption configurations?

A.EBS volumes and EFS file system
B.Application Load Balancer and EFS
C.EFS file system and S3 bucket
D.CloudWatch Logs and EBS volumes
AnswerA

Both require separate encryption enablement.

Why this answer

Option A is correct because EBS volumes, EFS file systems, and RDS databases each have their own encryption settings. Option B is wrong because S3 is not used. Option C is wrong because CloudWatch does not store persistent data.

Option D is wrong because ALB does not store data.

984
MCQeasy

A company is planning to migrate its SAP HANA workload to AWS. The system requires high network throughput and low latency between application and database servers. Which AWS networking feature should be used to meet these requirements?

A.Create a VPC Peering connection between the application and database subnets.
B.Use Elastic Fabric Adapter (EFA) for network connectivity.
C.Use Enhanced Networking on all instances.
D.Place the instances in a Cluster Placement Group.
AnswerD

Cluster Placement Groups provide low-latency, high-bandwidth connectivity between instances.

Why this answer

A Cluster Placement Group (CPG) is a logical grouping of instances within a single Availability Zone that provides low-latency, high-throughput network connectivity by placing them in close physical proximity. For SAP HANA workloads requiring consistent high network throughput and low latency between application and database servers, a CPG ensures that all instances are co-located, minimizing network hops and jitter. This is the correct choice because it directly addresses the need for low-latency, high-bandwidth communication between tightly coupled components.

Exam trap

The trap here is that candidates often confuse Enhanced Networking (which improves individual instance performance) with the co-location benefits of a Cluster Placement Group, failing to recognize that low latency between instances requires physical proximity, not just faster virtualized networking.

How to eliminate wrong answers

Option A is wrong because VPC Peering connects separate VPCs but does not provide any special performance guarantees; it relies on the standard AWS network infrastructure and does not reduce latency or increase throughput between subnets within the same VPC. Option B is wrong because Elastic Fabric Adapter (EFA) is designed for tightly coupled HPC/ML workloads using MPI or NCCL, not for standard SAP HANA traffic, and it requires special OS and application support that SAP does not provide. Option C is wrong because Enhanced Networking (using SR-IOV) improves network performance by providing higher bandwidth and lower jitter compared to traditional virtualized networking, but it does not guarantee the low-latency, high-throughput co-location that a Cluster Placement Group offers; it is a prerequisite but not sufficient alone.

985
MCQmedium

A company is designing a disaster recovery solution for SAP HANA. The primary site is in us-east-1 and the DR site is in us-west-2. The RPO is 5 minutes and the RTO is 30 minutes. Which replication method meets these requirements?

A.Amazon RDS Multi-AZ deployment
B.Scheduled EBS snapshots copied to us-west-2
C.SAP HANA System Replication with synchronous mode
D.AWS Database Migration Service with ongoing replication
AnswerC

HANA System Replication can achieve sub-minute RPO synchronously.

Why this answer

Option C is correct because HANA System Replication with synchronous mode can achieve low RPO. Option A is incorrect because RDS Multi-AZ is for single Region. Option B is incorrect because EBS snapshots have higher RPO.

Option D is incorrect because DMS continuous replication is for databases but not optimized for HANA.

986
MCQeasy

An SAP administrator needs to integrate SAP S/4HANA with Amazon S3 for archival purposes. Which AWS service should be used to enable secure and efficient data transfer from SAP to S3?

A.Amazon Kinesis
B.Amazon Athena
C.AWS Glue
D.AWS DataSync
AnswerD

DataSync is optimized for data transfers to S3.

Why this answer

AWS DataSync is the correct choice because it is purpose-built for efficiently and securely transferring large volumes of data from on-premises or SAP systems to Amazon S3. It automates the transfer process, supports encryption in transit (TLS) and at rest, and can handle the high-throughput requirements of SAP S/4HANA archival jobs without requiring custom scripting or complex network configurations.

Exam trap

The trap here is that candidates often confuse AWS DataSync with AWS Glue or Amazon Kinesis, mistakenly thinking that any data movement to S3 requires an ETL or streaming service, rather than recognizing DataSync as the dedicated, high-performance transfer service for large-scale batch workloads like SAP archiving.

How to eliminate wrong answers

Option A is wrong because Amazon Kinesis is a real-time data streaming service designed for ingesting and processing streaming data (e.g., clickstreams, logs), not for batch archival transfers from SAP S/4HANA to S3. Option B is wrong because Amazon Athena is an interactive query service for analyzing data directly in S3 using SQL, not a data transfer or integration tool. Option C is wrong because AWS Glue is a serverless data integration and ETL service primarily used for preparing and transforming data for analytics, not for direct, efficient bulk data movement from SAP to S3.

987
Multi-Selecthard

Which THREE of the following are valid considerations when designing a SAP landscape on AWS?

Select 3 answers
A.The EBS volumes for HANA data and logs must be provisioned with the correct IOPS and throughput.
B.AWS Managed Services (AMS) is mandatory for running SAP on AWS.
C.The SAPRouter must be configured to allow SAP support access to the AWS environment.
D.An AWS Support plan that includes SAP support is required to get SAP support for AWS-related issues.
E.All SAP instances must be launched in a cluster placement group.
AnswersA, C, D

IOPS and throughput are critical for HANA performance.

Why this answer

Option A is correct because SAP HANA is extremely sensitive to storage performance; EBS volumes for HANA data and log must be provisioned with sufficient IOPS and throughput to meet SAP's documented sizing guidelines. Inadequate IOPS can cause HANA to abort transactions or crash, and AWS allows you to use Provisioned IOPS (io1/io2) or gp3 volumes with custom IOPS and throughput settings to meet these requirements.

Exam trap

The trap here is that candidates often assume AWS Managed Services (AMS) is required for SAP on AWS because of the complexity, but AWS explicitly allows self-managed SAP deployments, and the exam tests knowledge of optional vs. mandatory services.

988
MCQhard

An SAP administrator is troubleshooting an issue where SAP application servers are unable to connect to the SAP HANA database. The database is running on an EC2 instance in a private subnet. The application servers are in a different VPC connected via VPC peering. The security group for the database instance allows TCP port 3$15$13 from the application server security group. Which additional configuration is MOST likely required?

A.Modify the security group to allow traffic from the application server subnet CIDR.
B.Update the route tables to add a route to the database subnet.
C.Add a rule to the network ACL to allow inbound traffic on port 3$15$13.
D.Enable DNS resolution for the VPC peering connection.
AnswerD

VPC peering requires DNS resolution to be enabled for hostname resolution across VPCs.

Why this answer

Option C is correct because VPC peering does not automatically resolve DNS hostnames between VPCs. The application servers must resolve the database hostname to the private IP of the database instance. Option A is wrong because VPC peering does not support transitive routing, but that's not relevant here.

Option B is wrong because NACLs are stateless and must allow return traffic, but the issue is DNS resolution. Option D is wrong because the security group rule already allows the port.

989
MCQhard

A company is migrating an SAP HANA system from on-premises to AWS. The database size is 3 TB, and the network bandwidth to AWS is 1 Gbps. The migration window is limited to 48 hours. What is the most efficient migration strategy?

A.Set up an AWS Direct Connect connection and use HANA backup and restore
B.Use AWS Database Migration Service (DMS) for continuous replication
C.Use AWS Snowball Edge to transfer the HANA backup
D.Upload the HANA backup to Amazon S3 using multipart upload
AnswerC

Snowball Edge can transfer data offline at high speed.

Why this answer

Option C is correct because AWS Snowball Edge provides high-capacity storage and can transfer data faster than over the network given the bandwidth constraint. Option A is wrong because S3 multipart upload over 1 Gbps would take more than 48 hours. Option B is wrong because DMS is for ongoing replication, not initial load.

Option D is wrong because Direct Connect still limited to 1 Gbps.

990
MCQmedium

A company is running SAP on AWS and needs to migrate a large on-premises SAP HANA database to AWS with minimal downtime. Which approach is most suitable?

A.Export the HANA database to a file, upload to S3, and import into a new HANA instance on EC2.
B.Use AWS Server Migration Service (SMS) to replicate the entire on-premises server to AWS.
C.Use AWS Database Migration Service (DMS) to continuously replicate data to an Amazon RDS for SAP HANA instance.
D.Set up SAP HANA System Replication between the on-premises system and an EC2 instance running HANA in AWS.
AnswerD

HSR provides asynchronous or synchronous replication with minimal downtime.

Why this answer

Option B is correct because HANA System Replication allows near-zero downtime. Option A is wrong because it requires downtime. Option C is wrong because it is not for HANA.

Option D is wrong because it requires more downtime.

991
MCQmedium

A company is running SAP HANA on a bare metal EC2 instance. The system experiences a hardware failure that causes an instance stop. The company needs to recover the instance quickly. What should the company do to minimize recovery time?

A.Use AWS CloudFormation to recreate the instance
B.Manually start the instance from the EC2 console
C.Restore the instance from the latest EBS snapshot
D.Configure an Amazon CloudWatch alarm to automatically recover the instance
AnswerD

CloudWatch can automatically recover an instance on healthy hardware.

Why this answer

For bare metal instances, automatic recovery via CloudWatch alarm can restart the instance on healthy hardware if the instance is configured with an Elastic IP or is part of an ASG. Option B is correct. Manual restart (A) is slower.

EBS snapshots (C) require restore time. Changing to a virtualized instance (D) may not be immediate.

992
MCQhard

During a migration of an SAP ERP system to AWS, the team notices that the SAP application performance is slow on the new EC2 instances. The instance type is correct for SAP certification. What is the most likely cause?

A.Instances are in different placement groups
B.Incorrect EC2 instance type
C.Security group rules are blocking traffic
D.EBS volumes are not provisioned with enough IOPS
AnswerD

Insufficient IOPS leads to storage bottlenecks and slow performance.

Why this answer

Storage performance, specifically IOPS, often impacts SAP performance. Even if the instance type is correct, if the EBS volumes are not provisioned with sufficient IOPS, performance will suffer. Option D is correct.

Option A (incorrect instance type) is not the issue. Option B (placement group) could be an issue but is less likely. Option C (security group) wouldn't cause performance issues.

993
MCQeasy

A company is migrating its SAP system to AWS and wants to ensure that the migration does not violate any SAP licensing requirements. Which of the following is a correct licensing consideration?

A.SAP licenses are based on the number of AWS accounts used
B.SAP licenses must be purchased separately from SAP or an SAP partner
C.SAP licenses are automatically included when you use AWS Launch Wizard
D.SAP licenses are not required for non-production environments in AWS
AnswerB

Customers need to bring their own SAP licenses.

Why this answer

Option B is correct because SAP requires that customers have proper licenses for all systems, including production and non-production, running on AWS. Option A is wrong because AWS does not provide SAP licenses by default. Option C is wrong because SAP licensing is based on the number of users or processor cores, not on the AWS account.

Option D is wrong because SAP licensing is required for all environments.

994
Multi-Selectmedium

Which TWO AWS services can be used to monitor SAP HANA database performance in real time? (Select TWO.)

Select 2 answers
A.AWS Systems Manager
B.AWS CloudTrail
C.AWS Trusted Advisor
D.Amazon CloudWatch
E.AWS Config
AnswersA, D

Systems Manager can run scripts and collect performance data.

Why this answer

Amazon CloudWatch can ingest HANA metrics via the SAP HANA CloudWatch agent, and AWS Systems Manager can run scripts to collect performance data. AWS Config is for configuration auditing, not performance monitoring.

995
MCQeasy

A company is running SAP on AWS and needs to ensure that all changes to the SAP infrastructure are logged for audit purposes. Which AWS service should be enabled to record API calls?

A.AWS CloudTrail
B.Amazon GuardDuty
C.Amazon CloudWatch
D.AWS Config
AnswerA

CloudTrail records all API activity for auditing.

Why this answer

Option B (AWS CloudTrail) is correct because it records all API activity in the AWS account. Option A (Amazon CloudWatch) monitors performance. Option C (AWS Config) evaluates resource configurations.

Option D (Amazon GuardDuty) detects threats.

996
MCQeasy

Refer to the exhibit. A CloudFormation template is used to launch an SAP application server. The stack creation succeeds, but the application server fails to start correctly. What is the most likely reason?

A.The template is missing an output parameter to verify the instance status.
B.The instance type r5.2xlarge is not supported for SAP application servers.
C.The AMI ID is invalid because it contains numeric characters.
D.The UserData script may not be executed due to timing issues; the sleep command may be insufficient.
AnswerD

The script has a 30-second sleep, but if the instance is not fully ready, the script may fail.

Why this answer

Option B is correct because the UserData script includes a 'sleep 30' command, which may not be sufficient if the instance takes longer to become ready. Option A is wrong because r5.2xlarge is supported for SAP. Option C is wrong because there is no output parameter causing issues.

Option D is wrong because the AMI ID is just an example; the assumption is it's valid.

997
MCQhard

A company runs its SAP HANA database on an EC2 instance with EBS volumes. The database requires consistent low-latency I/O with a high number of IOPS. The current configuration uses EBS gp2 volumes. During peak loads, the application experiences performance degradation. Which change will provide the most consistent performance for SAP HANA?

A.Switch to EBS st1 (Throughput Optimized HDD) volumes.
B.Migrate to EBS io2 Block Express volumes with provisioned IOPS.
C.Configure multiple EBS gp2 volumes in a RAID 0 array to increase IOPS.
D.Increase the size of the existing gp2 volumes to gain higher baseline IOPS.
AnswerB

D is correct: io2 Block Express provides consistent high IOPS and low latency.

Why this answer

Option D is correct: EBS io2 Block Express volumes provide high, consistent IOPS and low latency, suitable for SAP HANA. Option A is incorrect because RAID 0 increases risk and doesn't guarantee consistency. Option B is incorrect because throughput-optimized volumes (st1) are not designed for high IOPS.

Option C is incorrect because increasing volume size for gp2 only increases baseline IOPS but not consistently under high load.

998
MCQmedium

A company is designing a disaster recovery (DR) strategy for SAP S/4HANA on AWS. The primary site is in us-east-1. They want a secondary site in us-west-2 with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. Which solution meets these requirements with the LEAST operational overhead?

A.Take hourly backups to S3 and restore in us-west-2 when needed.
B.Use HANA System Replication to us-west-2 with manual failover.
C.Use HANA System Replication in async mode to us-west-2.
D.Use HANA System Replication in sync mode with automatic failover to us-west-2.
AnswerD

Sync mode meets RPO and automated failover meets RTO.

Why this answer

Option D is correct because HANA System Replication in synchronous mode with automatic failover provides the lowest RPO (near-zero data loss) and meets the 15-minute RPO and 2-hour RTO requirements with minimal operational overhead. Automatic failover eliminates manual intervention, reducing recovery time and complexity compared to other options.

Exam trap

The trap here is that candidates often choose async mode (Option C) thinking it is sufficient for a 15-minute RPO, but they overlook that async mode can lose data and does not include automatic failover, which increases operational overhead and risks exceeding the RTO.

How to eliminate wrong answers

Option A is wrong because hourly backups to S3 cannot achieve a 15-minute RPO (backups are taken only once per hour) and restoring from S3 would take significantly longer than 2 hours, failing both RPO and RTO. Option B is wrong because HANA System Replication with manual failover introduces human intervention, which typically exceeds the 2-hour RTO due to detection and execution delays, and does not meet the 'least operational overhead' requirement. Option C is wrong because HANA System Replication in async mode can achieve a 15-minute RPO but may lose data during a failover if the primary fails before the last asynchronous replication completes; however, the primary issue is that it does not include automatic failover, so recovery still requires manual steps, increasing operational overhead and potentially exceeding the 2-hour RTO.

999
MCQhard

An SAP system on AWS is experiencing high latency for database transactions. The system uses a single EBS volume for the SAP HANA data volume. The operations team needs to improve I/O performance without changing the instance type. Which action should be taken?

A.Use a single EBS volume for both data and log
B.Switch to EBS io2 Block Express volumes
C.Increase the EBS volume size to gain more IOPS
D.Enable EBS optimization on the instance
AnswerB

io2 Block Express offers sub-millisecond latency and high IOPS, suitable for SAP HANA.

Why this answer

Switching to EBS io2 Block Express volumes provides higher IOPS and lower latency compared to gp3. Increasing volume size does not necessarily improve latency. Using a single volume for log and data is not recommended.

Enabling EBS optimization is already enabled on current generation instances.

1000
MCQeasy

A SAP administrator needs to grant an IAM user permission to start and stop EC2 instances that are part of an SAP environment. The administrator wants to follow the principle of least privilege. Which IAM policy action should be included?

A.ec2:TerminateInstances
B.ec2:RunInstances
C.ec2:StartInstances and ec2:StopInstances
D.ec2:RebootInstances
AnswerC

These actions specifically allow starting and stopping instances.

Why this answer

Option C is correct because ec2:StartInstances and ec2:StopInstances are the specific actions needed. Option A is wrong because ec2:RebootInstances is not required. Option B is wrong because ec2:RunInstances launches new instances.

Option D is wrong because ec2:TerminateInstances is more destructive than needed.

1001
MCQhard

Refer to the exhibit. An SAP administrator is creating an IAM policy for a migration user who will use AWS DMS to migrate an SAP database to Amazon RDS. The migration also requires reading from an S3 bucket containing source database export files and writing the DMS logs to another S3 bucket. The policy above is attached. Which required permission is MISSING from this policy?

A.dms:TestConnection
B.s3:ListBucket
C.rds:ModifyDBInstance
D.dms:CreateEndpoint
AnswerD

DMS requires CreateEndpoint to define source and target databases.

Why this answer

DMS needs the dms:CreateEndpoint permission to create source and target endpoints. The policy includes dms:CreateReplicationTask but not dms:CreateEndpoint. Option A is wrong because s3:ListBucket is not strictly required if the user knows the object keys.

Option B is wrong because rds:ModifyDBInstance is not needed. Option D is wrong because dms:TestConnection is for testing but not required for creating tasks.

1002
MCQmedium

A company has deployed an SAP HANA database on AWS using a single EC2 instance with EBS volumes. The database is used for a critical SAP system. The company needs to ensure that the database can be restored to a point in time within the last 24 hours with minimal data loss. The administrator currently takes nightly EBS snapshots of the data and log volumes. However, recent tests show that recovery to a specific point in time (e.g., one hour ago) is not possible because the log volume is not backed up frequently enough. The administrator must implement a solution that allows point-in-time recovery with a recovery point objective (RPO) of 15 minutes. Which solution should the administrator implement?

A.Create EBS snapshots of the log volume every 15 minutes using a cron job
B.Use Amazon Data Lifecycle Manager (DLM) to schedule snapshots of the log volume every 15 minutes
C.Configure SAP HANA Backint agent to back up log files to Amazon S3 every 15 minutes
D.Enable EBS Multi-Attach on the log volume and attach it to a second instance to replicate logs
AnswerC

Backint can stream log backups to S3 with minimal overhead, enabling point-in-time recovery.

Why this answer

Option B is correct because using SAP HANA Backint to stream logs to S3 every 15 minutes allows point-in-time recovery. Option A is wrong because EBS snapshots of log volumes every 15 minutes are costly and may cause I/O spikes. Option C is wrong because enabling Multi-Attach does not address backup.

Option D is wrong because DLM automates snapshot creation but still has the same cost and performance issues.

1003
MCQmedium

A company runs SAP on AWS and uses a Multi-AZ architecture. The SAP application servers are in an Auto Scaling group across two Availability Zones, and the database is an RDS for SAP HANA Multi-AZ DB instance. During a recent failover test, the database failover completed within 2 minutes, but the application servers took 10 minutes to reconnect to the database. Which action would minimize the application reconnection time?

A.Reduce the health check grace period on the Auto Scaling group.
B.Configure the SAP application to use the RDS Multi-AZ automatic failover endpoint.
C.Increase the minimum number of application servers in the Auto Scaling group.
D.Use an RDS Proxy to manage database connections from the application servers.
AnswerD

RDS Proxy pools connections and handles failover transparently, reducing application reconnection time.

Why this answer

Option D is correct because using an RDS proxy minimizes connection disruptions by pooling and reusing database connections during failovers, reducing application reconnection time. Option A is wrong because shortening the health check grace period doesn't affect reconnection. Option B is wrong because increasing the number of application servers doesn't address reconnection logic.

Option C is wrong because an RDS Multi-AZ failover already happens automatically within minutes.

1004
Multi-Selecteasy

Which TWO of the following are best practices for running SAP HANA on AWS? (Choose 2)

Select 2 answers
A.Stop HANA instances when not in use to save costs
B.Use general-purpose instances (e.g., t3) to reduce costs
C.Use separate EBS volumes for HANA data and log files
D.Use EBS-optimized instances for dedicated EBS bandwidth
E.Launch all HANA instances in a single placement group
AnswersC, D

Avoids I/O contention.

Why this answer

Options A and D are correct. A: EBS-optimized instances ensure dedicated network bandwidth for EBS. D: Separate EBS volumes for log and data help avoid I/O contention.

B is wrong because placement groups reduce network latency but may limit instance diversity. C is wrong because memory-optimized instances are recommended for HANA. E is wrong because stopping instances loses memory data; HANA requires persistent storage.

1005
MCQmedium

A company is migrating a legacy on-premises application to AWS. The application requires static IP addresses for its clients to whitelist. The migration strategy includes using an Application Load Balancer (ALB) to distribute traffic across multiple EC2 instances in an Auto Scaling group. The clients require a fixed set of IP addresses to whitelist. Which solution meets the requirement?

A.Use AWS Global Accelerator with the Application Load Balancer as an endpoint.
B.Use an Application Load Balancer and assign Elastic IP addresses to it.
C.Use a Network Load Balancer with Elastic IP addresses.
D.Launch EC2 instances with Elastic IPs and place them behind a NAT Gateway.
AnswerC

NLB supports static IP addresses via Elastic IPs, meeting the whitelisting requirement.

Why this answer

Option C is correct because a Network Load Balancer (NLB) supports static IP addresses via Elastic IP (EIP) assignment per Availability Zone, which allows clients to whitelist a fixed set of IPs. The ALB, by contrast, does not support static IP assignment; its DNS name resolves to dynamic IPs that can change. Using an NLB with EIPs meets the requirement for a fixed whitelist while still distributing traffic to the ALB or directly to EC2 instances.

Exam trap

The trap here is that candidates assume an Application Load Balancer can be assigned Elastic IPs because they are familiar with assigning EIPs to EC2 instances, but ALBs do not support static IP assignment at all, making the NLB the only correct choice for fixed whitelist IPs.

How to eliminate wrong answers

Option A is wrong because AWS Global Accelerator provides two static IP addresses but is an overlay service that still requires an endpoint (like an ALB or NLB) to receive traffic; it does not replace the need for a load balancer with static IPs, and the ALB itself still lacks static IPs. Option B is wrong because an Application Load Balancer cannot be assigned Elastic IP addresses; ALBs are designed to be internet-facing via a DNS name with dynamic IPs, and attaching EIPs is not supported. Option D is wrong because launching EC2 instances with Elastic IPs and placing them behind a NAT Gateway does not provide a load-balanced, highly available frontend; the NAT Gateway is used for outbound traffic, not inbound, and the EIPs would be tied to individual instances, not a single whitelistable set.

1006
MCQmedium

A company operates an SAP system on AWS with a shared SAP HANA database across multiple SAP applications. The database size is 5 TB. The operations team wants to implement a disaster recovery strategy with a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 2 hours. Which solution meets these requirements with the least operational overhead?

A.Use AWS DMS to replicate data to an S3 bucket in a different Region
B.Use SAP HANA backup to S3 and restore in another Region
C.Configure SAP HANA System Replication (HSR) to a secondary instance in another AWS Region
D.Use AWS CloudEndure Disaster Recovery to replicate the entire server
AnswerC

HSR provides near-real-time replication and fast failover.

Why this answer

Option C is correct because HANA System Replication with a standby in another Region provides near real-time replication and fast failover. Option A is incorrect because DMS cannot replicate HANA to S3 for DR. Option B is incorrect because backup to S3 has higher RPO.

Option D is incorrect because CloudEndure is not optimized for HANA replication.

1007
MCQeasy

A company is migrating an SAP system to AWS and wants to use an existing AWS Direct Connect connection for the migration. The on-premises network team reports that the Direct Connect link is consistently at 80% utilization during business hours. What should the company do to ensure a successful migration without impacting production traffic?

A.Increase the bandwidth of the Direct Connect link.
B.Use AWS Site-to-Site VPN over the internet as an alternative.
C.Schedule the migration during off-peak hours to avoid high utilization.
D.Use AWS Snowball Edge to transfer the data physically.
AnswerC

Off-peak hours ensure minimal impact on production traffic.

Why this answer

The correct approach is to schedule the migration during off-peak hours when the link utilization is lower to avoid congestion. Increasing bandwidth may not be feasible immediately. Using VPN over the internet may add latency and security concerns.

Snowball is for large data volumes, but if the data volume is manageable, off-peak migration is simpler.

1008
Multi-Selecthard

Which THREE considerations are important when designing a disaster recovery (DR) strategy for SAP on AWS?

Select 3 answers
A.Use EBS snapshots in the same Region for recovery
B.Copy Amazon Machine Images (AMIs) to the DR Region
C.Define Recovery Time Objective (RTO) and Recovery Point Objective (RPO)
D.Use cross-Region replication for SAP HANA database backups
E.Deploy all SAP resources in a single AWS Region
AnswersB, C, D

Pre-built AMIs allow quick instance launch in DR.

Why this answer

Amazon Machine Images (AMIs) must be copied to the DR Region to ensure that the exact EC2 instance configuration, including the operating system, SAP application binaries, and any custom patches, is available for recovery. Without copying AMIs, you cannot launch identical instances in the DR Region, which is essential for a consistent SAP environment.

Exam trap

The trap here is that candidates often assume EBS snapshots in the same Region are sufficient for DR, but they fail to recognize that true DR requires cross-Region replication of both AMIs and database backups to meet RTO and RPO objectives.

1009
MCQeasy

A company runs SAP ERP on AWS using a Multi-AZ RDS for SAP HANA database. The operations team needs to automate the rotation of the database master password. Which AWS service should be used to securely store and rotate the password?

A.AWS Systems Manager Parameter Store
B.AWS Secrets Manager
C.AWS CloudHSM
D.AWS Identity and Access Management (IAM)
AnswerB

Secrets Manager can rotate RDS credentials automatically.

Why this answer

Option D is correct because AWS Secrets Manager can automatically rotate RDS database credentials. Option A (Systems Manager Parameter Store) can store secrets but does not support automatic rotation. Option B (IAM) does not manage database passwords.

Option C (CloudHSM) is for hardware security modules, not password rotation.

1010
MCQeasy

An SAP system is running on AWS with an SAP HANA database. The administrator needs to back up the HANA database to Amazon S3. Which AWS service or feature should be used to perform efficient incremental backups?

A.AWS Backup with the SAP HANA backup plan
B.Amazon S3 Transfer Acceleration
C.AWS Storage Gateway with volume gateway
D.Amazon EBS snapshots of the HANA data volumes
AnswerA

AWS Backup integrates with SAP HANA to perform incremental backups to S3.

Why this answer

Option A is correct. AWS Backup supports SAP HANA with incremental backups to S3. Option B is wrong because EBS snapshots are for volumes, not database-level backups.

Option C is wrong because AWS Storage Gateway is for on-premises integration. Option D is wrong because S3 Transfer Acceleration speeds up uploads but does not manage backups.

1011
MCQmedium

A company runs a critical SAP HANA database on an m5.24xlarge EC2 instance. The operations team notices that the database performance degrades during peak hours. Which AWS service should be used to identify whether the instance is experiencing CPU throttling due to CPU credit exhaustion?

A.Use CloudTrail to review the EC2 instance launch configuration.
B.Use AWS Trusted Advisor to check for instance performance issues.
C.Use CloudWatch to monitor the CPUUtilization metric.
D.Use CloudWatch to monitor the CPUCreditBalance metric.
AnswerC

This is the correct metric to identify high CPU usage.

Why this answer

Option B is correct because T2/T3 instances use CPU credits, but m5 instances are dedicated performance instances and do not use CPU credits. However, the question tests if the candidate knows that m5 instances do not have CPU credit concepts; thus the correct answer is to check CloudWatch metrics for CPU Utilization, which directly measures CPU usage. Option A is wrong because m5 instances do not have CPU credit metrics.

Option C is wrong because CloudTrail logs API calls, not performance metrics. Option D is wrong because Trusted Advisor gives best-practice recommendations, not real-time CPU metrics.

1012
Multi-Selectmedium

Which THREE of the following are valid methods to secure network traffic between SAP application servers and the SAP HANA database on AWS? (Choose three.)

Select 3 answers
A.Use VPC peering to connect different VPCs securely.
B.Use AWS Direct Connect to encrypt traffic.
C.Use network ACLs to control traffic at the subnet level.
D.Use security groups to restrict traffic between instances.
E.Use AWS Shield to encrypt traffic.
AnswersA, C, D

VPC peering enables private connectivity.

Why this answer

Options A, B, and D are correct. A is correct because security groups act as a virtual firewall. B is correct because NACLs provide stateless filtering at the subnet level.

D is correct because VPC peering enables secure connectivity. C is incorrect because AWS Shield is for DDoS protection, not network traffic security. E is incorrect because Direct Connect is for connectivity, not security.

1013
Multi-Selecthard

A company is migrating a large SAP HANA database (5 TB) from on-premises to AWS. The migration must have minimal downtime and use AWS DMS for ongoing replication. Which TWO actions should be taken to ensure the migration completes successfully? (Choose 2.)

Select 2 answers
A.Use a t2.large instance for the DMS replication instance to reduce cost
B.Use Amazon S3 as an intermediate target for initial load
C.Provision a large EC2 instance for the DMS replication instance (e.g., x1e.32xlarge)
D.Enable Multi-AZ on the target RDS instance
E.Disable automatic backup retention on the target database
AnswersC, D

Large instance classes provide the necessary memory and CPU for large database migrations.

Why this answer

Options B and D are correct. Option B: Using a large EC2 instance class (e.g., x1e.32xlarge) ensures sufficient memory and compute for DMS replication tasks. Option D: Enabling Multi-AZ for the target RDS instance provides high availability but does not directly impact migration performance.

Option A is wrong because DMS does not support direct S3 as a target for HANA. Option C is wrong because disabling backup retention can reduce storage overhead but is not a best practice for production. Option E is wrong because using t2 instances may not have enough network throughput.

1014
MCQeasy

An SAP system is experiencing high disk I/O latency. The operations team checks the Amazon CloudWatch metrics and finds that the Average Queue Length for the EBS volumes is consistently above the recommended threshold. Which action should be taken to address this issue?

A.Change the volume type to Throughput Optimized HDD (st1).
B.Increase the provisioned IOPS for the EBS volumes.
C.Enable EBS encryption to improve I/O performance.
D.Increase the volume size to improve I/O performance.
AnswerB

Higher IOPS can handle more requests, reducing queue length.

Why this answer

Option A is correct because increasing IOPS reduces queue length. Option B is wrong because increasing volume size may not increase IOPS if gp2 volumes are used (size affects burst credits). Option C is wrong because converting to st1 is for throughput, not IOPS.

Option D is wrong because enabling encryption does not affect performance.

1015
MCQhard

A company is migrating its SAP system from on-premises to AWS. The system uses a shared filesystem (NFS) for transport directories and logs. The company wants to use AWS storage services to provide a similar shared filesystem. Which storage solution is MOST appropriate for this migration?

A.Amazon EFS (Elastic File System)
B.Amazon S3 with a mount point via s3fs-fuse
C.Amazon FSx for Windows File Server
D.Amazon EBS with multi-attach enabled
AnswerA

EFS provides a scalable NFS filesystem that can be shared across multiple EC2 instances.

Why this answer

Amazon EFS provides a managed NFS filesystem that can be mounted by multiple EC2 instances, suitable for SAP transport directories. Option A is wrong because Amazon S3 is object storage, not a POSIX filesystem. Option B is wrong because Amazon FSx for Windows File Server is for SMB, not NFS.

Option D is wrong because EBS volumes cannot be shared across multiple instances without additional complexity.

1016
MCQmedium

A company is migrating an SAP ECC system to AWS and needs to ensure low-latency connectivity between the application server and the database server. Both servers will be in the same VPC but different subnets. Which configuration best minimizes latency?

A.Place the servers in different placement groups but the same Availability Zone
B.Use a cluster placement group spanning two Availability Zones
C.Place the servers in different Availability Zones but within the same region
D.Place the servers in the same placement group and the same Availability Zone
AnswerD

Same placement group and AZ ensures physical proximity and low latency.

Why this answer

Placing both servers in the same placement group and same Availability Zone ensures physical proximity, reducing network latency. Option A is wrong because different AZs introduce cross-AZ latency. Option C is wrong because a placement group can span AZs but that adds latency.

Option D is wrong because cluster placement groups are for HPC, not necessary for SAP.

1017
MCQmedium

A company is migrating a SAP system to AWS and needs to ensure that the database migration from SAP ASE to Amazon Aurora is successful with minimal downtime. Which AWS service should be used?

A.AWS Snowball Edge
B.AWS Server Migration Service (SMS)
C.AWS DataSync
D.AWS Database Migration Service (DMS)
AnswerD

DMS supports heterogeneous migrations and ongoing replication.

Why this answer

AWS Database Migration Service (DMS) is the correct choice because it supports heterogeneous migrations from SAP ASE (Sybase) to Amazon Aurora with minimal downtime. DMS can continuously replicate ongoing changes from the source database to the target using change data capture (CDC), allowing the source system to remain operational during the migration and enabling a cutover with only a brief outage.

Exam trap

The trap here is that candidates may confuse AWS DMS with AWS DataSync, assuming DataSync can handle database migrations, but DataSync is strictly for file-based data transfers and lacks the heterogeneous database replication capabilities required for SAP ASE to Aurora.

How to eliminate wrong answers

Option A (AWS Snowball Edge) is wrong because it is a physical data transfer device designed for large-scale offline data migrations, not for live database replication with minimal downtime, and it cannot perform ongoing CDC from SAP ASE to Aurora. Option B (AWS Server Migration Service) is wrong because it is used for migrating on-premises virtual machines to AWS as AMIs, not for database-level migrations between different database engines. Option C (AWS DataSync) is wrong because it is optimized for moving large volumes of file data over the network (e.g., NFS/SMB shares) and does not support heterogeneous database replication or CDC for SAP ASE to Aurora.

1018
Multi-Selectmedium

A company is designing an SAP HANA disaster recovery solution on AWS across two regions. Which TWO actions meet the requirement of a Recovery Point Objective (RPO) of less than 5 minutes?

Select 2 answers
A.Set up AWS Database Migration Service (DMS) with ongoing replication from the primary to the DR region.
B.Use Amazon S3 Cross-Region Replication to copy HANA data files to the DR region every minute.
C.Schedule a script to run every minute that exports HANA data and uploads to S3 in the DR region.
D.Implement SAP HANA System Replication with asynchronous replication to the DR region.
E.Configure automated nightly snapshots of the HANA database and copy them to the DR region using AWS Backup.
AnswersA, D

AWS DMS with ongoing replication can achieve sub-5-minute RPO by continuously replicating changes.

Why this answer

Option A is correct because AWS Database Migration Service (DMS) with ongoing replication can continuously capture and apply changes from the SAP HANA source database to a target in the DR region, achieving sub-5-minute RPO by replicating transactions in near real-time. Option D is correct because SAP HANA System Replication with asynchronous mode replicates data at the database level, typically achieving RPO of seconds to a few minutes, well under the 5-minute requirement.

Exam trap

The trap here is that candidates may confuse S3 Cross-Region Replication or scripted exports as viable for low RPO, not realizing that these methods cannot provide the continuous, transactional consistency required for SAP HANA disaster recovery.

1019
MCQeasy

A company wants to automate the backup of its SAP HANA database to Amazon S3. The database is running on an EC2 instance with a 500 GB gp3 volume. The backup should be encrypted at rest in S3. What is the most efficient way to achieve this with minimal operational overhead?

A.Use the SAP HANA Backup and Restore integration with Amazon S3 to back up directly to S3 buckets, enabling default S3 encryption.
B.Back up to an EBS snapshot, then copy the snapshot to S3 using AWS Backup.
C.Schedule an AWS Backup plan to back up the EC2 instance and its EBS volumes.
D.Use AWS Storage Gateway to back up the database to S3, then enable S3 encryption.
AnswerA

SAP natively supports backing up to S3, which is efficient and supports encryption.

Why this answer

Option A is correct because SAP HANA Backup and Restore integration with S3 is native and handles encryption. Option B is wrong because it adds an extra step. Option C is wrong because S3 replication does not replace the backup process.

Option D is wrong because AWS Backup supports HANA but requires additional setup and may not be as efficient as native integration.

1020
Multi-Selectmedium

A company is designing an SAP system on AWS with SAP HANA as the database. The system must be highly available across multiple Availability Zones. Which TWO actions should the company take to meet this requirement?

Select 2 answers
A.Configure SAP HANA System Replication (HSR) in synchronous mode
B.Perform periodic EBS snapshots and restore in another AZ
C.Use Amazon S3 cross-region replication for the database files
D.Set up a Pacemaker cluster to automate failover between primary and secondary
E.Use manual failover by changing DNS records
AnswersA, D

HSR provides real-time replication to a secondary instance in another AZ.

Why this answer

Options A and B are correct. A: HANA System Replication is the primary method for synchronous replication across AZs. B: A Pacemaker cluster manages automatic failover.

Option C is wrong because manual failover is not HA. Option D is wrong because EBS snapshots are not real-time. Option E is wrong because S3 replication is not for database.

1021
MCQmedium

An SAP system is running on an EC2 instance with an attached EBS volume for /usr/sap. The operations team notices that the volume is almost full. Which action should be taken to increase the available space without downtime?

A.Modify the EBS volume to increase its size while the instance is running, then extend the filesystem.
B.Reduce the size of the volume by modifying the volume configuration.
C.Create a new larger EBS volume, attach it to the instance, and copy the data.
D.Create a snapshot of the volume and use it to create a larger volume, then attach and mount.
AnswerA

EBS volumes can be increased online, and the filesystem can be extended without downtime.

Why this answer

You can increase the size of an EBS volume while the instance is running, then extend the filesystem. Option A is correct. Option B is wrong because snapshots are for backup, not immediate space increase.

Option C is wrong because reducing the volume size is not supported. Option D is wrong because creating a new volume and copying data requires downtime.

1022
MCQmedium

A company is migrating its SAP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS). The solution must support automatic failover in the event of an instance failure. Which AWS architecture meets these requirements?

A.Deploy ASCS on Amazon RDS Multi-AZ
B.Deploy two EC2 instances in different Availability Zones with a shared Amazon EFS filesystem and use Route53 health checks for failover
C.Use AWS Global Accelerator with a static IP
D.Deploy a single EC2 instance with a large EBS volume
AnswerB

This is the standard architecture for ASCS HA on AWS.

Why this answer

SAP ASCS high availability on AWS is achieved using a cluster spanning two Availability Zones with a shared EFS filesystem for the /sapmnt and /usr/sap/trans directories. AWS does not support cluster-based floating IPs, so Route53 health checks are used for failover. Option A (Multi-AZ RDS) is for databases.

Option B (AWS Global Accelerator) is for traffic routing. Option C (Two EC2 instances in an Auto Scaling group with EFS) is the correct approach. Option D (Single EC2 with EBS) lacks high availability.

1023
Multi-Selecthard

A company is migrating a large SAP ERP system to AWS using SAP HANA. They want to minimize downtime and ensure consistency. Which three approaches should they combine? (Choose THREE.)

Select 3 answers
A.Use AWS Snowball Edge for the initial data transfer
B.Use AWS DataSync for ongoing replication
C.Use AWS Server Migration Service (SMS) for server replication
D.Use AWS DMS for ongoing change data capture
E.Set up SAP HANA system replication between source and target
AnswersA, D, E

Snowball handles large initial data efficiently.

Why this answer

Combining these three provides a comprehensive migration: initial load via Snowball for large data, ongoing replication via DMS, and using SAP HANA system replication for HA during cutover. Option A is for initial load. Option C is for ongoing changes.

Option D is for HA. Option B is redundant if using DMS. Option E is not a migration tool.

1024
MCQhard

A team is migrating an Oracle database to Amazon RDS for MySQL using AWS DMS with ongoing replication (CDC). The initial load succeeded, but the CDC task fails with the error shown in the exhibit. The source Oracle database is on-premises. Which action should the team take to resolve the issue?

A.Configure binary logging on the target MySQL RDS instance.
B.Stop and restart the DMS task to clear the error.
C.Switch the target database to Amazon RDS for Oracle to maintain compatibility.
D.Connect to the source Oracle database and enable full supplemental logging by executing the command: ALTER DATABASE ADD SUPPLEMENTAL LOG DATA (ALL) COLUMNS;
AnswerD

This command enables the required logging for CDC to work.

Why this answer

AWS DMS requires full supplemental logging on the source Oracle database to capture all column values for CDC (ongoing replication). Without it, DMS cannot reconstruct the complete row changes from the redo logs, causing the CDC task to fail. Enabling full supplemental logging with `ALTER DATABASE ADD SUPPLEMENTAL LOG DATA (ALL) COLUMNS;` ensures that every column is logged, allowing DMS to replicate all changes correctly.

Exam trap

The trap here is that candidates often assume the issue is on the target side (e.g., binary logging) or that a simple restart will fix transient errors, but AWS DMS CDC failures from Oracle almost always point to missing supplemental logging on the source.

How to eliminate wrong answers

Option A is wrong because binary logging is a MySQL-specific feature for replication, and the target RDS for MySQL already has it enabled by default; the issue is on the source Oracle side, not the target. Option B is wrong because stopping and restarting the DMS task will not resolve the underlying missing supplemental logging; the error will recur immediately. Option C is wrong because switching the target to RDS for Oracle would avoid the supplemental logging requirement but is an unnecessary and costly workaround that does not fix the root cause; the migration to MySQL is the stated goal.

1025
MCQeasy

A company is running SAP ERP on AWS using an SAP-certified AMI. The system uses a single EC2 instance for both the application and database. The operations team needs to implement a disaster recovery (DR) solution with a Recovery Time Objective (RTO) of 2 hours and a Recovery Point Objective (RPO) of 1 hour. The DR site must be in a different AWS Region. Currently, the system uses EBS snapshots for backup. What should the team do to meet the RTO and RPO requirements?

A.Set up a read replica in the DR region and promote it during failover.
B.Configure Amazon S3 Cross-Region Replication for the EBS snapshots.
C.Use AWS CloudEndure Disaster Recovery to replicate the entire server to the DR region.
D.Schedule hourly EBS snapshots and copy them to the DR region using AWS Backup.
AnswerD

This meets RPO of 1 hour and RTO of 2 hours by restoring from snapshots.

Why this answer

Option D is correct because using AWS Backup with cross-region snapshot copy allows automated backups to another region with RPO of 1 hour. For RTO, you can restore from those snapshots. Option A is wrong because S3 replication is for objects, not EBS snapshots.

Option B is wrong because Cross-Region Replication is for S3. Option C is wrong because CloudEndure requires continuous replication, which is not needed and may be overkill.

1026
MCQhard

An SAP Basis administrator needs to apply an SAP kernel patch to the SAP Central Services (ASCS) instance running on an EC2 instance in a Multi-AZ deployment. The ASCS instance is configured with a floating IP address using Elastic IP. The administrator wants to minimize downtime during the patching process. Which approach should the administrator take?

A.Stop the ASCS instance, apply the patch, and start the instance.
B.Create a new EC2 instance with the patched kernel, associate the Elastic IP to the new instance, and terminate the old one.
C.Add the ASCS instance to an Application Load Balancer and then perform the patch.
D.Use an Auto Scaling group with a rolling update to apply the patch.
AnswerB

Minimizes downtime by quickly switching the Elastic IP.

Why this answer

Option A is correct because a blue/green deployment allows testing the patch on a new instance and then switching traffic with minimal downtime. Option B is wrong because stopping the instance causes downtime. Option C is wrong because modifying the launch configuration and performing a rolling update is for Auto Scaling groups, not for a single instance.

Option D is wrong because adding the instance to an ALB would require application changes and may not be compatible with ASCS floating IP.

1027
Multi-Selecthard

Which THREE metrics should be monitored in Amazon CloudWatch to proactively identify performance issues in an SAP NetWeaver application server? (Choose three.)

Select 3 answers
A.S3 request metrics
B.CPUUtilization
C.Memory utilization (via CloudWatch Agent)
D.VPC Flow Logs
E.DiskQueueDepth
AnswersB, C, E

High CPU indicates performance issues.

Why this answer

Options A, B, and D are correct. Option C is wrong because VPC Flow Logs are not CloudWatch metrics. Option E is wrong because S3 metrics are unrelated.

1028
MCQeasy

A company is migrating an SAP ERP system on Oracle to SAP HANA on AWS. The migration requires near-zero downtime. The company has a test environment that can be used for the migration rehearsal. The SAP HANA database will be 3 TB. Which migration approach should the company use to achieve near-zero downtime?

A.Use AWS Database Migration Service (DMS) for ongoing replication.
B.Perform a full backup of the Oracle database and restore to SAP HANA.
C.Use SAP Software Update Manager (SUM) with Database Migration Option (DMO).
D.Use SAP HANA Studio to export the Oracle schema and import into HANA.
AnswerC

DMO supports near-zero downtime migration.

Why this answer

SAP Software Update Manager (SUM) with Database Migration Option (DMO) is the correct approach because it combines the SAP system upgrade and the migration from Oracle to SAP HANA into a single process, leveraging SAP's own tools to minimize downtime. DMO uses a trigger-based replication mechanism that can achieve near-zero downtime by keeping the source Oracle database and target SAP HANA database synchronized during the migration window, which is critical for a 3 TB database where traditional backup-restore would exceed downtime limits.

Exam trap

The trap here is that candidates often assume AWS DMS is the universal tool for any database migration to AWS, but for SAP HANA migrations, the certified and supported approach is SAP's own DMO tool, not a generic AWS service.

How to eliminate wrong answers

Option A is wrong because AWS Database Migration Service (DMS) does not support SAP HANA as a target for ongoing replication from Oracle in a certified SAP migration scenario; DMS is designed for homogeneous or heterogeneous database migrations but lacks the SAP-specific schema and application-level consistency required for SAP workloads. Option B is wrong because performing a full backup of the Oracle database and restoring to SAP HANA would require a significant downtime window to complete the backup transfer and restore, which cannot achieve near-zero downtime for a 3 TB database. Option D is wrong because using SAP HANA Studio to export the Oracle schema and import into HANA is a manual, offline process that does not support ongoing replication or near-zero downtime; it would require the source system to be stopped during the export and import phases.

1029
MCQmedium

A company is using AWS CloudFormation to manage infrastructure. The development team wants to deploy a new version of a stack that updates an existing RDS DB instance's DB engine version. The update requires a replacement of the database. Which CloudFormation stack policy setting allows the update to proceed while preventing other resources from being replaced or updated?

A.Set a stack policy that allows updates to RDS resources only.
B.Set a stack policy that allows updates to the specific RDS DB instance resource.
C.Set a stack policy that denies all updates.
D.Set a stack policy that allows all updates.
AnswerB

Stack policies can be written to allow updates to specific resources.

Why this answer

Option B is correct because a stack policy in AWS CloudFormation can be set to explicitly allow updates to a specific resource (e.g., the RDS DB instance) while denying updates to all other resources by default. Since the update requires a replacement of the database, the policy must permit the update action on that exact resource logical ID, ensuring the DB engine version change proceeds without risking unintended modifications to other stack resources.

Exam trap

The trap here is that candidates often confuse a stack policy with an IAM policy or resource-level permissions, mistakenly thinking that allowing updates to a resource type (Option A) is sufficient, when in fact the policy must target the specific resource logical ID to avoid unintended updates to other resources of the same type.

How to eliminate wrong answers

Option A is wrong because allowing updates to all RDS resources is too broad; it would permit updates to any RDS resource in the stack, not just the specific DB instance, potentially causing unintended replacements or updates to other RDS resources like DB subnet groups or read replicas. Option C is wrong because denying all updates would block the intended DB engine version update entirely, preventing the deployment from proceeding. Option D is wrong because allowing all updates removes any protection, making every resource in the stack vulnerable to accidental replacement or modification, which defeats the purpose of using a stack policy for controlled updates.

1030
MCQeasy

Your SAP on AWS environment uses a central S3 bucket to store SAP transport files. The operations team reports that transport import fails intermittently. Which AWS service can be used to monitor and alert on S3 API call failures?

A.AWS CloudTrail
B.AWS Config
C.Amazon CloudWatch Metrics
D.AWS Trusted Advisor
AnswerA

Logs S3 API calls.

Why this answer

Option A is correct because CloudTrail logs S3 API calls. Option B is wrong because CloudWatch Metrics for S3 are limited. Option C is wrong because Config tracks configuration changes.

Option D is wrong because Trusted Advisor provides best practice checks.

1031
MCQeasy

A company is running an SAP HANA database on an AWS EC2 instance. The SAP application team reports occasional performance issues during peak hours. The CloudWatch metrics show high CPU utilization. What is the MOST cost-effective solution to address this issue?

A.Migrate the instance to a larger instance type permanently.
B.Enable termination protection on the instance.
C.Implement an EC2 Auto Scaling group with a scheduled scaling policy to add instances during peak hours.
D.Increase the provisioned IOPS for the EBS volumes attached to the instance.
AnswerC

Cost-effectively adds capacity only when needed.

Why this answer

Option B is correct because using an EC2 Auto Scaling group with a scheduled scaling policy can add CPU capacity during known peak hours cost-effectively. Option A is wrong because vertical scaling to a larger instance incurs cost even during off-peak. Option C is wrong because it does not directly address CPU.

Option D is wrong because it is not specific to CPU performance.

1032
MCQmedium

A company is running an SAP S/4HANA system on AWS. The SAP application is deployed on EC2 instances in a Multi-AZ setup with a shared /sapmnt directory using Amazon EFS. The database is running on Amazon RDS for SAP ASE. Performance monitoring reveals that the /sapmnt volume is experiencing high read latency during peak hours. Which action would most effectively reduce latency?

A.Migrate /sapmnt to Amazon FSx for NetApp ONTAP.
B.Use Amazon ElastiCache for Redis to cache /sapmnt data.
C.Increase the provisioned throughput on the EFS file system.
D.Increase the size of the EC2 instances running SAP.
AnswerA

FSx for NetApp ONTAP offers consistent low-latency performance and is SAP-certified for /sapmnt.

Why this answer

Option B is correct because switching to Amazon FSx for NetApp ONTAP provides a high-performance shared file system with low-latency access and is fully supported for SAP /sapmnt. Option A (increase EFS throughput) may help but is less effective than using FSx. Option C (ElastiCache) does not replace the file system.

Option D (increase instance size) addresses compute, not storage latency.

1033
MCQmedium

An SAP administrator notices that the SAP HANA database on an EC2 instance is running out of memory frequently. The instance type is r5.4xlarge with 128 GiB of memory. Which action should the administrator take to resolve this issue?

A.Reduce the SAP HANA buffer cache size
B.Increase swap space on the instance
C.Enable SAP HANA compression
D.Scale up to a larger instance type with more memory
AnswerD

Larger instance provides more memory.

Why this answer

Option C is correct because increasing the instance memory by selecting a larger instance type addresses the memory shortage. Option A is wrong because increasing swap space may cause performance degradation. Option B is wrong because enabling compression is a software setting, not a direct fix.

Option D is wrong because reducing the buffer cache can impact performance.

1034
MCQmedium

A company is migrating an SAP HANA database to AWS. They have set up HANA System Replication (HSR) between the on-premises primary and an AWS secondary. The initial data synchronization is complete, but during the final cutover, the replication breaks due to network latency. What should the company do to complete the migration successfully?

A.Perform a manual takeover to promote the AWS secondary to primary.
B.Set up a new HSR connection with a different port.
C.Increase the HSR timeout settings on the primary.
D.Restart the initial synchronization from scratch.
AnswerA

This completes the cutover and makes the AWS system the new primary.

Why this answer

The correct action is to perform a manual failover using HSR takeover, which will promote the AWS secondary to primary and allow the system to continue. Increasing timeout may not resolve underlying latency. Restarting replication will take time.

Setting up a new replication is unnecessary.

1035
Multi-Selecthard

An SAP system administrator is troubleshooting an issue where SAP users cannot log in to the SAP system. The administrator checks the SAP application server logs and finds that the connection to the SAP HANA database is failing with 'connection refused'. Which THREE AWS resources should be investigated to resolve the issue?

Select 3 answers
A.VPC peering connection
B.Network ACLs for the database subnet
C.Internet Gateway
D.Security group rules for the database instance
E.Route tables for the application server subnet
AnswersB, D, E

Network ACLs are stateless firewalls; misconfigured rules can block traffic.

Why this answer

Options B, C, and D are correct. The security group rules for the database instance must allow traffic from the application server; the network ACLs must allow inbound/outbound traffic; and the route table must have a route to the database subnet. Option A is wrong because the Internet Gateway is not needed for internal communication between subnets.

Option E is wrong because the VPC peering connection is not necessarily involved unless they are in different VPCs.

1036
MCQhard

A company runs a critical workload on Amazon RDS for PostgreSQL with Multi-AZ. The operations team notices that during a recent failover test, the DNS record updated in about 60 seconds. However, the application experienced a 2-minute downtime because some connections were not re-established quickly. What should the team do to reduce downtime during failover?

A.Enable automated backups with a short retention period.
B.Increase the TTL of the RDS DNS record to 300 seconds.
C.Configure the application's connection string to use the RDS read-replica endpoint with a retry mechanism.
D.Place a Network Load Balancer in front of the RDS instance.
AnswerC

Using the read replica endpoint can redirect traffic faster; retries help re-establish connections.

Why this answer

Option C is correct because configuring the application's connection string to use the RDS read-replica endpoint with a retry mechanism allows the application to quickly fail over to the read replica during a Multi-AZ failover. The read-replica endpoint remains constant and does not rely on DNS propagation, reducing downtime from DNS TTL delays. Combined with a retry mechanism, this ensures connections are re-established immediately after the failover completes, rather than waiting for the DNS record to update.

Exam trap

The trap here is that candidates often think increasing DNS TTL speeds up failover, but in reality, a higher TTL increases client-side caching delay, making downtime worse, while the correct approach is to use a static endpoint (like the read-replica endpoint) with retry logic to bypass DNS propagation issues entirely.

How to eliminate wrong answers

Option A is wrong because enabling automated backups with a short retention period does not affect DNS resolution or connection re-establishment during failover; backups are for point-in-time recovery, not for reducing failover downtime. Option B is wrong because increasing the TTL of the RDS DNS record to 300 seconds would actually increase the time clients cache the old DNS record, making the failover downtime longer (up to 300 seconds) instead of reducing it. Option D is wrong because placing a Network Load Balancer (NLB) in front of an RDS instance is not supported; RDS does not allow an NLB to front it directly, and even if it did, the NLB would still rely on DNS or health checks that introduce similar delays.

1037
MCQmedium

Refer to the exhibit. An SAP HANA instance is running on an EC2 instance. The volume `/dev/sdf` is used for HANA data. The operations team needs to increase the disk size for HANA data without downtime. Which action should they take?

A.Launch a new instance with a larger volume and migrate HANA data.
B.Stop the instance, modify the volume size, and start the instance.
C.Add a new EBS volume to the instance and move HANA data to the new volume.
D.Modify the EBS volume size while the instance is running.
AnswerD

EBS volumes can be modified without detaching or stopping the instance.

Why this answer

Option B is correct. Modifying the EBS volume size while the instance is running is supported for most volume types. Option A is wrong because stopping the instance is unnecessary.

Option C is wrong because launching a new instance would require migration. Option D is wrong because adding a new volume and moving data requires downtime.

1038
Multi-Selecteasy

A company is migrating its SAP system to AWS and needs to transfer a large amount of data (10 TB) from the on-premises data center to AWS. Which TWO AWS services can be used for this data transfer?

Select 2 answers
A.Amazon S3 Transfer Acceleration
B.AWS DataSync
C.AWS CloudFormation
D.AWS Snowball
E.AWS Database Migration Service (DMS)
AnswersB, D

DataSync can transfer data over the network efficiently.

Why this answer

Options A and B are correct. AWS Snowball is a physical device for large-scale offline data transfer. AWS DataSync can transfer data over the network efficiently.

Option C is wrong because Amazon S3 Transfer Acceleration speeds up S3 uploads over the internet but is not a migration service. Option D is wrong because AWS DMS is for database migration. Option E is wrong because AWS CloudFormation is for infrastructure as code.

1039
MCQhard

An SAP administrator needs to patch the operating system of SAP application servers that are part of an Auto Scaling group. What is the best practice to ensure that instances are updated without downtime?

A.Update the AMI used by the Auto Scaling group launch configuration and manually terminate all running instances.
B.Create a new launch configuration with an updated AMI and perform a rolling update using the Auto Scaling group.
C.Update the AMI and stop the Auto Scaling group, then start it again.
D.Install patches on each running instance using AWS Systems Manager Patch Manager.
AnswerB

Rolling update replaces instances one by one, maintaining service availability.

Why this answer

Option B is correct because a rolling update replaces instances gradually, maintaining capacity. Option A is wrong because it does not address replacement. Option C is wrong because it causes downtime.

Option D is wrong because it does not apply to running instances.

1040
MCQmedium

A company wants to automate the installation of SAP HANA on AWS using CloudFormation. Which AWS resource should be used to run a script that downloads and installs SAP HANA software on an EC2 instance after the instance is launched?

A.AWS::CloudFormation::Init (cfn-init)
B.AWS::CloudFormation::CreationPolicy with cfn-signal
C.AWS Lambda function triggered by EC2 state change
D.EC2 User Data
AnswerB

CreationPolicy waits for signals from cfn-signal after script completes.

Why this answer

Option C is correct because AWS CloudFormation CreationPolicy with a cfn-signal script can be used to run custom scripts after instance launch. Option A is incorrect because cfn-init is used to install packages and files, but for complex installations like SAP HANA, a more robust signaling mechanism is needed. Option B is incorrect because EC2 User Data runs once at launch but does not provide a built-in way for CloudFormation to wait for completion.

Option D is incorrect because Lambda cannot directly run scripts on EC2 without additional orchestration.

1041
MCQeasy

A company wants to migrate its SAP application to AWS and needs to ensure high availability for the SAP Central Services (ASCS). Which AWS feature should be used to achieve this?

A.Elastic Load Balancer (ELB)
B.Auto Scaling groups
C.Amazon Route 53 health checks with failover routing
D.Amazon CloudFront
AnswerC

Route 53 can monitor ASCS health and failover to a standby instance.

Why this answer

Amazon Route 53 with health checks and failover routing can redirect traffic to a secondary ASCS in case of failure, providing high availability. Option B (Auto Scaling) is for compute scaling, not HA. Option C (ELB) is for load balancing but not typically used for ASCS.

Option D (CloudFront) is a CDN.

1042
Multi-Selectmedium

Which TWO factors are most important to consider when planning the network connectivity for an SAP migration to AWS using AWS Direct Connect?

Select 2 answers
A.Number of VPC endpoints required.
B.Security group rules for the SAP application.
C.Latency and bandwidth requirements.
D.BGP routing configuration and failover.
E.IP address range for VPC subnets.
AnswersC, D

Direct Connect provides consistent latency and dedicated bandwidth.

Why this answer

The two most important factors are the latency and bandwidth requirements, and the routing configuration (BGP) for failover. Option A is important for performance; Option B is important for reliability. Option C is wrong because VPC endpoints are not a Direct Connect factor.

Option D is wrong because subnets are internal to VPC. Option E is wrong because security groups are not a Direct Connect factor.

1043
Multi-Selecteasy

A company is planning a migration of an SAP system to AWS. Which TWO factors should be considered when selecting the AWS Region for the migration?

Select 2 answers
A.Proximity to on-premises data center and end users
B.Number of Availability Zones
C.Data residency and compliance requirements
D.AWS service cost
E.Availability of specific instance types
AnswersA, C

Lower latency improves performance.

Why this answer

Proximity to users reduces latency. Compliance requirements may mandate specific regions. Cost varies but is not primary for region selection.

Instance availability is global. Service features may vary but are secondary.

1044
MCQhard

A company is migrating a critical SAP HANA database to AWS and needs to ensure high availability. The SAP HANA system replication will be configured across two Availability Zones. Which AWS service should be used to automate the failover of the SAP HANA database?

A.Amazon Route 53
B.AWS CloudFormation
C.AWS Elastic Disaster Recovery (DRS)
D.AWS Backup
AnswerC

Automates recovery for SAP HANA.

Why this answer

AWS Elastic Disaster Recovery (DRS) can automate recovery for SAP HANA. Option A (AWS Backup) is for backup, not automated failover. Option B (AWS CloudFormation) is for infrastructure provisioning.

Option C (Amazon Route 53) can route traffic but does not automate database failover.

1045
MCQeasy

A company wants to run SAP S/4HANA on AWS and needs to ensure that the SAP application and database are deployed according to AWS best practices. Which deployment method should they use?

A.Manual deployment using EC2 and RDS
B.AWS Launch Wizard for SAP
C.AWS Quick Start for SAP
D.AWS CloudFormation with custom templates
AnswerB

Launch Wizard automates SAP deployment following AWS best practices.

Why this answer

AWS Launch Wizard for SAP is the correct deployment method because it provides a guided, best-practice-based deployment experience specifically for SAP S/4HANA, automatically provisioning EC2 instances, storage, and networking while validating SAP requirements such as kernel compatibility, sizing, and high availability. It reduces manual effort and errors by integrating directly with AWS services like Amazon EBS and Elastic Load Balancing, ensuring compliance with SAP on AWS best practices.

Exam trap

The trap here is that candidates often confuse AWS Quick Start for SAP with a guided deployment tool, but Quick Start only provides static templates without the real-time validation and optimization that Launch Wizard offers for SAP-specific workloads.

How to eliminate wrong answers

Option A is wrong because manual deployment using EC2 and RDS is not supported for SAP S/4HANA; SAP requires a certified database (e.g., SAP HANA or ASE) and RDS does not support SAP HANA, making this option technically invalid. Option C is wrong because AWS Quick Start for SAP provides reference architectures and CloudFormation templates but is not a guided deployment wizard; it requires manual configuration and does not perform real-time validation of SAP-specific parameters like SAPS sizing or high-availability setup. Option D is wrong because AWS CloudFormation with custom templates, while powerful, lacks the built-in SAP validation and optimization logic of Launch Wizard; users must manually ensure compliance with SAP on AWS best practices, increasing risk of misconfiguration.

1046
MCQhard

An SAP system administrator is troubleshooting a performance issue on an SAP ERP Central Component (ECC) system running on AWS. The system uses an Oracle database on an EC2 instance with EBS volumes. Users report that some transactions are slow, especially during month-end closing. The administrator checks CloudWatch metrics and notices that the EBS volume read latency is high (average 20 ms) and the queue depth is consistently 0. The volume type is gp2 with 3000 IOPS. The administrator suspects the volume is not meeting the IOPS demand. What should the administrator do to resolve this issue?

A.Switch the volume type from gp2 to gp3
B.Increase the EBS volume size to increase the baseline IOPS
C.Increase the volume throughput to 250 MB/s
D.Enable EBS optimization on the EC2 instance
AnswerB

For gp2, IOPS scale with size; larger volume gives more IOPS.

Why this answer

Option D is correct because increasing the volume size increases baseline IOPS for gp2. Option A is wrong as switching to gp3 may help but not directly address queue depth. Option B is wrong as throughput is not the issue.

Option C is wrong as increasing IOPS without volume size increase is not possible for gp2.

1047
Multi-Selecthard

A company is designing a highly available SAP NetWeaver AS ABAP environment on AWS with a 2-node ASCS/ERS cluster. Which TWO of the following must be configured to ensure a successful failover? (Choose 2)

Select 2 answers
A.An AWS ASW (Automated SAP Workload) service
B.Amazon EBS io1 volumes with Multi-Attach enabled for the database
C.A shared file system (e.g., Amazon EFS) for /sapmnt
D.Each node must have its own /usr/sap/<SID>/ASCS and /usr/sap/<SID>/ERS directory on instance store
E.A virtual IP address (VIP) using Route53 health checks or the AWS CLI
AnswersC, E

Required for shared profile data.

Why this answer

Options A and D are correct. A: A shared file system (e.g., EFS) is needed for /sapmnt. D: A virtual IP via Route53 or AWS CLI is required for client reconnection.

B is wrong because EBS Multi-Attach is not supported for io1 volumes with Linux. C is wrong because each node needs its own instance store or EBS for local data. E is wrong because ASW is not an AWS service.

1048
MCQmedium

A company runs SAP on AWS. During a maintenance window, the SAP application team needs to apply a kernel update that requires a reboot of the SAP application servers. The environment uses an Auto Scaling group for the application tier. What is the BEST approach to minimize downtime?

A.Stop all instances in the Auto Scaling group, apply the update, and start them again.
B.Detach all instances from the Auto Scaling group, apply the update, and reattach them.
C.Double the desired capacity of the Auto Scaling group, wait for new instances, then terminate old instances.
D.Terminate instances one at a time, allowing the Auto Scaling group to launch new instances with the updated configuration.
AnswerD

Terminating instances one at a time allows the Auto Scaling group to launch new instances with updated configuration, maintaining capacity and minimizing downtime.

Why this answer

Option C is correct because terminating instances one at a time allows the Auto Scaling group to launch new instances with updated configuration, maintaining capacity and minimizing downtime. Option A is wrong because stopping instances suspends billing but does not trigger automatic replacement. Option B is wrong because detaching instances requires manual reattachment.

Option D is wrong because doubling desired capacity temporarily increases costs and may not be necessary.

1049
Multi-Selecthard

Which THREE storage options are supported for SAP HANA data files on AWS? (Select THREE.)

Select 3 answers
A.Amazon EFS
B.NVMe instance store SSDs on i3en instances
C.Amazon EBS gp3 volumes with sufficient IOPS
D.Amazon EBS io2 Block Express volumes
E.Amazon S3
AnswersB, C, D

Instance store is supported on certified instances.

Why this answer

SAP HANA supports EBS io2, EBS gp3 (with sufficient IOPS), and NVMe instance store on certified instances. EFS and S3 are not supported for HANA data files.

1050
MCQhard

An SAP administrator is migrating an SAP system to AWS and has launched an EC2 instance from an AMI. The administrator runs the command shown in the exhibit. Which statement is true about the root volume?

A.The root volume will be deleted when the instance is terminated.
B.The root volume is detached from the instance.
C.The root volume is encrypted.
D.The root volume is an instance store volume.
AnswerA

DeleteOnTermination is true.

Why this answer

Option C is correct because the output shows DeleteOnTermination is true, meaning the root volume will be deleted when the instance is terminated. Option A is wrong because the volume is not encrypted. Option B is wrong because the volume is attached to the instance.

Option D is wrong because the volume is an EBS volume, not instance store.

Page 13

Page 14 of 24

Page 15