Knowledge + Practice

AWS Certified SAP on AWS Specialty PAS-C01 (PAS-C01) — Questions 1651–1725

1733 questions total · 24pages · All types, answers revealed

Take a mock exam Exam hub

Page 23 of 24

1651

MCQeasy

A company is migrating an SAP system to AWS and needs to ensure that the SAP application can communicate with the database over a low-latency, high-bandwidth connection. What is the best practice for network architecture?

A.Place the SAP application on-premises and the database on AWS.

B.Place the SAP application and database in the same VPC and same Availability Zone.

C.Place the SAP application and database in separate Availability Zones within the same region.

D.Place the SAP application in a different AWS Region than the database.

AnswerB

Same AZ ensures low-latency communication.

Why this answer

Placing the SAP application and database in the same VPC and Availability Zone minimizes latency. Separate AZs increase latency. Different regions introduce significant latency.

On-premises connection defeats purpose of migration.

Full explanation →

1652

MCQmedium

A company is running SAP Business Suite on AWS and wants to implement a disaster recovery (DR) strategy with a Recovery Time Objective (RTO) of less than 2 hours and a Recovery Point Objective (RPO) of less than 15 minutes. The primary and DR sites are in different AWS regions. Which solution meets these requirements?

A.Use SAP HANA System Replication in asynchronous mode across regions with EBS snapshots every 15 minutes

B.Use EBS snapshots replicated to the DR region with S3 cross-region replication

C.Use AWS Backup with continuous backups

D.Use SAP HANA System Replication in synchronous mode across regions

AnswerA

Asynchronous replication with frequent snapshots can meet RPO < 15 minutes and RTO < 2 hours.

Why this answer

SAP HANA System Replication with synchronous mode in the same region can achieve RPO < 15 minutes, but across regions asynchronous replication is needed. Option A is wrong because cross-region synchronous replication is not possible due to latency. Option B is wrong because EBS snapshots alone may not meet RPO.

Option C is wrong because S3 cross-region replication is for objects, not SAP data.

Full explanation →

1653

MCQeasy

A company is running an SAP HANA database on an EC2 instance with an EBS gp3 volume. The workload is write-intensive and latency-sensitive. Which configuration change would provide the most consistent I/O performance?

A.Switch to an EBS st1 (throughput-optimized HDD) volume

B.Enable EBS Multi-Attach for the gp3 volume

C.Increase the size of the existing gp3 volume to increase baseline throughput

D.Use an EBS io2 Block Express volume with provisioned IOPS

AnswerD

io2 Block Express provides consistent low-latency and high IOPS for SAP HANA.

Why this answer

Option B is correct because EBS io2 Block Express volumes provide consistent low-latency performance for I/O-intensive workloads like SAP HANA. Option A is incorrect because throughput-optimized HDD (st1) is not suitable for database workloads. Option C is incorrect because increasing gp3 size alone does not guarantee consistent latency.

Option D is incorrect because provisioned IOPS on gp3 can help but io2 Block Express is designed for consistent low latency.

Full explanation →

1654

MCQmedium

An SAP system administrator notices that the SAP HANA database backup job to Amazon S3 is failing intermittently. The backup script uses the AWS CLI. Which step should be taken to diagnose the issue?

A.Enable S3 Transfer Acceleration on the bucket

B.Check AWS CloudTrail logs for S3 API call errors

C.Configure S3 Lifecycle policy to expire incomplete multipart uploads

D.Modify the backup script to use the AWS SDK instead of CLI

AnswerB

CloudTrail logs show failed API calls and error codes.

Why this answer

Option A is correct because checking CloudTrail logs reveals API call errors. Option B is wrong as S3 Transfer Acceleration would not fix failures. Option C is wrong because the script already uses CLI.

Option D is wrong because lifecycle policies don't affect backup jobs.

Full explanation →

1655

MCQeasy

A company is planning to migrate its SAP landscape to AWS. The SAP systems include a production system, a QA system, and a development system. All systems use the same SAP S/4HANA version. Which strategy is MOST cost-effective for the DR (disaster recovery) setup?

A.Set up warm standby in a second Region with a standby application server and database.

B.Use cross-Region replication with AWS reserved instances for the DR systems.

C.Use a pilot light strategy with AWS DMS ongoing replication.

D.Deploy active-active SAP systems in two AWS Regions with Elastic Load Balancing.

AnswerB

Reserved instances provide significant discount over on-demand, making this the most cost-effective option for DR.

Why this answer

Option D is correct because cross-Region replication for DR using a single reserved instance for each system is cost-effective compared to running full active instances. Option A (Active-active) would incur double cost. Option B (Pilot light) would require starting instances on failure, impacting RTO.

Option C (Warm standby) is more expensive than cross-Region replication with reserved instances.

Full explanation →

1656

MCQhard

An SAP system on AWS is experiencing high latency between the SAP application servers and the HANA database. The application servers are in a different Availability Zone than the database. Which change should a migration specialist recommend to reduce latency without increasing costs significantly?

A.Enable Enhanced Networking on all instances

B.Create a VPC Peering connection between the application and database subnets

C.Use larger instance types for the application servers

D.Deploy SAP application servers in the same placement group and Availability Zone as the HANA database

AnswerD

Same placement group and AZ minimizes network hops and latency.

Why this answer

Option C is correct because placing application servers in the same placement group and Availability Zone as the database reduces network distance and latency. Option A is wrong because using a larger instance type may not reduce latency. Option B is wrong because enabling Enhanced Networking reduces packet loss but not latency across AZs.

Option D is wrong because VPC Peering does not improve latency within the same region.

Full explanation →

1657

MCQhard

A company is migrating a 10 TB SAP HANA database to AWS. They have a limited time window and need to minimize migration time. The database is running on a physical server with 1 Gbps network link to AWS. Which migration strategy is MOST suitable?

A.Use AWS Direct Connect to increase bandwidth before migration

B.Use AWS Snowball Edge to transfer the database files offline

C.Use AWS SCT to convert the database and then use DMS

D.Use AWS DMS over the existing network link

AnswerB

Snowball Edge can transfer 10 TB quickly via physical shipment.

Why this answer

Option B is correct because AWS Snowball Edge provides a high-capacity physical device for offline data transfer, avoiding network bandwidth limitations. Option A is wrong because DMS over a 1 Gbps link would take too long for 10 TB. Option C is wrong because AWS SCT is for schema conversion, not data transfer.

Option D is wrong because AWS Direct Connect requires setup time and still limited by 1 Gbps.

Full explanation →

1658

Multi-Selecteasy

A company wants to automatically recover an SAP HANA database EC2 instance if it becomes impaired due to underlying hardware issues. Which THREE components are required for this automatic recovery?

Select 3 answers

A.A CloudWatch alarm that monitors the StatusCheckFailed metric.

B.An instance that is configured for EC2 Auto Recovery.

C.A single Availability Zone deployment.

D.Multiple Availability Zones for the instance.

E.An Elastic IP address associated with the instance.

AnswersA, B, C

The alarm triggers the recovery action.

Why this answer

Option A is correct because a CloudWatch alarm on the StatusCheckFailed metric triggers recovery. Option C is correct because the instance must be in an Auto Recovery-enabled configuration (default). Option E is correct because the instance must be in a single Availability Zone (no Multi-AZ for EC2 recovery).

Option B is wrong because Elastic IP is not required. Option D is wrong because the instance should be in a single AZ.

Full explanation →

1659

Multi-Selectmedium

An SAP system is deployed on EC2 with a Multi-AZ RDS for SAP ASE database. The operations team needs to ensure that database backups are stored in a separate AWS account for compliance. Which TWO actions should they take?

Select 2 answers

A.Share the snapshots publicly and then copy them to the target account.

B.Configure S3 cross-region replication for the automated backups.

C.Use AWS KMS with cross-account permissions to allow the target account to decrypt and copy the snapshots.

D.Use AWS Backup with a cross-account backup policy to copy snapshots to the target account.

E.Enable automatic cross-account backup in the RDS console.

AnswersC, D

Cross-account KMS keys enable secure sharing of encrypted snapshots.

Why this answer

Option A and Option D are correct. Option A: Copying snapshots to another account using KMS cross-account permissions. Option D: Using AWS Backup with a cross-account backup policy.

Option B is wrong because sharing snapshots publicly is a security risk. Option C is wrong because you cannot directly enable cross-account backup in the RDS console without additional setup. Option E is wrong because S3 replication is for objects, not RDS snapshots.

Full explanation →

1660

MCQeasy

An SAP system on AWS uses Amazon RDS for its database. The operations team needs to perform a point-in-time recovery (PITR) to restore the database to a specific timestamp. Which AWS feature enables PITR for RDS?

A.Manual DB snapshots

B.Read Replicas

C.Automated backups

D.Multi-AZ deployment

AnswerC

Enable PITR.

Why this answer

Option B is correct because automatic backups enable PITR. Option A is wrong because manual snapshots are not for PITR. Option C is wrong because Multi-AZ is for high availability.

Option D is wrong because Read Replicas are for read scaling.

Full explanation →

1661

MCQmedium

An SAP NetWeaver system on AWS needs to be highly available across two Availability Zones. Which AWS service should be used to manage the floating IP address used by the SAP application servers?

A.VPC Peering

B.AWS Global Accelerator

C.Elastic IP address

D.Amazon Route 53 with failover routing

AnswerD

Route 53 can route traffic to healthy endpoints in different AZs.

Why this answer

Amazon Route 53 with failover routing is the correct choice because it can manage a floating IP address by using DNS health checks to automatically route traffic to the healthy SAP application server in the active Availability Zone. When the primary server fails, Route 53 updates DNS resolution to point to the secondary server's IP, effectively providing a floating IP mechanism without requiring a static IP reassignment.

Exam trap

The trap here is that candidates often confuse Elastic IP addresses with floating IPs, not realizing that Elastic IPs require manual remapping and lack automatic health-based failover, whereas Route 53 failover routing provides the automated DNS-level failover needed for SAP high availability.

How to eliminate wrong answers

Option A is wrong because VPC Peering is a network connectivity service that connects two VPCs, not a mechanism to manage floating IP addresses for SAP application servers. Option B is wrong because AWS Global Accelerator uses anycast IP addresses and static IPs to route traffic to optimal endpoints, but it does not manage a floating IP address that moves between SAP application servers across Availability Zones; it is designed for global traffic optimization, not local HA failover. Option C is wrong because an Elastic IP address is a static public IPv4 address that can be remapped to another instance, but it is not suitable for managing a floating IP in a highly available SAP architecture across Availability Zones because it requires manual intervention or scripting to reassign, and it does not provide automatic health-based failover.

Full explanation →

1662

MCQhard

A company is migrating a legacy SAP ERP system to AWS. The system uses a custom kernel and has strict latency requirements. The SAP application servers must be placed in the same AWS region as the database. Which migration strategy should be used?

A.Replatform

B.Refactor

C.Repurchase

D.Rehost

AnswerD

Minimal changes, suitable for custom kernels.

Why this answer

Rehost (lift-and-shift) is appropriate when moving SAP systems with custom kernels, as it minimizes changes. Option A (Replatform) involves changes to the platform. Option B (Refactor) involves re-architecting.

Option C (Repurchase) involves replacing the software.

Full explanation →

1663

Multi-Selecthard

A company is running SAP HANA on EC2 instances with EBS volumes. They need to ensure data durability and backup. Which THREE actions should be taken?

Select 3 answers

A.Disable automated backups to reduce costs.

B.Use instance store volumes for HANA data.

C.Enable SAP HANA System Replication to a secondary instance.

D.Configure SAP HANA backup to Amazon S3 using Backint.

E.Take regular EBS snapshots of the HANA data volumes.

AnswersC, D, E

Replication provides high availability and disaster recovery.

Why this answer

Option A (snapshots), Option D (backup to S3), Option E (replication) are best practices. Option B is wrong because backups are needed. Option C is wrong because terminating on instance store data loss.

Full explanation →

1664

MCQmedium

A company runs SAP on AWS and uses a central syslog server to collect logs from all SAP instances. The operations team wants to use a managed AWS service to centralize log storage and enable real-time analysis. Which service should they use?

A.Amazon Athena

B.Amazon CloudWatch Logs

C.Amazon Kinesis Data Firehose

D.Amazon S3

AnswerB

CloudWatch Logs provides centralized log storage and monitoring.

Why this answer

Option A is correct. CloudWatch Logs can aggregate logs from multiple sources and enable real-time analysis. Option B is incorrect because S3 is storage, not analysis.

Option C is incorrect because Athena is for querying S3, not real-time. Option D is incorrect because Kinesis is for streaming data, but more complex.

Full explanation →

1665

Multi-Selectmedium

Which TWO actions should be taken to ensure high availability for an SAP NetWeaver system on AWS? (Choose TWO.)

Select 2 answers

A.Assign Elastic IP addresses to the instances for failover

B.Place all EC2 instances in a single Availability Zone

C.Use Amazon EC2 Spot Instances for cost savings

D.Deploy the ASCS instance in an Auto Scaling group

E.Use Amazon RDS Multi-AZ for the database

AnswersA, E

Elastic IPs can be remapped to standby instances during failover.

Why this answer

Option A (using a Multi-AZ RDS instance) provides database HA. Option C (deploying ASCS in an Auto Scaling group) is not recommended because ASCS is stateful. Option D (using Elastic IP addresses) allows IP remapping.

Option B (placing instances in a single AZ) reduces HA. Option E (using spot instances) risks interruption.

Full explanation →

1666

Multi-Selectmedium

A company is migrating its SAP NetWeaver system to AWS and wants to implement a high-availability architecture for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). Which TWO of the following are required components in a recommended AWS HA setup for ASCS and ERS?

Select 2 answers

A.A shared file system (e.g., Amazon EFS) to store the SAP transport directory and global profile.

B.An Application Load Balancer to distribute traffic between ASCS and ERS instances.

C.A floating IP address (using Elastic IP or Route 53 health checks) to manage the ASCS virtual hostname.

D.A read replica of the SAP HANA database to offload application traffic.

E.A secondary Windows Server Failover Cluster in a different Availability Zone.

AnswersA, C

ASCS and ERS require shared storage for transport directory.

Why this answer

Option A is correct because in an SAP NetWeaver high-availability architecture on AWS, a shared file system such as Amazon EFS is required to store the SAP transport directory and global profile. This ensures that both the ASCS and ERS instances can access consistent configuration and transport files, which is essential for failover and cluster operations. Without a shared file system, the instances would have divergent configurations, breaking the HA setup.

Exam trap

The trap here is that candidates often confuse the need for a load balancer (Option B) with the floating IP mechanism, not realizing that SAP ASCS/ERS uses a virtual IP for active/passive failover rather than distributing traffic across multiple active instances.

Full explanation →

1667

MCQmedium

A company has an SAP environment with a recovery time objective (RTO) of 2 hours and a recovery point objective (RPO) of 15 minutes. Which backup strategy meets these requirements?

A.Daily full backups to Amazon S3 and log backups every 30 minutes.

B.Weekly full backups and daily differential backups.

C.Incremental backups every 15 minutes and log backups every 5 minutes.

D.Hourly EBS snapshots and continuous log shipping to S3.

AnswerC

Frequent incremental and log backups can achieve 15-minute RPO and 2-hour RTO.

Why this answer

Option D is correct because HANA incremental backups combined with log backups can achieve 15-minute RPO, and restoring from incremental backups can meet 2-hour RTO if the database is not too large. Option A is wrong because daily backups cannot meet 15-minute RPO. Option B is wrong because snapshots are not as frequent.

Option C is wrong because full backups take longer to restore.

Full explanation →

1668

MCQmedium

A company runs a critical web application on EC2 instances behind an Application Load Balancer (ALB). The application experiences intermittent high latency, and the operations team suspects that the load balancer is not distributing traffic evenly. Which configuration should the team check to confirm or rule out uneven traffic distribution?

A.Configure slow start on the target group

B.Increase the deregistration delay on the target group

C.Enable sticky sessions (session affinity) on the target group

D.Verify that cross-zone load balancing is enabled on the ALB

AnswerD

Cross-zone load balancing distributes traffic evenly across all instances in all enabled AZs. If disabled, each ALB node only sends traffic to instances in its own AZ, causing uneven distribution.

Why this answer

Uneven traffic distribution across EC2 instances behind an ALB is most commonly caused by cross-zone load balancing being disabled. By default, ALBs have cross-zone load balancing enabled, which distributes traffic evenly across all registered instances in all enabled Availability Zones. If it is disabled, each ALB node distributes traffic only to instances in its own Availability Zone, leading to imbalances when instance counts or capacities differ across zones.

Verifying this setting directly addresses the suspected uneven distribution.

Exam trap

The trap here is that candidates often confuse uneven distribution with session affinity (sticky sessions) or connection draining, but the root cause is typically the cross-zone load balancing setting, which directly controls whether traffic is balanced across all targets or confined to each Availability Zone.

How to eliminate wrong answers

Option A is wrong because slow start gradually ramps up traffic to new targets, which addresses cold-start latency but does not cause or resolve uneven distribution across healthy instances. Option B is wrong because increasing the deregistration delay keeps in-flight connections open during instance de-registration, which affects graceful shutdowns but has no impact on traffic distribution during normal operation. Option C is wrong because sticky sessions (session affinity) bind a client to a specific target, which can actually worsen uneven distribution by concentrating traffic on certain instances, not fix it.

Full explanation →

1669

MCQhard

A multinational corporation is migrating its SAP S/4HANA system to AWS. The system consists of a production database (3 TB), a development database (500 GB), and multiple application servers. The migration plan is to use AWS Database Migration Service (DMS) for the databases and AWS Application Migration Service (MGN) for the application servers. The company has set up a test environment in AWS and has performed a test migration. During the test, the production database migration via DMS completed successfully, but the development database migration failed with an error indicating that the source database version is not supported by DMS. The development database is SAP HANA 2.0 SPS 04, while the production database is SAP HANA 2.0 SPS 05. The target for both is Amazon RDS for SAP HANA. The DMS source endpoint was created using the same settings for both databases. Which step should the administrator take to resolve the development database migration failure?

A.Use SAP HANA System Replication to replicate the development database to RDS.

B.Upgrade the source development SAP HANA to a supported version (e.g., SPS 05).

C.Downgrade the production database to match the development version.

D.Use AWS Server Migration Service (SMS) for the development database.

AnswerB

DMS requires a supported source version.

Why this answer

DMS supports specific SAP HANA versions. The development version may not be in the supported list. Option A is correct because upgrading the source to a supported version is necessary.

Option B is wrong because DMS is for database migration, not server migration. Option C is wrong because HSR is for HANA to HANA, not to RDS. Option D is wrong because downgrading the production database is unnecessary and risky.

Full explanation →

1670

MCQeasy

A company is running an SAP HANA database on an Amazon EC2 instance. The storage is configured with multiple EBS volumes striped using LVM. The company wants to ensure the database performance is consistent and can detect potential bottlenecks. Which AWS service should be used to monitor the EBS volume metrics such as Average Queue Length and Throughput?

A.AWS Trusted Advisor

B.Amazon Inspector

C.Amazon CloudWatch

D.AWS CloudTrail

AnswerC

CloudWatch provides EBS performance metrics.

Why this answer

Amazon CloudWatch provides metrics for EBS volumes including Average Queue Length (VolumeQueueLength) and Throughput (VolumeReadBytes/VolumeWriteBytes). Option A is correct. AWS CloudTrail records API calls, not performance metrics.

AWS Trusted Advisor provides best-practice checks but not detailed EBS metrics. Amazon Inspector is for security assessments.

Full explanation →

1671

MCQhard

You are managing an SAP S/4HANA system on AWS. The system uses a multi-AZ deployment with two application servers (one in us-east-1a, one in us-east-1b) and a HANA database in us-east-1a with a standby in us-east-1b using HSR. The /sapmnt and /usr/sap/trans are on an EFS file system. Recently, you noticed that during a failover test of the HANA database, the application servers lost connectivity to the database for several minutes, causing errors. You also observed that after the failover, the application servers could not reconnect until the EFS mount was remounted. What is the most likely cause and solution?

A.Increase the provisioned throughput on the EFS file system to handle the increased load during failover.

B.Migrate the shared file systems to Amazon FSx for NetApp ONTAP with multi-AZ deployment.

C.Configure EFS mount targets in each AZ and use an EFS access point with a consistent mount path.

D.Reconfigure SAP HANA System Replication to use synchronous replication.

AnswerC

This ensures that after failover, the application servers can mount the file system using the access point that resolves in the AZ.

Why this answer

Option D is correct because the EFS mount target is in a specific subnet, and after failover, the application servers might be trying to connect to the wrong mount target or the DNS might not resolve correctly. Using an EFS access point with a consistent path and ensuring proper DNS resolution across AZs can resolve this. Option A (increase EFS throughput) does not address connectivity.

Option B (use FSx for ONTAP) could be an alternative but is not the immediate cause. Option C (HSR setup issue) is not the cause if the database fails over correctly.

Full explanation →

1672

MCQeasy

A company is running SAP HANA on AWS. They want to ensure that the database is backed up automatically and the backups are stored securely and durably. Which AWS service should be used to store the backup files?

A.Amazon EBS Snapshots

B.Amazon RDS

C.Amazon Elastic File System

D.Amazon S3

AnswerD

S3 is ideal for storing backup files with high durability.

Why this answer

Amazon S3 is the correct service for storing SAP HANA backup files because it provides a highly durable (99.999999999% durability), scalable, and secure object storage platform. SAP HANA supports backing up directly to S3 using the Backint agent or via third-party backup tools, and S3 offers features like server-side encryption (SSE-S3 or SSE-KMS) and lifecycle policies for cost-effective long-term retention.

Exam trap

The trap here is that candidates may confuse Amazon EBS Snapshots (Option A) as the default backup mechanism for SAP HANA on AWS, but EBS Snapshots are not suitable for SAP HANA database-level backups because they capture the entire volume state and do not integrate with SAP HANA's backup catalog or support point-in-time recovery of the database itself.

How to eliminate wrong answers

Option A is wrong because Amazon EBS Snapshots are block-level backups tied to a specific Availability Zone and are not designed for direct SAP HANA database file backups; they capture entire volumes, not individual database files, and lack the granularity and portability needed for SAP HANA backup strategies. Option B is wrong because Amazon RDS is a managed relational database service, not a storage service for backup files; it cannot be used to store SAP HANA backup files as SAP HANA is not an RDS engine. Option C is wrong because Amazon Elastic File System (EFS) is a file-level NFS storage service that is not optimized for high-throughput backup workloads and does not provide the same durability, cost-efficiency, or direct integration with SAP HANA backup tools as S3.

Full explanation →

1673

MCQmedium

An organization has a production SAP ERP system on AWS with a multi-node SAP HANA scale-out configuration. The system uses a cluster placement group for low latency. During a maintenance window, the administrator needs to stop and start all instances. After restart, the HANA nodes cannot communicate with each other. The cluster placement group is still intact, but the private IP addresses have changed. The HANA topology relies on hostnames resolved via /etc/hosts. What is the MOST likely cause and solution?

A.The private IP addresses changed, but /etc/hosts still has the old IPs. Update /etc/hosts with the new IPs or use Elastic IPs.

B.The EBS volumes were detached during stop. Reattach the volumes.

C.The security group rules were reset. Reapply the security group rules.

D.The cluster placement group was removed during stop/start. Recreate the placement group.

AnswerA

Stop/start can change private IPs; using Elastic IPs or updating /etc/hosts resolves this.

Why this answer

When EC2 instances in a cluster placement group are stopped and started, the private IP addresses can change unless they are configured with a primary Elastic Network Interface (ENI) or Elastic IP. Since the SAP HANA scale-out topology relies on hostnames resolved via /etc/hosts, the old IPs in that file become stale after the restart, breaking inter-node communication. Updating /etc/hosts with the new private IPs or assigning Elastic IPs to preserve the addresses resolves the issue.

Exam trap

The trap here is that candidates assume stopping and starting instances preserves all network configurations, but AWS explicitly changes private IPs by default unless Elastic IPs or static ENIs are used, which is a key nuance for SAP HANA multi-node setups.

How to eliminate wrong answers

Option B is wrong because stopping and starting an EC2 instance does not detach EBS volumes; volumes persist and are reattached automatically on start. Option C is wrong because security group rules are not reset during a stop/start cycle; they remain intact as they are associated with the ENI, not the instance state. Option D is wrong because a cluster placement group is not removed when instances are stopped and started; it persists as a logical grouping and only enforces placement during launch.

Full explanation →

1674

MCQeasy

An SAP system administrator needs to automate the patching of SAP applications on EC2 instances. Which AWS service should they use?

A.Amazon Inspector

B.AWS Systems Manager Patch Manager

C.AWS OpsWorks

D.AWS Config

AnswerB

Patch Manager automates the process of patching managed nodes.

Why this answer

Option B is correct because AWS Systems Manager Patch Manager automates patching for managed instances. Option A (AWS OpsWorks) is for Chef/Puppet, not specifically for patching. Option C (AWS Config) is for configuration compliance.

Option D (Amazon Inspector) is for vulnerability assessment.

Full explanation →

1675

Multi-Selecteasy

Which TWO AWS services can be used to automate the start and stop of SAP EC2 instances based on a schedule? (Select TWO.)

Select 2 answers

A.AWS Lambda with CloudWatch Events

B.AWS Systems Manager Run Command

C.AWS Instance Scheduler

D.AWS Auto Scaling

E.AWS OpsWorks

AnswersA, C

Can schedule start/stop.

Why this answer

Option B and E are correct. Instance Scheduler is a solution for scheduling. Lambda can be used with CloudWatch Events.

Option A is wrong because Auto Scaling is for scaling. Option C is wrong because OpsWorks is for Chef/Puppet. Option D is wrong because Systems Manager Run Command is for ad-hoc commands.

Full explanation →

1676

MCQhard

An organization is migrating an SAP BusinessObjects system to AWS. The system uses a Sybase ASE database. They need to minimize downtime. Which migration strategy is most appropriate?

A.Use AWS Database Migration Service (DMS) with ongoing replication.

B.Perform an export/import of the database to AWS.

C.Use SAP Landscape Reorganization (LaMa) to automate the migration.

D.Set up HANA System Replication (HSR) to the AWS target.

AnswerC

LaMa supports Sybase ASE and can automate the cutover with minimal downtime.

Why this answer

The best approach is to use SAP Landscape Reorganization (LaMa) which supports Sybase ASE and can automate the migration with minimal downtime. DMS does not support Sybase ASE as a source. HSR is for SAP HANA, not Sybase.

Export/import is manual and leads to longer downtime.

Full explanation →

1677

MCQmedium

An operations team uses this IAM policy for a role assumed by SAP administrators. An administrator tries to stop a production SAP HANA instance in the us-west-2 region but receives an access denied error. What is the cause?

A.The Allow statement's resource ARN specifies us-east-1, but the instance is in us-west-2.

B.The Allow statement only permits stopping instances with the tag Environment=production, and the instance does not have that tag.

C.The Deny statement requires the resource to have a specific tag, which is missing.

D.The Deny statement with a condition on aws:RequestedRegion prevents actions outside us-east-1.

AnswerD

The condition denies all actions if the request is not in us-east-1.

Why this answer

Option A is correct. The Deny statement blocks all actions unless the request is made in us-east-1. Since the administrator is in us-west-2, the condition fails and the deny applies.

Option B is wrong because the Allow statement explicitly allows stop/start on production instances, but the Deny overrides. Option C is wrong because the policy does not require tags for the Deny. Option D is wrong because the condition checks the requested region, not the resource region.

Full explanation →

1678

Multi-Selecteasy

Which TWO options are valid methods to back up an SAP HANA database on AWS? (Choose 2)

Select 2 answers

A.Use Amazon RDS automated backups

B.Use SAP HANA Backint with AWS Backup

C.Use AWS Database Migration Service (DMS)

D.Copy HANA data files to Amazon S3 using AWS CLI

E.Create application-consistent EBS snapshots using pre and post scripts

AnswersB, E

Backint integrates HANA backup with AWS.

Why this answer

Options A and E are correct. A: Backint is a certified method for HANA backup. E: EBS snapshots with application consistency provide a reliable backup.

Option B is wrong because S3 is not directly integrated with HANA backup. Option C is wrong because RDS is not used for HANA. Option D is wrong because DMS is for migration, not backup.

Full explanation →

1679

MCQmedium

A company is migrating its SAP ERP system to AWS and needs to ensure that the SAP license is compliant. The company has a production license for SAP ERP. What should the company do for licensing on AWS?

A.Request a free SAP license for AWS from SAP.

B.Use a subscription-based SAP license from the AWS Marketplace.

C.Purchase a new SAP license for AWS.

D.Use the existing SAP license under the Bring Your Own License (BYOL) model.

AnswerD

BYOL allows using existing licenses on AWS.

Why this answer

Option B is correct because AWS allows bring-your-own-license (BYOL) for SAP, and the company can reuse its existing license. Option A is wrong because SAP does not provide a free license for AWS. Option C is wrong because purchasing a new license is unnecessary.

Option D is wrong because subscription is an option but not required.

Full explanation →

1680

MCQeasy

A company needs to migrate its SAP application server from on-premises to AWS. The server runs on Windows Server 2012 R2 and has a custom SAP kernel. Which AWS service should be used to migrate the server with minimal changes?

A.AWS CloudEndure Migration

B.AWS Database Migration Service (AWS DMS)

C.AWS Application Migration Service (AWS MGN)

D.AWS Server Migration Service (AWS SMS)

AnswerC

AWS MGN supports Windows and custom kernel migrations with minimal changes.

Why this answer

AWS Application Migration Service (AWS MGN) automates the migration of servers from on-premises to AWS, supporting Windows and custom configurations. Option A is wrong because AWS DMS is for databases. Option B is wrong because AWS CloudEndure Migration is now part of AWS MGN.

Option D is wrong because AWS Server Migration Service (SMS) is older and less flexible.

Full explanation →

1681

MCQmedium

An SAP system on AWS experiences intermittent performance issues. CloudWatch metrics show high CPU credit usage on the t3.large EC2 instance hosting the SAP application. The instance is configured as a 'standard' placement group. What is the MOST likely cause and recommended action?

A.The instance size is too small. Move to a larger t3 instance.

B.The burstable instance is exhausting its CPU credits. Change to a non-burstable instance.

C.The placement group is causing network bottlenecks. Move to a cluster placement group.

D.The EBS volume is not provisioned with enough IOPS. Increase the volume size.

AnswerB

T3 instances use CPU credits; sustained high usage depletes them, causing throttling.

Why this answer

The t3.large is a burstable instance that earns CPU credits when idle and spends them when active. SAP applications often have sustained CPU demands that can exhaust the credit balance, causing performance throttling. Switching to a non-burstable instance (e.g., m5.large) provides consistent baseline CPU performance without credit-based limitations.

Exam trap

The trap here is that candidates may assume a larger burstable instance (Option A) solves the problem, but the PAS-C01 exam tests understanding that burstable instances are fundamentally inappropriate for sustained SAP workloads, regardless of size.

How to eliminate wrong answers

Option A is wrong because simply moving to a larger t3 instance (e.g., t3.xlarge) still uses CPU credits and can still exhaust them under sustained load; the root cause is the burstable nature, not the size. Option C is wrong because a standard placement group does not cause network bottlenecks; cluster placement groups offer lower latency but do not address CPU credit exhaustion. Option D is wrong because the issue is high CPU credit usage, not EBS IOPS; CloudWatch metrics for CPU credits are unrelated to EBS volume performance.

Full explanation →

1682

MCQhard

An IAM policy is attached to a user who manages SAP HANA volumes. The policy is shown in the exhibit. What is the effect of this policy?

A.The user can attach and detach any volume regardless of tags.

B.The user can delete any volume.

C.The user can attach and detach volumes that have the tag Environment=production, but cannot delete any volume.

D.The user can attach and detach any volume in the production environment.

AnswerC

D is correct: Allow with condition, Deny for delete.

Why this answer

Option D is correct: The first statement allows AttachVolume and DetachVolume only if the volume has tag Environment=production. The second statement denies DeleteVolume for all volumes. However, the Deny statement is not conditional, so it applies to all volumes.

Option A is incorrect because AttachVolume is allowed with the condition. Option B is incorrect because DeleteVolume is denied for all volumes. Option C is incorrect because the Allow statement has a condition.

Full explanation →

1683

MCQmedium

An SAP system experiences an unplanned failover of the HANA database. The database administrator needs to investigate the root cause. Which AWS service should be used to analyze the timeline of events leading to the failover?

A.AWS CloudTrail

B.Amazon CloudWatch Logs

C.Amazon VPC Flow Logs

D.AWS Config

AnswerA

CloudTrail records API calls and events, enabling root cause analysis of failover.

Why this answer

Option B is correct because AWS CloudTrail records API calls and events, which can help trace actions leading to failover. Option A (CloudWatch Logs) collects logs but not API activity. Option C (VPC Flow Logs) captures network traffic.

Option D (AWS Config) tracks configuration changes but not real-time events.

Full explanation →

1684

MCQeasy

An SAP system uses an NFS share from an EFS file system for transport files. Recently, the transport directory performance has degraded. Which change would most likely improve performance?

A.Increase the burst credit balance by creating more files.

B.Enable Provisioned Throughput on the EFS file system.

C.Migrate the transport directory to Amazon FSx for Lustre.

D.Use Amazon S3 with an NFS mount via AWS Storage Gateway.

AnswerB

Provisioned Throughput ensures consistent IOPS for NFS workloads.

Why this answer

Option B is correct because using Provisioned Throughput on EFS ensures consistent performance regardless of file system size. Option A is wrong because increasing burst credits only helps temporarily. Option C is wrong because FSx for Lustre is for high-performance computing, not general purpose NFS.

Option D is wrong because moving to S3 would require application changes.

Full explanation →

1685

MCQmedium

An SAP system administrator needs to monitor the CPU utilization of an EC2 instance running SAP NetWeaver and set an alarm when it exceeds 90% for 5 minutes. Which AWS service should they use?

A.AWS CloudTrail

B.Amazon CloudWatch

C.AWS Trusted Advisor

D.AWS Config

AnswerB

CloudWatch monitors EC2 metrics and can trigger SNS notifications when thresholds are breached.

Why this answer

Option A is correct because CloudWatch can monitor EC2 metrics and trigger alarms based on CPU utilization. Option B is wrong because CloudTrail is for auditing API calls, not monitoring. Option C is wrong because Config is for resource configuration tracking.

Option D is wrong because Trusted Advisor provides best practice checks, not monitoring.

Full explanation →

1686

MCQhard

An SAP administrator runs the AWS CLI command shown in the exhibit to check the status of a production HANA instance. The output shows the instance is running in us-east-1a. However, the SAP application team reports that the HANA database is not responding. What should the administrator check next to diagnose the issue?

A.The EBS volumes are detached from the instance

B.The instance state is 'running' so no issue with the instance

C.The HANA database service is not running on the instance

D.The security group does not allow inbound traffic to the database port

AnswerC

The administrator should verify the HANA process is running.

Why this answer

The CLI output shows the instance is running, but does not indicate whether the HANA database service is actually running or healthy. The administrator should check the HANA database status by connecting to the instance or using SAP HANA Studio. Option D is correct.

The instance is running (A is wrong). The EBS volumes could be detached but that is less likely. The security group rules are not checked by this command.

Full explanation →

1687

MCQhard

An SAP system on AWS experiences intermittent connectivity issues between the SAP Central Services (SCS) instance and the application servers. The SCS instance is in a private subnet in us-east-1a, and the application servers are spread across us-east-1a and us-east-1b. Security groups allow traffic on all required ports. What is the MOST likely cause of the intermittent connectivity?

A.The route tables do not have a route for the SCS subnet.

B.The network ACLs are blocking the traffic.

C.The Internet Gateway is misconfigured.

D.The VPC peering connection is not established correctly.

AnswerB

Network ACLs are stateless and can cause intermittent issues if inbound rules allow but outbound rules deny return traffic.

Why this answer

Network ACLs are stateless and must explicitly allow both inbound and outbound traffic on ephemeral ports. If the outbound rules for the SCS subnet's NACL do not allow return traffic on high ports (e.g., 1024–65535), or if the application servers' subnet NACL blocks inbound traffic from the SCS instance, connections will intermittently fail. Security groups are stateful and automatically allow return traffic, but NACLs are not, making them the likely culprit for intermittent connectivity across different Availability Zones.

Exam trap

The trap here is that candidates assume security groups are the only firewall layer and forget that network ACLs are stateless and require explicit rules for return traffic, especially when instances span multiple Availability Zones where subnet-level ACLs differ.

How to eliminate wrong answers

Option A is wrong because route tables control traffic flow between subnets and the internet, but the SCS and application servers are in the same VPC; as long as the local route (10.0.0.0/16) exists, which it does by default, no additional route is needed for intra-VPC communication. Option C is wrong because the Internet Gateway is only involved in traffic destined for the internet; the SCS instance is in a private subnet and does not use an IGW for internal VPC traffic. Option D is wrong because VPC peering is used for communication between different VPCs; all instances in this scenario are within the same VPC, so no peering connection is involved.

Full explanation →

1688

MCQhard

An SAP Basis administrator is migrating an SAP ERP system from an on-premises environment to AWS. The system uses an SAP HANA database. The migration must have minimal downtime. The administrator plans to use SAP HANA System Replication (HSR) to synchronize data to an AWS HANA instance. However, the network latency between on-premises and AWS is consistently around 50 ms. What should the administrator do to ensure that HSR can maintain synchronization without impacting source system performance?

A.Use synchronous replication with a lower sync timeout setting to avoid blocking.

B.Configure HSR in asynchronous mode with full sync disabled to avoid affecting source transaction performance.

C.Keep synchronous replication but increase the replication timeout value in the HANA global.ini file.

D.Enable HANA delta merge operations during replication to reduce the amount of data transferred.

AnswerB

Asynchronous replication does not wait for acknowledgment, so source performance is unaffected; suitable for high-latency links.

Why this answer

Option D is correct because for high latency links, asynchronous replication is recommended to avoid performance impact on the source. Option A is wrong because increasing the HSR timeout does not solve performance impact. Option B is wrong because synchronous replication with high latency will cause delays.

Option C is wrong because HSR does not support delta merge operations to reduce data transfer.

Full explanation →

1689

MCQhard

A company runs SAP Business Suite on AWS. They plan to use the SAP Landscape Management (LaMa) connector to automate system copy and relocation. What is a prerequisite for using the AWS LaMa connector?

A.An EC2 Auto Scaling group configured for the SAP application tier

B.AWS Systems Manager managed instances for all SAP servers

C.An IAM role with permissions for EC2, EBS, and CloudFormation actions

D.SSH keys for all SAP instances to allow LaMa to connect

AnswerC

LaMa needs IAM permissions to provision EC2, attach EBS, and use CloudFormation for automation.

Why this answer

Option C is correct. The AWS LaMa connector requires an IAM role with specific permissions for LaMa to manage EC2 instances and storage. Option A is wrong because LaMa does not require EC2 Auto Scaling.

Option B is wrong because LaMa uses AWS APIs, not SSH keys. Option D is wrong because LaMa does not use AWS Systems Manager for this purpose.

Full explanation →

1690

MCQmedium

An SAP administrator is migrating an SAP Business Suite system from on-premises to AWS. The system uses an Oracle database that is 2 TB in size. The bandwidth between the on-premises data center and AWS is limited to 100 Mbps. The migration must be completed within a weekend (48 hours). The administrator decides to use AWS DMS for ongoing replication after an initial full load. However, the initial full load takes too long. What should the administrator do to accelerate the initial full load?

A.Disable encryption on the database backup to reduce transfer overhead.

B.Increase the size of the DMS replication instance to the largest available.

C.Use Amazon S3 Transfer Acceleration to speed up the upload.

D.Use AWS Snowball Edge to physically transfer the database backup to AWS, then restore and use DMS for ongoing replication.

AnswerD

Snowball bypasses network limitations.

Why this answer

Option A is correct because using AWS Snowball Edge to transfer the database backup to AWS bypasses the network bottleneck. Option B is wrong because increasing instance size does not improve network speed. Option C is wrong because disabling encryption does not significantly speed up transfer.

Option D is wrong because S3 Transfer Acceleration improves speed but may still be limited by 100 Mbps.

Full explanation →

1691

MCQmedium

Your organization runs SAP S/4HANA on AWS. The system is critical and must have high availability. The architecture includes two SAP application servers behind an Application Load Balancer, and the HANA database uses replication to a standby in another Availability Zone. During a recent test of a failure scenario, you noticed that when the standby HANA instance takes over, the application servers cannot connect because the database hostname changes. What is the best solution to ensure application servers can connect to the database without manual intervention after a failover?

A.Configure the application servers with both database IP addresses and retry logic

B.Use Amazon Route 53 with a weighted record that points to the primary and standby instances, and use health checks to automatically fail over

C.Place the database behind a Network Load Balancer

D.Update the application server configuration to use the standby hostname as a fallback

AnswerB

Route 53 health checks can detect primary failure and route to the standby.

Why this answer

Using an internal Route 53 record with a health check that points to the active database instance allows automatic DNS update on failover. Option C is correct.

Full explanation →

1692

MCQeasy

A company needs to track API calls made to create, modify, or delete SAP-related resources in AWS. Which service should be used?

A.AWS CloudTrail

B.AWS Config

C.VPC Flow Logs

D.Amazon CloudWatch

AnswerA

CloudTrail logs all API activity.

Why this answer

Option A is correct because CloudTrail records all API calls for auditing. Option B (CloudWatch) monitors metrics and logs. Option C (Config) tracks configuration changes.

Option D (VPC Flow Logs) captures network traffic.

Full explanation →

1693

MCQmedium

Refer to the exhibit. An SAP HANA database backup fails with 'Cannot allocate memory'. The EC2 instance type is r5.2xlarge with 64 GB RAM. What is the MOST likely cause?

A.The HANA backup process requires more memory than available

B.The instance does not have enough swap space

C.The EBS volume is too small for the backup

D.The network bandwidth to the backup target is insufficient

AnswerA

Backup operations can require significant memory; insufficient allocation leads to this error.

Why this answer

Option D is correct because HANA backup to file system uses memory for compression and buffering; insufficient memory allocation for backup can cause this error. Option A is incorrect because EBS volume size does not directly cause memory allocation errors. Option B is incorrect because swap space is for memory overflow, not primary cause.

Option C is incorrect because network bandwidth does not cause memory errors.

Full explanation →

1694

MCQhard

A company is migrating its SAP environment to AWS and wants to use SAP HANA as a Service on AWS (HANA database on AWS). The SAP application tier will run on EC2 instances behind an Application Load Balancer. The company requires high availability for the database with automatic failover in case of an AZ failure. Which architecture should the company implement?

A.Configure HANA replication to Amazon S3 for point-in-time recovery.

B.Set up HANA System Replication between two EC2 instances in different AZs with automatic failover.

C.Use HANA System Replication with a synchronous secondary in the same AZ.

D.Deploy a single HANA database on a large EC2 instance in one AZ with regular backups to S3.

AnswerB

HANA System Replication across AZs provides high availability and automatic failover.

Why this answer

Option B is correct because HANA System Replication with automatic failover in a multi-AZ setup provides high availability; using a secondary instance in a different AZ allows failover. Option A is wrong because a single AZ is not resilient. Option C is wrong because a standby instance in the same AZ does not protect against AZ failure.

Option D is wrong because HANA replication to S3 is not supported for automatic failover.

Full explanation →

1695

Multi-Selectmedium

Which TWO of the following are required components for an SAP HANA scale-out deployment on AWS that uses shared storage for /hana/shared? (Choose two.)

Select 2 answers

A.Amazon EFS file system

B.EC2 instance store

C.Amazon S3 bucket

D.Amazon FSx for NetApp ONTAP

E.Amazon EBS volume

AnswersA, D

EFS provides NFS shared storage.

Why this answer

For scale-out with shared /hana/shared, you need a file system that supports NFS, such as Amazon EFS or a custom NFS server. Option A (EFS) and Option B (FSx for ONTAP) both provide NFS. Option C (EBS) is block storage, not shared.

Option D (Instance store) is ephemeral. Option E (S3) is object storage, not a file system.

Full explanation →

1696

MCQeasy

Refer to the exhibit. An IAM policy is attached to an IAM role used by an EC2 instance. The EC2 instance has an Elastic IP address of 203.0.113.5 and is running in a VPC with CIDR 10.0.0.0/16. When the application on the instance tries to upload an object to the S3 bucket 'my-bucket', it receives an Access Denied error. What is the MOST likely cause?

A.The policy does not allow the s3:PutObject action.

B.The resource ARN is incorrect; it should be arn:aws:s3:::my-bucket without the asterisk.

C.The policy is missing a Deny statement for other IP addresses.

D.The condition checks the source IP address, but the EC2 instance uses a private IP address within the VPC when communicating with S3 via a VPC endpoint.

AnswerD

When using a VPC endpoint, the source IP is the private IP of the instance, which is within the allowed range, but the condition is evaluated against the public IP? Actually, the condition is on the source IP, which for traffic through a VPC endpoint is the private IP. The private IP (10.x.x.x) matches the condition. However, if the instance is communicating via the internet, the source IP would be the Elastic IP, which is not in the allowed range. But the error suggests the condition is blocking. The most likely cause is that the condition is checking the public IP, but the instance is using a VPC endpoint? Actually, the correct answer is D: the condition checks the source IP, but if using a VPC endpoint, the source IP is the private IP, which is within range, so it would work. The error occurs if the instance is communicating via the internet and the Elastic IP is not in the allowed range. Since the condition specifies 10.0.0.0/16, which is the VPC CIDR, it expects the private IP. If the instance uses a VPC endpoint, it works. If not, it fails. The exhibit does not specify a VPC endpoint, so likely the instance is using the internet, and the source IP is the Elastic IP, which is not in the allowed range. So answer D is correct because the condition is checking the source IP, but the instance's public IP is not in the allowed range. The explanation in the JSON is slightly off but the key idea is correct.

Why this answer

When an EC2 instance communicates with S3 via a VPC endpoint, traffic uses private IP addresses from the VPC CIDR range (10.0.0.0/16), not the instance's Elastic IP (203.0.113.5). The IAM policy condition `aws:SourceIp` checks the source IP of the request, but because the traffic goes through the VPC endpoint, the source IP seen by S3 is a private IP, not the Elastic IP. This causes the condition to fail, resulting in an Access Denied error.

Exam trap

The trap here is that candidates assume the Elastic IP is the source IP for all outbound traffic, but VPC endpoints use private IPs, causing the `aws:SourceIp` condition to fail silently.

How to eliminate wrong answers

Option A is wrong because the policy explicitly allows `s3:PutObject` under the `Action` element, so the action is permitted. Option B is wrong because the resource ARN `arn:aws:s3:::my-bucket/*` is correct for granting access to objects within the bucket; omitting the asterisk would restrict access to the bucket itself, not its objects. Option C is wrong because the policy does not need a Deny statement for other IP addresses; the existing Allow with a condition already restricts access to only the specified IP, and adding a Deny would be redundant and could cause unintended conflicts.

Full explanation →

1697

MCQeasy

A company wants to migrate its on-premises SAP system to AWS. The system consists of an SAP NetWeaver application server and an SAP HANA database. The database requires ultra-low latency storage. Which AWS storage solution is most suitable for the SAP HANA data volume?

A.Amazon EBS io2 Block Express volumes

B.EC2 Instance Store

C.Amazon S3

D.Amazon EFS file system

AnswerA

Provides consistent low latency and high IOPS for SAP HANA.

Why this answer

Option A is correct because io2 Block Express volumes are designed for high-performance databases like SAP HANA, offering sub-millisecond latency and high IOPS. Option B is incorrect because EFS is a shared file system, not block storage. Option C is incorrect because S3 is object storage with higher latency.

Option D is incorrect because Instance Store is ephemeral, which is not suitable for persistent database data.

Full explanation →

1698

Drag & Dropmedium

Drag and drop the steps to configure an SAP S/4HANA high-availability cluster using AWS Resilience Hub into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

Why this order

Resilience Hub helps assess and improve HA by defining stack, assessing policy, implementing changes, testing, and monitoring.

Full explanation →

1699

MCQeasy

A company is migrating a legacy on-premises Oracle database to Amazon RDS for Oracle. They need to minimize downtime. Which AWS service should they use for ongoing replication during the migration?

A.AWS Schema Conversion Tool (SCT)

B.AWS Server Migration Service (SMS)

C.AWS Database Migration Service (DMS)

D.AWS DataSync

AnswerC

DMS supports ongoing replication with change data capture for minimal downtime.

Why this answer

AWS Database Migration Service (DMS) with ongoing replication (change data capture) allows near-zero downtime migration. Option A is wrong because AWS SMS is for server migration. Option B is wrong because SCT is a schema conversion tool, not replication.

Option D is wrong because AWS DataSync is for file/object storage, not database replication.

Full explanation →

1700

MCQmedium

A company is running a critical web application on EC2 instances behind an Application Load Balancer. During a recent deployment, a new version of the application was released, and within minutes, the error rate spiked. The operations team rolled back the deployment, but the error rate remained high. The team suspects that the ALB is still routing traffic to unhealthy instances. Which step should the team take to immediately stop routing traffic to the problematic instances?

A.Modify the ALB listener rules to point to a different target group.

B.Modify the health check interval to 5 seconds and the unhealthy threshold to 2.

C.Stop the EC2 instances from the AWS Management Console.

D.Deregister the instances from the target group.

AnswerD

Deregistering immediately stops routing traffic to those instances.

Why this answer

Option D is correct because deregistering the problematic EC2 instances from the target group immediately stops the Application Load Balancer from routing any new traffic to them. The ALB performs health checks on registered targets, but if an instance is unhealthy, it still remains in the target group and can receive traffic if the health check logic is misconfigured or if the instance is in a 'draining' state. Deregistration forces the ALB to complete any in-flight requests and then remove the instance from the routing table, providing an immediate stop to traffic.

Exam trap

The trap here is that candidates often confuse 'health check failure' with 'immediate traffic removal,' not realizing that health checks only update the instance's status but do not stop traffic until the instance is explicitly deregistered or the health check threshold is met, which introduces a delay.

How to eliminate wrong answers

Option A is wrong because modifying the ALB listener rules to point to a different target group does not stop traffic to the problematic instances; it only changes the routing target for new requests, but the original target group and its unhealthy instances remain active and could still receive traffic if the listener rules are not fully replaced or if there are overlapping rules. Option B is wrong because modifying the health check interval to 5 seconds and the unhealthy threshold to 2 would only accelerate the detection of unhealthy instances, but it does not immediately stop traffic; the ALB would still route requests to instances until they are marked unhealthy, which could take up to 10 seconds (2 checks × 5 seconds), and during that time errors persist. Option C is wrong because stopping the EC2 instances from the AWS Management Console will terminate the instances, but this action is disruptive and does not leverage the ALB's built-in traffic control; it also does not gracefully drain connections, potentially causing dropped requests, and it is not the recommended method for removing instances from load balancing.

Full explanation →

1701

MCQhard

A systems administrator is troubleshooting an SAP HANA database that runs on an EC2 instance. The exhibit shows the block device mappings of the EC2 instance. The administrator needs to ensure that the data volumes (/dev/sdf and /dev/sdg) are not accidentally terminated when the instance is terminated. However, the administrator also wants to take a nightly snapshot of these volumes using AWS Backup. Which of the following is a potential issue with the current configuration?

A.The volume /dev/sdf has DeleteOnTermination set to false, which will cause data persistence issues.

B.The device names /dev/sdf and /dev/sdg are reserved for NVMe instance storage and should not be used for EBS.

C.The volumes are attached to a running instance, which prevents snapshot creation.

D.The volumes are not tagged, so AWS Backup may not automatically include them in backup plans.

AnswerD

AWS Backup typically uses tags to identify resources.

Why this answer

Option D is correct because AWS Backup uses resource tags to identify which resources to include in backup plans. If the volumes /dev/sdf and /dev/sdg are not tagged with the appropriate key-value pairs that match the backup plan's tag-based selection criteria, AWS Backup will not automatically discover and include them in nightly snapshots. This can lead to missing backups for critical SAP HANA data volumes.

Exam trap

The trap here is that candidates may overlook AWS Backup's tag-based resource selection and assume that all attached volumes are automatically backed up, or they may confuse DeleteOnTermination behavior with backup inclusion logic.

How to eliminate wrong answers

Option A is wrong because setting DeleteOnTermination to false is the correct configuration to prevent accidental termination of the volumes when the EC2 instance is terminated; it does not cause data persistence issues—it ensures the volumes persist independently. Option B is wrong because /dev/sdf and /dev/sdg are not reserved for NVMe instance storage; NVMe instance store volumes use device names like /dev/nvme0n1, and EBS volumes can be attached using /dev/sd* or /dev/xvd* names. Option C is wrong because EBS volumes can be snapshotted while attached to a running instance; AWS Backup and the EBS Snapshot API support creating snapshots of in-use volumes, though a brief filesystem freeze is recommended for consistency.

Full explanation →

1702

MCQhard

An SAP system administrator notices that an SAP HANA database on AWS is experiencing high memory usage and slow query performance. The administrator wants to identify the root cause. Which Amazon CloudWatch metric should be analyzed first?

A.SwapUsage

B.NetworkIn

C.CPUUtilization

D.DiskQueueDepth

AnswerA

High swap usage indicates memory pressure.

Why this answer

Option C is correct because high swap usage indicates memory pressure. Option A is wrong because CPU utilization may not directly indicate memory issues. Option B is wrong because network throughput is unrelated.

Option D is wrong because disk queue depth is for I/O, not memory.

Full explanation →

1703

MCQmedium

A company is migrating its SAP system to AWS and wants to use a high-availability setup for the database layer. Which AWS service should the company use to achieve automatic failover for SAP HANA?

A.Amazon CloudFront

B.Elastic Load Balancing (ELB)

C.Amazon Route 53 with health checks

D.AWS Global Accelerator

AnswerC

Route 53 can route traffic to the standby HANA instance if the primary fails.

Why this answer

Option A is correct because Amazon Route 53 can be used with health checks to automate DNS failover for SAP HANA. Option B is wrong because ELB is for load balancing traffic, not for database failover. Option C is wrong because AWS Global Accelerator improves performance, not failover.

Option D is wrong because Amazon CloudFront is a CDN.

Full explanation →

1704

MCQmedium

During a migration of an SAP system, the team notices that the source system uses a custom kernel parameter that is not supported on the target Amazon EC2 instance. What should the migration team do?

A.Disable the kernel parameter in the source before migration.

B.Change the EC2 instance type to one that supports the parameter.

C.Consult the SAP on AWS documentation for equivalent parameter settings.

D.Keep the same kernel parameter and proceed with the migration.

AnswerC

AWS documentation provides guidance for SAP kernel parameters.

Why this answer

Option A is correct because SAP provides recommendations for kernel parameters on AWS. Option B is wrong because it ignores the issue. Option C is wrong because changing the instance type may not solve kernel parameter limitations.

Option D is wrong because disabling the parameter could cause issues.

Full explanation →

1705

MCQeasy

An organization is migrating a large on-premises data lake (500 TB) to Amazon S3. The migration must complete within 2 weeks. The network bandwidth is 1 Gbps. Which AWS service should be used?

A.AWS Direct Connect with a 10 Gbps connection

B.AWS Database Migration Service (DMS)

C.Amazon S3 Transfer Acceleration

D.AWS Snowball Edge

AnswerD

Snowball Edge provides physical devices that can transfer large volumes quickly.

Why this answer

Option A is correct because AWS Snowball Edge can transfer 500 TB within 2 weeks given bandwidth limitations. Option B is incorrect because DMS is for databases. Option C is incorrect because Direct Connect takes longer to provision.

Option D is incorrect because S3 Transfer Acceleration helps with speed but 1 Gbps is too slow for 500 TB in 2 weeks.

Full explanation →

1706

MCQhard

A company runs SAP on AWS with a distributed system: an SAP Central Services (ASCS) instance, a primary application server (PAS), and additional dialog instances (DI). All instances are in a single Availability Zone. The company wants to implement high availability for the ASCS instance using a shared filesystem for the /sapmnt directory. The ASCS instance uses a single EBS volume for /sapmnt. The operations team plans to use a Network File System (NFS) solution to share /sapmnt between instances. Which approach should the team use to achieve a highly available shared filesystem?

A.Use Amazon FSx for Windows File Server to host the /sapmnt share.

B.Use an instance store volume on the ASCS instance and share it via NFS.

C.Create a secondary EBS volume and attach it to both the ASCS and PAS instances, then use a cluster-aware filesystem like OCFS2.

D.Deploy Amazon EFS and mount it on all instances as /sapmnt.

AnswerD

EFS is a managed NFS service that is highly available and persistent.

Why this answer

Option C is correct because using Amazon EFS provides a managed NFS filesystem that is highly available across AZs. Option A is wrong because attaching the same EBS volume to multiple instances is not supported without cluster filesystem. Option B is wrong because instance store is ephemeral.

Option D is wrong because FSx for Windows is for Windows, not Linux.

Full explanation →

1707

MCQmedium

An SAP application is experiencing high latency when writing to an Amazon EBS volume. The volume is a gp2 type attached to an m5.4xlarge instance. Which change would improve write performance?

A.Increase the size of the gp2 volume to 1 TB.

B.Change the volume type to st1.

C.Enable EBS optimization on the EC2 instance.

D.Change the volume type to io2 and provision sufficient IOPS.

AnswerD

io2 volumes provide consistent low-latency performance.

Why this answer

Option C is correct: Changing to an io2 volume with provisioned IOPS provides consistent low latency. Option A is wrong because enabling EBS optimization on m5 instances is already enabled by default. Option B is wrong because increasing volume size increases baseline IOPS for gp2, but not as effective as io2.

Option D is wrong because changing to st1 is for throughput-intensive workloads, not low latency.

Full explanation →

1708

MCQmedium

A company is planning to migrate its SAP landscape to AWS. The landscape includes development, quality assurance, and production systems. The company wants to minimize costs by reusing resources across environments. Which AWS feature should be used to enforce resource tagging and compliance?

A.AWS CloudFormation templates with required tags.

B.AWS Resource Access Manager to share resources.

C.AWS Config rules to enforce tagging.

D.AWS Service Catalog with tag options.

AnswerD

Service Catalog enforces tagging and compliance on provisioned products.

Why this answer

Option D is correct because AWS Service Catalog allows organizations to create and manage a catalog of approved IT services, with tagging and compliance policies enforced. Option A is incorrect because AWS Config is for monitoring resource configuration, not for provisioning. Option B is incorrect because AWS Resource Access Manager is for sharing resources, not for governance.

Option C is incorrect because AWS CloudFormation is a provisioning tool but does not enforce tagging policies on its own.

Full explanation →

1709

MCQeasy

Your company runs an SAP ERP system on AWS. The SAP application servers are in an Auto Scaling group across two Availability Zones. The SAP HANA database runs on a single EC2 instance with multiple EBS volumes. Recently, the database instance experienced a failure due to an underlying hardware issue, and you had to recover from an EBS snapshot. The recovery took longer than expected, and management wants to reduce the recovery time objective (RTO). What should you do to achieve a lower RTO for the HANA database?

A.Create more frequent EBS snapshots and store them in Amazon S3

B.Increase the size of the EBS volumes and use Provisioned IOPS

C.Use an Auto Scaling group for the database instance

D.Set up SAP HANA System Replication to a secondary instance in a different Availability Zone

AnswerD

System replication provides a hot standby that can be failed over quickly.

Why this answer

A standby HANA instance in a different AZ with replication allows for faster failover, reducing RTO. Option B is the correct action.

Full explanation →

1710

MCQeasy

An SAP HANA database is running on an r5.8xlarge instance. The administrator notices high swap usage and suspects memory pressure. Which AWS metric should be monitored to confirm memory utilization?

A.AWS/Lambda namespace metrics

B.CWAgent namespace metrics

C.EC2 namespace metrics

D.EBS namespace metrics

AnswerB

The CloudWatch agent publishes memory metrics under the CWAgent namespace.

Why this answer

The CWAgent namespace includes memory metrics if the CloudWatch agent is installed and configured. Option A is wrong because the EC2 namespace does not include memory metrics by default. Option B is wrong because EBS metrics are for block storage.

Option D is wrong because Lambda metrics are irrelevant.

Full explanation →

1711

MCQhard

A company is migrating a SAP HANA database to AWS. The database is 10 TB and requires a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 2 hours. Which backup strategy should be used?

A.Use AWS DMS to replicate the HANA database to a standby instance.

B.Configure SAP HANA Backint agent to back up directly to Amazon S3 every 15 minutes.

C.Schedule SAP HANA backups to an EBS volume and copy to S3.

D.Use AWS Backup with EBS snapshots every hour.

AnswerB

Backint to S3 supports frequent backups and fast restore.

Why this answer

Option C is correct because SAP HANA backups to Amazon S3 using the Backint agent provide a cost-effective and reliable backup with low RPO. Option A is wrong because EBS snapshots alone cannot achieve 15-minute RPO due to snapshot frequency limits. Option B is wrong because manual backups to EBS volumes are not automated and may not meet RPO.

Option D is wrong because DMS is for migration, not backup.

Full explanation →

1712

Multi-Selecthard

An SAP administrator is configuring high availability for SAP HANA using HANA system replication (HSR) across multiple Availability Zones. The administrator must ensure that the replication traffic is encrypted and uses the most efficient network path. Which TWO configurations meet these requirements? (Choose TWO.)

Select 2 answers

A.Enable SAP HANA system replication with TLS/SSL encryption.

B.Store replication data in Amazon S3 and have the secondary instance pull it.

C.Use AWS Direct Connect to connect the Availability Zones.

D.Use VPC peering between the subnets in different Availability Zones.

E.Configure a VPN connection between the Availability Zones.

AnswersA, D

HSR supports TLS encryption for secure replication traffic.

Why this answer

Options A and C are correct. Option A (VPC peering) allows direct connectivity between AZs within the same region. Option C (TLS/SSL encryption) ensures encryption of replication traffic.

Option B (VPN) adds overhead and is not needed. Option D (Direct Connect) is for on-premises connectivity. Option E (S3) is not involved.

Full explanation →

1713

MCQhard

A company is migrating their SAP HANA database to AWS. The on-premises HANA system is 10 TB and runs on a physical server. They need to minimize the migration time and cannot afford more than 4 hours of downtime. The network bandwidth is limited to 500 Mbps. They decide to use AWS Snowball Edge to transfer the data. After copying the data to Snowball, they ship it to AWS. However, upon receiving the data, they find that the checksum verification fails. What should they do to resolve this issue and complete the migration within the downtime window?

A.Re-copy the data to a new Snowball and reship

B.Use AWS DMS over the existing network to transfer the data incrementally

C.Contact AWS Support to perform a remote data verification and import

D.Order an AWS Direct Connect connection to increase bandwidth

AnswerC

AWS Support can help recover data without reshipping.

Why this answer

Option D is correct because AWS Support can perform a remote data verification and re-import if needed, potentially avoiding a reship. Option A is wrong because re-copying and reshipping would exceed the downtime window. Option B is wrong because DMS over 500 Mbps would take too long.

Option C is wrong because Direct Connect setup takes weeks.

Full explanation →

1714

Multi-Selecthard

An SAP administrator is troubleshooting a performance issue where the SAP application is slow. The administrator suspects that the EBS volumes are not meeting performance requirements. Which THREE metrics should be examined in Amazon CloudWatch to confirm this? (Choose THREE.)

Select 3 answers

A.VolumeQueueLength

B.VolumeReadBytes

C.VolumeWriteBytes

D.CPUCreditBalance

E.BurstBalance

AnswersA, B, C

Indicates pending I/O requests.

Why this answer

Options B, C, and D are correct. VolumeReadBytes and VolumeWriteBytes measure throughput, and VolumeQueueLength indicates pending I/O requests. Option A is not correct because BurstBalance is for t2/t3 instances, not EBS.

Option E is not correct because CPUCreditBalance is for CPU credits.

Full explanation →

1715

MCQmedium

A company is migrating a legacy .NET application to AWS. The application uses Windows Authentication and relies on Active Directory for user authentication. The company wants to minimize changes to the application code. Which AWS service should be used to integrate Active Directory with the migrated application?

A.AWS Directory Service for Microsoft Active Directory

B.Amazon Cognito

C.AD Connector

D.Simple AD

AnswerA

Provides full managed AD with native support for Windows Authentication.

Why this answer

AWS Directory Service for Microsoft Active Directory is the correct choice because it provides a fully managed Microsoft Active Directory in the AWS cloud, which natively supports Windows Authentication and Kerberos-based authentication without requiring any code changes. This service allows the migrated .NET application to seamlessly integrate with the existing on-premises Active Directory through a trust relationship or by extending the directory directly into AWS, preserving the application's authentication logic.

Exam trap

The trap here is that candidates often confuse AD Connector with a full Active Directory service, not realizing that AD Connector only proxies LDAP queries and does not support Windows Authentication or Kerberos, which are essential for legacy .NET applications using integrated security.

How to eliminate wrong answers

Option B (Amazon Cognito) is wrong because it is designed for consumer identity and access management (CIAM) using standards like OAuth 2.0, SAML, and OpenID Connect, and does not support Windows Authentication or Kerberos protocols natively, requiring significant code changes to the .NET application. Option C (AD Connector) is wrong because it acts as a proxy to redirect directory requests to an on-premises Active Directory without storing any directory data locally, but it does not support features like Group Policy or Kerberos authentication for the application, and it requires the application to be configured to use LDAP over SSL, which may necessitate code modifications. Option D (Simple AD) is wrong because it is a standalone, Samba-based Active Directory compatible service that does not support Windows Authentication or Kerberos in the same way as native Microsoft AD, and it lacks features like trust relationships with on-premises AD, making it unsuitable for seamless integration without code changes.

Full explanation →

1716

Multi-Selecteasy

Which TWO AWS services can be used to monitor the performance of an SAP system running on EC2?

Select 2 answers

A.AWS CloudTrail

B.AWS Shield

C.Amazon CloudWatch

D.Amazon CloudWatch Logs

E.AWS Config

AnswersC, D

CloudWatch monitors EC2 metrics and can trigger alarms.

Why this answer

Option A is correct because CloudWatch provides monitoring for EC2. Option B is correct because Amazon CloudWatch Logs can collect application logs. Option C is wrong because AWS Config is for configuration compliance.

Option D is wrong because AWS CloudTrail is for API auditing. Option E is wrong because AWS Shield is for DDoS protection.

Full explanation →

1717

MCQmedium

A company is running SAP S/4HANA on AWS. The application team reports that batch jobs are failing intermittently with database connection timeouts. The SAP system uses a single Availability Zone deployment. Which design change should the architect recommend to improve database availability?

A.Use Amazon EBS Multi-Attach to attach the same volume to multiple EC2 instances

B.Implement an Amazon RDS for SAP HANA read replica

C.Configure SAP HANA System Replication across two Availability Zones

D.Scale up the SAP HANA instance to a larger instance type

AnswerC

SAP HANA System Replication with automatic failover ensures high availability across AZs.

Why this answer

SAP HANA System Replication (HSR) across two Availability Zones provides synchronous or asynchronous data replication at the database level, ensuring that if the primary HANA instance fails, the secondary can take over with minimal downtime. This directly addresses the intermittent database connection timeouts by eliminating the single point of failure in a single-AZ deployment, as the application can failover to the replica without manual intervention.

Exam trap

AWS often tests the misconception that scaling up or adding storage redundancy (like Multi-Attach) solves database availability issues, but the key is that SAP HANA requires database-level replication (HSR) to handle AZ failures, not just infrastructure-level changes.

How to eliminate wrong answers

Option A is wrong because Amazon EBS Multi-Attach allows multiple EC2 instances to attach to the same EBS volume, but SAP HANA does not support shared storage for its data and log volumes; HANA requires exclusive access to its storage for consistency and performance, and Multi-Attach does not provide database-level replication or automatic failover. Option B is wrong because Amazon RDS for SAP HANA does not exist; RDS supports several database engines (e.g., MySQL, PostgreSQL) but not SAP HANA, and read replicas are used for read scaling, not for high availability of a primary database. Option D is wrong because scaling up the instance type increases compute and memory capacity but does not eliminate the single point of failure; if the underlying host or Availability Zone fails, the database still becomes unavailable, and timeouts will persist.

Full explanation →

1718

Multi-Selecthard

A company runs SAP HANA on EC2 with a Multi-AZ deployment. The database uses EBS volumes for /hana/data and /hana/log. The operations team needs to implement a disaster recovery strategy with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. Which THREE actions should be taken? (Choose THREE.)

Select 3 answers

A.Take periodic EBS snapshots of the data and log volumes

B.Use AWS CloudFormation to automate the creation of DR infrastructure

C.Migrate the database to Amazon RDS for SAP HANA

D.Configure SAP HANA system replication to a secondary instance in a different AWS Region

E.Use AWS Database Migration Service (DMS) for continuous replication

AnswersA, B, D

Snapshots provide additional recovery points.

Why this answer

Options A, C, and D are correct: Use HANA system replication for near-sync replication, EBS snapshots for additional backups, and CloudFormation for automated DR infrastructure. Option B (DMS) is for database migration, not replication. Option E (RDS) is not applicable for EC2-based HANA.

Full explanation →

1719

Multi-Selecteasy

An SAP Basis administrator needs to apply security patches to the operating system of SAP EC2 instances. The administrator wants to use AWS Systems Manager Patch Manager. Which THREE steps are required to set up patching? (Choose THREE.)

Select 3 answers

A.Create a patch baseline in AWS Systems Manager.

B.Create an AWS Lambda function to invoke the patching process.

C.Install the AWS Systems Manager Agent (SSM Agent) on each EC2 instance.

D.Configure Amazon CloudWatch Logs to store patch logs.

E.Associate the instances with a maintenance window.

AnswersA, C, E

The patch baseline defines approved and rejected patches.

Why this answer

A, B, and D are correct. Installing SSM Agent on instances is required. Creating a patch baseline defines which patches to apply.

Associating the instances with a maintenance window schedules the patching. C is wrong because CloudWatch Logs are not required for patching. E is wrong because Lambda is not needed.

Full explanation →

1720

MCQmedium

The above IAM policy is attached to a role named CrossAccountBackupRole in account 123456789012. What does this policy enable?

A.The SAPAdminRole directly receives permissions to access S3.

B.The SAPAdminRole can assume the CrossAccountBackupRole.

C.The CrossAccountBackupRole can be assumed by any IAM user.

D.The SAPAdminRole can list S3 buckets in account 123456789012.

AnswerB

The policy allows sts:AssumeRole action for the specified principal.

Why this answer

Option D is correct. This is a trust policy that allows the SAPAdminRole to assume the CrossAccountBackupRole. Option A is wrong because it's not a permissions policy for S3.

Option B is wrong because it allows cross-account access, not blocking. Option C is wrong because it does not grant direct S3 access; only allows sts:AssumeRole.

Full explanation →

1721

MCQhard

An SAP ERP system on AWS is experiencing performance degradation. A review shows that the Amazon EBS volumes used for SAP transport directories are gp2 with high throughput but high latency. The SAP team needs improved I/O performance without changing the total storage capacity. Which action should be taken?

A.Change the volume type to gp3 and increase baseline IOPS.

B.Move the transport directories to instance store volumes.

C.Enable EBS throughput optimization on the EC2 instance.

D.Change the volume type to io2 Block Express with provisioned IOPS.

AnswerD

io2 provides consistent low latency and high IOPS, ideal for SAP transport directories.

Why this answer

Option B is correct because io2 volumes provide consistent low latency. Option A is wrong because gp3 may not be sufficient. Option C is wrong because throughput optimization does not reduce latency.

Option D is wrong because instance store is ephemeral.

Full explanation →

1722

Multi-Selecteasy

A company is planning to migrate their SAP HANA database to AWS. Which TWO of the following are valid EC2 instance types for SAP HANA? (Choose 2.)

Select 2 answers

A.c5.9xlarge

B.t3.2xlarge

C.i3.8xlarge

D.x1e.32xlarge

E.r5.8xlarge

AnswersD, E

x1e is memory-optimized and certified for SAP HANA.

Why this answer

Option D (x1e.32xlarge) is correct because it is part of the X1e instance family, which is specifically certified by SAP for production HANA workloads. These instances offer high memory (up to 3,904 GiB) and are optimized for large in-memory databases like SAP HANA, meeting the SAP memory and vCPU requirements for OLAP and OLTP scenarios.

Exam trap

The trap here is that candidates often confuse general-purpose or compute-optimized instances (like c5 or t3) with SAP HANA requirements, overlooking that SAP HANA mandates high-memory, SAP-certified instance families such as X1e, R5, or U-6tb1.

Full explanation →

1723

MCQeasy

An administrator needs to restore an SAP HANA database from a backup stored in Amazon S3. The backup was created using AWS Backup. Which AWS service should be used to perform the restore?

A.AWS Backup

B.AWS Systems Manager

C.Amazon S3

D.AWS Database Migration Service

AnswerA

AWS Backup can restore HANA backups to EC2 instances.

Why this answer

AWS Backup is the correct service because the backup was created using AWS Backup, and AWS Backup provides native restore capabilities for SAP HANA databases. It automates the restore process by directly interacting with the underlying Amazon S3 storage where the backup resides, ensuring consistency with the backup metadata and recovery point objectives (RPOs).

Exam trap

The trap here is that candidates mistakenly think Amazon S3 itself can perform the restore, overlooking that AWS Backup is the service that manages the backup lifecycle and restore orchestration for SAP HANA databases.

How to eliminate wrong answers

Option B (AWS Systems Manager) is wrong because it is an operations management service for patching, automation, and configuration, not a backup restore tool for SAP HANA databases. Option C (Amazon S3) is wrong because while S3 stores the backup data, it does not provide the orchestration or SAP HANA-specific restore logic required to recover the database; AWS Backup handles the restore workflow. Option D (AWS Database Migration Service) is wrong because it is designed for migrating databases to AWS or between database engines, not for restoring from a backup created by AWS Backup.

Full explanation →

1724

MCQhard

A company is implementing an SAP S/4HANA system on AWS. The system must be highly available across multiple Availability Zones. Which of the following strategies should the company implement for the SAP Central Services (ASCS) instance to meet high availability requirements?

A.Deploy a single EC2 instance with a large instance type to handle failover.

B.Configure SAP HANA System Replication between two Availability Zones.

C.Deploy a Pacemaker cluster with two EC2 instances across Availability Zones using a shared file system.

D.Use Amazon RDS for SAP Central Services with Multi-AZ deployment.

AnswerC

Pacemaker cluster ensures automatic failover for ASCS.

Why this answer

Option C is correct because SAP Central Services (ASCS) requires a highly available cluster that can manage the Enqueue and Message Server processes. A Pacemaker cluster across two Availability Zones, using a shared file system (e.g., Amazon EFS or a replicated file system), provides the necessary fencing, resource monitoring, and failover for ASCS. This architecture ensures that if the primary ASCS instance fails, the secondary instance in the other AZ can take over with minimal downtime, meeting the high availability requirement.

Exam trap

The trap here is that candidates often confuse SAP HANA System Replication (Option B) as a solution for all SAP high availability needs, but it only applies to the database layer, not to the ASCS application services.

How to eliminate wrong answers

Option A is wrong because deploying a single EC2 instance, even with a large instance type, does not provide any failover capability across Availability Zones; it represents a single point of failure. Option B is wrong because SAP HANA System Replication is designed for the SAP HANA database layer, not for the ASCS instance; ASCS requires cluster management of application services, not database replication. Option D is wrong because Amazon RDS does not support SAP Central Services; RDS is a managed database service, and SAP ASCS is an application-level component that must run on EC2 instances with a cluster manager.

Full explanation →

1725

Multi-Selectmedium

An SAP administrator is troubleshooting a performance issue with SAP HANA. The database is running on an EC2 instance with EBS volumes. Which TWO metrics should be monitored to identify disk I/O bottlenecks? (Choose 2.)

Select 3 answers

A.VolumeIdleTime

B.NetworkIn

C.VolumeReadBytes

D.VolumeWriteBytes

E.CPUUtilization

AnswersA, C, D

Low idle time indicates I/O contention.

Why this answer

VolumeIdleTime (A) is correct because it directly indicates when the EBS volume is not receiving I/O requests; a consistently low idle time suggests the volume is saturated and causing a disk I/O bottleneck. For SAP HANA on EC2, monitoring VolumeIdleTime helps identify if the EBS volume's IOPS or throughput limits are being reached, leading to performance degradation.

Exam trap

The trap here is that candidates often confuse network I/O (NetworkIn) or CPU utilization with disk I/O metrics, but the question specifically asks for metrics that identify disk I/O bottlenecks, which are only captured by EBS volume-level metrics like VolumeIdleTime, VolumeReadBytes, and VolumeWriteBytes.

Full explanation →

Page 23 of 24

All pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

Practice PAS-C01 by domain

Target a specific domain to shore up weak areas.

Design of SAP Workloads on AWS Technology Migration Operations and Maintenance

See all domains with question counts →