Courseiva

AWS Certified SAP on AWS Specialty PAS-C01 (PAS-C01) — Questions 526–600

1616 questions total · 22pages · All types, answers revealed

Take a mock examExam hub
Page 7

Page 8 of 22

Page 9
526
MCQmedium

An SAP administrator runs the commands above to inspect the volumes attached to an EC2 instance that hosts an SAP HANA database. The database log files are stored on /dev/sdf. What is a potential issue with this configuration?

A.The log volume uses gp3, which may not provide enough IOPS for HANA log writes.
B.The log volume is attached as /dev/sdf, which is not a standard device name for HANA.
C.The root volume will be deleted on termination, causing data loss.
D.The log volume is not encrypted.
AnswerA

HANA log volumes require high IOPS; io1 or io2 are recommended.

Why this answer

Gp3 volumes may not provide sufficient IOPS for HANA log writes, which require high IOPS and low latency. Options B, C, and D are incorrect: /dev/sdf is a standard device name, DeleteOnTermination=false is fine for persistence, and encryption is not shown to be an issue.

Full explanation →
527
MCQmedium

A company is running a business-critical SAP HANA database on an m5.24xlarge EC2 instance. The database stores 3 TB of data on EBS gp3 volumes. The system experiences high latency during peak hours. Which configuration change would most effectively reduce latency without increasing costs significantly?

A.Increase the Provisioned IOPS of the gp3 volumes to the maximum supported.
B.Move the database to a larger instance type like x1e.32xlarge with more memory.
C.Migrate the EBS volumes to io2 Block Express volumes with the same capacity.
D.Increase the gp3 volume size to 4 TB to gain more baseline IOPS.
AnswerC

io2 Block Express provides consistent single-digit millisecond latency and higher IOPS, ideal for SAP HANA.

Why this answer

Migrating to io2 Block Express volumes provides consistent, sub-millisecond latency and higher IOPS performance than gp3, which is essential for reducing high latency in a business-critical SAP HANA database during peak hours. This change addresses the latency issue without significantly increasing costs, as io2 Block Express offers a cost-effective balance of performance and durability for mission-critical workloads.

Exam trap

The trap here is that candidates assume increasing gp3 IOPS or volume size is sufficient to fix latency, but they overlook that gp3's architecture introduces variable latency under sustained load, while io2 Block Express is specifically designed for consistent, low-latency performance required by critical databases like SAP HANA.

How to eliminate wrong answers

Option A is wrong because increasing the Provisioned IOPS of gp3 volumes to the maximum supported (16,000 IOPS) would not eliminate the inherent latency variability of gp3 under sustained high throughput, and the cost increase for maximum IOPS could be significant without guaranteeing the consistent low latency required for SAP HANA. Option B is wrong because moving to a larger instance type like x1e.32xlarge would increase costs substantially due to higher instance pricing and does not directly address the EBS volume latency; the bottleneck is storage performance, not compute or memory capacity. Option D is wrong because increasing the gp3 volume size to 4 TB only raises the baseline IOPS from 3,000 to 4,000 (at 0.5 IOPS per GB), which is insufficient to resolve high latency during peak hours and does not provide the consistent low latency that io2 Block Express offers.

Full explanation →
528
Multi-Selecthard

Which THREE components are required to set up a highly available SAP HANA database using AWS services? (Choose 3)

Select 3 answers
A.Application Load Balancer
B.Single Availability Zone deployment
C.Multi-AZ deployment with synchronous replication
D.Cluster manager (e.g., Pacemaker)
E.Elastic IP address
AnswersC, D, E

Ensures data is replicated across AZs.

Why this answer

Options C, D, and E are correct. A Multi-AZ deployment with synchronous replication (C) provides high availability by replicating data across Availability Zones. A cluster manager like Pacemaker (D) automates failover and manages the cluster.

An Elastic IP address (E) provides a static IP that can be remapped to the standby host during failover, ensuring connectivity. Option A (Application Load Balancer) is not required for SAP HANA database HA; it's used for web traffic. Option B (Single AZ) does not provide high availability.

Full explanation →
529
Multi-Selectmedium

An SAP administrator is troubleshooting a network connectivity issue between an SAP application server and an SAP HANA database, both running on EC2 in the same VPC. The security groups allow traffic on port 3xx15 and 3xx17. Which TWO steps should the administrator take to diagnose the problem?

Select 2 answers
A.Check that the security groups have outbound rules that allow return traffic.
B.Ensure the internet gateway is attached to the VPC.
C.Check the route tables to ensure the subnets can communicate.
D.Enable VPC Flow Logs and analyze logs for dropped packets.
E.Verify that the network ACLs for both subnets allow the required traffic.
AnswersC, E

Route tables must have routes for intra-VPC communication.

Why this answer

Options C and E are correct. Checking route tables (C) ensures that the subnets can communicate within the VPC. Verifying network ACLs (E) is important because NACLs are stateless and can block traffic even if security groups allow it.

Option A is incorrect because security groups are stateful and automatically allow return traffic for allowed inbound traffic. Option B is incorrect because an internet gateway is not needed for internal VPC traffic. Option D is incorrect because VPC Flow Logs are useful for analysis but not the first step; immediate checks should focus on ACLs and route tables.

Full explanation →
530
MCQmedium

A company is running SAP BusinessObjects on AWS. The application server is on an EC2 instance, and the database is on Amazon RDS for SQL Server. Users report that reports are taking longer to generate than expected. Which AWS service can be used to analyze the performance bottleneck?

A.AWS Trusted Advisor
B.AWS CloudTrail
C.AWS X-Ray
D.Amazon CloudWatch with enhanced monitoring for RDS
AnswerD

CloudWatch provides metrics like CPU, memory, and disk I/O, and RDS Enhanced Monitoring offers OS-level metrics.

Why this answer

Amazon CloudWatch with enhanced monitoring provides detailed OS-level metrics for RDS (CPU, memory, disk I/O, and network), along with EC2 metrics, enabling analysis of performance bottlenecks in SAP BusinessObjects. Option A (AWS Trusted Advisor) offers best-practice recommendations, not performance analysis. Option B (AWS CloudTrail) audits API calls, which is unrelated to performance.

Option C (AWS X-Ray) is designed for tracing requests in distributed applications, not for database-level performance monitoring.

Full explanation →
531
Multi-Selecthard

Which THREE of the following are valid options for high availability of SAP HANA on AWS? (Choose THREE.)

Select 3 answers
A.Storage replication using NetApp Cloud Volumes ONTAP.
B.HANA System Replication with automatic failover using AWS Elastic IP or Route53.
C.SAP HANA replication to a secondary region with asynchronous replication.
D.Amazon RDS Multi-AZ for HANA.
E.HANA System Replication with manual failover.
AnswersA, B, E

Third-party storage replication can provide HA.

Why this answer

NetApp Cloud Volumes ONTAP provides storage-level replication that can be used for SAP HANA high availability. This solution replicates storage volumes between availability zones or regions, enabling failover at the storage layer independently of the database, which is a valid HA architecture for SAP HANA on AWS.

Exam trap

The trap here is confusing disaster recovery (asynchronous replication to a secondary region) with high availability (synchronous replication within the same region), and assuming that managed services like RDS Multi-AZ support SAP HANA when they do not.

Full explanation →
532
MCQmedium

A company is migrating its SAP HANA database from on-premises to AWS. The current system uses 6 TB of memory and the company wants to minimize downtime. The company has established a 10 Gbps AWS Direct Connect connection. Which migration method is MOST suitable?

A.Perform a full SAP HANA backup to the on-premises storage, copy the backup files to Amazon S3 using AWS Direct Connect, and restore on AWS.
B.Set up SAP HANA system replication between on-premises and AWS, then perform a takeover.
C.Use AWS Database Migration Service (AWS DMS) with full load plus ongoing replication.
D.Use AWS Snowball Edge to physically transport the backup files to AWS and then restore.
AnswerA

Backup and restore over Direct Connect is efficient for large databases and minimizes downtime during restore.

Why this answer

SAP HANA backup and restore is a suitable method for migrating large databases like this 6 TB system. Using AWS Direct Connect at 10 Gbps provides high throughput for transferring backup files to Amazon S3, minimizing downtime. Option B (SAP HANA system replication) requires low latency and is typically used for high availability, not one-time migrations.

Option C (AWS DMS) does not support SAP HANA as a source. Option D (AWS Snowball Edge) introduces logistical complexity and potential delays compared to a direct network transfer.

Full explanation →
533
MCQmedium

A company is running an SAP HANA database on an r5.8xlarge EC2 instance. The database experiences high memory pressure, and they want to add more memory without downtime. What should they do?

A.Use AWS License Manager to add more memory to the instance.
B.Modify the instance type to r5.12xlarge while the instance is running.
C.Use Amazon RDS for SAP HANA to automatically scale memory.
D.Stop the instance and change the instance type to u-6tb1.112xlarge.
AnswerB

EC2 instances with ENA support can change instance type without stopping if the new type is in the same family.

Why this answer

You can modify the instance type of a running EC2 instance without stopping it, provided the new type is compatible with the current configuration. In this case, changing from r5.8xlarge to r5.12xlarge increases memory from 256 GiB to 384 GiB, and both are in the same instance family, supporting live resizing. This allows the SAP HANA database to add memory without downtime, addressing high memory pressure.

Exam trap

The trap here is that candidates may think stopping the instance is always required for instance type changes, but AWS supports live resizing for certain instance families like r5, and they might incorrectly choose Option D due to familiarity with the u-6tb1.112xlarge instance type for SAP HANA, ignoring the downtime constraint.

How to eliminate wrong answers

Option A is wrong because AWS License Manager is used to manage software licenses, not to add memory to an EC2 instance; it cannot modify instance resources. Option C is wrong because Amazon RDS does not support SAP HANA as a database engine; SAP HANA must run on EC2 or bare metal, not on RDS. Option D is wrong because stopping the instance to change the instance type would cause downtime, which the question explicitly requires to avoid; additionally, u-6tb1.112xlarge is a bare metal instance type that requires stopping the instance and may not be compatible with a running r5.8xlarge without reconfiguration.

Full explanation →
534
MCQmedium

An SAP system on AWS is using Amazon EBS volumes for the database. The company wants to take crash-consistent snapshots of the entire database volume set. Which approach is recommended?

A.Stop the instance, take snapshots, then restart
B.Use EBS Multi-Attach to attach volumes to a backup instance
C.Take snapshots of each volume individually at the same time
D.Use AWS Backup with pre- and post-scripts for volume groups
AnswerD

AWS Backup can create crash-consistent snapshots across volumes.

Why this answer

AWS Backup with pre- and post-scripts for volume groups is the recommended approach because it orchestrates crash-consistent snapshots across multiple EBS volumes by freezing the application (e.g., SAP HANA) and flushing I/O before the snapshot, then unfreezing after. This ensures all volumes are captured at the same point in time without downtime, which is critical for SAP databases requiring consistency across the entire volume set.

Exam trap

The trap here is that candidates assume taking snapshots simultaneously (Option C) guarantees crash consistency, but EBS snapshots are initiated asynchronously and do not capture a point-in-time across multiple volumes without application-level coordination.

How to eliminate wrong answers

Option A is wrong because stopping the instance causes downtime, which is unnecessary and disruptive for production SAP workloads; crash-consistent snapshots can be achieved without stopping the instance. Option B is wrong because EBS Multi-Attach is designed for shared volumes in clustered environments, not for taking consistent snapshots across a volume set, and attaching volumes to a backup instance does not guarantee crash consistency. Option C is wrong because taking snapshots of each volume individually at the same time does not guarantee crash consistency; EBS snapshots are asynchronous and may capture data at slightly different points, leading to inconsistencies across volumes.

Full explanation →
535
MCQeasy

A company is running SAP HANA on AWS and needs to ensure high availability for the database. Which AWS service should be used to automatically recover the HANA primary instance in case of an instance failure?

A.Amazon CloudWatch alarms
B.AWS CloudFormation custom resources
C.AWS Lambda functions
D.Amazon Route 53 health checks and failover routing
AnswerD

Route 53 health checks can trigger failover to a standby database.

Why this answer

Amazon Route 53 health checks and failover routing can automatically detect an instance failure and route traffic to a standby HANA primary instance. By configuring a Route 53 DNS failover record with health checks against the primary instance, DNS resolution is updated to point to the secondary instance when the primary becomes unhealthy, enabling automated recovery without manual intervention.

Exam trap

The trap here is that candidates often assume AWS services like CloudWatch or Lambda are sufficient for automatic recovery, but the question specifically asks for the service that automatically recovers the HANA primary instance via failover, which requires DNS-level rerouting provided by Route 53 health checks and failover routing.

How to eliminate wrong answers

Option A is wrong because Amazon CloudWatch alarms can trigger actions like sending notifications or invoking Lambda functions, but they cannot directly perform DNS failover or automatically recover a HANA primary instance without additional orchestration. Option B is wrong because AWS CloudFormation custom resources are used to execute custom logic during stack creation/update/deletion, not for real-time automated recovery of a running instance. Option C is wrong because AWS Lambda functions can be used as part of a recovery workflow, but they are not a native service for automatic failover; they require additional components (e.g., Route 53, CloudWatch) to detect failure and trigger recovery, making them an indirect solution rather than the primary service for automatic recovery.

Full explanation →
536
MCQmedium

A company is migrating a production SAP HANA database to AWS. The database size is 2 TB. The migration window is 4 hours. The network bandwidth is 10 Gbps. Which migration method should be used to achieve the shortest downtime?

A.Use a backup and restore approach.
B.Use AWS DMS with full load and CDC.
C.Use SAP HANA System Replication.
D.Use AWS Snowball Edge for initial load, then CDC.
AnswerC

System Replication provides the shortest downtime, often minutes.

Why this answer

SAP HANA System Replication can achieve near-zero downtime, which is critical for a 2 TB database with a 4-hour migration window. With 10 Gbps bandwidth, initial sync completes well within the window, and ongoing replication minimizes downtime during cutover. Backup and restore (A) would likely exceed 4 hours due to data size.

AWS DMS with CDC (B) introduces overhead and is not optimized for HANA system replication. AWS Snowball Edge (D) is unnecessary given the high bandwidth and would add latency for initial load.

Full explanation →
537
MCQmedium

An SAP HANA database running on an EC2 instance with EBS volumes experiences high write latency. The instance type is r5.4xlarge. The EBS volumes are gp2. Which change is MOST likely to reduce write latency?

A.Move the database files to Amazon EFS.
B.Add a read replica for the database.
C.Change the instance type to a compute-optimized instance.
D.Change the EBS volumes to io2 with provisioned IOPS.
AnswerD

io2 volumes provide consistent low-latency performance with provisioned IOPS.

Why this answer

Changing from gp2 to io2 EBS volumes with provisioned IOPS provides consistent low-latency performance for high-write workloads like SAP HANA, directly addressing the write latency bottleneck. Option A is incorrect because Amazon EFS is a network file system and introduces additional network latency, making it unsuitable for database write operations. Option B is incorrect because a read replica only improves read throughput and does not affect write latency; writes still occur on the primary instance.

Option C is incorrect because the r5 instance is already memory-optimized for SAP HANA; switching to a compute-optimized instance does not resolve the storage-level write latency issue.

Full explanation →
538
Multi-Selecteasy

Which TWO of the following are best practices for securing an SAP system on AWS? (Choose two.)

Select 2 answers
A.Store database credentials in plaintext in application configuration files
B.Disable AWS CloudTrail to reduce logs
C.Use security groups to restrict inbound traffic to SAP application ports
D.Allow all inbound traffic from 0.0.0.0/0 for easy access
E.Encrypt data in transit using TLS/SSL certificates
AnswersC, E

Security groups act as virtual firewalls.

Why this answer

Security groups act as a virtual firewall for EC2 instances, allowing you to control inbound and outbound traffic. Restricting inbound traffic to only the necessary SAP application ports (e.g., 3200 for SAP GUI, 443 for SAP Web Dispatcher) minimizes the attack surface and is a fundamental security best practice.

Exam trap

The trap here is that candidates may confuse security groups with network ACLs, or mistakenly think that allowing all traffic (0.0.0.0/0) is acceptable for 'easy access' during testing, but AWS explicitly tests that least-privilege access is a core security principle for production SAP workloads.

Full explanation →
539
MCQmedium

A company is deploying SAP NetWeaver on AWS and wants to ensure high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). They plan to use a cluster manager (Pacemaker) with a shared filesystem. The cluster will span two Availability Zones. The storage for the shared filesystem must be highly available and provide consistent performance. What storage solution should be used?

A.Use an Amazon S3 bucket as the shared filesystem.
B.Use instance store volumes (Local SSDs) on each node.
C.Use an Amazon EBS volume with Multi-Attach enabled.
D.Use Amazon EFS for the shared filesystem.
AnswerD

Correct because Amazon EFS provides a fully managed NFS filesystem that can be accessed from multiple EC2 instances across AZs, ensuring high availability and consistent performance for SAP shared files.

Why this answer

Amazon EFS provides a fully managed NFS filesystem that can be mounted from multiple EC2 instances across different Availability Zones, offering high availability and consistent performance for SAP Central Services (ASCS) and Enqueue Replication Server (ERS) shared filesystem. Option A is incorrect because Amazon S3 is object storage, not a POSIX-compliant filesystem, and cannot be used as a shared filesystem for SAP. Option B is incorrect because instance store volumes are ephemeral and local to each instance; they cannot be shared between nodes.

Option C is incorrect because EBS Multi-Attach only supports attachment to multiple instances within the same Availability Zone, not across AZs, and has additional limitations for shared filesystem use.

Full explanation →
540
Multi-Selecthard

Which TWO are required considerations when sizing an SAP HANA instance on AWS for a production environment? (Choose two.)

Select 2 answers
A.Provision instance store volumes for HANA data and log areas.
B.Purchase Reserved Instances for the HANA server to reduce costs.
C.Ensure the instance has enough memory to hold the HANA data in memory (RAM:data ratio).
D.Provision EBS volumes with sufficient IOPS for the HANA workload.
E.Select an RDS instance type that supports SAP HANA.
AnswersC, D

HANA is in-memory; data must fit in RAM for performance.

Why this answer

SAP HANA is an in-memory database that requires all active data to reside in RAM. The RAM:data ratio must be carefully sized to ensure the instance has enough memory to hold the HANA data and log volumes in memory, typically with a 1:4 or 1:8 ratio depending on compression and workload. AWS provides specific instance types (e.g., x1e, u-6tb1) certified for SAP HANA that meet these memory requirements.

Exam trap

The trap here is that candidates confuse storage persistence requirements with instance store vs. EBS, or mistakenly think RDS can host SAP HANA, when in fact SAP HANA requires certified EC2 instances and specific EBS configurations for production workloads.

Full explanation →
541
MCQmedium

A company is migrating an SAP HANA database using SAP HANA System Replication (HSR) to AWS. The target EC2 instance is in a different AWS Region than the source. The network latency between regions is high. What should the migration team configure to ensure successful replication?

A.Set up a VPN connection to the target region
B.Disable HSR preload on the target
C.Use AWS Global Accelerator to route traffic over the AWS global network
D.Increase the HSR timeout values significantly
AnswerC

Global Accelerator uses optimized paths to reduce latency and jitter.

Why this answer

A VPN connection adds overhead and latency over the internet, worsening replication issues. Option B is incorrect because disabling HSR preload reduces memory usage but does not address high latency; it may even increase recovery time. Option C is correct because AWS Global Accelerator uses the AWS global network to optimize routing, reducing latency impact for HSR replication.

Option D is incorrect because increasing HSR timeout values only masks timeout symptoms without resolving the underlying latency problem.

Full explanation →
542
MCQmedium

A company is running SAP on AWS and needs to design a disaster recovery (DR) solution with a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 4 hours. The primary region is us-east-1 and the DR region is us-west-2. The SAP application uses an SAP HANA database with a size of 2 TB. Which combination of AWS services should be used to meet the DR requirements most cost-effectively?

A.Use AWS Database Migration Service (DMS) with continuous replication from the primary HANA database to a target in us-west-2.
B.Use AWS Backup with continuous backups and cross-region copy to achieve RPO of 15 minutes.
C.Use AWS Backup to take hourly backups of the HANA database and restore in us-west-2 during a disaster.
D.Configure HANA System Replication (HSR) across regions and use a standby HANA instance in us-west-2 with a smaller instance size.
AnswerD

HSR provides near-synchronous replication with RPO of seconds; a smaller standby reduces cost and can be scaled up during failover within RTO.

Why this answer

HANA System Replication (HSR) is the native SAP HANA replication technology that can achieve an RPO of 15 minutes or less by asynchronously replicating data across regions. By using a smaller standby instance in us-west-2, the solution meets the RTO of 4 hours (since the standby can be scaled up or promoted quickly) while minimizing ongoing DR costs. This approach is purpose-built for SAP HANA and avoids the overhead of third-party tools or backup-based restores.

Exam trap

The trap here is that candidates assume AWS Backup or DMS can handle SAP HANA replication, but neither supports the required continuous, low-RPO replication for HANA, and the native HSR is the only service that meets both the RPO and RTO cost-effectively.

How to eliminate wrong answers

Option A is wrong because AWS Database Migration Service (DMS) does not support SAP HANA as a continuous replication source for ongoing changes; DMS is designed for homogeneous/heterogeneous migrations, not for real-time HANA replication with sub-15-minute RPO. Option B is wrong because AWS Backup does not support continuous backups for SAP HANA; it can only take snapshot-based backups at scheduled intervals, and achieving a 15-minute RPO with hourly backups is impossible. Option C is wrong because hourly backups cannot guarantee a 15-minute RPO (the maximum data loss could be up to 1 hour), and restoring from backups in a DR region would likely exceed the 4-hour RTO due to the time required to restore a 2 TB HANA database.

Full explanation →
543
MCQhard

A company runs its SAP ERP system on AWS with an SAP HANA database on an EC2 instance. The database is configured with multiple EBS io1 volumes striped in a RAID 0. Recently, the company implemented a new backup process using AWS Backup with the Backint agent. However, during the backup window, the database performance degrades significantly, causing application timeouts. The database administrator checks CloudWatch metrics and sees that the EBS write latency spikes to over 50 ms during backups. The backup target is an S3 bucket in the same region. The EC2 instance type is r5.4xlarge with EBS-optimized enabled. What is the MOST likely cause of the performance degradation?

A.The Backint agent is consuming CPU and I/O resources, causing contention.
B.The EBS volumes have reached the provisioned IOPS limit of 20,000 IOPS.
C.The S3 bucket is in a different region, causing network latency.
D.The EC2 instance type does not match the requirements for Backint.
AnswerA

Backint runs on the HANA host and uses resources, impacting performance.

Why this answer

The Backint agent runs on the same EC2 instance as SAP HANA, consuming CPU and I/O resources during backup, causing contention and performance degradation. Option B is unlikely because with RAID 0 the aggregate IOPS is higher than the provisioned per volume limit. Option C is incorrect because the S3 bucket is in the same region as stated.

Option D is incorrect because the r5.4xlarge instance supports EBS optimization and is suitable for Backint.

Full explanation →
544
Multi-Selectmedium

A company is migrating a legacy application to AWS. The application currently uses Oracle Database and the company wants to migrate to Amazon Aurora PostgreSQL with minimal downtime. Which TWO steps should be taken to achieve this? (Choose TWO)

Select 2 answers
A.Use the AWS Schema Conversion Tool (SCT) to convert the Oracle schema to PostgreSQL.
B.Rehost the Oracle database on an Amazon EC2 instance to minimize changes.
C.Configure Amazon Aurora PostgreSQL with Multi-AZ for high availability.
D.Use AWS Database Migration Service (DMS) with ongoing replication (change data capture).
E.Export Oracle database as dump files and import into Aurora PostgreSQL using native tools.
AnswersA, D

SCT automates the conversion of Oracle schema objects to PostgreSQL-compatible format.

Why this answer

The AWS Schema Conversion Tool (SCT) can automatically convert Oracle database schemas (including stored procedures, views, and data types) to a PostgreSQL-compatible format, which is essential when migrating to Amazon Aurora PostgreSQL. Option D is correct because AWS DMS with ongoing replication (change data capture) allows you to keep the source Oracle database and target Aurora PostgreSQL synchronized with minimal downtime, enabling a near-zero-downtime migration by capturing and applying incremental changes.

Exam trap

The trap here is that candidates often confuse 'migration steps' with 'post-migration configuration' (like Multi-AZ) or assume that a simple dump-and-load approach (Option E) can achieve minimal downtime, when in fact it requires a full outage, whereas DMS with CDC is the correct AWS-native approach for near-zero-downtime migrations.

Full explanation →
545
Multi-Selecteasy

Which TWO AWS services can be used to monitor the performance of an SAP HANA database running on an EC2 instance? (Choose TWO.)

Select 2 answers
A.AWS Trusted Advisor
B.AWS CloudTrail
C.AWS Config
D.AWS Systems Manager
E.Amazon CloudWatch
AnswersD, E

Systems Manager can run inventory and scripts to monitor HANA performance.

Why this answer

Amazon CloudWatch can monitor EC2 metrics like CPU and memory (with agent). AWS Systems Manager can run scripts to collect HANA-specific metrics. CloudTrail is for API auditing.

Trusted Advisor is for best practices. Config tracks configuration. CloudWatch and Systems Manager are valid monitoring tools.

Full explanation →
546
MCQmedium

An SAP administrator is creating an IAM policy for an EC2 instance that performs SAP database backups to S3 and creates EBS snapshots. The policy as shown fails to allow the EC2 instance to perform backup operations. What is the most likely reason?

A.The S3 resource ARN is incorrect; it should be 'arn:aws:s3:::sap-backup-bucket' without the '/*'.
B.The S3 actions are too permissive; they should be restricted to specific prefixes.
C.The ec2:CreateSnapshot action must be restricted to specific volume ARNs.
D.The policy does not include the 's3:ListBucket' action for the bucket itself.
AnswerD

Without 's3:ListBucket' on the bucket resource, the instance cannot list objects or verify bucket existence, causing failures.

Why this answer

The policy lacks the `s3:ListBucket` action for the bucket itself (ARN without `/*`). When an EC2 instance performs SAP database backups to S3, the AWS SDK or CLI first issues a `ListBucket` request to verify the bucket exists and to list objects before uploading. Without this permission, the backup operation fails at the initial listing step, even if `s3:PutObject` is allowed on the object ARN.

Exam trap

The trap here is that candidates focus on the EC2 snapshot permissions or S3 object ARN syntax, overlooking the prerequisite `s3:ListBucket` action required for any S3 upload workflow.

How to eliminate wrong answers

Option A is wrong because the S3 resource ARN `arn:aws:s3:::sap-backup-bucket/*` is correct for object-level actions like `s3:PutObject`; removing the `/*` would restrict access to the bucket itself, which is needed for `s3:ListBucket` but not for `s3:PutObject`. Option B is wrong because the S3 actions being too permissive is not the cause of failure; the issue is a missing action, not excessive permissions. Option C is wrong because `ec2:CreateSnapshot` does not require restriction to specific volume ARNs for the policy to work; the failure is due to missing S3 permissions, not EC2 snapshot permissions.

Full explanation →
547
Multi-Selecteasy

A company is planning to migrate its SAP NetWeaver system from on-premises to AWS. The system uses an SAP HANA database. The company wants to use the SAP System Migration (sum) tool. Which THREE prerequisites must be met before starting the migration?

Select 3 answers
A.The target SAP HANA database must be installed and running.
B.The target system must have the SAP kernel installed and appropriate libraries.
C.An HTTP proxy must be configured for communication between source and target.
D.The source and target systems must be on the same operating system (e.g., both Linux).
E.The source SAP system must be fully shut down before starting the migration.
AnswersA, B, D

Correct. The target SAP HANA database must be installed and running before starting the migration.

Why this answer

For an SAP System Migration (SUM) to AWS with HANA, the target HANA database must be installed and running (A), the target system must have the SAP kernel and required libraries (B), and source and target must be on the same OS (D) to ensure compatibility. HTTP proxy (C) is not a prerequisite; communication between source and target does not require a proxy. The source system does not need to be fully shut down before starting; SUM can be run with the source system running (E).

Full explanation →
548
MCQeasy

A company is migrating an SAP system to AWS and needs to ensure that the target EC2 instances have the correct SAP kernel parameters. Which AWS service can be used to automate the configuration of these parameters?

A.EC2 User Data scripts
B.AWS OpsWorks
C.AWS CloudFormation
D.AWS Systems Manager State Manager
AnswerD

AWS Systems Manager State Manager enables you to define and enforce a configuration policy, including SAP kernel parameters, on running EC2 instances.

Why this answer

AWS Systems Manager State Manager is correct because it allows you to define and enforce a configuration policy for EC2 instances, including SAP kernel parameters. Option A (EC2 User Data) runs only once at launch and cannot enforce ongoing changes. Option B (AWS OpsWorks) is a configuration management service but is not the best fit for this specific task.

Option C (AWS CloudFormation) is designed for infrastructure provisioning, not for in-guest OS configuration.

Full explanation →
549
MCQeasy

An SAP administrator needs to provide temporary, time-limited access to an S3 bucket containing SAP backup files for an external auditor. The auditor should be able to download files from the bucket. Which method provides the most secure way to grant access?

A.Create an IAM user with read-only access to the bucket and share the credentials with the auditor.
B.Provide the auditor with the root user credentials of the AWS account.
C.Make the bucket publicly readable and share the bucket URL.
D.Generate a presigned URL for each file the auditor needs to download.
AnswerD

Presigned URLs are time-limited and scoped to specific objects.

Why this answer

Presigned URLs grant temporary, time-limited access to specific S3 objects without requiring the auditor to have AWS credentials or any permanent permissions. The SAP administrator can generate a presigned URL for each backup file, set an expiration time, and share the URL with the auditor, who can then download the file using standard HTTP GET requests. This approach follows the principle of least privilege and ensures access is revoked automatically after the URL expires.

Exam trap

The trap here is that candidates may choose Option A (IAM user) because it seems like a standard access control method, but they overlook the requirement for temporary, time-limited access and the security risks of sharing long-term credentials with an external party.

How to eliminate wrong answers

Option A is wrong because creating an IAM user with read-only access and sharing credentials violates security best practices by introducing long-term credentials that could be reused or compromised, and it requires managing a separate IAM user for a temporary task. Option B is wrong because providing root user credentials grants unrestricted, permanent access to the entire AWS account, including the ability to delete resources, modify billing, and access all services, which is a severe security risk. Option C is wrong because making the bucket publicly readable exposes all objects in the bucket to anyone on the internet, not just the auditor, and violates data confidentiality and compliance requirements.

Full explanation →
550
MCQhard

An organization uses AWS Systems Manager to run automation documents on their SAP EC2 instances. Recently, some automation runbooks have failed because the EC2 instances did not have the required SSM Agent version. The operations team wants to ensure all existing and future instances automatically have the latest SSM Agent. Which solution meets this requirement?

A.Use an automation document to update the SSM Agent and schedule it via a cron job on each instance.
B.Enable the 'Auto-update SSM Agent' option in the EC2 launch settings for all instances.
C.Configure AWS Systems Manager Patch Manager to update the SSM Agent.
D.Create an AWS Systems Manager State Manager association that runs the AWS-UpdateSSMAgent document on the instances.
AnswerD

State Manager ensures compliance and automatic updates.

Why this answer

AWS Systems Manager State Manager can enforce a desired state configuration on EC2 instances. By creating an association that runs the `AWS-UpdateSSMAgent` document on a schedule, State Manager ensures that both existing and future instances (when configured with the appropriate instance profile and tags) automatically update to the latest SSM Agent version, regardless of the instance's lifecycle.

Exam trap

The trap here is that candidates may confuse Patch Manager's OS patching capabilities with SSM Agent updates, or assume a non-existent EC2 launch setting exists, leading them to choose options that sound plausible but are technically incorrect.

How to eliminate wrong answers

Option A is wrong because scheduling a cron job on each instance to run an automation document is not a scalable or managed solution; it requires manual setup per instance and does not leverage AWS Systems Manager's native automation capabilities. Option B is wrong because there is no 'Auto-update SSM Agent' option in EC2 launch settings; this feature does not exist in the AWS Management Console or API. Option C is wrong because AWS Systems Manager Patch Manager is designed to patch the OS and applications, not to update the SSM Agent itself; it does not have a built-in mechanism to update the SSM Agent.

Full explanation →
551
MCQhard

An IAM policy is attached to an IAM role used by an SAP system to perform backups. The policy is shown above. The SAP system can successfully list EC2 instances but fails to start or stop them. What is the most likely cause?

A.The S3 bucket permissions are missing; the backup process requires S3 access first.
B.The policy does not include the ec2:DescribeInstanceStatus action.
C.The EC2 instances are in a different AWS account, and cross-account access is not configured.
D.The IAM policy is attached to the role, but the role is not associated with an instance profile.
AnswerC

The policy allows actions on resources in the current account, but not cross-account.

Why this answer

The policy grants ec2:StartInstances and ec2:StopInstances on all resources (*), which would allow starting and stopping instances in the same account. However, if the EC2 instances are in a different AWS account, the IAM policy in the current account does not grant cross‑account access. Cross‑account access requires additional configuration such as a trust policy in the target account or resource‑based policies.

Options A and B are unrelated, and option D is incorrect because the role does not need an instance profile for an SAP system that assumes the role directly.

Full explanation →
552
MCQhard

An operations engineer runs the AWS CLI command above to check the state of an EC2 instance. The output shows the instance is running. However, the SAP application cannot connect to the instance. The security group allows inbound traffic on port 443 from the application's IP. What is the most likely cause of the connectivity issue?

A.The network ACL for the subnet does not allow outbound traffic
B.The instance is in a stopped state
C.The instance is not passing its status checks
D.The security group is not associated with the instance
AnswerA

Network ACLs are stateless; if outbound rules are missing, return traffic is blocked.

Why this answer

The instance is running, so the issue is likely network configuration. A network ACL is stateless and must allow both inbound and outbound traffic. If the outbound rule denies traffic, responses are blocked.

Security groups are stateful. The instance state is running, so it is not stopped or terminated. The command only checks state, not health checks.

Full explanation →
553
MCQeasy

Which AWS service is used to automate the installation and configuration of SAP applications on AWS according to best practices?

A.AWS OpsWorks
B.AWS Launch Wizard for SAP
C.AWS CloudFormation
D.AWS Quick Starts
AnswerB

Launch Wizard provides guided, best-practice deployment for SAP.

Why this answer

AWS Launch Wizard for SAP is the correct service because it provides a guided, best-practice-based deployment experience specifically for SAP applications. It automatically provisions the necessary AWS infrastructure (EC2, EBS, VPC, etc.) and configures the SAP software according to AWS and SAP validated architectures, reducing manual effort and errors.

Exam trap

The trap here is that candidates confuse AWS Launch Wizard for SAP with AWS CloudFormation or Quick Starts, assuming any automation tool can handle SAP installation, but only Launch Wizard integrates the SAP-specific software installation and best-practice validation directly into the provisioning workflow.

How to eliminate wrong answers

Option A is wrong because AWS OpsWorks is a configuration management service that uses Chef and Puppet, but it is not purpose-built for SAP deployment and does not include SAP-specific best practices or automated SAP installation workflows. Option C is wrong because AWS CloudFormation is a general-purpose Infrastructure as Code (IaC) service that requires users to manually define all resources and SAP-specific configurations; it lacks the guided, automated SAP installation and validation logic that Launch Wizard provides. Option D is wrong because AWS Quick Starts are reference deployments that use CloudFormation templates, but they are not dynamically interactive or tailored to individual SAP system requirements (like SID, sizing, or HA) and do not automate the actual SAP software installation step.

Full explanation →
554
MCQeasy

An SAP system administrator needs to ensure that all API calls made to AWS services by the SAP system are logged for security auditing. Which AWS service should be enabled?

A.AWS Config
B.Amazon CloudWatch
C.VPC Flow Logs
D.AWS CloudTrail
AnswerD

CloudTrail records API activity for auditing.

Why this answer

AWS CloudTrail logs all API calls made to AWS services, enabling security auditing. Option A is incorrect because AWS Config tracks configuration changes, not API calls. Option B is incorrect because Amazon CloudWatch monitors performance metrics and logs, but does not log API calls specifically.

Option C is incorrect because VPC Flow Logs capture network traffic metadata, not API calls.

Full explanation →
555
MCQhard

An SAP administrator notices that the SAP HANA database is running out of disk space on the /hana/data volume. The volume is an EBS gp3 volume with 2000 GB size. The administrator wants to increase the size without downtime. Which action should be taken?

A.Detach the volume, create a snapshot, create a larger volume from the snapshot, and attach it
B.Create a new larger volume and copy data using rsync
C.Increase the IOPS of the volume to improve performance
D.Use the modify-volume API to increase the size of the existing volume
AnswerD

EBS supports online modification of volume size.

Why this answer

AWS EBS gp3 volumes support online resizing via the modify-volume API without requiring downtime. The SAP HANA /hana/data volume can be increased in size while the instance remains running, as EBS volumes can be modified dynamically. After the modification, the administrator must extend the file system to recognize the new space, but no volume detachment or data migration is needed.

Exam trap

The trap here is that candidates may confuse the need to increase disk space with performance tuning (IOPS) or assume that volume modifications require downtime, leading them to choose snapshot-based or data-copy methods instead of the simpler online resize.

How to eliminate wrong answers

Option A is wrong because detaching the volume would cause downtime for the SAP HANA database, as the /hana/data volume must remain attached for the database to operate. Option B is wrong because creating a new volume and using rsync to copy data introduces unnecessary complexity and potential downtime, and it does not leverage EBS's native online resizing capability. Option C is wrong because increasing IOPS addresses performance, not disk space; the issue is running out of storage capacity, not throughput or latency.

Full explanation →
556
MCQhard

A company runs SAP on AWS and uses a shared file system via Amazon EFS for transport files. Recently, the SAP system experienced slowness when importing transports. The CloudWatch metrics show high BurstCreditBalance for the EFS file system. What action should be taken to improve performance?

A.Enable Max I/O performance mode on the EFS file system.
B.Change the performance mode to General Purpose.
C.Enable encryption at rest to improve data transfer speed.
D.Increase the BurstCreditBalance by purchasing additional credits.
AnswerA

Max I/O provides higher throughput and IOPS.

Why this answer

When BurstCreditBalance is high, it indicates that the file system is not using its burst credits, meaning it is operating at baseline throughput. To improve performance, enable Max I/O performance mode on the EFS file system, which provides higher throughput and IOPS. Option B is incorrect because changing to General Purpose mode does not increase throughput; it may even reduce performance.

Option C is incorrect because encryption does not affect throughput. Option D is incorrect because BurstCreditBalance cannot be purchased; it is automatically accrued and consumed.

Full explanation →
557
MCQmedium

During the migration of an SAP NetWeaver system, the team notices that the application server performance is degraded after migrating to AWS. The system uses AWS EBS volumes for storage. Which of the following is the most likely cause of the performance degradation?

A.The EBS volumes have insufficient provisioned IOPS for the workload.
B.The EBS volumes are using the wrong volume type.
C.The EBS volumes are not encrypted.
D.The EBS volumes are not EBS-optimized.
AnswerA

Insufficient IOPS can cause performance bottlenecks.

Why this answer

If EBS volumes are not provisioned with sufficient IOPS, the application server may experience performance degradation. EBS-optimized instances and appropriate volume types are important. EBS volumes are typically designed for durability, and encryption does not cause performance degradation.

Full explanation →
558
MCQmedium

A company runs SAP on AWS and wants to implement a high-availability (HA) solution for SAP Central Services (ASCS/ERS) using Amazon EC2 instances. Which AWS service is essential for managing the virtual IP address (VIP) required for the HA cluster?

A.AWS Global Accelerator
B.Amazon Route 53
C.AWS WAF
D.Application Load Balancer
AnswerB

Route 53 can provide failover routing with health checks to redirect traffic to the standby ASCS instance.

Why this answer

Amazon Route 53 is essential for managing the virtual IP address (VIP) required for the SAP Central Services (ASCS/ERS) HA cluster because it provides DNS-based failover. When the active ASCS instance fails, the HA cluster updates a Route 53 DNS record to point to the standby instance's IP address, effectively migrating the VIP. This allows clients to reconnect using the same DNS name without needing an elastic IP or a network-level VIP, which is not natively supported in AWS for this use case.

Exam trap

The trap here is that candidates often assume a traditional on-premises VIP (e.g., using a floating IP with ARP) is required, but AWS does not support that, so the correct answer is a DNS-based solution like Route 53, not a load balancer or accelerator.

How to eliminate wrong answers

Option A is wrong because AWS Global Accelerator provides static anycast IP addresses and traffic acceleration, but it does not support the dynamic, application-level VIP failover required for SAP ASCS/ERS HA clusters; it is designed for global traffic distribution, not for managing a single VIP that follows a cluster resource. Option C is wrong because AWS WAF is a web application firewall that protects against common web exploits, and it has no capability to manage or failover a virtual IP address for SAP Central Services. Option D is wrong because an Application Load Balancer distributes traffic across multiple targets at Layer 7, but it cannot be used to assign a single, floating VIP to an active-passive SAP ASCS/ERS cluster; the HA cluster requires a VIP that moves with the active node, which ALB does not support.

Full explanation →
559
MCQmedium

A company is experiencing performance issues with their SAP ERP system on AWS. The system is running on an r5.4xlarge EC2 instance with gp2 EBS volumes. The database is SAP HANA. CloudWatch metrics show high write latency on the data volume. Which change would most likely improve performance?

A.Increase the size of the gp2 volume to get more baseline IOPS
B.Move the database to a t3.large instance
C.Enable EBS optimization on the instance
D.Change the volume type to io2 Block Express
AnswerD

io2 Block Express offers consistent low latency and high IOPS for SAP HANA.

Why this answer

SAP HANA is highly sensitive to storage latency, and the high write latency on the data volume indicates that gp2's burst model is insufficient for sustained write workloads. io2 Block Express provides consistent, sub-millisecond latency with provisioned IOPS up to 256,000, which directly addresses the performance bottleneck. This change aligns with AWS best practices for SAP HANA production workloads, which recommend io2 volumes for data and log volumes.

Exam trap

The trap here is that candidates often assume increasing gp2 volume size (Option A) is a simple fix for IOPS, but they overlook that gp2's burst model cannot sustain the high-write, low-latency requirements of SAP HANA, and that AWS explicitly recommends io2 volumes for production HANA workloads.

How to eliminate wrong answers

Option A is wrong because increasing the size of a gp2 volume does increase baseline IOPS, but gp2's IOPS are tied to volume size and burst bucket performance; for SAP HANA's sustained high-write workloads, gp2 cannot guarantee consistent low latency, and the improvement from size increase is marginal compared to switching to a provisioned IOPS volume. Option B is wrong because moving to a t3.large instance would reduce CPU and memory resources significantly (t3.large has 2 vCPUs and 8 GiB RAM vs. r5.4xlarge's 16 vCPUs and 128 GiB RAM), which would severely degrade SAP HANA performance and is not a valid solution for write latency issues. Option C is wrong because EBS optimization is already enabled by default on all current-generation EC2 instances (including r5.4xlarge), so toggling it would have no effect; the issue is with the storage volume type, not the network/storage path.

Full explanation →
560
MCQhard

A company is migrating an SAP Business Suite system to AWS. The current on-premises system uses Oracle Database with Automatic Storage Management (ASM). The target database on AWS will be SAP HANA. Which migration strategy minimizes data conversion efforts?

A.Use AWS Database Migration Service (DMS) with Oracle as source and HANA as target
B.Use SAP Landscape Transformation (SLT) for real-time data replication
C.Use the SAP HANA Database Migration Option (DMO) with SUM
D.Perform an export/import of the Oracle database and import into HANA
AnswerC

DMO with SUM can migrate from Oracle to HANA, minimizing data conversion efforts.

Why this answer

The SAP HANA Database Migration Option (DMO) with SUM is the correct choice because it is specifically designed for migrating to SAP HANA, handling both data and schema conversion automatically, minimizing manual effort. Option A is incorrect because although AWS DMS supports SAP HANA as a target, it is not the optimal tool for SAP system migration due to the lack of integrated SAP-specific schema and data conversion capabilities. Option B is incorrect because SAP Landscape Transformation (SLT) is primarily for real-time data replication and does not provide the same level of integrated conversion.

Option D is incorrect because export/import requires significant manual data conversion and transformation, increasing effort and risk.

Full explanation →
561
MCQmedium

An SAP administrator is creating an IAM policy to allow SAP basis users to manage their own SAP EC2 instances. The policy above is intended to allow users to start, stop, and reboot instances tagged with their username. However, users report that they cannot start instances. What is the MOST likely reason?

A.The condition references ${aws:username} which is not available in the context.
B.The condition key ec2:ResourceTag/SAPSystem is not valid.
C.The actions are not correct for managing instances.
D.The ec2:StartInstances action does not support resource-level permissions; it requires a separate condition or a wildcard resource.
AnswerD

StartInstances does not support resource-level permissions, so the condition doesn't apply.

Why this answer

The ec2:StartInstances action does not support resource-level permissions in IAM policies. This means that even if the policy specifies a condition based on tags, the condition is ignored for StartInstances, and the action will be denied unless the resource element is set to a wildcard ('*'). AWS documentation explicitly states that StartInstances, StopInstances, and RebootInstances require a wildcard resource or a separate condition to allow the action, making option D the correct answer.

Exam trap

The trap here is that candidates assume all EC2 actions support resource-level permissions and conditions, but AWS explicitly excludes certain actions like StartInstances, StopInstances, and RebootInstances from this support, requiring a wildcard resource or a separate condition to function correctly.

How to eliminate wrong answers

Option A is wrong because ${aws:username} is a valid IAM policy variable that resolves to the IAM user's username, and it is available in the request context for most AWS services, including EC2. Option B is wrong because ec2:ResourceTag/SAPSystem is a valid condition key that can be used to filter EC2 instances based on their tags, and there is no inherent issue with its syntax. Option C is wrong because the actions ec2:StartInstances, ec2:StopInstances, and ec2:RebootInstances are indeed the correct actions for starting, stopping, and rebooting EC2 instances, so the actions themselves are not the problem.

Full explanation →
562
MCQhard

A company is migrating an SAP NetWeaver system to AWS. The system uses NFS for shared file systems. They want to minimize latency and maximize throughput for SAP profiles and transport directories. Which AWS storage service should they use?

A.Amazon Simple Storage Service (S3)
B.Amazon FSx for NetApp ONTAP
C.Amazon Elastic Block Store (EBS)
D.Amazon Elastic File System (EFS)
AnswerB

FSx for ONTAP delivers high-performance NFS with features optimized for SAP.

Why this answer

Amazon FSx for NetApp ONTAP provides a fully managed NFS solution with low latency and high throughput, ideal for SAP NetWeaver shared file systems like profiles and transport directories. Option A (S3) is object storage, not NFS. Option C (EBS) is block storage, not a shared file system.

Option D (EFS) is NFS but lacks the performance optimization and enterprise features of FSx for NetApp ONTAP for SAP workloads.

Full explanation →
563
MCQmedium

A technology company is migrating its SAP Business Warehouse (BW) system to AWS. The system includes an SAP HANA database (2 TB) and multiple application servers. The migration plan is to use SAP HANA System Replication (HSR) for the database and AWS Application Migration Service (MGN) for the application servers. The network connection is AWS Direct Connect with 1 Gbps bandwidth. During a test migration, the HSR replication is working, but the MGN replication for one of the application servers is failing with an error: "The agent cannot communicate with the MGN service endpoint." The source server is a Windows Server 2016 machine. The administrator has verified that the source server has internet connectivity. Which action is most likely to resolve the issue?

A.Reinstall the MGN agent on the source server.
B.Configure an HTTP proxy on the source server to route traffic through the corporate proxy.
C.Create a VPC endpoint for AWS Application Migration Service in the source VPC.
D.Change the source server's OS to Linux.
AnswerB

Configuring an HTTP proxy on the source server allows the MGN agent to route traffic through the corporate proxy, which is likely required to reach the MGN service endpoint. This directly addresses the communication failure while maintaining internet connectivity.

Why this answer

The error indicates the MGN agent cannot reach the service endpoint. Since the source server has internet connectivity, the issue is likely that outbound traffic to the MGN endpoint is blocked by a corporate proxy or firewall. Configuring an HTTP proxy on the source server (option B) allows the agent to route traffic through the corporate proxy, which is a common requirement in enterprise environments.

Option C (creating a VPC endpoint) is not applicable because the source server is on-premises, not in a VPC. Option A (reinstalling the agent) does not address the connectivity issue. Option D (changing OS) is irrelevant.

Full explanation →
564
Multi-Selecthard

A company runs its SAP HANA database on an EC2 instance with EBS volumes. The database requires consistent high IOPS and low latency. The system is currently using EBS gp2 volumes, but performance is inconsistent during peak loads. Which TWO steps should the administrator take to improve storage performance? (Choose 2)

Select 2 answers
A.Increase the size of the existing gp2 volumes to increase baseline IOPS.
B.Take regular EBS snapshots to improve performance.
C.Configure multiple EBS volumes in a RAID 0 stripe set.
D.Migrate to EBS io2 Block Express volumes with provisioned IOPS.
E.Enable EBS-optimized on the EC2 instance.
AnswersC, D

Correct. Configuring multiple EBS volumes in a RAID 0 stripe set combines I/O across volumes, thereby increasing throughput and IOPS to handle peak loads.

Why this answer

Options C and D are correct. C: Configuring multiple EBS volumes in a RAID 0 stripe set increases throughput by combining I/O across volumes, which helps with peak loads. D: Migrating to EBS io2 Block Express volumes with provisioned IOPS ensures consistent high IOPS and low latency.

A is incorrect because increasing gp2 volume size only raises baseline IOPS but does not guarantee consistent high IOPS during peak loads. B is incorrect because regular EBS snapshots do not improve performance and can degrade it during snapshot creation. E is incorrect because EBS-optimized instances are enabled by default for current generation instances and are not a storage performance improvement step.

Full explanation →
565
MCQhard

An SAP administrator notices that the SAP application server is experiencing high latency when reading from the shared /sapmnt directory mounted from an Amazon EFS file system. The EFS file system is in General Purpose performance mode and uses Bursting throughput mode. The administrator checks CloudWatch metrics and sees that BurstCreditBalance is near zero. What is the most cost-effective solution to address the latency?

A.Increase the size of the EFS file system to increase the burst credit balance
B.Enable Provisioned Throughput mode on the EFS file system
C.Mount the /sapmnt directory from an Amazon EBS gp3 volume instead
D.Change the EFS performance mode to Max I/O
AnswerB

Provides consistent throughput without burst credits.

Why this answer

The BurstCreditBalance is near zero, indicating the file system has exhausted its burst credits under Bursting throughput mode. Enabling Provisioned Throughput mode allows you to specify a consistent throughput level independent of the file system's size, eliminating reliance on burst credits and resolving the latency for the /sapmnt directory. This is the most cost-effective solution as it avoids the need to increase storage size (Option A) or migrate to a different storage service.

Exam trap

The trap here is that candidates may assume increasing storage size (Option A) is the only way to increase throughput under Bursting mode, overlooking that Provisioned Throughput mode provides a direct, cost-effective alternative without requiring additional storage.

How to eliminate wrong answers

Option A is wrong because increasing the size of the EFS file system does increase the baseline throughput and burst credit accumulation rate, but it is not the most cost-effective solution; it would require significant additional storage capacity that may not be needed, and the latency issue is due to credit exhaustion, not insufficient size. Option C is wrong because mounting /sapmnt from an Amazon EBS gp3 volume would require re-architecting the shared filesystem for SAP, as EBS volumes are single-AZ and cannot be shared across multiple EC2 instances in different Availability Zones, which is critical for SAP application servers. Option D is wrong because changing the performance mode to Max I/O improves throughput for highly parallel workloads but does not address the underlying throughput credit exhaustion; Max I/O mode is designed for large-scale, concurrent access patterns and may not provide consistent low latency for the /sapmnt directory's metadata-heavy operations.

Full explanation →
566
Multi-Selectmedium

A company is migrating a critical Oracle database to Amazon RDS for Oracle. The database is 2 TB in size and has a high transaction rate. The migration must have minimal downtime. Which TWO AWS services or features should be used to achieve this? (Choose two.)

Select 2 answers
A.AWS DataSync
B.AWS Database Migration Service (DMS) with ongoing replication
C.AWS Snowball
D.AWS Server Migration Service (SMS)
E.AWS Schema Conversion Tool (SCT)
AnswersB, E

AWS DMS supports ongoing replication to keep the target database in sync with the source, enabling minimal downtime migration.

Why this answer

AWS Database Migration Service (DMS) with ongoing replication (change data capture) is the correct approach for minimal downtime migration. AWS Schema Conversion Tool (SCT) is used for schema conversion, which is necessary when moving to RDS Oracle. Option A (AWS DataSync) is for file/object transfers, not suitable for database migration.

Option C (AWS Snowball) is for large offline data transfer, not suitable for minimal downtime. Option D (AWS Server Migration Service) is for server migration, not databases.

Full explanation →
567
MCQeasy

The exhibit shows a CloudFormation template snippet. During migration, the SAP application server fails to start because the root volume is too small. What is the most efficient fix?

A.Manually resize the EBS volume via the AWS Console and then update the stack.
B.Modify the template to increase VolumeSize to 100 and update the stack.
C.Stop the instance, modify the volume size, and start the instance.
D.Delete the stack and create a new one with a larger volume.
AnswerB

Updating the stack with a new template is the correct method.

Why this answer

Modifying the template to increase the volume size and updating the stack is the proper Infrastructure as Code approach. Option A is wrong because modifying the volume directly is not recommended for CloudFormation-managed resources. Option C is wrong because stopping the instance is not necessary for volume modification, but the template should be updated.

Option D is wrong because deleting and recreating is less efficient.

Full explanation →
568
MCQhard

A company is migrating its SAP HANA database to AWS. The database is 3 TB and runs on a dedicated physical server. The company wants to use a HANA-certified EC2 instance. Which instance type should the company choose?

A.i3.16xlarge
B.x1e.32xlarge
C.m5.24xlarge
D.r5.24xlarge
AnswerB

The x1e.32xlarge is SAP HANA-certified with 1952 GB of memory, making it suitable for a 3 TB HANA database after accounting for compression and system overhead.

Why this answer

The x1e.32xlarge instance is SAP HANA-certified and provides 1952 GB of memory, which is sufficient for a 3 TB HANA database when considering compression and overhead. The other options either lack sufficient memory or are not HANA-certified. Specifically, the i3.16xlarge (488 GB) is not HANA-certified for large instances, the m5.24xlarge (384 GB) has too little memory, and the r5.24xlarge (768 GB) also lacks the required capacity.

Full explanation →
569
MCQhard

An SAP system on AWS is experiencing increased latency in database queries. The operations team suspects that the RDS for Oracle instance is hitting its maximum connections limit. Which CloudWatch metric should be monitored to confirm this?

A.CPUCreditBalance
B.DatabaseConnections
C.SwapUsage
D.ReadIOPS
AnswerB

DatabaseConnections shows the number of connections; if it reaches the limit, new queries are queued.

Why this answer

The DatabaseConnections metric in Amazon CloudWatch tracks the number of database sessions currently connected to the RDS for Oracle instance. When this metric approaches or reaches the value of the `max_connections` parameter (or the Oracle-specific `sessions` and `processes` limits), new connections are rejected, causing application-side latency as queries queue or fail. Monitoring this metric directly confirms whether the maximum connections limit is being hit.

Exam trap

The trap here is that candidates often confuse performance metrics like IOPS or CPU with connection limits, assuming high latency must be caused by resource contention rather than a hard connection cap, which is a distinct and common RDS scaling issue.

How to eliminate wrong answers

Option A is wrong because CPUCreditBalance is a burstable instance metric that measures accumulated CPU credits, not database connection counts; low CPU credits cause throttling, not connection limit errors. Option C is wrong because SwapUsage measures the amount of swap space used on the instance, which relates to memory pressure, not connection limits; high swap usage can cause performance degradation but does not indicate that the maximum connections threshold has been reached. Option D is wrong because ReadIOPS measures the number of read I/O operations per second, which reflects storage throughput and can indicate disk contention, but it does not track the number of active database connections.

Full explanation →
570
MCQeasy

An SAP administrator needs to grant an external auditor read-only access to view the configuration of all AWS resources in the account. Which IAM policy should be used?

A.ReadOnlyAccess
B.AdministratorAccess
C.PowerUserAccess
D.ViewOnlyAccess
AnswerA

This provides read-only access to all AWS services, suitable for auditors.

Why this answer

AWS managed policy `ReadOnlyAccess` grants read-only access to all AWS services and resources.

Full explanation →
571
MCQhard

A company is migrating a multi-tier application to AWS. The application includes a load balancer, web servers, and an Oracle database. The migration plan includes using AWS DMS for the database. During the initial full load, the DMS task fails with an error indicating insufficient memory. The source database is on an EC2 instance with 4 GB RAM. What should the migration team do to resolve this issue?

A.Disable LOB support in the DMS task
B.Split the migration into multiple smaller tasks
C.Increase the size of the DMS replication instance
D.Increase the memory of the source EC2 instance
AnswerC

More memory on the replication instance can handle large data loads.

Why this answer

The error 'insufficient memory' during the initial full load in AWS DMS typically indicates that the replication instance does not have enough memory to handle the data volume or LOB processing. Increasing the size of the DMS replication instance provides more memory for caching, transformation, and LOB handling, directly resolving the resource constraint without altering the source database or task structure.

Exam trap

The trap here is that candidates may mistakenly think the error refers to the source database's memory (Option D) or that disabling LOBs (Option A) is a quick fix, when in fact the DMS replication instance's memory is the bottleneck and must be scaled up.

How to eliminate wrong answers

Option A is wrong because disabling LOB support would prevent the migration of Large Objects, which may be required for the Oracle database, and the error is about insufficient memory, not LOB configuration. Option B is wrong because splitting the migration into multiple smaller tasks does not address the root cause of insufficient memory on the replication instance; it only reduces the data per task but still requires adequate memory for each task. Option D is wrong because the source EC2 instance's memory (4 GB RAM) is not the limiting factor; AWS DMS runs on a separate replication instance, and the error originates from the DMS task, not the source database host.

Full explanation →
572
MCQhard

A company is migrating a multi-tier web application to AWS. The web tier uses sticky sessions. The application tier uses a shared session store. Which architecture ensures high availability and scalability?

A.Use an Application Load Balancer with sticky sessions enabled, and store sessions on each EC2 instance.
B.Use a Classic Load Balancer with sticky sessions and store sessions in RDS.
C.Use an Application Load Balancer with sticky sessions and Amazon ElastiCache for session storage.
D.Use Amazon CloudFront with origin failover and store sessions in S3.
AnswerC

Correct. The Application Load Balancer provides sticky sessions. Amazon ElastiCache is a distributed in-memory cache ideal for a shared session store, supporting high availability and scalability.

Why this answer

An Application Load Balancer (ALB) supports sticky sessions, and Amazon ElastiCache provides a scalable, low-latency, distributed session store that is shared across instances, ensuring high availability and scalability.

Option A is incorrect because storing sessions on each EC2 instance does not provide a shared session store; if an instance fails, its sessions are lost.

Option B is incorrect because while the Classic Load Balancer supports sticky sessions and RDS can be used as a session store, RDS is not optimized for high-throughput session data and the Classic Load Balancer lacks advanced features like path-based routing and is considered legacy.

Option D is incorrect because Amazon CloudFront is a content delivery network (CDN) and is not designed for session storage; S3 is object storage with higher latency, making it unsuitable for real-time session data.

Full explanation →
573
MCQmedium

An SAP administrator needs to configure high availability for SAP NetWeaver AS ABAP. They plan to use AWS services. Which combination of services is required?

A.Amazon EFS and Pacemaker on EC2
B.AWS Global Accelerator and Auto Scaling
C.Elastic Load Balancing and Amazon Route 53
D.Amazon EBS Multi-Attach volumes
AnswerA

EFS provides shared storage; Pacemaker manages clustering.

Why this answer

SAP NetWeaver AS ABAP high availability on AWS requires shared storage for the /sapmnt and /usr/sap/trans directories, which Amazon EFS provides via NFSv4, and a cluster manager like Pacemaker on EC2 to orchestrate failover between the primary and secondary application servers. This combination ensures that the SAP central services (ASCS and ERS) can fail over seamlessly in the event of an instance or availability zone failure.

Exam trap

The trap here is that candidates often confuse general AWS HA services (like ELB or Auto Scaling) with the specific shared-storage and cluster-manager requirements of SAP NetWeaver AS ABAP, leading them to overlook the necessity of a cluster filesystem (EFS) and a cluster resource manager (Pacemaker).

How to eliminate wrong answers

Option B is wrong because AWS Global Accelerator and Auto Scaling are designed for improving network performance and scaling web/application tiers, not for orchestrating SAP application-level failover or providing the shared file system required by SAP NetWeaver AS ABAP. Option C is wrong because Elastic Load Balancing and Amazon Route 53 handle traffic distribution and DNS routing, but they do not provide the shared storage (e.g., /sapmnt) or the cluster fencing and resource management needed for SAP ASCS/ERS high availability. Option D is wrong because Amazon EBS Multi-Attach volumes support concurrent attachment to multiple EC2 instances only within a single Availability Zone, which violates the cross-AZ high availability requirement for SAP; additionally, SAP NetWeaver AS ABAP requires a distributed file system like NFS, not block-level shared storage.

Full explanation →
574
MCQhard

A company runs its SAP Business Suite on AWS with an Oracle database on an EC2 instance. The database is stored on multiple EBS volumes configured as a RAID 0 array. The company wants to migrate the database to SAP HANA on a new EC2 instance. The SAP HANA instance will use EBS volumes for data and log storage. The current Oracle database size is 500 GB. The company needs to minimize downtime during the migration. Which migration strategy should they use?

A.Use AWS Application Migration Service to migrate the entire EC2 instance.
B.Use SAP HANA System Replication to replicate data from the source Oracle database to the target HANA database.
C.Export the Oracle database to a flat file and import into SAP HANA.
D.Use AWS Database Migration Service (DMS) to migrate from Oracle to SAP HANA.
AnswerD

AWS DMS can migrate from Oracle to SAP HANA with ongoing replication, allowing minimal downtime by keeping the source online during migration.

Why this answer

AWS DMS supports heterogeneous migration from Oracle to SAP HANA, enabling minimal downtime through continuous replication. SAP HANA System Replication (HSR) cannot be used because it only works between HANA systems, not from Oracle. Export/import causes extended downtime, and Application Migration Service is for server-level migration, not database-level.

Full explanation →
575
MCQhard

A company runs SAP ERP on AWS with a multi-AZ deployment. The SAP application tier uses Auto Scaling groups with a custom AMI. After a recent patching of the AMI, the new instances fail to start the SAP application services. What should the administrator do to ensure that the new AMI correctly starts SAP services?

A.Use AWS Systems Manager Run Command to start SAP services on running instances
B.Configure the SAP service to start via a cron job on the AMI
C.Modify the Auto Scaling group launch configuration to include a user data script that starts SAP services
D.Create a new AMI with SAP services set to auto-start and update the Auto Scaling group
AnswerC

User data runs at boot and can start services, decoupling the startup from the AMI.

Why this answer

Using user data scripts to start SAP services ensures that new instances automatically start SAP correctly regardless of AMI changes.

Full explanation →
576
MCQeasy

An SAP administrator wants to monitor the CPU utilization of SAP application servers using Amazon CloudWatch. What is the minimum configuration required?

A.Install and configure the AWS CloudWatch Agent on each SAP application server.
B.Set up an AWS Lambda function to query EC2 metrics from the CloudWatch API.
C.Configure SAP Solution Manager to export metrics to CloudWatch.
D.Enable EC2 detailed monitoring from the AWS Management Console.
AnswerA

Agent collects OS-level metrics and sends to CloudWatch.

Why this answer

The AWS CloudWatch Agent must be installed and configured on each SAP application server to collect custom metrics like CPU utilization at the granularity and frequency required for SAP monitoring. CloudWatch by default only provides basic EC2 metrics (every 5 minutes) and cannot capture OS-level or application-level CPU utilization without the agent. The agent sends metrics via the CloudWatch PutMetricData API, enabling detailed monitoring of SAP-specific performance counters.

Exam trap

The trap here is that candidates often confuse enabling EC2 detailed monitoring (Option D) with collecting OS-level metrics, not realizing that detailed monitoring only increases the frequency of hypervisor-level metrics and does not provide the application-specific CPU data required for SAP monitoring.

How to eliminate wrong answers

Option B is wrong because AWS Lambda querying EC2 metrics from the CloudWatch API would only retrieve existing EC2-level metrics (e.g., CPUUtilization at 5-minute intervals) and cannot provide the OS-level or SAP-process-level CPU utilization needed; it adds no new data collection capability. Option C is wrong because SAP Solution Manager does not natively export metrics to CloudWatch; it uses its own monitoring infrastructure (e.g., CCMS, Wily Introscope) and would require a custom integration or adapter to forward data to CloudWatch. Option D is wrong because enabling EC2 detailed monitoring (1-minute intervals) only increases the frequency of hypervisor-level CPU metrics, not OS-level or application-specific CPU utilization, and still cannot capture SAP application server process metrics.

Full explanation →
577
Multi-Selectmedium

A company runs SAP HANA on AWS and wants to implement a backup strategy that ensures point-in-time recovery (PITR) with minimal data loss. Which TWO AWS services should be used?

Select 2 answers
A.Amazon S3
B.AWS Backup
C.AWS Storage Gateway
D.Amazon RDS
E.Amazon EBS snapshots
AnswersB, E

AWS Backup can automate EBS snapshots and manage retention policies.

Why this answer

To implement point-in-time recovery (PITR) for SAP HANA on AWS with minimal data loss, you need both volume-level backups and automated management. Amazon EBS snapshots provide volume-level backups that can be used for PITR if taken frequently. AWS Backup centralizes and automates the scheduling and retention of these snapshots.

Therefore, the correct combination is AWS Backup (option B) and Amazon EBS snapshots (option E). Note that Amazon S3 can store SAP HANA backups but does not directly provide PITR for volumes; AWS Storage Gateway is used for hybrid storage; and Amazon RDS is a managed database service, not applicable for SAP HANA. Thus, the correct answers are B and E.

Full explanation →
578
Multi-Selecthard

A company is migrating a legacy three-tier web application to AWS. The application uses a MySQL database and stores session data in the database. The company wants to minimize database load and improve scalability. Which TWO actions should the company take to achieve these goals?

Select 2 answers
A.Configure Amazon RDS Multi-AZ for high availability.
B.Use Auto Scaling for the web server tier to handle variable traffic.
C.Use Amazon ElastiCache to store session data instead of the database.
D.Use Amazon RDS read replicas to offload read traffic from the primary database.
E.Use Amazon ElastiCache to cache frequently accessed database queries.
AnswersC, E

Storing session data in ElastiCache reduces database write load and improves performance.

Why this answer

Storing session data in the database creates unnecessary write load and latency. Amazon ElastiCache (Memcached or Redis) provides an in-memory key-value store that is ideal for transient session data, reducing database load and improving application scalability by offloading session management from the persistent MySQL layer.

Exam trap

The trap here is that candidates often confuse high-availability features (Multi-AZ) or read-scaling (read replicas) with load reduction, failing to recognize that session data is write-heavy and requires a dedicated in-memory store like ElastiCache to truly minimize database load.

Full explanation →
579
MCQmedium

A company is running SAP on AWS and wants to ensure that the system meets the SLA for availability. The operations team needs to monitor the health of the SAP application stack (ASCS, PAS, DB). Which AWS service can provide a centralized dashboard to visualize the health and performance metrics?

A.Amazon CloudWatch Dashboards
B.AWS CloudTrail
C.AWS Config
D.Amazon S3
AnswerA

CloudWatch Dashboards can display metrics from various AWS services.

Why this answer

Amazon CloudWatch Dashboards can aggregate metrics from multiple sources, including custom SAP metrics, into a single centralized view, making it ideal for monitoring SAP application stack health and performance. Option A is correct. Option B (AWS CloudTrail) records API calls for auditing, not real-time health monitoring.

Option C (AWS Config) evaluates resource configurations for compliance, not performance. Option D (Amazon S3) is object storage, not a monitoring dashboard.

Full explanation →
580
Multi-Selecthard

An SAP system on AWS is using an SAP HANA database. The database administrator wants to monitor memory usage and receive alerts when memory consumption exceeds 90%. Which THREE services can be used together to achieve this?

Select 3 answers
A.Amazon Simple Notification Service (SNS)
B.Amazon CloudWatch custom metrics for SAP HANA
C.AWS Config
D.Amazon CloudWatch Alarms
E.Amazon Inspector
AnswersA, B, D

SNS can send notifications when alarms are triggered.

Why this answer

Amazon Simple Notification Service (SNS) is correct because it provides a fully managed pub/sub messaging service that can deliver alerts (e.g., via email, SMS, or HTTP endpoints) when triggered by an Amazon CloudWatch Alarm. In this scenario, once the CloudWatch Alarm detects that memory usage exceeds 90%, it publishes to an SNS topic, which then sends the notification to the database administrator. This enables real-time alerting without requiring custom polling or additional infrastructure.

Exam trap

The trap here is that candidates may confuse AWS Config (which audits configuration changes) with CloudWatch (which monitors performance metrics), or assume Amazon Inspector can monitor memory usage because it runs assessments on EC2 instances, but Inspector only checks for security vulnerabilities, not resource utilization.

Full explanation →
581
MCQeasy

An SAP administrator needs to back up the SAP HANA database daily with a retention period of 30 days. The backups must be stored in a cost-effective manner and be instantly accessible for recovery. Which AWS service should be used?

A.Amazon S3 Glacier
B.Amazon S3 Standard
C.Amazon S3 Glacier Deep Archive
D.Amazon EBS Snapshots
AnswerB

Amazon S3 Standard provides durable, cost-effective storage with immediate access, ideal for SAP HANA database backups that require a 30-day retention and instant recovery.

Why this answer

Amazon S3 Standard provides durable, cost-effective storage with immediate access, ideal for SAP HANA database backups that require a 30-day retention and instant recovery. Option A is incorrect because Amazon S3 Glacier has retrieval delays (minutes to hours) that do not meet the 'instantly accessible' requirement. Option C is incorrect because Amazon S3 Glacier Deep Archive has very long retrieval times (hours to days), unsuitable for instant recovery.

Option D is incorrect because Amazon EBS Snapshots are designed for EC2 block-level volumes, not for directly storing HANA database backups as files.

Full explanation →
582
MCQhard

Refer to the exhibit. An IAM policy is attached to a role used by an EC2 instance running SAP. The instance is unable to start or stop other EC2 instances. What is the most likely cause?

A.The policy does not allow `ec2:RebootInstances` which is required to start instances.
B.The policy does not include `iam:PassRole` permission.
C.The policy does not include `ec2:DescribeInstances` for instances in other regions.
D.The policy resource ARN specifies a specific region (us-east-1), but the instances are in a different region.
AnswerD

The resource ARN 'arn:aws:ec2:us-east-1:123456789012:instance/*' restricts the policy to instances in us-east-1 only.

Why this answer

The policy allows `ec2:StartInstances` and `ec2:StopInstances` on all resources (`"Resource": "*"`), so it should work. However, the condition is missing. The issue could be that the policy does not include the `ec2:DescribeInstanceStatus` action needed to check status before starting/stopping. But the question says it cannot start/stop; the policy seems correct. Actually, the most likely cause is that the role does not have permission to pass the instance profile (iam:PassRole) if the instance uses an instance profile, but that is not shown. Alternatively, the policy is missing `ec2:DescribeInstances` which is needed for the AWS CLI to list instances? But it is included. Let's think: The policy allows start/stop on all resources, so it should work. Possibly the issue is that the EC2 instance has an instance profile that the role cannot pass. But the question says the policy is attached to the role; the role is used by the instance. The policy looks correct. However, the exhibit might be missing the `ec2:DescribeInstanceStatus` action, but that is not required for start/stop. I'll choose option C: The policy does not include `ec2:DescribeInstances` for the specific instances? No, it's there. Actually, the correct answer is that the policy does not include `ec2:DescribeInstances` for the instances? It does. Hmm. Let's look at the options: A) The policy does not allow `ec2:StartInstances` on specific instance IDs. B) The policy does not include `ec2:DescribeInstances` for the instances. C) The policy does not include `ec2:RebootInstances`. D) The policy does not allow `s3:GetObject` on the backup bucket. None of these are correct. I need to adjust the exhibit to make the question work. Let me modify the exhibit to include a condition that restricts the resource to only certain instances. For example:

```

{

"Version": "2012-10-17",

"Statement": [

{

"Effect": "Allow",

"Action": [

"ec2:DescribeInstances",

"ec2:StartInstances",

"ec2:StopInstances",

"ec2:RebootInstances"

],

"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*"

},

{

"Effect": "Allow",

"Action": [

"s3:GetObject",

"s3:PutObject"

],

"Resource": "arn:aws:s3:::sap-backup-bucket/*"

}

]

}

```

Then the question: The instance is unable to start or stop instances in another region. Why? Because the resource ARN specifies us-east-1, but the instances are in eu-west-1. That is plausible. I'll use that.

Full explanation →
583
MCQhard

A company runs SAP on AWS and wants to monitor operating system metrics such as memory usage, disk space, and process status using Amazon CloudWatch. Which agent configuration is required on the SAP application and database servers to send these metrics to CloudWatch?

A.AWS X-Ray Daemon
B.EC2 Launch Agent
C.Amazon CloudWatch Agent
D.AWS Systems Manager Agent
AnswerC

CloudWatch Agent collects OS-level metrics.

Why this answer

The Amazon CloudWatch Agent can be installed on EC2 instances to collect operating system-level metrics such as memory usage, disk space, and process status and send them to CloudWatch. Option A is incorrect because the AWS X-Ray Daemon is used for distributed tracing, not metric collection. Option B is incorrect because the EC2 Launch Agent is used to run startup scripts, not to collect metrics.

Option D is incorrect because the AWS Systems Manager Agent is used for management and patching, not for sending custom metrics to CloudWatch.

Full explanation →
584
MCQmedium

A company is running SAP NetWeaver on AWS. The system uses an SAP HANA database. The operations team needs to monitor the database performance and receive alerts when specific metrics exceed thresholds. Which AWS service should be used to collect and analyze SAP HANA metrics?

A.Amazon CloudWatch
B.Amazon Inspector
C.AWS CloudTrail
D.AWS Config
AnswerA

CloudWatch can collect and alarm on custom metrics from HANA.

Why this answer

Amazon CloudWatch is the correct service because it can collect, monitor, and analyze SAP HANA database metrics using the AWS CloudWatch Agent or the SAP HANA CloudWatch integration. By configuring custom metrics or using the SAP HANA monitoring views, operations teams can set CloudWatch Alarms to trigger notifications when specific thresholds are exceeded, enabling proactive performance management.

Exam trap

The trap here is that candidates often confuse AWS CloudTrail (audit logging) or AWS Config (configuration compliance) with monitoring services, but only CloudWatch provides the metric collection, alarm, and notification capabilities required for real-time SAP HANA performance monitoring.

How to eliminate wrong answers

Option B is wrong because Amazon Inspector is a vulnerability management service that scans workloads for software vulnerabilities and unintended network exposure, not for collecting or analyzing database performance metrics. Option C is wrong because AWS CloudTrail records API activity and governance events for auditing, not real-time database performance monitoring or metric collection. Option D is wrong because AWS Config evaluates and records resource configuration changes for compliance and auditing, not for monitoring runtime database performance metrics like memory or CPU usage.

Full explanation →
585
MCQhard

An SAP workload on AWS uses an Auto Scaling group for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS) instances. The instances are launched with a custom AMI that includes the SAP software. During a recent failover test, the ASCS instance failed to start after being terminated and re-launched by the Auto Scaling group. The error log indicates that the ASCS instance cannot find the quorum device. What is the most likely cause of this issue?

A.The quorum device (EBS volume) was not re-attached or was not available in the same Availability Zone as the new ASCS instance.
B.The instance type of the new ASCS instance is different from the original, causing incompatibility with the SAP kernel.
C.The ASCS instance does not have a public IP address, preventing communication with the quorum device.
D.The Security Group associated with the ASCS instance does not allow inbound traffic on the quorum port.
AnswerA

In a multi-AZ setup, the quorum device must be accessible to the new instance; if it's an EBS volume, it is tied to a specific AZ.

Why this answer

In an SAP on AWS high-availability setup, the ASCS and ERS instances rely on a shared quorum device (typically an EBS volume or an Amazon EFS file system) to maintain cluster state and prevent split-brain scenarios. When the Auto Scaling group terminates and re-launches the ASCS instance, the new instance must have the quorum device attached and be in the same Availability Zone as the EBS volume (since EBS volumes are AZ-specific). If the quorum device is not re-attached or is in a different AZ, the SAP cluster cannot find it, causing the ASCS instance to fail to start.

Exam trap

The trap here is that candidates may think the issue is related to network connectivity or security groups, but the real problem is the AZ-specific nature of EBS volumes and the requirement to re-attach the quorum device to the new instance.

How to eliminate wrong answers

Option B is wrong because the SAP kernel is not tied to a specific instance type; it runs on any supported instance type as long as the architecture (x86_64) and operating system match. Option C is wrong because the quorum device is accessed via block storage (EBS) or shared file system (EFS), not over the network using a public IP address; communication with the quorum device does not require a public IP. Option D is wrong because the quorum device is not accessed via a network port; it is a storage resource, so security group rules for inbound traffic are irrelevant to quorum device discovery.

Full explanation →
586
MCQeasy

A company wants to automate the start and stop of SAP EC2 instances during non-business hours to reduce costs. Which AWS service is best suited for this task?

A.AWS Auto Scaling
B.Amazon CloudWatch Events
C.AWS Instance Scheduler
D.AWS Systems Manager
AnswerC

Instance Scheduler is designed specifically for scheduled start/stop.

Why this answer

(AWS Instance Scheduler) is correct because it is a dedicated solution to automate instance start/stop on a schedule. Option A (AWS Auto Scaling) is for scaling based on demand, not scheduling. Option B (Amazon CloudWatch Events) can trigger Lambda but requires custom code.

Option D (AWS Systems Manager) can run commands but is not purpose-built for scheduling.

Full explanation →
587
Multi-Selectmedium

An SAP system administrator needs to monitor the CPU and memory utilization of SAP EC2 instances. Which TWO AWS services can be used to collect and visualize these metrics? (Choose TWO.)

Select 2 answers
A.AWS Trusted Advisor
B.Amazon CloudWatch
C.AWS CloudTrail
D.Amazon Managed Service for Prometheus
E.AWS Config
AnswersB, D

CloudWatch can collect CPU and memory metrics via the CloudWatch Agent.

Why this answer

The correct answers are B (Amazon CloudWatch) and D (Amazon Managed Service for Prometheus). Amazon CloudWatch can collect CPU and memory metrics from EC2 instances using the CloudWatch agent, and Amazon Managed Service for Prometheus can scrape and store metrics from those instances. Option A is incorrect because AWS Trusted Advisor provides best-practice checks, not granular metrics.

Option C is incorrect because AWS CloudTrail records API activity. Option E is incorrect because AWS Config tracks configuration changes.

Full explanation →
588
MCQeasy

A company is deploying SAP S/4HANA on AWS. They need to choose the appropriate storage for the database volume to meet high IOPS and low latency requirements. Which AWS storage service should they use?

A.Amazon EFS
B.Amazon S3
C.Amazon EBS io2 Block Express volumes
D.Amazon EBS gp3 volumes
AnswerC

io2 Block Express provides high IOPS and low latency for SAP HANA.

Why this answer

Amazon EBS io2 Block Express volumes are designed for mission-critical SAP HANA workloads, offering up to 256,000 IOPS per volume and sub-millisecond latency. They provide 99.999% durability and meet the high-performance requirements for SAP S/4HANA database volumes on AWS.

Exam trap

The trap here is that candidates may choose gp3 volumes (Option D) because they are cost-effective and offer baseline performance, but they fail to recognize that SAP HANA requires the ultra-high IOPS and sub-millisecond latency that only io2 Block Express can guarantee for production workloads.

How to eliminate wrong answers

Option A is wrong because Amazon EFS is a file-level NFS storage service that does not provide the high IOPS or low latency required for SAP HANA database volumes, and it is not supported as a direct database storage option for SAP S/4HANA. Option B is wrong because Amazon S3 is an object storage service with higher latency and lower IOPS, unsuitable for transactional database workloads like SAP HANA that require block-level access. Option D is wrong because Amazon EBS gp3 volumes, while offering baseline performance and burst capability, cannot match the maximum IOPS (16,000 per volume) and consistent sub-millisecond latency of io2 Block Express, making them inadequate for high-performance SAP HANA requirements.

Full explanation →
589
MCQhard

A company is migrating a legacy SAP ERP system with a large ABAP codebase to AWS. They want to use the same SAP version without re-implementation. Which migration strategy should they adopt?

A.Refactor / Re-architect
B.Retire
C.Replatform (Lift, tinker, and shift)
D.Rehost (Lift-and-shift)
AnswerD

Rehost moves the system unchanged, preserving the existing codebase and version.

Why this answer

Lift-and-shift (rehost) moves the existing system as-is to AWS, preserving the ABAP codebase and SAP version. Replatform may involve minor changes. Refactor/Re-architect would require re-implementation.

Retire is not applicable.

Full explanation →
590
MCQmedium

A company is migrating an SAP S/4HANA system to AWS. The system requires high availability across two Availability Zones. Which AWS service should be used to attach a block-level storage volume that can be concurrently accessed by two EC2 instances in active/passive mode?

A.Use Amazon FSx for NetApp ONTAP to provide a shared block storage volume accessible from both AZs.
B.Use Amazon FSx for Windows File Server with a multi-AZ file system.
C.Use Amazon S3 as a shared block storage device.
D.Use Amazon EBS Multi-Attach to attach a single EBS volume to both EC2 instances across AZs.
AnswerA

FSx for NetApp ONTAP supports shared block storage across AZs.

Why this answer

Amazon FSx for NetApp ONTAP provides a shared block-level storage volume that can be concurrently accessed by multiple EC2 instances across different Availability Zones using the iSCSI protocol. In an active/passive SAP S/4HANA setup, this allows the passive instance to mount the same storage volume and take over if the active instance fails, meeting the high-availability requirement across two AZs.

Exam trap

The trap here is that candidates often assume Amazon EBS Multi-Attach can work across Availability Zones, but it is strictly limited to instances within the same AZ, making it unsuitable for multi-AZ high availability in SAP workloads.

How to eliminate wrong answers

Option B is wrong because Amazon FSx for Windows File Server provides file-level (SMB) storage, not block-level storage, and is not designed for concurrent block-level access by EC2 instances in an active/passive SAP scenario. Option C is wrong because Amazon S3 is an object storage service, not a block-level storage device, and cannot be attached as a block volume to EC2 instances. Option D is wrong because Amazon EBS Multi-Attach only supports attaching a single EBS volume to multiple EC2 instances within the same Availability Zone, not across different AZs, and it does not support active/passive failover across AZs.

Full explanation →
591
Matchingmedium

Match the SAP HANA deployment option to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Single large instance with more memory

Multiple nodes in a cluster for horizontal scaling

Certified hardware with flexible storage options

Fully managed cloud database service

Why these pairings

SAP HANA on AWS can be deployed as Scale-up (single large instance) or Scale-out (multiple smaller instances). High availability is achieved through HANA System Replication (HSR) to a standby, while backup uses cloud-native methods like EBS snapshots. Distractors swap definitions to test understanding.

Full explanation →
592
Multi-Selecthard

An SAP application on AWS needs to be migrated to a new virtual private cloud (VPC). The SAP system uses SAProuter to connect to SAP support. Which THREE components must be updated or re-configured during the migration to ensure uninterrupted connectivity?

Select 3 answers
A.Adjust the S3 bucket policy to allow access from the new VPC.
B.Update the Amazon Route 53 DNS records for the SAP application and database servers.
C.Modify the SAProuter configuration (e.g., saprouttab) to use the new IP address or hostname of the SAProuter instance.
D.Recreate IAM roles for the SAP application servers.
E.Update security group rules and network ACLs to allow SAP traffic in the new VPC.
AnswersB, C, E

When instances are migrated to a new VPC, their private IP addresses may change; DNS records must be updated to maintain name resolution.

Why this answer

Updating Amazon Route 53 DNS records ensures that the SAP application and database servers can be reached using their new private or public IP addresses in the new VPC. Without this update, clients and SAP support connections via SAProuter would fail due to DNS resolution pointing to the old VPC's IPs, causing connectivity interruptions.

Exam trap

The trap here is that candidates may overlook DNS updates (Option B) as a critical step, assuming IP addresses are static, or mistakenly think IAM roles (Option D) or S3 policies (Option A) are relevant to network-level connectivity during a VPC migration.

Full explanation →
593
Multi-Selectmedium

Which TWO of the following are valid strategies to improve the availability of an SAP HANA database on AWS?

Select 2 answers
A.Implement automatic failover using SAP HANA System Replication.
B.Use Amazon RDS for HANA with Multi-AZ deployment.
C.Take daily snapshots of the HANA data volume.
D.Configure SAP HANA System Replication across two Availability Zones.
E.Use a larger EC2 instance type for the HANA server.
AnswersA, D

Automatic failover is a key HA feature.

Why this answer

SAP HANA System Replication (HSR) provides synchronous or asynchronous replication of the HANA database to a secondary system. Automatic failover can be configured using HSR with tools like Pacemaker or AWS-specific scripts, ensuring high availability by switching to the standby instance if the primary fails. This is a native SAP HANA feature that does not rely on external services.

Exam trap

The trap here is that candidates may confuse backup strategies (snapshots) or performance scaling (larger instances) with high availability, or incorrectly assume Amazon RDS supports SAP HANA, when in fact HANA requires manual EC2 deployment and native replication features.

Full explanation →
594
Multi-Selecthard

A company is running SAP ERP on AWS with a multi-AZ deployment using Amazon EFS for shared transport directories. The system administrator notices that the SAP transport directory mounted via EFS is experiencing high latency during peak hours. The EFS file system is using the Standard storage class. Which combination of steps should the administrator take to reduce latency? (Choose TWO.)

Select 2 answers
A.Use EFS Bursting Throughput mode.
B.Move the EFS file system to the One Zone storage class.
C.Change the storage class to EFS Standard-IA.
D.Enable provisioned throughput on the EFS file system.
E.Switch the EFS performance mode to Max I/O.
AnswersB, E

One Zone reduces latency when all clients are in the same AZ.

Why this answer

Moving the EFS file system to the One Zone storage class places the data in the same Availability Zone as the EC2 instances, reducing network latency for the SAP transport directory. Option E is correct because switching the performance mode to Max I/O increases the parallel processing capability of the file system, which reduces latency during peak hours. Option A is incorrect because Bursting Throughput mode is the default and does not specifically address high latency; it provides a baseline throughput with bursting credits.

Option C is incorrect because Standard-IA is an infrequent access storage class with higher retrieval latencies, unsuitable for a continuously used transport directory. Option D is incorrect because provisioned throughput increases throughput capacity but does not directly reduce latency; Max I/O performance mode is the intended solution for latency reduction.

Full explanation →
595
Multi-Selecthard

An organization is migrating an SAP HANA database to AWS. They plan to use AWS DMS for ongoing replication from an on-premises Oracle database to an Amazon RDS for Oracle instance. Which THREE configurations are necessary for DMS to perform ongoing replication? (Choose THREE.)

Select 3 answers
A.An Amazon SNS topic for replication alerts
B.A target endpoint for the Amazon RDS for Oracle instance
C.An Amazon CloudWatch dashboard to monitor replication
D.A replication instance in AWS
E.A source endpoint for the on-premises Oracle database
AnswersB, D, E

Required to connect to target.

Why this answer

AWS DMS requires a source endpoint to connect to the on-premises Oracle database, a target endpoint for the Amazon RDS for Oracle instance, and a replication instance to perform the data migration and ongoing replication. Option A (SNS topic) is for notifications, not a requirement for DMS replication. Option C (CloudWatch dashboard) is for monitoring, not a requirement.

Therefore, the three necessary configurations are the source endpoint (E), the target endpoint (B), and the replication instance (D).

Full explanation →
596
Multi-Selecthard

Which THREE steps should be taken to monitor the performance of an SAP HANA database on AWS? (Choose 3).

Select 3 answers
A.Install the CloudWatch agent on the EC2 instance to collect memory and disk metrics.
B.Set up AWS Direct Connect to monitor network latency.
C.Enable AWS CloudTrail to track all API calls to the HANA database.
D.Monitor EBS volume queue length and IOPS using CloudWatch.
E.Configure CloudWatch alarms for SAP HANA metrics like CPU and memory usage.
AnswersA, D, E

The agent collects OS-level performance data.

Why this answer

The correct steps to monitor SAP HANA performance on AWS include: A) installing the CloudWatch agent on the EC2 instance to collect OS-level memory and disk metrics; D) monitoring EBS volume queue length and IOPS using CloudWatch to detect storage bottlenecks; and E) configuring CloudWatch alarms for SAP HANA-specific metrics such as CPU and memory usage to get alerts on performance issues. Option B is incorrect because AWS Direct Connect is a network connectivity service, not a monitoring tool. Option C is incorrect because AWS CloudTrail tracks API calls for auditing, not performance metrics.

Full explanation →
597
MCQhard

An SAP HANA database on AWS requires a backup strategy that includes incremental backups to minimize storage costs. The database is large (2 TB) and the backup window is short. Which AWS service or feature is most suitable for performing incremental backups of SAP HANA?

A.Amazon S3 Lifecycle policies
B.AWS Backup
C.SAP HANA backup to Amazon S3
D.Amazon EBS Snapshots
AnswerD

EBS Snapshots are incremental and capture only changed blocks, ideal for large databases.

Why this answer

D is correct because Amazon EBS Snapshots provide native incremental backup capability at the block level, which is ideal for large SAP HANA databases (2 TB) with short backup windows. Snapshots capture only changed blocks since the last snapshot, minimizing storage costs and backup time, and can be automated via AWS Backup or custom scripts.

Exam trap

The trap here is that candidates may choose AWS Backup (Option B) because it is a managed backup service, but it does not natively provide the block-level incremental efficiency of EBS Snapshots for large databases like SAP HANA, and the question specifically asks for the most suitable service for incremental backups with minimal storage costs.

How to eliminate wrong answers

Option A is wrong because Amazon S3 Lifecycle policies manage object lifecycle transitions (e.g., moving to Glacier) but do not perform backups or incremental snapshots of SAP HANA data. Option B is wrong because AWS Backup supports EBS snapshots but does not natively perform SAP HANA application-consistent backups without additional scripting or integration; it is a management service, not the most suitable for direct incremental backup of SAP HANA. Option C is wrong because SAP HANA backup to Amazon S3 uses file-based backups (e.g., via SAP HANA Backint), which are not inherently incremental at the block level and require full backups or log backups, leading to higher storage costs and longer backup windows compared to EBS Snapshots.

Full explanation →
598
MCQhard

Refer to the exhibit. An administrator has run a query to check the backup status of an SAP HANA database. The output shows that the backup on January 17 failed. What is the most appropriate next step?

A.Restore the database from the last successful backup to ensure data integrity.
B.Investigate the backup logs for the failed backup to identify the cause.
C.Immediately restart the failed backup from the catalog.
D.Ignore the failure because subsequent backups are successful.
AnswerB

Understanding the root cause is essential before taking further action.

Why this answer

A failed backup requires investigation to determine the root cause before taking any corrective action. Checking the backup logs will provide details on why the backup failed, such as insufficient permissions, disk space issues, or configuration errors. Option A is incorrect because restoring the database is premature without diagnosing the failure.

Option C is incorrect because restarting the backup without investigation may lead to the same failure. Option D is incorrect because ignoring the failure could allow a recurring issue to affect future backups.

Full explanation →
599
MCQeasy

A company is migrating its SAP application from on-premises to AWS. The migration plan includes rehosting the SAP application servers and re-platforming the database to Amazon RDS for SAP. Which AWS service should the company use to automate the deployment of SAP application servers?

A.AWS OpsWorks
B.AWS Launch Wizard for SAP
C.Amazon EC2 Auto Scaling
D.AWS CloudFormation
AnswerB

Launch Wizard automates SAP deployment, including application servers.

Why this answer

AWS Launch Wizard for SAP (Option B) is a service that automates the deployment of SAP infrastructure, including application servers. Option A (AWS OpsWorks) is for configuration management with Chef/Puppet, not SAP-specific. Option C (Amazon EC2 Auto Scaling) handles scaling, not initial deployment.

Option D (AWS CloudFormation) is a general infrastructure-as-code tool but lacks SAP-specific guidance.

Full explanation →
600
MCQmedium

A company is migrating a legacy mainframe application to AWS. The application uses COBOL and VSAM files. Which AWS service can best replicate the VSAM file system?

A.Amazon S3 with Object Lock
B.Amazon FSx for NetApp ONTAP
C.Amazon Elastic Block Store (EBS)
D.Amazon Elastic File System (EFS)
AnswerB

FSx for ONTAP supports VSAM files via NFS.

Why this answer

Amazon FSx for NetApp ONTAP provides a fully managed NetApp ONTAP file system that supports NFS, SMB, and iSCSI protocols. VSAM files from mainframe can be migrated to an NFS share on FSx for ONTAP, preserving file access patterns. Option A is incorrect because Amazon S3 is object storage and does not provide a file system interface required for VSAM.

Option C is incorrect because Amazon EBS is block-level storage that attaches to EC2 instances and does not offer a native file system for VSAM. Option D is incorrect because Amazon EFS is a POSIX-compliant file system but does not support the specific VSAM file structures and features needed.

Full explanation →
Page 7

Page 8 of 22

Page 9

All pages

12345678910111213141516171819202122

Practice PAS-C01 by domain

Target a specific domain to shore up weak areas.

Design of SAP Workloads on AWSTechnologyMigrationOperations and Maintenance
See all domains with question counts →