AWS Certified SAP on AWS Specialty PAS-C01 (PAS-C01) — Questions 12011275

1733 questions total · 24pages · All types, answers revealed

Page 16

Page 17 of 24

Page 18
1201
MCQmedium

A company has an SAP HANA database running on an EC2 instance with multiple EBS volumes striped using LVM. The database is experiencing high latency during peak hours. Monitoring shows that the EBS volumes have a high Average Queue Length (avgqueue) and are frequently hitting the IOPS limit. The volumes are gp2 with 3000 IOPS each. The operations team wants to improve performance without increasing storage size. What should they do?

A.Change the volume type to io2 Block Express with higher IOPS.
B.Migrate the database to an instance store-backed instance.
C.Change the volume type to gp3 and increase the IOPS and throughput.
D.Add more gp2 volumes to the LVM stripe set.
AnswerC

gp3 allows independent scaling of IOPS and throughput.

Why this answer

Option D is correct because changing the volume type to gp3 offers higher baseline IOPS (3000) and allows separate increase of IOPS and throughput without changing size. Option A is wrong because adding more gp2 volumes increases cost but may not address the bottleneck if the LVM is not balanced. Option B is wrong because instance store is ephemeral and not suitable for database.

Option C is wrong because io2 Block Express is for very high performance but may be overkill; gp3 is a better immediate step.

1202
MCQhard

Refer to the exhibit. A company is migrating its data to Amazon S3. The security team has provided this IAM policy for the migration user. However, the migration fails with an Access Denied error when trying to upload files to the bucket. What is the most likely cause?

A.The bucket policy explicitly denies the s3:PutObject action for the IAM user.
B.The IAM policy does not include s3:PutObject permission.
C.The IAM policy does not include kms:Decrypt permission.
D.The bucket has default encryption enabled and the IAM user does not have permission to use the encryption key.
AnswerA

A bucket policy with a deny statement would override the IAM allow, causing Access Denied.

Why this answer

The policy specifies the resource as 'arn:aws:s3:::example-bucket/*' for s3:PutObject. This resource ARN is correct for object-level operations. However, the error could be due to bucket policy that denies the upload, or the IAM user lacks s3:PutObjectAcl or other permissions.

But the most likely cause given the policy is that the bucket policy explicitly denies the action. Option A is wrong because the policy does allow s3:PutObject. Option B is wrong because there is no encryption requirement in the policy.

Option C is wrong because the policy does not include kms:Decrypt, but if encryption is required, the policy would need additional actions. Option D is correct because a bucket policy with a deny statement would override the allow.

1203
MCQmedium

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database size is 2 TB and the network bandwidth between the on-premises data center and AWS is 100 Mbps. The company needs to minimize the migration time and wants to use AWS DMS. Which approach should they take?

A.Use AWS Database Migration Service (DMS) with AWS Direct Connect to increase bandwidth.
B.Use AWS DMS with a full load over the network, then ongoing replication.
C.Use AWS DMS with AWS Snowball Edge for the full load, then ongoing replication.
D.Use AWS Schema Conversion Tool (SCT) to convert the schema and then AWS DMS for full load.
AnswerC

Snowball Edge accelerates initial load; ongoing replication uses DMS.

Why this answer

Option B is correct because AWS Snowball Edge can be used with AWS DMS to transfer the full load of large databases over a physical device, avoiding long upload times over limited bandwidth. After the full load, ongoing replication via DMS handles changes. Options A and D would take too long over 100 Mbps; Option C is for homogeneous migrations, but the full load over low bandwidth is slow.

1204
Multi-Selecteasy

A company is planning to run SAP NetWeaver on AWS. Which TWO services are recommended for monitoring the SAP system? (Choose TWO.)

Select 2 answers
A.Amazon CloudWatch with SAP monitoring agent
B.Amazon Inspector
C.AWS Trusted Advisor
D.SAP Solution Manager
E.AWS Config
AnswersA, D

CloudWatch can collect SAP metrics via custom agents.

Why this answer

Options A and C are correct. Amazon CloudWatch can monitor SAP metrics, and SAP Solution Manager can be integrated with AWS for comprehensive monitoring. Option B is wrong because AWS Config is for configuration auditing.

Option D is wrong because AWS Trusted Advisor provides best-practice checks, not real-time monitoring. Option E is wrong because Amazon Inspector is for security assessment.

1205
MCQhard

A company runs SAP on AWS and uses a Multi-AZ RDS for Oracle as the database. They observe that the database failover took longer than expected during a recent test. What is the most likely cause of the increased failover time?

A.The database had a large number of uncommitted transactions that needed to be rolled back.
B.The DNS TTL was set too high, causing delays in routing to the new primary.
C.The primary instance had a high volume of ongoing transactions that needed to be completed or rolled back before failover could proceed.
D.The standby instance was not in sync because read replicas were used for reads.
AnswerC

RDS waits for pending transactions to complete, which can increase failover time.

Why this answer

Option D is correct because Multi-AZ failover time depends on the time to complete in-flight transactions and synchronize the standby. Option A is wrong because read replicas are not used in Multi-AZ. Option B is wrong because the CNAME record update is typically fast.

Option C is wrong because synchronous replication does not cause a long failover; the issue is usually transaction completion.

1206
MCQhard

An SAP system on AWS is experiencing high CPU ready time on the application server VMs. Which configuration change is most likely to reduce CPU contention?

A.Increase the number of vCPUs assigned to the instance
B.Move the instance to a dedicated host
C.Change instance tenancy to default
D.Increase the instance memory
AnswerB

Dedicated host provides dedicated physical cores, reducing contention.

Why this answer

Option D is correct because CPU ready time indicates the VM is waiting for physical CPU cycles from the hypervisor. Moving to a dedicated host or dedicated instance reduces competition for CPU resources. Option A is wrong because increasing vCPUs may increase contention.

Option B is wrong because memory is not the issue. Option C is wrong because changing tenancy to default does not help.

1207
MCQmedium

An SAP administrator runs the AWS CLI command shown in the exhibit for an EC2 instance running SAP HANA. The administrator notices that the /dev/sdf volume does not have DeleteOnTermination set to true. What is the impact of this configuration?

A.The volume will be detached but not deleted.
B.The volume will be automatically deleted when the instance is terminated.
C.The volume cannot be attached to another instance.
D.The volume will persist after instance termination, preserving data.
AnswerD

The volume will be retained and can be reattached.

Why this answer

The correct answer is C because if DeleteOnTermination is false, the EBS volume will persist after instance termination. This is important for data volumes like HANA data. Option A is incorrect because the volume remains in the account.

Option B is incorrect because it will not be deleted. Option D is incorrect because the volume is attached.

1208
MCQmedium

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database is 2 TB in size and has a 24-hour migration window. The company has a 1 Gbps dedicated connection to AWS. Which migration approach minimizes downtime?

A.Use AWS Schema Conversion Tool (AWS SCT) to convert the schema and AWS DMS for full load only.
B.Use native Oracle Data Pump export and import to transfer the database over the dedicated connection.
C.Use AWS Database Migration Service (AWS DMS) with ongoing replication from the on-premises database to Amazon RDS.
D.Use AWS DataSync to copy the database files to Amazon S3, then restore to Amazon RDS.
AnswerC

Ongoing replication minimizes downtime by keeping the target in sync until cutover.

Why this answer

AWS DMS with ongoing replication allows continuous data synchronization, minimizing downtime by enabling a cutover with minimal data loss. Option A is wrong because AWS SCT is for schema conversion, not data migration. Option B is wrong because a native Oracle export/import requires downtime for the export and import operations.

Option D is wrong because AWS DataSync is for file-based data, not databases.

1209
MCQmedium

A company is running an SAP HANA database on a single EC2 instance. The operations team notices that the instance is running low on memory, which is causing performance degradation. The team needs to increase memory without downtime. Which solution should they use?

A.Increase the swap space on the existing instance.
B.Launch a new EC2 instance with more memory and migrate the database.
C.Add additional EBS volumes to increase swap space.
D.Modify the EC2 instance type to a larger type with more memory.
AnswerD

Modifying instance type requires a stop/start, which causes downtime. However, the question says without downtime. None of the options allow zero-downtime memory increase on a single instance; but among given, this is the only direct way to add memory, albeit with downtime. The best practice is to use a multi-node setup. Given constraints, answer D is the least bad.

Why this answer

Option D is correct because modifying an EC2 instance type requires stopping the instance, causing downtime. Option A is incorrect because adding more EBS volumes does not increase memory. Option B is incorrect because increasing swap space can degrade performance.

Option C is incorrect because creating a new instance and migrating causes downtime.

1210
MCQeasy

A company is migrating its SAP environment to AWS and needs to ensure that the SAP systems can communicate with each other using their hostnames without relying on a DNS service. Which AWS feature should be used?

A.Network Load Balancer (NLB)
B.Security Group rules
C.VPC Peering
D.Amazon Route 53 private hosted zone
AnswerD

Private hosted zones enable DNS resolution within VPCs.

Why this answer

Amazon Route 53 private hosted zones provide DNS resolution within VPCs. Option A is wrong because VPC peering does not provide DNS. Option C is wrong because Security Groups are firewalls.

Option D is wrong because NLB is for load balancing.

1211
MCQmedium

A company is migrating its SAP system to AWS and wants to use AWS Backup to manage backups of SAP HANA databases running on EC2 instances. What is the prerequisite for this integration?

A.The HANA database must be configured to use in-memory backups.
B.The HANA database must not use EBS snapshots for backup.
C.The EC2 instance must be running on a Dedicated Host.
D.The HANA database must be registered as a resource in AWS Backup using the Backint agent.
AnswerD

AWS Backup for SAP HANA requires the Backint agent to be installed and configured.

Why this answer

Option D is correct because AWS Backup supports HANA databases via the SAP HANA Backint integration. The HANA database must be registered as a resource in AWS Backup, which requires the Backint agent. Options A (SAP HANA in-memory backup) is not a thing.

Option B (Dedicated Host) is not required. Option C (not using EBS snapshots) is unnecessary.

1212
MCQhard

A company has an SAP HANA database on an r5.8xlarge EC2 instance. The database is experiencing high CPU utilization during peak hours. The company wants to improve performance without changing the instance family. Which action should be taken?

A.Change the instance type to x1e.32xlarge for more CPU.
B.Scale up to a larger instance size within the r5 family, such as r5.12xlarge.
C.Use a burstable performance instance like t3.2xlarge.
D.Enable CPU hyper-threading on the instance.
AnswerB

Increasing instance size provides more vCPUs and memory, staying in the same family.

Why this answer

The r5.8xlarge instance is experiencing high CPU utilization, and the requirement is to improve performance without changing the instance family. Scaling up to a larger instance size within the same r5 family, such as r5.12xlarge, provides more vCPUs and memory while maintaining compatibility with the existing SAP HANA workload and AWS architecture. This approach avoids the complexity of migrating to a different instance family and ensures that the SAP HANA database can leverage additional compute resources directly.

Exam trap

The trap here is that candidates may assume any larger instance type will work, but the question explicitly restricts staying within the same instance family, making Option A a distractor that offers more CPU but violates the constraint.

How to eliminate wrong answers

Option A is wrong because the x1e.32xlarge is a different instance family (X1e) optimized for large in-memory databases, not for general CPU scaling, and changing the instance family violates the requirement to stay within the same family. Option C is wrong because burstable performance instances like t3.2xlarge are designed for workloads with variable CPU usage and can throttle under sustained high CPU, making them unsuitable for a consistently high-CPU SAP HANA database. Option D is wrong because CPU hyper-threading is already enabled by default on all current-generation EC2 instances, including r5, so enabling it again is not possible and would not resolve high CPU utilization.

1213
MCQmedium

An SAP administrator runs the AWS CLI command shown in the exhibit to check the configuration of an SAP HANA EC2 instance. The instance is running in us-east-1a. They need to deploy a second SAP HANA instance for high availability in a different Availability Zone. Which Availability Zone should be used?

A.us-west-2a
B.us-east-1b
C.Any Availability Zone
D.us-east-1a
AnswerB

Different AZ in same region provides HA.

Why this answer

Option B is correct because for SAP HANA high availability, the secondary instance must be deployed in a different Availability Zone within the same AWS Region to achieve multi-AZ resilience. Since the primary instance is in us-east-1a, the correct choice is us-east-1b, which is a distinct Availability Zone in the same region (us-east-1). This ensures low-latency replication and compliance with SAP's requirement for synchronous replication within a single region.

Exam trap

The trap here is that candidates may confuse 'different Availability Zone' with 'different region' (option A) or assume any zone works (option C), but SAP HANA high availability specifically requires a different AZ within the same region to maintain synchronous replication and low latency.

How to eliminate wrong answers

Option A is wrong because us-west-2a is in a different AWS Region (US West Oregon), which would introduce high latency and is not supported for SAP HANA synchronous replication; SAP HANA system replication requires both instances to be in the same region. Option C is wrong because 'Any Availability Zone' is too broad and could include zones in different regions or the same zone as the primary, both of which violate SAP HANA high availability best practices. Option D is wrong because us-east-1a is the same Availability Zone as the primary instance, which would not provide fault isolation against an AZ failure and defeats the purpose of high availability.

1214
MCQhard

A company is migrating an SAP ERP system to AWS. The system requires low-latency access to a shared file system for SAP transport directories. The file system must be accessible from multiple EC2 instances in different Availability Zones. Which storage solution meets these requirements?

A.Amazon EBS volumes snapshotted and shared across instances.
B.Instance store volumes on each EC2 instance.
C.Amazon S3 with Transfer Acceleration.
D.Amazon EFS file system.
AnswerD

Provides shared, low-latency file system across AZs.

Why this answer

Option C is correct because Amazon EFS provides a shared file system accessible from multiple AZs with low latency. Option A is wrong because instance store is ephemeral and not shared. Option B is wrong because EBS volumes can only be attached to one instance at a time.

Option D is wrong because S3 is object storage, not a file system.

1215
MCQeasy

An SAP application must be highly available across two Availability Zones in a single Region. The SAP Central Services (ASCS) and ERS are to be deployed on EC2 instances. Which AWS service should be used to manage the floating IP address for the ASCS instance?

A.Network Load Balancer
B.AWS Global Accelerator
C.Amazon Route 53 with failover routing
D.Elastic IP address
AnswerC

Route 53 failover routing can automatically redirect traffic to a healthy IP.

Why this answer

Option B is correct because Route 53 health checks can failover to a secondary IP. Option A is incorrect because Elastic IPs can be remapped but do not provide automatic failover. Option C is incorrect because NLB can front-end the ASCS but typically requires a load balancer.

Option D is incorrect because AWS Global Accelerator is for global traffic management.

1216
Multi-Selecteasy

Which TWO Amazon EBS volume types are recommended for SAP HANA database workloads? (Choose two.)

Select 2 answers
A.sc1 (Cold HDD)
B.st1 (Throughput Optimized HDD)
C.io1 (Provisioned IOPS SSD)
D.io2 Block Express
E.gp3 (General Purpose SSD)
AnswersD, E

High performance for SAP HANA.

Why this answer

Options A and D are correct. io2 Block Express provides high performance for SAP HANA, and gp3 provides balanced performance. Option B is wrong because st1 is throughput-optimized, not suitable for databases. Option C is wrong because sc1 is cold storage.

Option E is wrong because io1 is older, io2 is recommended.

1217
MCQhard

An SAP system is deployed on AWS using a shared account structure. The security team requires that all changes to SAP security groups be logged and alerted. Which combination of AWS services should be used?

A.AWS Config with an SNS topic
B.AWS CloudTrail with Amazon CloudWatch Events
C.Amazon Inspector with Amazon SNS
D.Amazon GuardDuty with Amazon SNS
AnswerB

CloudTrail logs API calls and CloudWatch Events can trigger alerts in real-time.

Why this answer

Option D is correct because CloudTrail logs API calls (including security group changes) and CloudWatch Events can trigger alerts. Option A (Config + SNS) can detect changes but not real-time. Option B (GuardDuty) is for threat detection.

Option C (Inspector) is for vulnerability assessment.

1218
MCQmedium

A company is running an SAP HANA database on an Amazon EC2 instance. The instance type is r5.4xlarge with 16 vCPUs and 128 GiB of memory. The storage is configured with a single 400 GB gp2 EBS volume for /hana/data and a separate 100 GB gp2 volume for /hana/log. The database experiences high latency during peak loads. Which change will most likely improve performance?

A.Change the EBS volumes to io2 Block Express volumes with provisioned IOPS.
B.Increase the instance size to r5.8xlarge.
C.Disable the EBS volume caching.
D.Create a RAID 0 stripe of multiple gp2 volumes.
AnswerA

io2 Block Express provides consistent low latency and high IOPS, critical for SAP HANA.

Why this answer

Option A is correct because SAP HANA requires low latency I/O. io2 Block Express volumes provide higher IOPS and lower latency compared to gp2. Option B is incorrect because increasing instance size may help but does not address the storage bottleneck directly. Option C is incorrect because RAID 0 on gp2 volumes can improve throughput but not as effectively as io2.

Option D is incorrect because disabling caching does not improve performance.

1219
MCQeasy

A company is planning to migrate its SAP HANA database to AWS. They need to ensure high availability with automatic failover. Which AWS service should they use to achieve this?

A.AWS Launch Wizard for SAP
B.AWS OpsWorks
C.AWS CloudFormation
D.Amazon Elastic File System (EFS)
AnswerA

AWS Launch Wizard for SAP automates the deployment of SAP HANA with high availability and failover.

Why this answer

AWS Launch Wizard for SAP is the correct service because it automates the deployment of SAP HANA on AWS with built-in high availability and automatic failover configurations. It orchestrates the setup of a multi-AZ cluster, including the installation of SAP HANA system replication, the configuration of a Pacemaker cluster, and the integration with AWS resources such as Elastic IPs and Amazon Route 53 health checks to ensure seamless failover.

Exam trap

The trap here is that candidates often confuse AWS CloudFormation or OpsWorks as capable of handling SAP-specific high-availability configurations, but they lack the SAP-aware automation and integration with HANA system replication and Pacemaker that Launch Wizard provides.

How to eliminate wrong answers

Option B is wrong because AWS OpsWorks is a configuration management service based on Chef and Puppet, designed for managing application stacks and infrastructure as code, not for deploying SAP HANA with automatic failover. Option C is wrong because AWS CloudFormation is an infrastructure-as-code service that can provision resources but does not natively handle the complex SAP-specific high-availability setup, such as configuring HANA system replication or Pacemaker clustering. Option D is wrong because Amazon Elastic File System (EFS) is a scalable file storage service for Linux-based workloads and does not provide database-level high availability or automatic failover for SAP HANA.

1220
MCQhard

An SAP system on AWS is experiencing slow performance. The operations team suspects a memory bottleneck on the SAP HANA database. Which CloudWatch metric should be monitored to confirm memory pressure?

A.CPUUtilization
B.SwapUsage (custom metric from HANA)
C.DiskReadOps
D.NetworkIn
AnswerB

High swap usage indicates insufficient physical memory.

Why this answer

Option C is correct because SAP HANA uses swap space when memory is full; high swap usage indicates memory pressure. Option A (CPU) is not memory. Option B (Disk) is storage.

Option D (Network) is network.

1221
MCQhard

An SAP system on AWS is experiencing performance issues during peak hours. The operations team notices that the EBS volumes are consistently showing high queue depth. What should they do to improve performance?

A.Change the EC2 instance type to a larger one.
B.Provision more IOPS on the EBS volumes.
C.Change the EBS volume type to Throughput Optimized HDD (st1).
D.Increase the size of the EBS volumes.
AnswerB

Provisioned IOPS can directly reduce queue depth.

Why this answer

Option B is correct. Increasing IOPS provisioning can reduce queue depth. Option A is incorrect because larger volume size alone may not improve IOPS.

Option C is incorrect because switching to Throughput Optimized HDD is for throughput, not IOPS. Option D is incorrect because instance size change alone may not fix EBS queue depth.

1222
MCQhard

A company is migrating its SAP landscape to AWS. The SAP systems consist of multiple instances (development, quality, production) running on different EC2 instances. The company wants to automate the provisioning of these instances using infrastructure as code. Which AWS service should be used to define and provision the SAP infrastructure in a repeatable manner?

A.AWS Elastic Beanstalk
B.AWS CloudFormation
C.AWS Service Catalog
D.AWS OpsWorks
AnswerB

CloudFormation enables you to model and provision AWS resources using templates.

Why this answer

Option B is correct because AWS CloudFormation allows you to define infrastructure as code in templates and provision resources in a repeatable manner. Option A is wrong because AWS Elastic Beanstalk is for deploying applications, not for defining infrastructure. Option C is wrong because OpsWorks is for configuration management, not infrastructure provisioning.

Option D is wrong because AWS Service Catalog is for creating and managing a catalog of approved IT services.

1223
MCQhard

An administrator creates a CloudFormation stack with the template shown in the exhibit. The stack creates an Auto Scaling group with a desired capacity of 2. However, only one instance is launched. What is the most likely reason?

A.The instance type m5.large is not available in the selected AZs.
B.The DesiredCapacity is set incorrectly to 1.
C.The Auto Scaling group is unable to launch the second instance due to capacity constraints.
D.The MinSize is set to 1, so only one instance is allowed.
AnswerC

Capacity constraints in the AZs could prevent launching additional instances.

Why this answer

The correct answer is D because the MinSize is set to 1, and the DesiredCapacity is 2, but the MaxSize is 5. However, if the MinSize is 1, the Auto Scaling group cannot scale down below that, but it should be able to scale up to DesiredCapacity. The real issue is that the DesiredCapacity might be overridden by MinSize? Actually, MinSize is 1, DesiredCapacity is 2, so it should launch 2 instances.

But the question says only one instance is launched. The most likely reason is that there is a capacity issue in the specified Availability Zones. Option A is incorrect because the template has MinSize 1, MaxSize 5.

Option B is incorrect because DesiredCapacity is 2. Option C is incorrect because M5 is Nitro-based but that does not affect number of instances.

1224
MCQhard

A company runs its SAP HANA database on an EC2 instance with multiple EBS volumes striped using LVM. The operations team notices increased latency and wants to ensure consistent I/O performance. What is the MOST effective way to monitor the average queue length of the EBS volumes?

A.Monitor the `VolumeQueueLength` CloudWatch metric for each EBS volume.
B.Enable detailed monitoring on the EC2 instance to get per-minute metrics.
C.Create a custom CloudWatch metric using the `QueueDepth` performance counter from the OS.
D.Use the `iostat` command on the EC2 instance to monitor device queue length.
AnswerA

This metric directly reports the number of pending I/O requests, which is the queue length.

Why this answer

CloudWatch provides the `VolumeQueueLength` metric for EBS volumes, which is the best indicator of I/O queue depth.

1225
MCQeasy

A company plans to migrate 50 TB of archived data from on-premises tape storage to Amazon S3 Glacier Deep Archive. The data is rarely accessed. Which migration method is most cost-effective and suitable for the data volume?

A.AWS DataSync
B.AWS CLI with multipart upload
C.AWS Snowball Edge
D.AWS Database Migration Service (DMS)
AnswerC

Snowball Edge is designed for large offline data transfers.

Why this answer

AWS Snowball Edge is a physical device that can transfer large amounts of data offline, avoiding high network costs. For 50 TB, Snowball Edge is cost-effective and efficient. Option C is correct.

Option A (AWS DMS) is for database migration. Option B (AWS DataSync) is for network-based transfers, which may be slow and costly for 50 TB. Option D (AWS CLI with multipart upload) would require significant network bandwidth and time.

1226
MCQmedium

An organization runs SAP S/4HANA on AWS with a single-host HANA database on an EC2 instance. The company wants to implement high availability (HA) for the HANA database within the same AWS Region. The HA solution must ensure automatic failover with minimal data loss. The SAP application servers are already distributed across multiple Availability Zones (AZs). The database administrator proposes using SAP HANA System Replication (HSR) with synchronous replication. However, the network latency between the primary and secondary HANA instances is consistently between 2 ms and 4 ms. What should the administrator do to ensure that the HA solution meets the requirements?

A.Increase the HANA replication timeout value to accommodate the latency.
B.Use asynchronous replication instead and accept the risk of data loss.
C.Continue with synchronous replication; the latency is acceptable for HA.
D.Deploy both HANA instances in the same Availability Zone to reduce network latency.
AnswerD

Same AZ reduces latency, making synchronous replication feasible.

Why this answer

Option D is correct because SAP HANA System Replication (HSR) with synchronous mode requires network latency typically below 1 ms to avoid transaction commit delays and replication timeouts. With consistent 2–4 ms latency, synchronous replication would cause unacceptable performance degradation and potential replication failures. Deploying both HANA instances in the same Availability Zone (AZ) reduces latency to sub-millisecond levels, enabling synchronous replication to meet the automatic failover and minimal data loss requirements.

Exam trap

The trap here is that candidates assume synchronous replication is always the best choice for HA, ignoring the strict latency threshold required for HANA synchronous replication to function without performance impact.

How to eliminate wrong answers

Option A is wrong because increasing the HANA replication timeout does not solve the underlying latency issue; it only delays the timeout, allowing transactions to stall longer, which degrades performance and can still lead to replication failures. Option B is wrong because asynchronous replication accepts the risk of data loss (RPO > 0), which contradicts the requirement for minimal data loss. Option C is wrong because 2–4 ms latency is not acceptable for synchronous HSR; the recommended maximum latency is 1 ms to ensure transaction commits are not delayed beyond acceptable thresholds.

1227
Multi-Selectmedium

A company is migrating SAP to AWS and needs to set up connectivity between on-premises and AWS VPC with high bandwidth and low latency. Which TWO AWS services should be used? (Choose TWO.)

Select 2 answers
A.AWS Transit Gateway
B.AWS Client VPN
C.AWS VPN CloudHub
D.AWS Site-to-Site VPN
E.AWS Direct Connect
AnswersA, E

Transit Gateway acts as a hub for connectivity.

Why this answer

AWS Direct Connect provides dedicated network connection, and AWS Transit Gateway allows connecting multiple VPCs and on-premises networks. Option C is wrong because AWS Site-to-Site VPN is over internet, not dedicated. Option D is wrong because AWS Client VPN is for remote users.

Option E is wrong because AWS VPN CloudHub is for multiple VPN connections.

1228
MCQeasy

A company is migrating its SAP systems to AWS and needs to ensure high availability for the SAP Central Services (ASCS) instance. Which AWS service can be used to implement a failover cluster for ASCS?

A.Amazon S3
B.Application Load Balancer (ALB)
C.AWS using shared file system and DNS-based failover
D.Amazon RDS Multi-AZ
AnswerC

Shared file system (e.g., EFS) with DNS-based routing provides ASCS failover.

Why this answer

AWS offers the SAP on AWS High Availability guide, but for ASCS failover, the recommended approach is using a shared file system (e.g., EFS) and AWS services like Route53 for DNS failover. Option D is the best answer. Option A (ELB) is for web traffic.

Option B (RDS) is for databases. Option C (S3) is object storage.

1229
MCQeasy

An SAP administrator needs to review API calls made by a user who accidentally deleted an S3 bucket used for SAP backups. Which AWS service provides a record of these API calls?

A.Amazon S3 server access logs
B.Amazon CloudWatch Logs
C.AWS Config
D.AWS CloudTrail
AnswerD

CloudTrail provides a record of API calls for governance and auditing.

Why this answer

AWS CloudTrail is the correct service because it records all API calls made to the AWS environment, including S3 bucket deletion events. When a user accidentally deletes an S3 bucket, CloudTrail captures the event details such as the user identity, source IP, and timestamp, enabling the SAP administrator to audit the action. This is essential for security analysis and operational troubleshooting in the context of SAP backups.

Exam trap

The trap here is that candidates often confuse Amazon S3 server access logs (which log object-level requests) with AWS CloudTrail (which logs management-plane API calls), leading them to select Option A when the question specifically asks about API calls that deleted the bucket itself.

How to eliminate wrong answers

Option A is wrong because Amazon S3 server access logs provide detailed records of requests made to an S3 bucket (e.g., GET, PUT, DELETE objects), but they do not capture management-plane API calls like bucket deletion itself; they log object-level operations, not bucket-level administrative actions. Option B is wrong because Amazon CloudWatch Logs is used for monitoring, storing, and accessing log files from AWS resources (e.g., EC2, Lambda), but it does not natively record API calls; it can ingest logs from other services like CloudTrail, but it is not the source of API call records. Option C is wrong because AWS Config is a service for evaluating resource configurations against desired policies and tracking configuration changes over time, but it does not record API calls; it focuses on resource state and compliance, not the audit trail of who performed an action.

1230
MCQhard

A company runs a critical web application on a fleet of EC2 instances behind an Application Load Balancer (ALB) in an Auto Scaling group. The application stores session state in an ElastiCache Redis cluster (Cluster Mode disabled). The operations team receives alerts that the application is experiencing intermittent timeouts and high error rates. Upon investigation, they find that the Redis cluster's CPU utilization is consistently above 90%, and there are frequent 'MAXMEMORY' evictions. The application team confirms that they recently increased the number of concurrent users and added more session data per user. The current Redis cluster is a single cache.r5.large node with 13.37 GB of memory. Which of the following should the operations team do FIRST to address the performance issues?

A.Upgrade the instance type to cache.r5.2xlarge to double the memory and compute capacity.
B.Create a read replica in a different Availability Zone and redirect read traffic to it.
C.Change the eviction policy to 'allkeys-lru' to maximize memory utilization.
D.Enable Cluster Mode and add multiple shards to distribute the data across nodes.
AnswerD

Enabling Cluster Mode and adding shards allows horizontal scaling, distributing CPU and memory load.

Why this answer

The correct first step is to enable Cluster Mode and add multiple shards because the performance issue stems from CPU saturation and memory pressure on a single Redis node. Cluster Mode distributes data across multiple shards, reducing per-node CPU load and memory usage, which directly addresses the high CPU utilization and 'MAXMEMORY' evictions caused by increased concurrent users and session data.

Exam trap

The trap here is that candidates often choose vertical scaling (Option A) or eviction policy changes (Option C) as quick fixes, failing to recognize that the scenario's high CPU and memory evictions indicate a need for horizontal scaling via sharding, which is the only option that directly reduces per-node load and memory pressure.

How to eliminate wrong answers

Option A is wrong because upgrading to cache.r5.2xlarge only doubles memory and compute capacity, which is a vertical scaling approach that does not address the root cause of CPU saturation and may still lead to bottlenecks as load increases; it also ignores the horizontal scaling benefit of sharding. Option B is wrong because creating a read replica in a different AZ and redirecting read traffic does not reduce CPU utilization on the primary node for write-heavy session data, and ElastiCache Redis (Cluster Mode disabled) does not support read replicas in the same way as RDS; replicas are for read scaling, not for solving memory eviction or CPU issues on the primary. Option C is wrong because changing the eviction policy to 'allkeys-lru' only changes which keys are evicted when memory is full, but does not reduce the underlying memory pressure or CPU utilization; it may even worsen performance by evicting important session data, leading to application errors.

1231
MCQmedium

An SAP administrator is designing a high-availability (HA) setup for SAP HANA in a multi-AZ deployment on AWS. Which combination of AWS services and configurations is required for a fully automated HA solution?

A.Classic Load Balancer, AWS CloudTrail, and Amazon Inspector
B.Amazon Route 53, Application Load Balancer, and AWS CloudFormation
C.NAT Gateway, EBS snapshots, and AWS Lambda
D.EC2 Auto Scaling, Amazon RDS, and AWS Backup
AnswerB

Route 53 provides DNS failover, ALB health checks, and CloudFormation automates resource creation for HA.

Why this answer

Option D is correct. AWS uses Route 53 for DNS failover, Application Load Balancer (ALB) for health checks and traffic distribution, and AWS CloudFormation for automated infrastructure deployment. Option A is wrong because NAT Gateway is not used for HA.

Option B is wrong because EC2 Auto Scaling is not suitable for HANA scale-up. Option C is wrong because ELB Classic is not recommended and CloudTrail is for auditing.

1232
MCQmedium

A company is running a production SAP HANA database on an r5.4xlarge EC2 instance with EBS-backed storage. The operations team notices that the database checkpoint writes are frequently slow, causing application performance degradation. The team has already increased the EBS IOPS and throughput. What should the team do next to improve checkpoint write performance?

A.Modify the Linux I/O scheduler to 'noop' and ensure the EBS-optimized instance attribute is enabled.
B.Change the EBS volume type from io1 to gp2 for higher throughput.
C.Disable SAP HANA checkpoint compression to reduce CPU overhead.
D.Increase the EBS volume size to gain additional baseline IOPS.
AnswerA

Using noop scheduler reduces latency and improves sequential I/O performance for SAP HANA checkpoints.

Why this answer

Option C is correct because SAP HANA checkpoint writes are sequential and benefit from larger block sizes. The default Linux I/O scheduler can cause fragmentation; switching to noop or using NVMe instance storage with optimized settings is a best practice. Option A is wrong because increasing EBS IOPS further may not help if the issue is I/O scheduling.

Option B is wrong because moving to gp2 provides lower performance than io1/io2 with provisioned IOPS. Option D is wrong because disabling checkpoint compression increases write volume and may worsen performance.

1233
MCQeasy

A customer is running SAP NetWeaver on AWS and wants to use Amazon EFS for shared file storage for the SAP transport directory. Which access option should be used to secure the file system?

A.Network ACLs
B.IAM role
C.Security group
D.S3 bucket policy
AnswerC

EFS uses security groups to allow inbound NFS traffic.

Why this answer

Amazon EFS uses security groups as a stateful firewall to control NFS traffic (port 2049) at the network level. For SAP transport directories, security groups allow you to restrict access to specific EC2 instances or other AWS resources that need to mount the EFS file system, providing granular network-layer security without managing individual IP addresses.

Exam trap

The trap here is that candidates confuse network-level access controls (security groups) with identity-based controls (IAM roles) or assume that EFS, being a shared file system, can be secured with policies similar to S3 bucket policies.

How to eliminate wrong answers

Option A is wrong because Network ACLs are stateless and operate at the subnet level, not at the resource level; they cannot be directly attached to an EFS file system and would require managing inbound/outbound rules for ephemeral NFS ports, making them less precise and more complex. Option B is wrong because IAM roles are used for authentication and authorization to AWS API actions (e.g., creating or deleting EFS), not for controlling network-level access to NFS traffic on port 2049; EFS does not support IAM-based access control for mounting the file system. Option D is wrong because S3 bucket policies are specific to Amazon S3 and have no relevance to EFS; EFS is a file storage service accessed via NFSv4.1, not an object storage service, and cannot be secured with S3 bucket policies.

1234
Multi-Selecteasy

Which TWO AWS services can be used to migrate on-premises SAP systems to AWS? (Choose 2.)

Select 2 answers
A.AWS Schema Conversion Tool (SCT)
B.AWS Direct Connect
C.AWS Server Migration Service (SMS)
D.AWS Database Migration Service (DMS)
E.Amazon CloudFront
AnswersC, D

SMS is used for server-level migration.

Why this answer

AWS Server Migration Service (SMS) is correct because it automates the replication of live on-premises servers, including SAP application servers, to AWS as Amazon Machine Images (AMIs). This allows you to migrate the entire SAP server stack (OS, SAP binaries, configurations) without needing to reinstall or reconfigure the SAP software, making it ideal for lift-and-shift migrations.

Exam trap

The trap here is that candidates often confuse AWS DMS as only a database migration tool and overlook that it can also migrate SAP databases (e.g., SAP HANA, SAP ASE) to AWS, while simultaneously thinking that AWS SCT (a schema conversion tool) is needed for SAP migrations, when in fact SCT is irrelevant for SAP systems that are not changing database engines.

1235
MCQeasy

A company is planning to run SAP Business Suite on AWS. They want to minimize downtime during a failover scenario. Which AWS feature should they use to achieve automatic failover of the SAP Central Services (ASCS) instance?

A.AWS Auto Scaling
B.Amazon CloudWatch with alarms
C.Elastic Load Balancer
D.Amazon Route 53 with health checks and failover routing
AnswerD

Route 53 can perform DNS failover to the standby ASCS when the primary fails.

Why this answer

Amazon Route 53 with health checks and failover routing is the correct choice because SAP Central Services (ASCS) requires a DNS-level failover mechanism to redirect clients to the standby instance without relying on IP-level changes. Route 53 monitors the health of the primary ASCS instance via health checks and automatically updates DNS records to point to the secondary instance when a failure is detected, enabling automatic failover with minimal downtime.

Exam trap

The trap here is that candidates often confuse load balancing (ELB) with failover routing, but SAP ASCS requires a DNS-based active/passive failover mechanism rather than a load balancer distributing traffic to multiple active instances.

How to eliminate wrong answers

Option A is wrong because AWS Auto Scaling is designed to automatically adjust the number of EC2 instances based on demand, not to handle failover of SAP Central Services, which requires a static, stateful pair of instances (primary and standby) and cannot be replaced by scaling out. Option B is wrong because Amazon CloudWatch with alarms can monitor metrics and trigger notifications or actions via Lambda or Auto Scaling, but it does not provide a native DNS-level failover mechanism for ASCS; it would require custom scripting and additional services to achieve failover, adding complexity and potential delay. Option C is wrong because Elastic Load Balancer distributes incoming traffic across multiple targets, but SAP ASCS is a stateful service that requires a single active instance at a time; an ELB cannot manage the active/passive failover logic needed for ASCS and would introduce session affinity issues.

1236
MCQeasy

A company is running SAP NetWeaver on AWS and wants to implement high availability for the ASCS instance. Which AWS service can be used to monitor and automatically restart the ASCS instance if it fails?

A.EC2 Auto Scaling group
B.AWS Lambda with a scheduled function
C.Elastic Load Balancing (ELB)
D.Amazon CloudWatch with EC2 Auto Recovery
AnswerD

CloudWatch can detect instance failure and automatically recover the instance.

Why this answer

Option B is correct because Amazon CloudWatch can monitor instance status and trigger an Auto Recovery action to restart the instance in the same Availability Zone. Option A is wrong because ELB is for traffic distribution, not instance recovery. Option C is wrong because Lambda can perform actions but not directly restart instances without additional setup; CloudWatch Auto Recovery is simpler.

Option D is wrong because EC2 Auto Scaling is for scaling groups, not single instance recovery.

1237
MCQmedium

A company runs SAP ERP on AWS with a DR strategy using cross-region replication for SAP HANA. During a DR drill, the team discovers that the HANA database is not starting on the DR instance. Which configuration is most likely missing?

A.IAM roles for the DR instance to access S3.
B.EBS encryption on the DR volumes.
C.HANA system replication configuration with the correct 'PRIMARY' and 'SECONDARY' roles.
D.CloudWatch agent for logging.
AnswerC

HSR configuration is required for DR.

Why this answer

Option D is correct because the HANA system replication requires the correct HSR configuration. Option A is wrong because IAM roles are not required for HANA startup. Option B is wrong because CloudWatch agent is optional.

Option C is wrong because EBS encryption is not required.

1238
MCQhard

A company is running SAP S/4HANA on AWS and needs to ensure that the system can survive a single Availability Zone failure. The SAP HANA database is 1.5 TB in size. What is the most cost-effective high availability solution that meets SAP's support requirements?

A.Implement SAP HANA System Replication (HSR) with two EC2 instances in different Availability Zones.
B.Deploy SAP HANA on Amazon RDS for SAP HANA in Multi-AZ.
C.Use Amazon RDS Multi-AZ for the SAP HANA database.
D.Use a single EC2 instance with EBS snapshots taken every 5 minutes.
AnswerA

HSR is SAP's recommended HA solution and supports automatic failover across AZs.

Why this answer

Option D is correct because HANA System Replication in scale-up with two nodes in different AZs is supported and cost-effective. Option A is wrong because it does not protect against AZ failure. Option B is wrong because Multi-AZ RDS is not for HANA.

Option C is wrong because Multi-AZ is for RDS, not HANA.

1239
MCQmedium

A company is migrating their SAP ERP system running on an on-premises IBM Db2 database to Amazon RDS for Db2. The migration must have minimal downtime. The current database size is 2 TB. The network link between on-premises and AWS is 1 Gbps. The migration team plans to use AWS DMS with a full load followed by ongoing replication. During a test migration, they notice that the full load takes longer than expected, causing the change data capture (CDC) lag to grow. They need to adjust the migration approach to meet the downtime window. What should they do?

A.Use multiple DMS tasks in parallel for the full load
B.Increase the compute capacity of the DMS replication instance
C.Create an RDS read replica to offload the initial load
D.Use AWS Snowball to transfer the initial load and then resume CDC
AnswerB

A larger replication instance can process the full load faster.

Why this answer

Option A is correct because using a larger instance for the DMS replication instance increases throughput for the full load, reducing the time and preventing CDC lag growth. Option B is wrong because the database is on-premises, not RDS. Option C is wrong because CDC is already in use; parallel tasks would complicate and may not help.

Option D is wrong because Snowball is for offline transfer, which would not allow ongoing replication.

1240
MCQhard

A company is migrating its SAP ERP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). They plan to use two EC2 instances in different Availability Zones with a shared file system. Which AWS service should they use to manage the failover of the virtual IP address?

A.Use an Elastic IP address and reassign it during failover using a script.
B.Configure Amazon Route 53 with failover routing and health checks for the virtual IP.
C.Deploy an Application Load Balancer to route traffic to the active instance.
D.Set up a Classic Load Balancer with cross-zone load balancing enabled.
AnswerB

Route 53 failover routing can direct traffic to the healthy instance, but for virtual IP, a Network Load Balancer is typically used. However, Route 53 with a CNAME or alias can work if the application supports DNS failover.

Why this answer

Option C is correct because AWS offers a managed solution for SAP HANA and SAP NetWeaver using Route 53 health checks and failover routing, but for virtual IP, the recommended approach is to use Amazon Route 53 with failover routing or an Elastic IP reassignment. However, for ASCS/ERS, the standard is to use a Network Load Balancer (NLB) with a static IP. Option A is wrong because EC2 does not allow moving Elastic IPs across AZs automatically.

Option B is wrong because Application Load Balancer does not support static IP. Option D is wrong because Classic Load Balancer is deprecated and not recommended.

1241
Multi-Selectmedium

A company is migrating an SAP system to AWS and wants to ensure that the migration process is compliant with SAP's requirements. Which TWO of the following are recommended practices? (Choose 2)

Select 2 answers
A.Use a database engine that is not supported by SAP to reduce licensing costs.
B.Skip the testing phase to accelerate the migration timeline.
C.Reduce the memory allocation of the SAP application to save costs.
D.Follow SAP migration notes and best practices.
E.Use EC2 instance types that are certified by SAP for the specific SAP workload.
AnswersD, E

SAP provides detailed notes for migration.

Why this answer

Using certified EC2 instance types and following SAP notes are mandatory. Reducing memory is not recommended. Using unsupported DB engines violates compliance.

Skipping testing is risky.

1242
Multi-Selectmedium

A company is running SAP HANA on AWS and uses multiple EBS volumes for data and log storage. The company wants to encrypt all data at rest. Which three steps are required to ensure encryption of all EBS volumes? (Choose THREE.)

Select 3 answers
A.Use a custom AWS Key Management Service (KMS) key for encryption.
B.Enable encryption on the EBS snapshots after creation.
C.Launch EC2 instances with the EBS-optimized attribute set.
D.Enable EBS encryption by default in the AWS account for the region.
E.For existing unencrypted volumes, create an encrypted snapshot and restore from it.
AnswersA, D, E

A custom key provides control and auditing.

Why this answer

Option A is correct because enabling EBS encryption by default ensures new volumes are encrypted. Option B is correct because existing volumes must be encrypted by creating a snapshot copy with encryption. Option D is correct because using a custom KMS key allows control over encryption.

Option C is wrong because encryption of snapshots is inherited from the volume. Option E is wrong because AWS does not require a specific instance type for encryption.

1243
Matchingmedium

Match the SAP sizing parameter to its AWS EC2 equivalent.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Benchmark unit for CPU capacity

Instance RAM size

EBS bandwidth or instance storage performance

Placement group or instance type network performance

Why these pairings

SAP sizing metrics map to AWS resource characteristics.

1244
MCQmedium

A company is running SAP on AWS and needs to patch the operating system of multiple SAP application servers. The servers are in an Auto Scaling group behind an Application Load Balancer. What strategy minimizes downtime?

A.Create a new Auto Scaling group with patched instances and shift traffic using Route 53.
B.Use AWS Systems Manager Patch Manager to patch all instances at once.
C.Perform a rolling update by updating the Auto Scaling group's launch configuration with a new AMI.
D.Stop all instances, apply patches, then start them.
AnswerC

A rolling update replaces instances gradually, maintaining availability.

Why this answer

Option C is correct because a rolling update with a launch template allows replacing instances one at a time, maintaining capacity. Option A is wrong because stopping all instances causes downtime. Option B is wrong because patching via SSM may cause simultaneous reboots.

Option D is wrong because creating a new ASG and shifting traffic is more complex.

1245
MCQmedium

An organization is migrating a large SAP HANA workload to AWS. The current on-premises environment uses IBM Spectrum Scale (GPFS) for shared storage. Which AWS storage solution should they use to provide a similar shared file system for SAP HANA?

A.Amazon S3
B.Amazon Elastic Block Store (EBS)
C.Amazon FSx for NetApp ONTAP
D.Amazon Elastic File System (EFS)
AnswerC

FSx for ONTAP provides a high-performance shared file system compatible with SAP HANA.

Why this answer

Amazon FSx for NetApp ONTAP provides a fully managed shared file system that supports NFS, SMB, and iSCSI protocols, and can replace GPFS for SAP HANA. EBS is block storage not shared. S3 is object storage.

EFS is NFS but lacks some enterprise features needed for HANA.

1246
MCQmedium

An SAP system administrator is configuring an SAP HANA database on an EC2 instance with multiple EBS volumes. The administrator wants to ensure that the data volumes are mirrored to protect against volume failure. Which RAID configuration should the administrator use for the HANA data volumes?

A.RAID 5
B.RAID 0
C.RAID 10
D.RAID 6
AnswerC

RAID 10 combines mirroring and striping for performance and redundancy.

Why this answer

Option A is correct because RAID 10 (striping + mirroring) provides both performance and redundancy, recommended for HANA data. Option B is wrong because RAID 0 provides no redundancy. Option C is wrong because RAID 5 has write penalty.

Option D is wrong because RAID 6 has higher write penalty.

1247
MCQmedium

A company is migrating an SAP HANA database to AWS. The database is 2 TB in size and runs on a single server. The company needs to minimize downtime during the migration. Which AWS service should be used for the initial data transfer?

A.AWS Snowball Edge
B.AWS Database Migration Service (DMS) with ongoing replication
C.AWS Direct Connect
D.Amazon S3 Transfer Acceleration
AnswerA

Snowball Edge provides a physical device for large data transfer, minimizing network usage and downtime.

Why this answer

Option D is correct because AWS Snowball can handle large data volumes and reduce network transfer time. Option A is wrong because AWS DMS is better for ongoing replication, not initial bulk load. Option B is wrong because AWS Direct Connect is a network connection, not a data transfer service.

Option C is wrong because AWS S3 Transfer Acceleration speeds up uploads but still uses the internet.

1248
MCQmedium

You are an SAP Basis consultant for a company running SAP ECC on Oracle on AWS. The system is hosted on a single EC2 instance (r5.8xlarge) with a separate EC2 instance for the database (Oracle on RDS). Recently, users have reported that the system becomes unresponsive for a few minutes every day at 10:00 AM. You check CloudWatch metrics and see a spike in CPU utilization on the application server at that time, but the database metrics are normal. The application server is running SAP instance and also a custom batch job that runs daily at 10:00 AM. The batch job is using a significant amount of CPU. You need to resolve the issue without losing the functionality of the batch job. Which action should you take?

A.Reschedule the batch job to run at a different time, such as 2:00 AM.
B.Move the custom batch job to a separate EC2 instance dedicated to running batch processes.
C.Upgrade the application server instance to a larger size, such as r5.16xlarge.
D.Create an RDS read replica and offload the batch job's database queries to it.
AnswerB

Isolating the batch job prevents it from competing for CPU with the SAP application.

Why this answer

Option A is correct because moving the batch job to a separate EC2 instance isolates the CPU-intensive process from the main SAP application, preventing it from affecting user sessions. Option B (increase instance size) is expensive and may not be necessary if the batch job can be separated. Option C (reschedule the job) might avoid peak hours but does not address the root cause of resource contention.

Option D (RDS read replica) does not help with application server CPU issues.

1249
Multi-Selectmedium

Which TWO of the following are best practices for running SAP HANA on AWS? (Choose TWO.)

Select 2 answers
A.Use a burstable instance type (e.g., t3) for non-production HANA systems.
B.Use EBS-optimized instances or instances with dedicated EBS bandwidth.
C.Use a dedicated EC2 instance for the HANA database, separate from application servers.
D.Configure a large swap space on the HANA instance to handle memory pressure.
E.Mount the HANA data volume using Amazon EFS for high throughput.
AnswersB, C

EBS optimization provides consistent performance for storage.

Why this answer

Option B is correct because SAP HANA requires consistent, high-throughput I/O for its data and log volumes. EBS-optimized instances provide dedicated network bandwidth to Amazon EBS, eliminating contention with other traffic and ensuring the low-latency, high-IOPS performance that HANA demands. Without this dedicated bandwidth, EBS performance can degrade under load, risking database stability.

Exam trap

The trap here is that candidates often confuse general best practices (like using swap for memory pressure) with SAP HANA's specific requirements, where swap is harmful, or they assume that any storage service (like EFS) can substitute for block storage, ignoring HANA's need for low-latency, direct-attached block devices.

1250
Multi-Selectmedium

A company is running SAP HANA on an EC2 instance. The storage is provided by multiple EBS volumes. Which THREE considerations are important when configuring EBS volumes for SAP HANA? (Choose THREE.)

Select 3 answers
A.Use RAID 0 striping across multiple EBS volumes to increase throughput.
B.Use gp2 volumes with burst credits to handle peak IOPS.
C.Separate data and log volumes to avoid I/O contention.
D.Enable EBS bursting for all volumes to ensure high throughput.
E.Provision EBS volumes with sufficient IOPS to meet SAP HANA performance requirements.
AnswersA, C, E

RAID 0 improves performance by combining multiple volumes.

Why this answer

Options B, C, and E are correct. Option B is correct because HANA requires specific volume sizes and IOPS. Option C is correct because multiple volumes are often striped for performance.

Option E is correct because HANA requires dedicated volumes for data and log. Option A is wrong because gp3 is suitable. Option D is wrong because bursting is not recommended for production HANA.

1251
MCQhard

An SAP HANA database on EC2 is experiencing high swap usage. The system administrator suspects that the memory configuration is insufficient. Which CloudWatch metric should be monitored to confirm this?

A.NetworkOut
B.DiskWriteOps
C.SwapUsage
D.MemoryUtilization
AnswerC

SwapUsage is a standard metric reported by the EC2 instance.

Why this answer

Option C is correct because SwapUsage is a standard EC2 metric available from the instance. Option A is wrong because MemoryUtilization is a custom metric, not default. Option B is wrong because DiskWriteOps is for disk I/O.

Option D is wrong because NetworkOut is for network.

1252
MCQhard

A company runs its SAP system on AWS and uses an Application Load Balancer (ALB) to distribute traffic to SAP Web Dispatchers. The operations team reports that some users experience intermittent connectivity issues. The ALB health checks are configured to check the /sap/public/bc/icf/logon endpoint. Which configuration change would best improve the reliability of health checks?

A.Increase the unhealthy threshold count to reduce false positives.
B.Enable HTTP/2 support on the ALB.
C.Replace the ALB with a Network Load Balancer.
D.Change the health check endpoint to a static HTML page that does not require authentication.
AnswerD

A static endpoint avoids session overhead and is more reliable.

Why this answer

Option A is correct because health checks should validate a lightweight endpoint that is always available, not a session-intensive one. Option B is wrong because increasing the unhealthy threshold will delay detection of failures. Option C is wrong because the internal ALB itself might not be the issue; the health check endpoint is.

Option D is wrong because HTTP/2 is about protocol, not health check reliability.

1253
MCQhard

An SAP system running on AWS experiences a significant performance degradation after a patching activity. The SAP application (PAS) and database (HANA) run on separate EC2 instances. The network throughput between the two instances has dropped. What is the MOST likely cause?

A.The EBS-optimization feature was disabled on the database instance.
B.The instances were moved out of a cluster placement group, reducing network throughput.
C.The security group rules were modified during patching, restricting traffic.
D.The route tables were updated, causing traffic to traverse a NAT gateway.
AnswerB

Cluster placement groups provide low-latency, high-throughput networking; leaving the placement group can significantly reduce network performance.

Why this answer

Option C is correct because if the instances were in the same placement group before patching and after patching they are not, or if the patching changed instance types that affect network performance, the throughput could drop. Option A (Security group rules) would block traffic, not degrade performance. Option B (Subnet routing) would cause connectivity loss, not just degradation.

Option D (IOPS limits) affect disk, not network.

1254
MCQhard

An SAP HANA database on AWS is experiencing high latency. The operations team suspects a network bottleneck. The SAP application and HANA are on different subnets within the same VPC. Which AWS feature can help reduce latency?

A.NAT Gateway
B.Elastic Network Adapter (ENA)
C.VPC Peering
D.Internet Gateway
AnswerB

ENA provides enhanced networking performance.

Why this answer

Option B is correct. ENA provides higher bandwidth and lower latency. Option A is incorrect because VPC Peering does not improve latency within same VPC.

Option C is incorrect because NAT Gateway adds latency. Option D is incorrect because Internet Gateway is for internet access.

1255
MCQmedium

An SAP HANA database is running on an EC2 instance with an attached gp2 volume of 500 GiB. The exhibit shows the volume attributes. The database performance is degrading during peak hours. What is the most likely cause?

A.The volume is sized too small; it needs to be at least 1 TB to provide sufficient IOPS.
B.The volume is not EBS-optimized.
C.The volume's burst balance has been depleted due to sustained high I/O.
D.The volume type is gp2 and should be changed to gp3 for better performance.
AnswerC

gp2 volumes have burst credits; when exhausted, IOPS drop to baseline.

Why this answer

Option B is correct because gp2 volumes have a baseline IOPS of 3 IOPS/GiB, so 500 GiB provides 1500 baseline IOPS. If the workload exceeds this, the volume uses burst credits. Once credits are exhausted, performance degrades.

Option A is wrong because the volume is gp2, not gp3. Option C is wrong because 1500 IOPS is the baseline, not the maximum. Option D is wrong because burst balance is not shown in this output.

1256
MCQmedium

A company is planning to run SAP Business Suite on AWS with an Oracle database. The database requires a shared file system for Oracle Grid Infrastructure (GI). Which AWS storage service should be used?

A.Amazon Elastic File System (EFS).
B.Amazon S3 with a file gateway.
C.Amazon FSx for NetApp ONTAP.
D.Multiple Amazon EBS volumes with a cluster-aware file system.
AnswerC

Supports NFS with features required by Oracle GI.

Why this answer

Amazon FSx for NetApp ONTAP provides a fully managed, shared file system that supports the NFS and SMB protocols required by Oracle Grid Infrastructure (GI) for clusterware and Oracle RAC. It offers high availability, consistent performance, and the ability to present a single namespace across multiple Availability Zones, which is essential for Oracle GI's shared-storage architecture.

Exam trap

The trap here is that candidates often assume Amazon EFS is sufficient for any shared file system need, but Oracle Grid Infrastructure requires specific cluster-aware features (like SCSI-3 persistent reservations and support for Oracle ASM) that only FSx for NetApp ONTAP provides among the listed options.

How to eliminate wrong answers

Option A is wrong because Amazon EFS is a general-purpose NFS file system that does not support the SMB protocol or the specific locking and cluster-aware features required by Oracle Grid Infrastructure for RAC. Option B is wrong because Amazon S3 with a file gateway provides a file interface to S3 but introduces latency and does not offer the low-latency, consistent shared storage needed for Oracle GI's cluster heartbeat and voting disks. Option D is wrong because multiple Amazon EBS volumes with a cluster-aware file system (e.g., GFS2) are not natively supported on AWS for Oracle RAC; AWS does not provide a cluster-aware file system service, and managing such a setup manually is complex and not recommended for production SAP workloads.

1257
Multi-Selectmedium

Which TWO actions can be taken to improve the resilience of an SAP HANA database running on AWS? (Choose two.)

Select 2 answers
A.Deploy the application in a single Availability Zone.
B.Use EBS snapshots for automated backup.
C.Configure SAP HANA system replication across Availability Zones.
D.Increase the CPU capacity of the database server.
E.Enable cross-region replication of the database.
AnswersB, C

Enables recovery from failures.

Why this answer

Option B is correct because EBS snapshots provide a reliable, automated backup mechanism for SAP HANA data volumes, enabling point-in-time recovery and disaster recovery without requiring additional SAP HANA-specific replication. These snapshots are stored in Amazon S3 and can be used to restore the database to a consistent state, improving resilience against data corruption or accidental deletion.

Exam trap

The trap here is that candidates may confuse performance scaling (option D) with resilience, or mistakenly think cross-region replication (option E) is a simple built-in feature for SAP HANA on AWS, when in fact it requires complex setup and is not a standard resilience improvement for the database itself.

1258
MCQhard

A company runs SAP HANA on AWS and wants to implement a disaster recovery (DR) strategy with a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 2 hours. Which solution meets these requirements?

A.Configure HANA System Replication (HSR) to a small instance in the DR region and scale up on failover.
B.Take daily EBS snapshots of the HANA data volumes and copy them to the DR region.
C.Use AWS Database Migration Service (DMS) to replicate HANA to an RDS instance in the DR region.
D.Use AWS Elastic Disaster Recovery (DRS) to replicate the HANA server to the DR region.
AnswerD

DRS provides continuous replication with low RPO.

Why this answer

AWS Elastic Disaster Recovery (DRS) provides continuous block-level replication of the entire SAP HANA server, including OS, application, and data volumes, with sub-minute RPO and RTO of minutes to hours. This meets the 15-minute RPO and 2-hour RTO requirements by enabling rapid failover to a fully provisioned instance in the DR region without manual scaling or data loss from periodic snapshots.

Exam trap

The trap here is that candidates often assume HANA System Replication (HSR) is the only valid DR method for SAP HANA on AWS, overlooking that AWS DRS provides a simpler, fully automated solution that meets strict RPO/RTO without requiring HANA-level replication or manual scaling.

How to eliminate wrong answers

Option A is wrong because HANA System Replication (HSR) to a small instance requires manual scale-up on failover, which cannot guarantee a 2-hour RTO due to provisioning delays and lacks automated DR orchestration for the full server. Option B is wrong because daily EBS snapshots provide an RPO of up to 24 hours, far exceeding the 15-minute requirement, and copying them to the DR region adds latency and potential data loss. Option C is wrong because AWS DMS is designed for database migration and continuous replication to RDS, but RDS does not support SAP HANA as a target engine, and DMS cannot replicate the full HANA server or its custom configurations.

1259
MCQhard

A company is migrating a large SAP HANA workload to AWS. The source system runs on IBM Power Systems. They need to ensure that the target AWS infrastructure meets SAP certification requirements. Which EC2 instance type should they choose?

A.m5.24xlarge
B.c5.18xlarge
C.i3en.24xlarge
D.x1e.32xlarge
AnswerD

x1e instances are SAP HANA certified and memory-optimized.

Why this answer

SAP HANA on AWS requires certified instances. The x1e.32xlarge is certified for SAP HANA production workloads. Option A is correct because it is a SAP HANA certified instance with high memory.

Option B (m5.24xlarge) is general-purpose and not certified for HANA. Option C (c5.18xlarge) is compute-optimized, not memory-optimized. Option D (i3en.24xlarge) is storage-optimized, not SAP HANA certified.

1260
MCQmedium

A company runs an SAP HANA database on an EC2 instance. During a maintenance window, an administrator needs to stop the instance but ensure that the data in the attached EBS volumes is preserved and the instance can be started later without data loss. Which action should the administrator take?

A.Hibernate the instance from the AWS Management Console.
B.Terminate the instance from the AWS Management Console.
C.Stop the instance from the AWS Management Console.
D.Reboot the instance from the AWS Management Console.
AnswerC

Stopping an EBS-backed instance preserves all data on EBS volumes; the instance can be started later.

Why this answer

Option B is correct because stopping an EBS-backed EC2 instance preserves the data on the EBS volumes; the instance can be started later without data loss. Option A (termination) would delete the instance and potentially the volumes. Option C (reboot) does not stop the instance.

Option D (hibernate) is for instances with specific configurations and may not preserve all SAP HANA states.

1261
Multi-Selecteasy

A company is migrating SAP applications to AWS and needs to ensure that the environment meets SAP certification. Which TWO AWS services are specifically designed to help validate SAP workloads on AWS?

Select 2 answers
A.AWS Config
B.AWS Launch Wizard for SAP
C.Amazon Inspector
D.AWS Well-Architected Tool
E.AWS Trusted Advisor
AnswersB, E

AWS Launch Wizard for SAP validates SAP architecture and recommends best practices.

Why this answer

AWS Launch Wizard for SAP (Option B) is specifically designed to guide you through the sizing, configuration, and deployment of SAP systems on AWS, automatically generating a CloudFormation template that adheres to SAP certification requirements. AWS Trusted Advisor (Option E) provides checks for SAP-specific best practices, such as verifying that your EC2 instances are SAP-certified and that your storage configuration meets SAP's performance requirements. Both services directly help validate that your SAP workload meets SAP's certification criteria on AWS.

Exam trap

The trap here is that candidates often confuse general governance or security services (like AWS Config or Inspector) with SAP-specific validation tools, failing to recognize that only services with explicit SAP certification logic (Launch Wizard and Trusted Advisor) can validate SAP workloads for certification.

1262
MCQhard

An SAP Basis administrator is troubleshooting a performance issue on an SAP HANA database running on an EC2 instance. The administrator notices that the 'hdbcons' command shows high 'wait time' for 'disk I/O' operations. The instance is an r5.4xlarge with 500 GB of gp2 EBS volumes for /hana/data and /hana/log. Which of the following is the MOST effective action to improve disk I/O performance?

A.Increase the frequency of EBS snapshots to offload I/O.
B.Change the EBS volume type from gp2 to gp3 with higher IOPS and throughput.
C.Upgrade to a larger EC2 instance type with more CPU and memory.
D.Disable the HANA delta merge operation to reduce I/O load.
AnswerB

gp3 provides better performance and is cost-effective.

Why this answer

Option C is correct because converting gp2 volumes to gp3 provides higher baseline IOPS and throughput without additional cost for provisioned IOPS. Option A is wrong because disabling HANA's delta merge increases fragmentation, worsening performance. Option B is wrong because increasing EBS snapshot frequency does not affect I/O performance.

Option D is wrong because using a larger instance type addresses compute, not disk I/O.

1263
Multi-Selectmedium

A company is designing an SAP HANA disaster recovery solution on AWS. The primary system is in us-east-1, and the DR system must be in us-west-2. The RPO is 15 minutes, and RTO is 1 hour. Which TWO approaches meet these requirements? (Choose TWO.)

Select 2 answers
A.Use AWS Database Migration Service (DMS) with ongoing replication from the primary HANA database to a target HANA database in us-west-2.
B.Take EBS snapshots of HANA data volumes every 15 minutes and copy them to us-west-2.
C.Use Amazon S3 Cross-Region Replication to copy HANA backup files to us-west-2.
D.Configure SAP HANA System Replication (HSR) from the primary to a secondary HANA instance in us-west-2.
E.Use AWS Application Migration Service (MGN) to replicate the entire HANA server to us-west-2.
AnswersA, D

DMS can replicate changes continuously, meeting RPO.

Why this answer

Option A and Option D are correct. SAP HANA System Replication provides synchronous or asynchronous replication with low RPO. Cross-Region replication to us-west-2 meets RPO of 15 minutes.

AWS DMS can also replicate HANA data with ongoing replication, achieving low RPO. Option B (S3 CRR) is for object replication, not HANA. Option C (EBS snapshots) cannot achieve 15-minute RPO due to frequency.

Option E (Application Migration Service) is for server replication but RPO may not be as low.

1264
MCQeasy

A company runs SAP Business Warehouse (BW) on AWS. The system uses an SAP HANA database that is also used for other SAP systems. The company wants to set up monitoring to ensure that the HANA database is performing optimally. They have installed the AWS CloudWatch agent on the HANA server to collect operating system metrics. However, they also need to collect HANA-specific metrics such as memory usage and SQL execution times. Which additional step should the company take to collect these metrics?

A.Set up SAP Solution Manager to send metrics to CloudWatch via an API.
B.Install and configure the SAP HANA CloudWatch agent on the HANA server.
C.Use Amazon CloudWatch Logs to capture HANA trace files and create metric filters.
D.Enable AWS CloudTrail to log HANA database API calls.
AnswerB

The SAP HANA agent collects HANA-specific metrics and sends them to CloudWatch.

Why this answer

The AWS-provided SAP HANA CloudWatch agent is specifically designed to collect HANA-specific metrics such as memory usage, SQL execution times, and other database-level performance counters. It connects to the HANA database using the SQLDBC protocol and pushes the metrics directly to CloudWatch, complementing the OS-level metrics collected by the standard CloudWatch agent. This is the only option that directly addresses the requirement to gather HANA-specific metrics without additional custom development.

Exam trap

The trap here is that candidates may confuse the standard CloudWatch agent (which collects OS metrics) with the specialized SAP HANA CloudWatch agent, or assume that CloudWatch Logs or CloudTrail can be repurposed to capture database-level performance data, when in fact a purpose-built agent is required.

How to eliminate wrong answers

Option A is wrong because SAP Solution Manager is a system management tool that does not natively send metrics to CloudWatch via an API; it would require custom integration or a third-party connector, and it is not the standard AWS-recommended approach for this use case. Option C is wrong because capturing HANA trace files via CloudWatch Logs and creating metric filters would require parsing unstructured log data, which is inefficient, not real-time, and does not provide structured HANA-specific metrics like memory usage or SQL execution times. Option D is wrong because AWS CloudTrail logs API calls to AWS services, not internal database operations within the HANA server; it cannot capture HANA-specific metrics such as memory usage or SQL execution times.

1265
MCQeasy

A company is planning to migrate its SAP HANA database to AWS. Which instance type is specifically designed for SAP HANA workloads on AWS?

A.r5.24xlarge
B.c5.18xlarge
C.t3.2xlarge
D.x1e.32xlarge
AnswerD

X1e instances are memory-optimized and certified for SAP HANA.

Why this answer

The correct answer is B because the x1e.32xlarge instance is part of the X1e family, which is optimized for memory-intensive workloads like SAP HANA. Option A is incorrect because t3 instances are burstable and not suitable for production HANA. Option C is incorrect because c5 instances are compute-optimized.

Option D is incorrect because r5 instances are memory-optimized but not specifically designed for SAP HANA as X1e is.

1266
MCQeasy

A company is migrating an SAP system to AWS and needs to retain the same hostname for the SAP application server after migration. Which configuration should the company use?

A.Assign an Elastic IP to the EC2 instance and update the /etc/hosts file
B.Create a private hosted zone in Amazon Route 53 with an A record
C.Create a CNAME record in a public hosted zone pointing to the EC2 instance
D.Use a public hosted zone in Route 53 with an A record
AnswerB

Provides internal DNS resolution within VPC.

Why this answer

Option B is correct because a private hosted zone in Amazon Route 53 allows you to create an A record that maps a custom hostname to the private IP address of an EC2 instance. This ensures that the SAP application server retains the same hostname after migration, as DNS resolution within the VPC will consistently return the instance's private IP, regardless of instance changes or restarts.

Exam trap

The trap here is that candidates often confuse Elastic IPs with hostname persistence, assuming a static public IP is sufficient, but SAP systems rely on internal hostname resolution via DNS or /etc/hosts, not public IPs, and a private hosted zone provides the necessary centralized, scalable DNS solution within the VPC.

How to eliminate wrong answers

Option A is wrong because assigning an Elastic IP to the EC2 instance only provides a static public IP, but the hostname resolution still relies on DNS or /etc/hosts; updating /etc/hosts is a manual, non-scalable solution that does not provide centralized DNS management and can break if the instance IP changes. Option C is wrong because a CNAME record in a public hosted zone points to a DNS name (e.g., the EC2 instance's public DNS), not to the instance directly, and public hosted zones are accessible from the internet, which is unnecessary and introduces security risks for an internal SAP system. Option D is wrong because a public hosted zone with an A record would expose the SAP application server's hostname to the public internet, which is not required for internal migration and violates security best practices.

1267
MCQhard

A company is using SAP HANA in a multi-node scale-out configuration on AWS. The operations team needs to automate the patching of the operating system on all nodes with minimal downtime. Which approach is most suitable?

A.Stop all HANA nodes, patch the OS on each node, then start them all together.
B.Create new EC2 instances from a patched AMI and terminate the old ones.
C.Use AWS Systems Manager Patch Manager to apply patches to all nodes simultaneously.
D.Use a rolling patching strategy: patch one node at a time after isolating it from the HANA cluster.
AnswerD

Rolling updates minimize downtime by maintaining cluster availability.

Why this answer

Using a rolling patching strategy with Auto Scaling group or custom scripts that patch one node at a time while ensuring the node is temporarily removed from the HANA cluster minimizes downtime. Option A is correct. Option B is wrong because stopping all nodes causes downtime.

Option C is wrong because just using AWS Systems Manager Patch Manager patches all at once without coordination. Option D is wrong because replacing instances from an AMI is more complex and may require data reload.

1268
MCQmedium

A company is migrating a highly critical SAP HANA database to AWS. They need to ensure data consistency and minimal downtime. Which approach should they use?

A.Create an AMI of the on-premises HANA server and launch it on AWS
B.Use AWS DMS with ongoing replication
C.Export HANA data to S3 and import into a new HANA instance
D.Use SAP HANA system replication and AWS Launch Wizard
AnswerD

System replication provides low RPO/RTO; Launch Wizard simplifies deployment.

Why this answer

Using SAP HANA system replication with AWS Launch Wizard automates the setup and provides synchronous replication for consistency. Option A is wrong because DMS with CDC may not support HANA replication efficiently. Option B is wrong because an AMI snapshot is not a migration method.

Option D is wrong because S3 cannot be used directly for HANA replication.

1269
Multi-Selecthard

An SAP HANA database is running on an EC2 instance with multiple EBS volumes for data, log, and shared storage. The administrator needs to ensure that the volumes are backed up consistently to avoid data corruption. Which THREE measures should be taken? (Select THREE.)

Select 3 answers
A.Use the application-consistent snapshot feature of AWS Backup with pre/post scripts.
B.Take snapshots of all volumes simultaneously using the EBS multi-volume snapshot feature.
C.Ensure that the snapshots are taken in the correct order: data volumes first, then log volumes.
D.Freeze the filesystem using xfs_freeze before taking snapshots.
E.Stop the EC2 instance before taking snapshots.
AnswersB, C, D

Multi-volume snapshots provide crash consistency across volumes.

Why this answer

Options B, C, and D are correct. Option B: Freezing the filesystem with xfs_freeze ensures consistent state. Option C: Taking snapshots in a specific order (data first, then log) is a best practice.

Option D: Using the EBS Snapshots API with CrashConsistency = true is not a real parameter; however, enabling crash-consistent snapshots is achieved by freezing I/O. Actually, the correct approach is to use the EBS multi-volume snapshot feature to create application-consistent snapshots. Option A is wrong because stopping the instance causes downtime.

Option E is wrong because the application-consistent snapshot feature in AWS Backup is the right tool, but the question asks for measures, and using AWS Backup is a service, not a measure. The best answer is to use EBS multi-volume snapshots with pre/post scripts. Since the options are limited, we choose B, C, D as the intended correct ones.

1270
MCQhard

Refer to the exhibit. An SAP HANA database backup fails with the error shown. The backup target is an EFS file system mounted at /backup. The EC2 instance has the appropriate IAM role to access EFS. What is the MOST likely cause of this error?

A.The IAM role attached to the EC2 instance does not have permissions to write to EFS.
B.The SAP HANA database user does not have write permissions on the backup directory.
C.The EFS file system has insufficient IOPS for the backup operation.
D.The EFS file system is out of storage capacity.
AnswerB

The error clearly states 'Permission denied', indicating a file permission issue.

Why this answer

Option B is correct because the error 'Permission denied' indicates that the SAP HANA user (e.g., <sid>adm) does not have write permissions to the backup directory on the EFS file system. Option A is wrong because the error is not about disk space. Option C is wrong because EFS does not have IOPS limits like EBS.

Option D is wrong because the IAM role is for accessing EFS, but file permissions are separate.

1271
MCQmedium

A company runs an SAP HANA database on an EC2 instance with EBS volumes. The operations team needs to ensure that snapshots of the database volumes are consistent. Which step should be taken before initiating the EBS snapshot?

A.Use hdbsql to execute BACKUP DATA FULL USING FILE ('/backup/snapshot_prep')
B.Run the Linux 'sync' command on the instance
C.Stop the HANA database service
D.Create the EBS snapshot directly without any preparation
AnswerA

This command prepares HANA for a snapshot-consistent backup.

Why this answer

Option A is correct because running hdbsql with BACKUP DATA and USING FILE creates a snapshot-consistent backup. Option B is wrong because 'sync' only flushes OS buffers but does not guarantee HANA consistency. Option C is wrong because stopping HANA is excessive.

Option D is wrong because EBS snapshots alone do not ensure application consistency.

1272
MCQhard

An SAP HANA system on AWS is experiencing performance degradation. The administrator suspects that the EBS volumes are not providing consistent IOPS. Which AWS tool can be used to monitor the performance of EBS volumes at the volume level?

A.AWS X-Ray
B.Amazon CloudWatch
C.Amazon Inspector
D.AWS Trusted Advisor
AnswerB

CloudWatch provides detailed EBS metrics such as IOPS and throughput.

Why this answer

Option B is correct. Amazon CloudWatch provides metrics like VolumeReadBytes, VolumeWriteBytes, VolumeQueueLength for EBS volumes. Option A is wrong because AWS Trusted Advisor gives recommendations, not performance metrics.

Option C is wrong because Amazon Inspector is for security assessment. Option D is wrong because AWS X-Ray is for tracing application requests.

1273
MCQmedium

A company runs SAP HANA on AWS using EC2 instances with HANA data replication between two Availability Zones. The operations team needs to test a disaster recovery failover. What is the correct procedure to promote the secondary HANA system to primary?

A.Stop the primary HANA system on the primary EC2 instance
B.Use the HANA takeover command on the secondary system
C.Modify the DNS record to point to the secondary instance
D.Shut down the primary EC2 instance and wait for automatic failover
AnswerB

The takeover command promotes the secondary to primary.

Why this answer

For HANA system replication, the secondary must be taken over using HANA Studio or hdbsql. Stopping the primary or shutting down EC2 instances does not trigger a clean takeover; modifying DNS without promoting the database would cause data inconsistency.

1274
MCQhard

A mid-size company is migrating its SAP Business One on SAP HANA to AWS. The current system runs on a single server with 256 GB RAM and uses a local disk for HANA data. The company wants to minimize capital expenditure and operational overhead. They have already sized the target EC2 instance as an x1e.2xlarge (122 GB RAM) but later realized that SAP HANA requires at least 256 GB RAM for their workload. The migration deadline is in one week. The company has a limited budget and cannot change the instance type to a larger one due to procurement delays. They have an 8 TB EBS gp2 volume attached for HANA data, but it is not meeting performance requirements. The team proposes the following actions: Option A: Increase the EBS volume size to 16 TB to improve IOPS. Option B: Switch to EBS io2 volumes with provisioned IOPS to meet performance requirements, and use AWS DMS to migrate the data. Option C: Use an instance with instance store SSDs (e.g., i3en.2xlarge) to get high local I/O performance, and migrate using SAP HANA backup and restore. Option D: Use Amazon FSx for NetApp ONTAP as the storage backend for HANA, as it provides high performance and is certified for SAP HANA. Which option is the best course of action considering the constraints?

A.Increase the EBS volume size to 16 TB to improve IOPS
B.Use Amazon FSx for NetApp ONTAP as the storage backend for HANA, as it provides high performance and is certified for SAP HANA
C.Use an instance with instance store SSDs (e.g., i3en.2xlarge) to get high local I/O performance, and migrate using SAP HANA backup and restore
D.Switch to EBS io2 volumes with provisioned IOPS to meet performance requirements, and use AWS DMS to migrate the data
AnswerD

io2 volumes provide consistent high IOPS, and DMS can migrate data efficiently.

Why this answer

Option C is the best because i3en instances offer high-performance instance store SSDs that are SAP HANA certified, and the instance has enough RAM (i3en.2xlarge has 64 GB RAM, but actually i3en.2xlarge has 64 GB, still less than 256 GB. However, the question states the company cannot change instance type, but they can consider a different instance family. Actually, i3en.2xlarge has 64 GB RAM, which is insufficient.

But given the constraints, the best among options is to use a certified instance with sufficient RAM? Let me correct: The company already selected x1e.2xlarge (122 GB RAM) but needs 256 GB. They cannot change instance type due to procurement delays. Option C suggests using i3en.2xlarge (64 GB RAM) which is even smaller.

Option A increases storage but not performance. Option B uses io2 but still on x1e.2xlarge with insufficient RAM. Option D: FSx for NetApp ONTAP is not SAP HANA certified.

Actually, the correct answer should be to use a larger instance, but that's not an option. The best among flawed options: Option B at least improves storage performance, but RAM issue remains. However, the question likely expects Option B because it addresses performance and uses DMS for migration.

But let's provide a realistic explanation: The company should increase storage performance and migrate with DMS. Option B is the most feasible.

1275
MCQhard

Refer to the exhibit. A CloudFormation stack for an SAP deployment is in state UPDATE_ROLLBACK_FAILED. What is the MOST likely cause?

A.The stack update was attempted without sufficient IAM permissions
B.The stack has drifted from the template configuration
C.The stack update failed and the subsequent rollback also failed
D.A resource in the stack was deleted outside of CloudFormation
AnswerC

UPDATE_ROLLBACK_FAILED means both update and rollback failed.

Why this answer

Option C is correct because UPDATE_ROLLBACK_FAILED indicates that the rollback of a failed update encountered an error, leaving the stack in an inconsistent state. Option A is incorrect because insufficient IAM permissions would cause a failure, not a rollback failure. Option B is incorrect because drift is detected, but drift does not cause rollback failure.

Option D is incorrect because a deleted resource would cause a different error.

Page 16

Page 17 of 24

Page 18