Courseiva

AWS Certified SAP on AWS Specialty PAS-C01 (PAS-C01) — Questions 601–675

1616 questions total · 22pages · All types, answers revealed

Take a mock examExam hub
Page 8

Page 9 of 22

Page 10
601
Multi-Selectmedium

A company is migrating an SAP system to AWS and needs to ensure that the SAP application servers are highly available. Which TWO actions should the company take? (Choose 2.)

Select 2 answers
A.Place all application servers in a single Availability Zone
B.Use a single large EC2 instance for all application servers
C.Deploy application servers across multiple Availability Zones
D.Use an Elastic Load Balancer to distribute traffic across application servers
E.Use Amazon EFS as the shared /sapmnt filesystem
AnswersC, D

Multi-AZ deployment provides HA.

Why this answer

For SAP application server high availability, deploy application servers across multiple Availability Zones (Option C) to protect against AZ failures. Use an Elastic Load Balancer (Option D) to distribute traffic across the healthy application servers, enabling automatic failover. Option A (single AZ) does not provide fault tolerance.

Option B (single large EC2 instance) is a single point of failure. Option E (Amazon EFS) is for shared filesystems like /sapmnt, but application servers are typically stateless and do not require EFS for HA; EFS supports HA but is not the primary action for application server HA itself.

Full explanation →
602
MCQeasy

A company is running SAP ERP on AWS and wants to ensure that their SAP system is backed up according to SAP best practices. Which backup method should they use for the SAP HANA database?

A.AWS Backup service
B.EBS snapshots of the data volumes
C.SAP HANA Backint to Amazon S3
D.Amazon S3 replication
AnswerC

Backint provides integrated, consistent backups.

Why this answer

SAP HANA Backint to Amazon S3 is the correct backup method because it integrates directly with SAP HANA's native backup interface (Backint), allowing SAP to manage backup and restore operations natively. This approach supports SAP best practices for HANA database backups, including full, incremental, and differential backups, and leverages Amazon S3 for durable, scalable storage without requiring external scripting or manual snapshot coordination.

Exam trap

The trap here is that candidates often assume EBS snapshots are sufficient for database backups because they work for other databases, but SAP HANA requires application-consistent backups via Backint to maintain transactional integrity and support SAP's certified recovery procedures.

How to eliminate wrong answers

Option A is wrong because AWS Backup service does not natively support SAP HANA database backups via the Backint API; it can only back up EBS volumes or EC2 instances, which are not crash-consistent for HANA without application-level coordination. Option B is wrong because EBS snapshots of data volumes are not application-consistent for SAP HANA unless the database is frozen or stopped, which violates SAP best practices for online backups and can lead to data corruption or recovery failures. Option D is wrong because Amazon S3 replication is a storage-level feature for copying objects between S3 buckets, not a backup method for SAP HANA databases; it does not interact with HANA's backup interface or ensure transactional consistency.

Full explanation →
603
Multi-Selecteasy

A company wants to monitor the performance of its SAP HANA database on AWS. Which THREE Amazon CloudWatch metrics should be monitored to ensure optimal database performance?

Select 3 answers
A.NetworkIn
B.CPUCreditBalance
C.EBSIOBalance%
D.DiskReadOps
E.MemoryUtilization
AnswersA, B, C

Monitors incoming network traffic to the instance.

Why this answer

CPUCreditBalance indicates if the instance is using burstable CPU. EBSIOBalance% shows I/O credit balance for EBS volumes. NetworkIn/Out monitor network traffic.

These are key for HANA performance. MemoryUtilization is not a standard CloudWatch metric (needs custom agent). DiskReadOps is also not standard.

Full explanation →
604
MCQhard

A company runs SAP on AWS and needs to implement a disaster recovery (DR) strategy with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. The primary site is in us-east-1 and the DR site in us-west-2. The SAP HANA database is 5 TB. Which approach meets these requirements cost-effectively?

A.Use Amazon S3 cross-region replication to copy database backups every 15 minutes.
B.Use AWS Database Migration Service (DMS) for ongoing replication to a HANA instance in us-west-2.
C.Take EBS snapshots of the data volume every 15 minutes and copy them to us-west-2.
D.Configure HANA System Replication in async mode between the primary and DR instances over AWS Direct Connect.
AnswerD

Async replication meets RPO and RTO with fast takeover.

Why this answer

(HANA System Replication with async mode over AWS Direct Connect) is correct because it enables continuous data replication with a low RPO (asynchronous replication can be sub-minute), and the RTO can be within 2 hours by failing over to the DR instance. It is cost-effective as it uses existing HANA licenses and compute/storage resources. Option A (S3 cross-region replication of backups) may achieve the RPO, but restoring from backups typically exceeds the 2-hour RTO.

Option B (AWS DMS) is not designed for SAP HANA replication; it is intended for homogeneous or heterogeneous database migrations. Option C (EBS snapshots every 15 minutes) may not consistently meet the RPO due to snapshot creation time and the time required to copy snapshots across regions, and RTO is high because the volume must be created and attached before recovery.

Full explanation →
605
MCQhard

An SAP administrator notices that the SAP application server is failing health checks in the Elastic Load Balancer (ELB) target group. The application server runs on an EC2 instance behind an Application Load Balancer. The health check path is /sap/public/ping. What is the most likely cause of the failure?

A.SAProuter is blocking the health check requests
B.The health check path is incorrectly configured in the target group
C.The EC2 instance security group does not allow inbound traffic from the ELB
D.The SAP application (e.g., disp+work) is not running on the instance
AnswerD

If the SAP application (disp+work) is not running, it cannot respond to the health check, causing the ELB to mark it unhealthy.

Why this answer

If the SAP application (disp+work) is not running, it cannot respond to the health check, causing the ELB to mark it unhealthy. Option A is incorrect because SAProuter does not block health check requests; it routes connections to the SAP system. Option B is incorrect because the health check path is correctly configured as /sap/public/ping, which is the standard SAP health check endpoint.

Option C is incorrect because security groups not allowing inbound traffic from ELB would cause connection timeout, not a health check failure on a specific path.

Full explanation →
606
MCQeasy

A company is running SAP HANA on an EC2 instance with an EBS volume for data storage. The company wants to take daily snapshots of the EBS volume for backup. However, they are concerned about data consistency because the database is running. What should they do to ensure consistent snapshots?

A.Freeze the filesystem using fsfreeze before taking the snapshot.
B.Stop the EC2 instance before taking the snapshot.
C.Use AWS Backup with pre-scripts and post-scripts to quiesce SAP HANA.
D.Take the snapshot while the database is running without any preparation.
AnswerC

AWS Backup can run scripts to ensure application consistency.

Why this answer

Using AWS Backup with pre-scripts and post-scripts to quiesce SAP HANA ensures application-consistent snapshots by pausing I/O and flushing buffers before the snapshot. Option A is wrong because simply freezing the filesystem with fsfreeze does not guarantee database consistency without application-level quiescing. Option B is wrong because stopping the instance causes downtime and is unnecessary with proper quiescing.

Option D is wrong because taking a snapshot while the database is running without preparation may result in an inconsistent state.

Full explanation →
607
MCQmedium

Refer to the exhibit. An SAP administrator runs the AWS CLI command to retrieve the DatabaseConnections metric for an RDS for SAP ASE instance. The output shows a Sum statistic over 5-minute periods. What is the average number of connections per minute during this hour?

A.545
B.10
C.50
D.52
AnswerB

Total connections sum = 545, total minutes = 55, average = 9.9 ≈ 10.

Why this answer

The Sum statistic over each 5-minute period is the total number of connections during that period. To get average per minute, divide each sum by 5. However, the question asks for the average number of connections per minute over the entire hour.

The sum of all datapoints is 45+48+52+50+47+49+51+53+50+48+52 = 545. There are 11 datapoints, each covering 5 minutes, so total minutes = 11*5 = 55 minutes (but actually from 00:05 to 00:55 inclusive, that's 11 periods * 5 = 55 minutes). The total connections sum = 545.

Average connections per minute = 545 / 55 ≈ 9.9. But the options are whole numbers: 10, 50, 52, 545. 10 is closest. Correct answer is 10.

Full explanation →
608
MCQhard

A company is migrating a legacy SAP ECC 6.0 system running on IBM AIX with DB2 to SAP S/4HANA on AWS. The current DB2 database is 4 TB and has extensive use of stored procedures and triggers. The migration window is 48 hours. Which migration strategy is MOST appropriate?

A.Use SAP Software Update Manager (SUM) with Database Migration Option (DMO) to migrate and convert to SAP HANA.
B.Use AWS Server Migration Service (AWS SMS) to replicate the entire AIX server to AWS, then install SAP HANA.
C.Use SAP Landscape Transformation (SLT) to replicate data to SAP HANA in real time and then cut over.
D.Use AWS Database Migration Service (AWS DMS) with ongoing replication to migrate the database to SAP HANA.
AnswerA

SUM with DMO is the SAP-recommended tool for migrating from any DB to SAP HANA while converting the system.

Why this answer

For migrating SAP ECC to S/4HANA with a database migration, SAP's Software Update Manager (SUM) with Database Migration Option (DMO) is the recommended tool. DMO performs both the software update (to S/4HANA) and the database migration (from DB2 to HANA) in a single process. Option B (AWS SMS) only replicates the server, not the database conversion.

Option C (SLT) is for ongoing replication, not one-time migration. Option D (AWS DMS) does not support SAP-specific database objects like stored procedures and triggers.

Full explanation →
609
MCQmedium

A company is designing an SAP HANA disaster recovery (DR) solution on AWS. The primary site is in us-east-1, and the DR site is in us-west-2. The RPO is 15 minutes, and the RTO is 2 hours. Which AWS service should be used for replicating the SAP HANA database to the DR site?

A.SAP HANA System Replication with log shipping using Amazon S3 or direct VPN connection.
B.Amazon S3 Cross-Region Replication for database backup files.
C.Amazon EBS snapshots replicated to us-west-2 via Amazon Data Lifecycle Manager.
D.AWS Database Migration Service (DMS) with ongoing replication.
AnswerA

SAP HANA System Replication provides synchronous or asynchronous replication with low RPO.

Why this answer

SAP HANA System Replication (HSR) is the native, SAP-supported mechanism for real-time database replication, capable of achieving sub-minute RPOs by continuously shipping log entries to a secondary system. When combined with a direct VPN connection or Amazon S3 as a log shipping target, it meets the 15-minute RPO and 2-hour RTO requirements for disaster recovery across AWS regions. This is the only option that provides synchronous or near-synchronous replication of the HANA database itself, not just backups or snapshots.

Exam trap

The trap here is that candidates often confuse backup replication (S3 CRR or EBS snapshots) with live database replication, failing to recognize that SAP HANA System Replication is the only AWS-supported method that provides the required RPO by replicating transactional logs in near real-time.

How to eliminate wrong answers

Option B is wrong because Amazon S3 Cross-Region Replication replicates only static backup files (e.g., data or log backups) stored in S3, not the live database transactions, so it cannot achieve a 15-minute RPO for ongoing changes. Option C is wrong because Amazon EBS snapshots replicated via Data Lifecycle Manager capture point-in-time disk states, but they are not application-consistent for SAP HANA without additional scripting, and the snapshot frequency (typically every 1-24 hours) cannot meet a 15-minute RPO. Option D is wrong because AWS Database Migration Service (DMS) with ongoing replication is designed for heterogeneous database migrations and does not support SAP HANA as a source for continuous change data capture (CDC) replication.

Full explanation →
610
Multi-Selecteasy

A company is migrating an SAP system to AWS using the SAP Landscape Reorganization (LaMa) tool. Which TWO actions can LaMa perform during the migration?

Select 2 answers
A.Perform a heterogeneous system copy.
B.Migrate SAP systems from on-premises to AWS with minimal downtime.
C.Convert the source database from Oracle to SAP HANA.
D.Provision AWS EC2 instances and storage automatically.
E.Automatically update DNS records after migration.
AnswersB, D

LaMa orchestrates the migration process.

Why this answer

LaMa is designed to orchestrate system migrations with minimal downtime by automating the cloning and replication process. It uses storage-level snapshots or database replication to keep the source system running until the final cutover, which is why Option B is correct.

Exam trap

The trap here is confusing LaMa's homogeneous copy capability with heterogeneous migration or database conversion, leading candidates to select A or C, which require separate tools not part of LaMa's feature set.

Full explanation →
611
MCQmedium

An SAP system is deployed across multiple Availability Zones using an Application Load Balancer. The operations team wants to perform a blue/green deployment of a new SAP application version with zero downtime. Which AWS service should be used?

A.AWS Elastic Beanstalk
B.AWS CloudFormation
C.AWS CodeDeploy
D.AWS OpsWorks
AnswerA

Elastic Beanstalk supports blue/green deployments with environment swapping.

Why this answer

AWS Elastic Beanstalk supports blue/green deployments. Option B (CloudFormation) is for infrastructure management. Option C (CodeDeploy) can do blue/green but is more complex and less integrated for SAP.

Option D (OpsWorks) is for Chef/Puppet management.

Full explanation →
612
MCQmedium

A company is designing an SAP S/4HANA workload on AWS. The system must be highly available within a single AWS Region. Which architecture ensures automatic failover for the SAP Central Services (ASCS) instance?

A.Place an Application Load Balancer (ALB) in front of two ASCS instances in different Availability Zones.
B.Deploy ASCS on a single EC2 instance with multiple Elastic Network Interfaces (ENIs).
C.Use Amazon CloudFront to distribute traffic to multiple ASCS instances in different Availability Zones.
D.Configure Amazon Route 53 with health checks to failover to a secondary ASCS instance in a different Availability Zone.
AnswerD

Route 53 health checks can monitor the primary ASCS and automatically route traffic to a standby instance in another AZ.

Why this answer

Amazon Route 53 with health checks can monitor the primary ASCS instance and automatically fail over DNS resolution to a secondary ASCS instance in a different Availability Zone. This provides the necessary automatic failover for SAP Central Services (ASCS) without requiring a shared filesystem or cluster manager, as Route 53 health checks detect instance or service failure and update DNS records accordingly.

Exam trap

The trap here is that candidates often assume a load balancer (ALB) is required for high availability, but SAP ASCS uses proprietary protocols that ALB cannot inspect or health-check, making DNS-based failover with Route 53 the correct AWS-native approach.

How to eliminate wrong answers

Option A is wrong because an Application Load Balancer (ALB) operates at Layer 7 and cannot properly handle the proprietary SAP-specific protocols (e.g., Message Server and Enqueue Server) used by ASCS; ALB does not support the required health checks or session persistence for SAP Central Services. Option B is wrong because deploying ASCS on a single EC2 instance with multiple Elastic Network Interfaces (ENIs) does not provide any failover capability; it only adds network redundancy within the same instance, which is a single point of failure. Option C is wrong because Amazon CloudFront is a content delivery network (CDN) designed for static and dynamic web content distribution, not for routing SAP proprietary traffic to ASCS instances; it cannot perform health checks or failover for SAP services.

Full explanation →
613
MCQeasy

A company wants to automate the creation of an SAP application server in AWS. Which AWS service is best suited for this task?

A.AWS Elastic Beanstalk
B.AWS CloudFormation
C.AWS CodeDeploy
D.AWS OpsWorks
AnswerB

Infrastructure as code to automate resource creation.

Why this answer

AWS CloudFormation is best suited for automating the creation of an SAP application server because it allows you to define the entire infrastructure as code (IaC) using a template (JSON or YAML). This enables consistent, repeatable provisioning of EC2 instances, security groups, storage, and networking configurations required for SAP, and supports integration with AWS Systems Manager for post-deployment configuration.

Exam trap

The trap here is that candidates often confuse AWS OpsWorks (which is for configuration management) with infrastructure provisioning, or they mistakenly think Elastic Beanstalk can handle SAP workloads because it automates EC2 creation, but it lacks the granular control over OS and SAP-specific settings required for certified SAP environments.

How to eliminate wrong answers

Option A is wrong because AWS Elastic Beanstalk is a PaaS service designed for web applications and does not support the custom OS-level configurations, kernel parameters, and SAP-specific file systems (e.g., /usr/sap, /sapmnt) required for an SAP application server. Option C is wrong because AWS CodeDeploy is a deployment automation service for updating applications on existing compute resources, not for provisioning new infrastructure like EC2 instances for SAP. Option D is wrong because AWS OpsWorks is a configuration management service based on Chef/Puppet, but it lacks native support for the complex, multi-tier SAP architecture and does not provide the same level of infrastructure orchestration as CloudFormation for SAP landscapes.

Full explanation →
614
MCQmedium

A company is running SAP HANA on AWS and wants to encrypt the EBS volumes at rest. The company requires key rotation and audit logging of key usage. Which solution should be used?

A.Use AWS Certificate Manager
B.Use AWS CloudHSM to manage keys
C.Use S3 server-side encryption
D.Use EBS encryption with AWS KMS
AnswerD

KMS provides key rotation and CloudTrail logging for key usage.

Why this answer

Amazon EBS encryption with AWS KMS provides key management, rotation, and audit logging. S3 server-side encryption does not apply to EBS. AWS CloudHSM is for hardware-based key management but does not provide automatic key rotation.

AWS Certificate Manager is for SSL/TLS certificates.

Full explanation →
615
MCQhard

A company is migrating an SAP Business Warehouse (BW) system running on an on-premises HANA database to AWS. The migration must be completed with less than 1 hour of downtime. The source database is 3 TB. The company has established a 10 Gbps AWS Direct Connect connection. The SAP system uses a custom ABAP program that must be migrated as well. The company wants to minimize manual intervention. Which approach should be taken?

A.Use AWS DMS to replicate the HANA database to Amazon RDS for HANA.
B.Set up SAP HANA System Replication (HSR) to replicate the database to AWS, then perform a takeover.
C.Export the HANA database to files, transfer via Direct Connect, and import on EC2.
D.Use AWS Application Migration Service (MGN) to replicate the entire server.
AnswerB

HSR provides synchronous replication with minimal downtime.

Why this answer

The correct approach is to use SAP HANA System Replication (HSR) to set up continuous replication from the on-premises HANA database to an SAP HANA database running on Amazon EC2. Once the systems are synchronized, a takeover can be performed with minimal downtime (seconds), meeting the <1 hour requirement. AWS DMS does not support SAP HANA as a source for ongoing replication without schema conversion, and Amazon RDS for HANA is not a supported target.

Exporting and importing the database would require significant downtime due to the 3 TB data transfer and import time. AWS Application Migration Service (MGN) replicates the entire server, but for an SAP HANA database, HSR is a more appropriate and optimized method for database migration with minimal downtime.

Full explanation →
616
MCQeasy

Refer to the exhibit. An administrator is trying to restore an SAP HANA backup from an S3 bucket but receives an AccessDenied error. The administrator has full EC2 and S3 permissions via an IAM role attached to the EC2 instance. What is the most likely cause?

A.The S3 bucket is in a different region than the EC2 instance
B.The backup file is encrypted with SSE-C and the key is not provided
C.The administrator used the wrong S3 command syntax
D.The S3 bucket has a bucket policy that denies access from the instance's IAM role
AnswerD

A bucket policy can explicitly deny access even if IAM allows.

Why this answer

The AccessDenied error indicates an authorization failure. Since the IAM role grants full EC2 and S3 permissions, the issue is likely an explicit deny in the S3 bucket policy that overrides the IAM allow. Option A (different region) would cause a redirect error, not AccessDenied.

Option B (SSE-C) would produce an encryption-related error. Option C (wrong command syntax) would result in a syntax error. Therefore, option D is correct: the bucket policy denies access from the instance's IAM role.

Full explanation →
617
MCQhard

A company is migrating an SAP Business Suite system to AWS. They are using AWS DMS to replicate data from the on-premises SAP ASE database to Amazon RDS for SAP ASE. After the initial load, the ongoing replication shows a latency of several hours. The source database is heavily used. Which action should the migration team take to reduce replication latency?

A.Increase the size of the DMS replication instance
B.Disable transaction logging on the source database
C.Increase the source database transaction log size and enable log compression
D.Use multiple DMS tasks for parallel replication
AnswerC

Larger log files and compression reduce log waits and improve replication throughput.

Why this answer

Increasing instance size may help but does not address the root cause of log space. Option B is incorrect because disabling transaction logging is not feasible for a production database and would break replication. Option C is correct because increasing the source database's transaction log size and enabling log compression reduces log waits and helps DMS keep up with changes.

Option D is incorrect because using multiple tasks may cause conflicts and is not a direct solution for latency caused by log retention issues.

Full explanation →
618
Multi-Selectmedium

An SAP administrator is setting up monitoring for SAP HANA using Amazon CloudWatch. Which TWO metrics are available from the SAP HANA CloudWatch integration?

Select 2 answers
A.Number of SQL Queries per Second
B.Number of Active Connections
C.Average Response Time
D.Memory Usage
E.Disk Usage
AnswersD, E

Available as a standard metric, such as hana_memory_used_percent.

Why this answer

The SAP HANA CloudWatch integration provides metrics related to resource utilization, including Memory Usage and Disk Usage. Metrics such as Number of SQL Queries per Second, Number of Active Connections, and Average Response Time are not directly available from the standard integration and require additional custom monitoring solutions.

Full explanation →
619
MCQhard

An SAP system on AWS uses a shared file system (e.g., /sapmnt) that must be accessible from multiple EC2 instances. Which storage solution provides the highest availability and scalability?

A.Amazon EFS
B.Amazon S3 with S3 File Gateway
C.AWS Storage Gateway file gateway
D.Amazon EBS with multi-attach enabled
AnswerA

EFS provides a scalable NFS file system with automatic replication across AZs, ideal for /sapmnt.

Why this answer

Amazon EFS provides a fully managed, NFS-based shared file system that is accessible from multiple EC2 instances across Availability Zones, offering high availability and automatic scalability. For SAP /sapmnt, EFS supports the required POSIX permissions and concurrent access patterns without single points of failure, unlike block storage or gateway solutions.

Exam trap

The trap here is that candidates often choose EBS with multi-attach because it seems to allow shared access, but they overlook its single-AZ limitation and the 16-instance cap, which fails the high-availability and scalability requirements for SAP.

How to eliminate wrong answers

Option B is wrong because Amazon S3 with S3 File Gateway presents an S3 bucket as a file share via NFS or SMB, but it introduces a gateway appliance that can become a single point of failure and adds latency, making it unsuitable for the low-latency, high-throughput requirements of SAP /sapmnt. Option C is wrong because AWS Storage Gateway file gateway also relies on a local cache and a gateway endpoint, which does not provide the native multi-AZ resilience and automatic scaling of EFS, and it is not designed for concurrent POSIX-compliant access from many EC2 instances. Option D is wrong because Amazon EBS with multi-attach enabled is limited to a maximum of 16 Nitro-based EC2 instances in a single Availability Zone, and it does not provide cross-AZ access or automatic scalability, making it inadequate for a highly available SAP shared file system.

Full explanation →
620
MCQmedium

An SAP administrator notices that the SAP HANA database is experiencing high I/O latency. The database is running on an EC2 instance with EBS volumes. What is the MOST effective initial step to diagnose the I/O bottleneck?

A.Check the EBS volume queue length in CloudWatch
B.Increase the size of the EBS volumes
C.Switch to instance store volumes
D.Enable detailed monitoring on the EC2 instance
AnswerA

High queue length indicates the volume is overwhelmed, leading to latency.

Why this answer

The first step to diagnose the I/O bottleneck is to check the EBS volume queue length metric in CloudWatch. A high queue length indicates that the volume is saturated and I/O requests are waiting. Option B is incorrect because simply increasing volume size may raise baseline performance but does not directly diagnose the bottleneck and could be wasteful.

Option C is incorrect because switching to instance store volumes is not a diagnostic step and may not be suitable for persistent data. Option D is incorrect because enabling detailed monitoring provides more granular metrics but does not directly indicate I/O saturation; the queue length metric is the key diagnostic.

Full explanation →
621
Multi-Selecthard

A company runs SAP NetWeaver on AWS and uses a Network Load Balancer (NLB) to distribute traffic to multiple application servers. The operations team notices that the NLB is not properly routing traffic to healthy targets. Which three steps should the team take to diagnose the issue? (Choose THREE.)

Select 3 answers
A.Confirm that the target instances are registered in the target group and are in the Available state.
B.Check the security group rules on the target instances to ensure they allow traffic from the NLB's subnet.
C.Verify that the health check settings on the NLB target group are correct (e.g., ping path, port, protocol).
D.Enable cross-zone load balancing on the NLB.
E.Review the CloudWatch metrics for the NLB to see if there are any anomalies.
AnswersA, B, C

Unregistered or stopped instances will not receive traffic.

Why this answer

Target instances must be registered in the target group and in the Available state for traffic to be routed to them. Option B is correct: Security group rules on target instances must allow traffic from the NLB's subnet for health checks and client traffic. Option C is correct: Health check settings (ping path, port, protocol) must be correctly configured so the NLB can determine target health.

Option D is wrong: Cross-zone load balancing distributes traffic across all enabled Availability Zones but does not fix routing to healthy targets. Option E is wrong: CloudWatch metrics can show anomalies but are not a primary diagnostic step for routing to healthy targets; they are more useful for monitoring after initial configuration.

Full explanation →
622
MCQeasy

A company is running SAP Business Suite on AWS using an Oracle database. They need to migrate the Oracle database to SAP HANA as part of an SAP S/4HANA conversion. The current Oracle database size is 5 TB and runs on an r5.8xlarge instance. The target HANA database will run on an r5.24xlarge instance. The company wants to minimize downtime. What is the best approach to migrate the data?

A.Use AWS Database Migration Service (DMS) to continuously replicate data from Oracle to HANA, then switch over.
B.Use SAP Landscape Transformation (SLT) to replicate data in real-time from Oracle to HANA.
C.Use Oracle Data Pump to export the database and import into HANA using SAP HANA studio.
D.Use SAP Software Update Manager (SUM) with the Database Migration Option (DMO) to migrate and upgrade in one step.
AnswerD

SUM with DMO performs the migration and upgrade in a single process, minimizing downtime.

Why this answer

SAP provides the Software Update Manager (SUM) with DMO (Database Migration Option) to perform the migration and upgrade in one step, minimizing downtime. Option A (native Oracle export/import) is time-consuming. Option B (AWS DMS) is not fully supported for SAP HANA as target.

Option C (SAP Landscape Transformation) is for data replication but not for a one-step migration with upgrade. Option D is correct.

Full explanation →
623
MCQhard

An SAP administrator notices that the SAP HANA database is running out of memory frequently. The system is deployed on an EC2 instance with 512 GB of RAM. The HANA memory usage is peaking at 480 GB. What should the administrator do to resolve this issue?

A.Configure a swap file on the instance's root EBS volume
B.Enable HANA memory overcommit and set the memory limit to 90%
C.Migrate to an instance with more memory, such as x1e.32xlarge
D.Reduce the number of HANA table partitions
AnswerC

Correct. Migrating to a larger instance like x1e.32xlarge provides 976 GB of RAM, which comfortably accommodates the current peak of 480 GB and allows for growth. This is the most effective solution to resolve the out-of-memory issue.

Why this answer

The HANA database is peaking at 480 GB on a 512 GB instance, indicating that memory is nearly fully utilized. Enabling memory overcommit and setting the HANA memory limit to 90% (460.8 GB) would still be below the peak usage, potentially causing out-of-memory errors. The most straightforward and reliable solution is to migrate to a larger instance type, such as x1e.32xlarge, which offers 976 GB of RAM, providing sufficient headroom for current and future peak demands.

This aligns with AWS best practices for SAP HANA workloads.

Exam trap

The trap is that candidates might think enabling memory overcommit (Option B) is sufficient, but they overlook that the current peak usage exceeds the 90% limit of the existing instance. The correct approach is to upgrade to a larger instance to provide adequate memory headroom.

How to eliminate wrong answers

Option A is wrong because configuring a swap file on the root EBS volume is not recommended for SAP HANA; HANA is designed to run entirely in memory, and swap usage would cause severe performance degradation and potential data corruption, as HANA does not handle swapping gracefully. Option C is wrong because migrating to a larger instance like x1e.32xlarge (which has 3,904 GB of RAM) is an unnecessary and costly overprovisioning; the current instance has 512 GB and HANA peaks at 480 GB, so the issue is memory management, not capacity. Option D is wrong because reducing the number of HANA table partitions does not address the root cause of memory exhaustion; partitioning affects query performance and data distribution, not the overall memory limit or kernel memory management behavior.

Full explanation →
624
Multi-Selectmedium

A company runs SAP on AWS and wants to automate the monitoring of SAP system health. Which TWO AWS services can be used together to achieve this? (Choose TWO.)

Select 2 answers
A.AWS Config
B.Amazon EC2 Auto Scaling
C.AWS Lambda
D.Amazon CloudWatch
E.Amazon Simple Queue Service (SQS)
AnswersC, D

AWS Lambda can run code in response to CloudWatch metrics, enabling automated actions based on SAP system health.

Why this answer

Options C (AWS Lambda) and D (Amazon CloudWatch) are correct. CloudWatch can collect custom metrics from SAP systems, and Lambda can process and act on those metrics to automate monitoring. Option A (AWS Config) is for compliance and configuration tracking, not monitoring.

Option B (EC2 Auto Scaling) is for scaling instances, not monitoring. Option E (SQS) is a message queue service, not used for monitoring.

Full explanation →
625
Multi-Selectmedium

A company runs an SAP HANA database on an EC2 instance with a 2 TB EBS gp3 volume. The instance type is r5.8xlarge. To improve disk performance for high-throughput write operations, the SAP administrator wants to increase IOPS. Which TWO actions should the administrator take to achieve the required IOPS? (Choose two.)

Select 2 answers
A.Configure the instance to use T2 unlimited credits.
B.Change the volume type to st1 (throughput optimized HDD).
C.Modify the volume to provision additional IOPS up to 16,000.
D.Enable EBS optimization on the EC2 instance.
E.Increase the EBS volume size to increase baseline IOPS.
AnswersC, E

gp3 allows independent IOPS provisioning.

Why this answer

Gp3 volumes allow independent provisioning of IOPS up to 16,000, which directly increases performance for high-throughput write operations. Option E is correct because increasing the volume size also increases the baseline IOPS for gp3 (baseline is 3 IOPS/GiB). Option A is wrong because T2 unlimited credits apply to burstable instances, not EBS performance.

Option B is wrong because st1 is a throughput-optimized HDD volume, not suitable for high IOPS. Option D is wrong because EBS optimization is enabled by default on r5 instances and is not a configurable action.

Full explanation →
626
MCQeasy

A company wants to migrate its SAP ERP system from on-premises to AWS using the SAP Application Performance Standard (SAPS) sizing approach. The current on-premises system has a SAPS rating of 15,000. The company needs to select an EC2 instance type that can provide sufficient compute capacity. Which EC2 instance family is most suitable for SAP HANA workloads?

A.c5
B.p3
C.x1e
D.m5
AnswerC

The x1e instance family is designed for high-memory SAP HANA workloads, offering up to 3,904 GiB of RAM per instance, which directly satisfies the SAPS rating of 15,000 by providing the memory-to-CPU ratio required for in-memory database processing. This constraint—memory capacity for SAPS—differentiates x1e from general-purpose families that lack sufficient RAM for HANA’s columnar storage.

Why this answer

(x1e) is correct because SAP HANA is an in-memory database that requires high memory capacity, and the x1e instance family is memory-optimized and certified for SAP HANA workloads. Option A (c5) is wrong because it is compute-optimized and does not offer the memory required for HANA. Option B (p3) is wrong because it is GPU-optimized for machine learning, not memory-intensive databases.

Option D (m5) is wrong because it is general-purpose and may not provide the dedicated memory or certification for HANA.

Full explanation →
627
MCQeasy

The operations team deploys the CloudFormation template above. After the stack creation completes, the EC2 instance is launched but the SAP application is not running. What is the most likely reason?

A.The UserData script only installs httpd, not the SAP application
B.The security group does not allow inbound traffic to the SAP application port
C.The instance type is not suitable for SAP applications
D.The AMI ID is incorrect
AnswerA

UserData does not install SAP, so it is not running.

Why this answer

The UserData script installs httpd (Apache), not the SAP application. The template does not include any steps to install or start the SAP application. The security group is referenced but not shown; it is likely correct.

The instance type is appropriate for SAP. The AMI ID is valid.

Full explanation →
628
MCQmedium

Refer to the exhibit. An SAP HANA administrator runs the command to check the attached volume. The volume is attached to an instance but the database is reporting low IOPS. What should the administrator check next?

A.Check if the volume size is sufficient; increase to 1 TB.
B.Check if the EC2 instance is EBS-optimized and has sufficient network bandwidth.
C.Check if the volume type should be changed to gp2 for better burst performance.
D.Check if the instance is using the NVMe driver for the EBS volume.
AnswerB

Check if the EC2 instance is EBS-optimized and has sufficient network bandwidth. [CORRECT]

Why this answer

The volume is provisioned with 10,000 IOPS (io1), but the database still reports low IOPS. The most likely cause is that the EC2 instance is not EBS-optimized, which limits the dedicated bandwidth for EBS traffic and can throttle performance. Checking EBS optimization and network bandwidth is the proper next step.

Option A is wrong because volume size does not directly determine IOPS; provisioning size does not increase IOPS. Option C is wrong because changing to gp2 would reduce maximum IOPS (gp2 burst credits would not sustain 10,000 IOPS). Option D is wrong because NVMe drivers are required for EBS volumes on Nitro-based instances; if the instance uses Nitro, the NVMe driver must be installed and configured properly.

However, low IOPS is more likely due to EBS optimization than driver issues.

Full explanation →
629
MCQeasy

An SAP Basis administrator needs to monitor the CPU utilization of all EC2 instances running SAP applications. The team wants to receive alerts when CPU utilization exceeds 80% for 5 consecutive minutes. Which AWS service should be used to set up this monitoring and alerting?

A.Amazon CloudWatch
B.AWS Trusted Advisor
C.AWS CloudTrail
D.AWS Config
AnswerA

CloudWatch can monitor CPU utilization and trigger alarms based on thresholds.

Why this answer

Amazon CloudWatch is the correct service because it can collect CPU utilization metrics from EC2 instances and trigger alarms when the metric exceeds a threshold (e.g., 80% for 5 consecutive minutes). AWS Trusted Advisor provides best-practice recommendations but cannot create custom metric alarms. AWS CloudTrail is for auditing API calls, not monitoring performance metrics.

AWS Config tracks resource configuration changes, not real-time performance metrics.

Full explanation →
630
MCQmedium

A company runs SAP on AWS and has configured automated snapshots of EBS volumes for backup. The operations team discovers that the snapshots are not being deleted after the retention period. Which action should be taken to ensure snapshots are automatically deleted?

A.Set an S3 Lifecycle policy on the snapshots.
B.Use Amazon Data Lifecycle Manager to create a snapshot lifecycle policy.
C.Create a CloudWatch Events rule to invoke a Lambda function for deletion.
D.Configure retention policy directly on the EBS volume.
AnswerB

Correct. Amazon Data Lifecycle Manager (DLM) provides managed lifecycle policies to automatically create and delete EBS snapshots based on retention rules.

Why this answer

Amazon Data Lifecycle Manager (DLM) allows you to create automated lifecycle policies for EBS snapshots, including automatic deletion after a retention period. Option A is incorrect because S3 Lifecycle policies do not apply to EBS snapshots; EBS snapshots are stored in S3 but are managed separately. Option C is incorrect because while possible, using CloudWatch Events and Lambda is not the recommended managed solution; DLM is purpose-built for this task.

Option D is incorrect because there is no native retention policy on EBS volumes; retention is handled through snapshot lifecycle policies.

Full explanation →
631
MCQeasy

An SAP Basis administrator is migrating an SAP NetWeaver system from on-premises to AWS. They want to minimize downtime during the migration of the database. Which AWS service is best suited for this?

A.AWS Server Migration Service (SMS)
B.AWS CloudEndure Migration
C.AWS Database Migration Service (DMS)
D.AWS Snowball Edge
AnswerC

DMS supports ongoing replication for minimal downtime.

Why this answer

AWS Database Migration Service (DMS) is best suited for migrating SAP NetWeaver databases with minimal downtime because it supports heterogeneous and homogeneous database migrations with ongoing replication. DMS can perform a full load of the database and then continuously replicate changes from the source to the target using change data capture (CDC), allowing the source database to remain operational until the cutover. This minimizes downtime to just the final switchover window, which is critical for SAP systems.

Exam trap

The trap here is that candidates confuse AWS DMS with server-level migration tools like SMS or CloudEndure, mistakenly thinking that replicating the entire server is equivalent to database replication, but DMS is the only service that provides native CDC for database-specific minimal downtime migrations.

How to eliminate wrong answers

Option A is wrong because AWS Server Migration Service (SMS) is designed for migrating entire virtual machines as images, not for database-level replication with minimal downtime; it would require taking the SAP database offline to create a consistent snapshot. Option B is wrong because AWS CloudEndure Migration is a block-level replication service for entire servers, not optimized for database-specific replication with CDC; it would replicate the entire OS and application stack, increasing complexity and potential downtime for an SAP database migration. Option D is wrong because AWS Snowball Edge is a physical data transfer device for large-scale offline data movement, not suitable for minimizing downtime as it requires stopping writes to the database, packaging data, and shipping the device, which introduces significant downtime.

Full explanation →
632
MCQhard

An SAP system on AWS is experiencing high latency between the application and database tiers. Both tiers are in the same VPC but in different Availability Zones. What is the most effective way to reduce latency?

A.Move both tiers into the same Availability Zone.
B.Add an Application Load Balancer between tiers.
C.Increase the bandwidth of the EC2 instances.
D.Enable AWS Direct Connect.
AnswerA

Same AZ reduces network distance and latency.

Why this answer

Placing both tiers in the same Availability Zone eliminates cross-AZ data transfer latency. AWS data transfer between AZs incurs additional latency compared to within the same AZ. Option B (adding an Application Load Balancer) would add network hops and potentially increase latency.

Option C (increasing bandwidth) does not reduce latency; bandwidth affects throughput, not latency. Option D (AWS Direct Connect) is used for on-premises connectivity, not for communication within AWS.

Full explanation →
633
MCQmedium

A company runs SAP S/4HANA on AWS. The system uses an SAP HANA database with a single EC2 instance. The operations team needs to implement a disaster recovery (DR) strategy with a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 1 hour. The DR site is in a different AWS Region. The team currently takes daily EBS snapshots and sends them to the DR region using AWS Backup cross-region copy. However, the RPO is not met because snapshots are only taken daily. Which combination of actions should the team take to meet the RPO and RTO?

A.Increase the frequency of EBS snapshots to every hour and use cross-region copy. Also, pre-warm the DR instance by restoring the latest snapshot.
B.Use AWS CloudEndure Disaster Recovery to replicate the entire EC2 instance to the DR region.
C.Set up HANA System Replication (HSR) between the primary and DR regions. In the DR region, maintain a standby HANA instance in sync. Use automated failover scripts.
D.Use Amazon EBS multi-region replication for the HANA data volumes.
AnswerC

HSR provides low RPO (seconds to minutes) and with a pre-provisioned standby, RTO can be under 1 hour.

Why this answer

HANA System Replication (HSR) provides near-continuous data replication, meeting the 15-minute RPO. In the DR region, maintaining a standby HANA instance in sync and using automated failover scripts can achieve the 1-hour RTO. Option A is wrong because increasing EBS snapshot frequency to every hour still does not meet the 15-minute RPO (snapshots are not continuous) and RTO may be longer due to restore time.

Option B is wrong because CloudEndure Disaster Recovery is designed for server-level replication but is not optimized for HANA; it may not ensure database consistency and could impact performance. Option D is wrong because Amazon EBS multi-region replication does not guarantee database consistency for a running SAP HANA database.

Full explanation →
634
MCQeasy

An SAP administrator needs to apply an OS-level security patch to all EC2 instances in an SAP landscape. The administrator wants to automate this process and track compliance. Which AWS service should be used?

A.AWS Systems Manager Patch Manager
B.AWS CodeDeploy
C.AWS OpsWorks
D.AWS Elastic Beanstalk
AnswerA

Patch Manager automates OS patching and provides compliance reporting.

Why this answer

AWS Systems Manager Patch Manager automates OS patching and tracks compliance. Elastic Beanstalk is for application deployments. OpsWorks is for configuration management.

CodeDeploy is for application code. Patch Manager is the correct service for OS patches.

Full explanation →
635
MCQhard

An SAP HANA administrator is troubleshooting a performance issue on an EC2 instance (r5.8xlarge) running SAP HANA. The instance has two EBS volumes attached. Based on the exhibit, which additional information is needed to determine if the instance is optimized for SAP HANA?

A.Whether the instance is EBS-optimized or has dedicated EBS bandwidth.
B.Whether the instance is in a placement group.
C.The volume type and IOPS of the attached EBS volumes.
D.Whether the AMI used is SAP-certified.
AnswerA

SAP HANA requires EBS optimization; the exhibit does not show this attribute (shown in describe-instances as 'EbsOptimized').

Why this answer

SAP HANA requires high and consistent network throughput for data replication and client access, and the instance must be EBS-optimized or have dedicated EBS bandwidth to ensure that EBS I/O does not contend with network I/O. Without this confirmation, the administrator cannot guarantee that the instance meets SAP's performance requirements for HANA workloads, as non-optimized instances share the same network interface for both EBS and data traffic, leading to potential bottlenecks.

Exam trap

The trap here is that candidates often focus on storage parameters like volume type and IOPS (Option C) because they are directly tied to SAP HANA's performance, but the question specifically asks about the instance's optimization, which is a network-level attribute that controls how EBS traffic is handled, not the storage configuration itself.

How to eliminate wrong answers

Option B is wrong because a placement group affects network latency and throughput between instances, but it does not directly impact the instance's ability to handle EBS I/O or its optimization for SAP HANA. Option C is wrong because while volume type and IOPS are important for storage performance, the question specifically asks about the instance's optimization for SAP HANA, which is determined by EBS-optimization or dedicated bandwidth, not the volume specifications themselves. Option D is wrong because the AMI certification ensures the operating system and SAP HANA software are compatible, but it does not address the underlying instance's network and EBS I/O architecture required for optimized performance.

Full explanation →
636
MCQmedium

A company is planning to migrate their SAP ECC system to AWS. They want to minimize downtime and use an automated approach. Which AWS service should be used for the migration?

A.AWS Application Discovery Service
B.AWS CloudFormation
C.AWS Launch Wizard
D.AWS Server Migration Service
AnswerC

Launch Wizard automates SAP deployment and migration with best practices.

Why this answer

AWS Launch Wizard for SAP is the correct choice because it provides a guided, automated deployment of SAP ECC on AWS, including infrastructure provisioning, OS configuration, and SAP installation. It minimizes downtime by automating the entire migration process, from sizing to deployment, using predefined best practices.

Exam trap

The trap here is that candidates often confuse AWS Server Migration Service (SMS) with a general-purpose migration tool, but SMS only handles VM-level replication and cannot automate the SAP-specific installation and configuration steps required for a production SAP ECC migration.

How to eliminate wrong answers

Option A is wrong because AWS Application Discovery Service is used for discovering on-premises application dependencies and usage patterns, not for automating the migration of SAP systems. Option B is wrong because AWS CloudFormation is an infrastructure-as-code service that can provision resources but lacks the SAP-specific automation, sizing, and installation logic required for a seamless SAP migration. Option D is wrong because AWS Server Migration Service (SMS) is designed for migrating virtual machines as images, not for handling the complex, multi-tier SAP ECC system with its database and application layers, and it does not automate SAP-specific configurations.

Full explanation →
637
MCQmedium

An SAP system is running on AWS with a Multi-AZ RDS for SAP HANA database. The operations team notices that the database failover test takes longer than expected. What is the most likely cause of the prolonged failover time?

A.The VPC does not have DNS resolution enabled
B.The application caches the DNS name of the database
C.The RDS instance uses General Purpose SSD storage
D.The database instance size is too small
AnswerB

DNS caching can cause the application to continue using the old endpoint, delaying failover completion.

Why this answer

Multi-AZ failover involves DNS propagation. If the application caches the DNS resolution, it may continue to point to the old primary, causing delays until the cache expires. Database instance size, storage type, and VPC configuration do not directly affect failover time.

Full explanation →
638
Multi-Selectmedium

A company is migrating an SAP system to AWS. They need to ensure high availability for the SAP Central Services (ASCS/ERS). Which THREE components are required for a highly available SAP ASCS/ERS setup on AWS? (Choose THREE.)

Select 3 answers
A.A cluster manager (e.g., Pacemaker)
B.An Application Load Balancer
C.Amazon Route 53 health checks
D.Shared file system (e.g., Amazon FSx or EFS)
E.Elastic IP address for the virtual IP
AnswersA, D, E

Cluster manager orchestrates failover of ASCS/ERS.

Why this answer

For a highly available SAP ASCS/ERS setup on AWS, three components are required: a cluster manager (e.g., Pacemaker) to manage failover (Option A), a shared file system (e.g., Amazon FSx or EFS) to store the SAP profile and transport directories (Option D), and an Elastic IP address to provide a stable virtual IP that can be moved between EC2 instances during failover (Option E). An Application Load Balancer (Option B) is not used for ASCS/ERS, and Amazon Route 53 health checks (Option C) are optional for DNS-based routing, not a required component.

Full explanation →
639
Multi-Selecthard

A company runs SAP HANA in a multi-node scale-out configuration on AWS. The system is experiencing network bottlenecks that impact performance. Which AWS services or features can be used to monitor and analyze network performance between the HANA nodes? (Choose THREE.)

Select 3 answers
A.VPC Flow Logs
B.AWS Trusted Advisor
C.Amazon Inspector
D.AWS X-Ray [CORRECT]
E.Amazon CloudWatch (Network metrics)
AnswersA, D, E

VPC Flow Logs capture IP traffic metadata, allowing analysis of network connections and identification of bottlenecks between HANA nodes.

Why this answer

VPC Flow Logs capture IP traffic metadata to analyze network connections between HANA nodes. Amazon CloudWatch provides network metrics such as throughput and errors. AWS X-Ray helps trace application requests across nodes, which can identify performance bottlenecks including network latency.

AWS Trusted Advisor offers best practice recommendations but not detailed network analysis. Amazon Inspector is for security assessment. Therefore, the three services that can be used to monitor and analyze network performance are VPC Flow Logs, CloudWatch, and X-Ray.

Full explanation →
640
MCQmedium

A company runs SAP on AWS and notices that the SAP application performance degrades during peak hours. The system uses a db.r5.4xlarge RDS for SAP HANA database. Which AWS service should be used to analyze the database performance metrics and identify bottlenecks?

A.AWS X-Ray
B.AWS CloudTrail
C.Amazon CloudWatch Logs
D.Amazon RDS Performance Insights
AnswerD

Amazon RDS Performance Insights provides an interactive dashboard that visualizes database load and helps identify performance bottlenecks.

Why this answer

Amazon RDS Performance Insights is the correct service because it provides a performance dashboard with detailed database metrics, allowing you to identify bottlenecks such as high CPU, memory, or I/O usage. AWS X-Ray is used for tracing requests across microservices, not for database performance analysis. AWS CloudTrail logs API calls for auditing, not performance metrics.

Amazon CloudWatch Logs is for storing and monitoring log files, not for real-time database performance analysis.

Full explanation →
641
MCQmedium

A company is deploying SAP Business Suite on AWS. They need to ensure that the SAP system can handle a sudden increase in user load without manual intervention. Which AWS service should be used to automatically scale the SAP application servers?

A.AWS Lambda
B.Amazon Elastic Container Service
C.Elastic Load Balancing
D.AWS Auto Scaling
AnswerD

Auto Scaling adjusts the number of EC2 instances automatically.

Why this answer

AWS Auto Scaling is the correct service because it automatically adjusts the number of SAP application server instances based on demand, using scaling policies tied to metrics like CPU utilization or memory. This ensures the SAP system can handle sudden user load spikes without manual intervention, which is a core requirement for elastic SAP deployments on AWS.

Exam trap

The trap here is that candidates often confuse Elastic Load Balancing with auto-scaling, thinking that load balancing alone provides elasticity, but ELB only distributes traffic and does not manage instance count.

How to eliminate wrong answers

Option A is wrong because AWS Lambda is a serverless compute service for event-driven code, not designed to run or scale SAP application servers, which require persistent, stateful operating system environments. Option B is wrong because Amazon Elastic Container Service (ECS) manages Docker containers, but SAP Business Suite is traditionally deployed on EC2 instances with specific OS and kernel requirements, not containerized. Option C is wrong because Elastic Load Balancing distributes incoming traffic across existing instances but does not automatically add or remove instances; it requires an external scaling mechanism like Auto Scaling to adjust capacity.

Full explanation →
642
MCQmedium

An SAP system administrator is troubleshooting an issue where the SAP HANA database is using more memory than expected on an Amazon EC2 instance. The instance type is an x1e.32xlarge with 3,904 GB of RAM. The HANA global.ini file includes the parameter 'memorymanager = global'. The administrator suspects that the HANA memory limit is not set correctly. What should the administrator check to confirm the memory limit?

A.Review Amazon CloudWatch metrics for HANA memory usage.
B.Run the SQL statement 'SELECT * FROM M_SERVICE_MEMORY' and compare with 'SELECT VALUE FROM M_INIFILE WHERE KEY='global_allocation_limit'.'
C.Check the output of 'free -g' command on the EC2 instance.
D.Check the 'global_allocation_limit' parameter in the global.ini file.
AnswerB

This shows effective allocation limit and actual usage.

Why this answer

When `memorymanager = global` is set in HANA, the effective memory limit is determined by the `global_allocation_limit` parameter in the `global.ini` file, not by the OS-level memory. Running `SELECT * FROM M_SERVICE_MEMORY` shows actual per-service memory usage, while `SELECT VALUE FROM M_INIFILE WHERE KEY='global_allocation_limit'` retrieves the configured limit. Comparing these two values directly confirms whether the memory limit is set correctly and if HANA is respecting it.

Exam trap

The trap here is that candidates assume checking the `global.ini` file directly (Option D) is sufficient, but the exam tests whether you know that the active in-memory configuration must be queried via system views like `M_INIFILE` to confirm the actual enforced limit, especially when `memorymanager = global` is used.

How to eliminate wrong answers

Option A is wrong because Amazon CloudWatch metrics for HANA memory usage show actual consumption, not the configured memory limit; they cannot confirm whether the `global_allocation_limit` is set correctly. Option C is wrong because `free -g` shows total OS memory and usage, but when `memorymanager = global` is active, HANA manages its own memory pool independently of OS-level free memory, so this command does not reveal the HANA-specific limit. Option D is wrong because checking the `global_allocation_limit` parameter in the `global.ini` file only shows the configured value, but does not confirm whether HANA is actually enforcing that limit or if the value is being overridden by other settings (e.g., `memorymanager = global` requires the limit to be read from the in-memory configuration, not just the file).

Full explanation →
643
MCQeasy

A company is migrating its SAP environment to AWS and wants to test the migration process before the final cutover. The company has a limited budget for the test environment. Which approach is MOST cost-effective?

A.Use AWS Database Migration Service (AWS DMS) to continuously replicate the database to a smaller RDS instance for testing.
B.Use AWS Elastic Disaster Recovery to replicate the on-premises servers to a staging area and launch test instances in a sandbox VPC.
C.Provision a full production-sized infrastructure in a separate AWS account and use AWS DMS to replicate the database.
D.Use AWS Migration Hub to track the migration progress and perform a trial migration using AWS CloudFormation templates.
AnswerB

AWS Elastic Disaster Recovery provides a cost-effective way to test migration with non-production instances.

Why this answer

AWS Elastic Disaster Recovery (AWS DRS) is the most cost-effective approach for testing SAP migration because it continuously replicates on-premises servers to a staging area with minimal resources, and allows launching test instances in an isolated sandbox VPC without affecting the source environment. This incurs low costs since staging resources are minimal and test instances are only launched temporarily. Option A is less cost-effective because DMS only handles database replication, not the full SAP system (OS, application, etc.), and a separate RDS instance still incurs costs.

Option C is expensive as it requires provisioning full production-sized infrastructure. Option D is incorrect because Migration Hub is a tracking service and does not provide a sandbox for testing.

Full explanation →
644
MCQeasy

A company wants to automate the backup of SAP HANA databases running on AWS. Which combination of AWS services is suitable for this task?

A.AWS Backup and the SAP HANA Backint agent
B.Amazon EBS snapshots and AWS Lambda
C.Amazon S3 and Amazon Glacier
D.Amazon CloudWatch Events and AWS Lambda
AnswerA

AWS Backup automates backups and Backint ensures HANA consistency.

Why this answer

AWS Backup integrates with the SAP HANA Backint agent to automate HANA-specific backups, ensuring consistency and managing backup lifecycle. Option B is wrong because EBS snapshots alone cannot guarantee HANA database consistency. Option C is wrong because S3 and Glacier are storage services, not automation or backup orchestration.

Option D is wrong because CloudWatch Events and Lambda can trigger actions but do not provide native HANA backup functionality.

Full explanation →
645
Multi-Selectmedium

Which TWO Amazon CloudWatch metrics are most useful for monitoring SAP HANA database performance on EC2?

Select 2 answers
A.CPUCreditBalance
B.NetworkIn
C.DiskWriteOps
D.VolumeQueueLength
E.StatusCheckFailed
AnswersA, D

Important for T2/T3 instances to avoid throttling.

Why this answer

CPUCreditBalance (A) is critical for monitoring SAP HANA on EC2 because HANA is a memory- and CPU-intensive in-memory database that can burst CPU usage. If the instance runs on a T-series burstable instance, a low CPUCreditBalance indicates the instance may soon be throttled, causing severe performance degradation for HANA queries. VolumeQueueLength (D) is essential because SAP HANA relies on fast, low-latency storage (e.g., io1/io2 EBS volumes) for data persistence; a high queue length signals that I/O requests are backing up, directly impacting HANA's savepoint and log write performance.

Exam trap

The trap here is that candidates often confuse general EC2 health metrics (like StatusCheckFailed) or high-level throughput metrics (NetworkIn, DiskWriteOps) with the specific performance indicators that directly impact SAP HANA's in-memory and I/O-sensitive workload, leading them to overlook the burst credit and queue depth metrics that AWS explicitly documents for HANA monitoring.

Full explanation →
646
Multi-Selectmedium

A company is designing a disaster recovery (DR) strategy for its SAP landscape on AWS. The DR site must be in a different AWS Region. Which TWO options can be used to replicate the SAP HANA database to the DR Region? (Choose TWO.)

Select 2 answers
A.Amazon RDS Multi-Region replica
B.Amazon S3 Cross-Region Replication for HANA backup files
C.AWS Database Migration Service (DMS) with ongoing replication
D.SAP HANA System Replication across Regions
E.Amazon EBS snapshot copy to the DR Region
AnswersC, D

DMS can replicate HANA data to another region.

Why this answer

AWS DMS with ongoing replication can continuously replicate SAP HANA database changes to a target HANA instance in another Region using change data capture (CDC), enabling near-real-time synchronization for DR purposes. Option D is correct because SAP HANA System Replication can be configured across AWS Regions to replicate the HANA database synchronously or asynchronously, providing a native disaster recovery solution. Both methods are valid for replicating SAP HANA to a different AWS Region.

Exam trap

The trap here is that candidates may overlook that SAP HANA is not supported on Amazon RDS, leading them to incorrectly select Multi-Region replica, or they may assume EBS snapshot copy provides continuous replication when it only offers periodic, point-in-time copies.

Full explanation →
647
Multi-Selecteasy

A company is migrating an SAP system to AWS and wants to monitor the performance of the SAP application servers. Which TWO AWS services can be used to collect and analyze SAP performance metrics?

Select 2 answers
A.AWS CloudTrail
B.AWS Systems Manager
C.Amazon CloudWatch with SAP monitoring agent
D.Amazon Inspector
E.AWS X-Ray
AnswersB, C

Systems Manager can run commands and collect OS metrics, complementing SAP monitoring.

Why this answer

Amazon CloudWatch with the SAP monitoring agent can collect SAP-specific metrics directly. AWS Systems Manager can collect OS-level metrics (CPU, memory, disk) and run custom scripts to gather SAP performance data, making it suitable for SAP performance monitoring. Option A (CloudTrail) logs API calls, not performance.

Option D (Inspector) is for security scanning. Option E (X-Ray) traces application requests, not SAP performance.

Full explanation →
648
MCQhard

A company is migrating an SAP HANA system to AWS using a homogeneous copy. The source database is SAP HANA 2.0 on SUSE Linux, and the target is also SAP HANA 2.0 on AWS. Which AWS service can be used to transfer the HANA backup files to Amazon S3 efficiently?

A.AWS DataSync
B.AWS Storage Gateway
C.AWS Direct Connect
D.Amazon S3 Transfer Acceleration
AnswerA

DataSync is designed for efficient, secure data transfer to S3.

Why this answer

AWS DataSync is the best choice for efficiently transferring large SAP HANA backup files to Amazon S3. It is a managed data transfer service that can automate and accelerate moving data over the internet or AWS Direct Connect. Option A (AWS DataSync) is correct.

Option B (AWS Storage Gateway) is designed for hybrid cloud storage, not for large-scale file transfers to S3. Option C (AWS Direct Connect) provides a dedicated network connection but is not a data transfer service itself. Option D (Amazon S3 Transfer Acceleration) can speed up S3 uploads but is only an acceleration feature, not a managed transfer service like DataSync.

Full explanation →
649
MCQhard

An SAP application server repeatedly logs the error: "SQL statement not parsed before execution." The database is an Oracle RDS instance. What is the most likely cause of this error?

A.The SAP application server is misconfigured.
B.The database connection is not properly established, or the session is in a bad state.
C.There is a network connectivity issue between the application server and the database.
D.The Oracle database is out of memory.
AnswerB

The error 'no statement parsed' typically occurs when a SQL statement is executed without a valid parse call, often due to connection issues.

Why this answer

The error about a SQL statement not being parsed before execution typically indicates a problem with the database connection or session state, which aligns with option B. Option A (misconfigured application server) would not directly cause this specific error. Option C (network connectivity) would manifest as timeout or connection failure, not a parsing error.

Option D (out of memory) would cause different errors like ORA-04031. Therefore, the most likely cause is that the database connection is not properly established or the session is in a bad state.

Full explanation →
650
MCQmedium

A company runs SAP S/4HANA on AWS using a distributed architecture with separate instances for the database (DB) and application (ASCS, PAS, AAS). The application servers are in an Auto Scaling group. After a recent scaling event, users report that they cannot log in to the system. The SAP dispatcher logs show that the application servers cannot connect to the message server. What is the most likely cause?

A.The database connection string in the new application servers points to the wrong endpoint.
B.The new application servers are not registered in the SAP message server's configuration.
C.The SAP licenses are exhausted and need to be updated.
D.The security group of the application servers is not allowing outbound traffic to the DB server.
AnswerB

Auto Scaling instances must be registered in the SAP profile to communicate with the message server.

Why this answer

The most likely cause is that the new application servers launched by the Auto Scaling group are not registered in the SAP message server's configuration. In a distributed SAP system, each application server must be registered with the message server so that it can accept user logons and communicate with other components. If registration is missing, the dispatcher cannot connect to the message server, resulting in login failures.

Option A (database connection string) would cause database connectivity issues, not message server issues. Option C (licenses) would affect logons globally, not just after scaling. Option D (security group outbound) would block all traffic, not specifically message server traffic.

Full explanation →
651
MCQmedium

A company runs SAP on AWS and needs to implement a disaster recovery strategy for their SAP NetWeaver system. The primary site is in us-east-1, and the DR site is in us-west-2. They want to minimize data loss and recovery time. Which approach meets these requirements?

A.Use SAP HANA System Replication in asynchronous mode across regions.
B.Use SAP HANA System Replication in synchronous mode across regions.
C.Use AWS Backup to back up the SAP HANA database and restore in us-west-2.
D.Use Amazon S3 cross-region replication for SAP HANA data files.
AnswerA

Async replication provides low RPO and RTO for cross-region DR.

Why this answer

SAP HANA System Replication in asynchronous mode across regions is the correct approach because it provides near-zero recovery point objective (RPO) with minimal impact on primary system performance, while enabling rapid failover to the DR region in us-west-2. Asynchronous replication is suitable for cross-region scenarios where network latency would make synchronous mode impractical, and it meets the requirement to minimize both data loss and recovery time for SAP NetWeaver.

Exam trap

The trap here is that candidates often confuse synchronous mode as always better for data protection, but fail to recognize that cross-region latency makes synchronous replication impractical, leading to transaction timeouts or severe performance degradation, while asynchronous mode is the standard for multi-region DR in SAP on AWS.

How to eliminate wrong answers

Option B is wrong because synchronous mode across regions would introduce high latency and potential transaction blocking due to network round-trip times, making it unsuitable for cross-region DR and potentially causing application performance degradation. Option C is wrong because AWS Backup for SAP HANA provides point-in-time recovery but has a higher recovery time objective (RTO) due to the need to restore full database backups, and it does not support continuous replication for minimal data loss. Option D is wrong because Amazon S3 cross-region replication only replicates object-level data files and does not provide the transaction-consistent, log-based replication required for SAP HANA database recovery, nor does it support automated failover.

Full explanation →
652
MCQmedium

A company is running an SAP HANA database on an EC2 instance with Amazon EBS volumes. The database is experiencing high write latency. The storage is configured as two gp2 volumes in a RAID 0 stripe. Which change is most likely to improve write performance?

A.Migrate to a RAID 0+1 configuration with four volumes.
B.Replace gp2 volumes with io1 volumes provisioned with sufficient IOPS for the workload.
C.Increase the volume size of each gp2 volume to 1 TB to increase baseline IOPS.
D.Move the data to instance store volumes attached to the EC2 instance.
AnswerB

io1 volumes provide provisioned IOPS, ensuring consistent low latency for write-intensive workloads.

Why this answer

SAP HANA is an I/O-intensive application that requires predictable, low-latency storage performance. gp2 volumes use a burst-bucket model that can lead to performance degradation under sustained high write loads, whereas io1 volumes allow you to provision a specific number of IOPS independently of volume size, ensuring consistent throughput. By provisioning sufficient IOPS for the workload, you eliminate the write latency caused by gp2's burst credit exhaustion.

Exam trap

The trap here is that candidates assume increasing gp2 volume size (Option C) will linearly improve IOPS, but they overlook that gp2's baseline IOPS scales slowly (3 IOPS per GiB) and that the burst model is insufficient for sustained high-write workloads, making io1 the only option that guarantees consistent, provisioned performance.

How to eliminate wrong answers

Option A is wrong because RAID 0+1 (mirroring of stripes) improves redundancy but does not inherently increase write IOPS or reduce latency; in fact, mirroring adds a write penalty since each write must be duplicated. Option C is wrong because increasing gp2 volume size to 1 TB raises the baseline IOPS from 100 to 300 (since gp2 baseline is 3 IOPS per GiB), which may still be insufficient for a high-write SAP HANA workload, and it does not address the fundamental limitation of gp2's burst model. Option D is wrong because instance store volumes are ephemeral and provide non-persistent storage; they are not suitable for a production SAP HANA database that requires data durability and the ability to survive instance stops or failures.

Full explanation →
653
Multi-Selectmedium

A company is running SAP on AWS and wants to implement a centralized logging solution for all SAP components. The solution must be scalable and cost-effective. Which TWO services should the company use? (Choose TWO.)

Select 2 answers
A.Amazon Athena
B.Amazon Kinesis Data Firehose
C.Amazon CloudWatch Logs
D.Amazon Elastic File System (EFS)
E.Amazon Simple Storage Service (S3)
AnswersC, E

CloudWatch Logs can ingest and store log data from various sources.

Why this answer

The correct answers are C and E. Amazon CloudWatch Logs can collect logs from EC2 instances and AWS services, centralizing real-time log data. Amazon S3 provides cost-effective long-term storage for archived logs.

A is incorrect because Amazon Athena is a query service for data in S3, not a logging service. B is incorrect because Kinesis Data Firehose is for real-time streaming, but the question asks for a scalable and cost-effective centralized logging solution, and CloudWatch Logs plus S3 is simpler and more cost-effective. D is incorrect because EFS is a file system, not suitable for log aggregation.

Full explanation →
654
MCQhard

A company is migrating its SAP landscape to AWS. They have a mix of production and non-production systems. The SAP systems use a shared storage architecture for transport directories. Which AWS storage solution should be used for the SAP transport directory to provide low-latency access across multiple EC2 instances in the same region?

A.Amazon EFS
B.Amazon EBS with multi-attach
C.Amazon S3 with S3FS
D.Amazon FSx for Windows File Server
AnswerA

Amazon EFS provides a scalable, shared file system accessible from multiple EC2 instances with low latency, ideal for SAP transport directories.

Why this answer

Amazon EFS provides a scalable, shared file system accessible from multiple EC2 instances with low latency, ideal for SAP transport directories. Amazon S3 is object storage, not a file system. Amazon FSx for Windows File Server is for Windows workloads.

Amazon EBS volumes can only be attached to one instance at a time (except for multi-attach, which has limitations).

Full explanation →
655
MCQeasy

A company runs SAP HANA on AWS and wants to monitor the system for potential performance issues. Which metrics should be monitored to detect memory pressure?

A.Network throughput
B.SAP HANA memory usage (from SAP HANA metrics)
C.CPU utilization
D.EBS volume queue length
AnswerB

Direct measure of memory consumption in the HANA database.

Why this answer

SAP HANA memory usage directly indicates memory pressure, as memory pressure occurs when the HANA database consumes too much memory. Option A is incorrect because network throughput does not measure memory usage. Option C is incorrect because CPU utilization measures processor load, not memory.

Option D is incorrect because EBS volume queue length indicates storage I/O latency, not memory pressure.

Full explanation →
656
MCQhard

A company is migrating its SAP ERP system running on Oracle Database to SAP HANA on AWS. The current on-premises environment has a 5 TB Oracle database with high transaction volume. The migration must be completed within a 4-hour downtime window. The target environment on AWS uses an SAP-certified instance with 1 TB of RAM. The company has a 1 Gbps AWS Direct Connect connection. The migration team is considering using SAP DMO with SUM. However, during a test run, the database export took 6 hours, exceeding the downtime window. What should the migration team do to meet the 4-hour downtime window?

A.Perform a system copy to an Oracle database on AWS first, then migrate to HANA
B.Use the SAP HANA Database Migration Option (DMO) with the 'load and move' method
C.Upgrade to a larger EC2 instance type with more CPU and memory for the HANA database
D.Use AWS Snowball Edge to transfer the initial data and then perform a delta sync
AnswerB

The SAP DMO with 'load and move' method enables the initial data load to be done before the downtime window, with only a delta sync during the downtime, thus meeting the 4-hour constraint.

Why this answer

Using the SAP HANA Database Migration Option (DMO) with the 'load and move' method allows the initial data load to be performed during the preparation phase before the downtime window, and only a delta transfer (incremental data) during the actual downtime. This significantly reduces the downtime required compared to the standard DMO method that does the full export and import during downtime. Option A is wrong because performing a system copy to Oracle on AWS first does not directly migrate to SAP HANA and adds unnecessary steps and time.

Option C is wrong because upgrading to a larger EC2 instance may improve processing speed but does not address the bottleneck of the 1 Gbps network bandwidth; the export time is limited by network speed. Option D is wrong because AWS Snowball Edge introduces additional time for shipping and data transfer, which would likely exceed the 4-hour window, and it is not optimized for the delta sync required for such a short downtime.

Full explanation →
657
MCQhard

An SAP system running on AWS uses a shared file system via Amazon EFS. Recently, the file system has become slow. The administrator suspects that the burst credits are exhausted. What metric should the administrator check in Amazon CloudWatch to confirm this?

A.PermittedThroughput
B.BurstCreditBalance
C.Throughput
D.PercentIOLimit
AnswerB

This metric shows the number of burst credits remaining.

Why this answer

EFS has a BurstCreditBalance metric that tracks available burst credits. When exhausted, throughput drops. PercentIOLimit is not a valid metric.

Throughput is the actual throughput, not credit balance. PermittedThroughput is not a metric.

Full explanation →
658
MCQhard

An SAP system on AWS is experiencing high CPU utilization on the database server. The operations team suspects a specific query is causing the issue. Which combination of AWS services should be used to identify the query?

A.Amazon CloudWatch Metrics and AWS X-Ray
B.Amazon RDS Performance Insights and CloudWatch Logs
C.AWS CloudTrail and Amazon Athena
D.VPC Flow Logs and Amazon GuardDuty
AnswerB

Performance Insights identifies top queries consuming CPU.

Why this answer

Amazon RDS Performance Insights and CloudWatch Logs. Amazon RDS Performance Insights provides database performance analysis and identifies the top queries by load, allowing you to pinpoint the specific query causing high CPU utilization. CloudWatch Logs can be used to correlate query patterns with system metrics.

Option A is incorrect because CloudWatch Metrics shows CPU utilization but does not identify specific queries; AWS X-Ray is for tracing application requests, not database queries. Option C is incorrect because CloudTrail logs API calls to AWS services, not database queries. Option D is incorrect because VPC Flow Logs capture network traffic metadata, not database query details.

Full explanation →
659
MCQeasy

A company is migrating an SAP ERP system to AWS and needs to connect on-premises users to the SAP application securely. The SAP application is deployed in a VPC private subnet. Which service should be used to provide secure access for remote users?

A.AWS Site-to-Site VPN
B.AWS Transit Gateway
C.AWS Direct Connect
D.AWS Client VPN
AnswerD

Client VPN allows remote users to securely connect to the VPC.

Why this answer

AWS Client VPN is a managed service that allows remote users to securely connect to AWS resources using OpenVPN-based VPN clients. Since the SAP application is in a private subnet, remote users need individual encrypted tunnels to access it, which Client VPN provides by authenticating users and routing traffic through a VPC endpoint.

Exam trap

The trap here is confusing network-to-network connectivity solutions (Site-to-Site VPN, Direct Connect) with user-to-network remote access (Client VPN), leading candidates to choose a site-to-site option when the requirement is for individual remote users.

How to eliminate wrong answers

Option A is wrong because AWS Site-to-Site VPN is designed to connect entire on-premises networks to a VPC, not individual remote users; it requires a customer gateway device and does not provide per-user authentication. Option B is wrong because AWS Transit Gateway is a network transit hub for interconnecting VPCs and on-premises networks, not a remote access VPN solution for individual users. Option C is wrong because AWS Direct Connect provides a dedicated private network connection between an on-premises data center and AWS, but it is not designed for remote user access and requires physical infrastructure and carrier agreements.

Full explanation →
660
MCQmedium

A company is migrating its SAP ERP system to AWS. The system has strict high availability requirements with a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 2 hours. The SAP application and database (SAP HANA) must be in the same AWS Region but can be in different Availability Zones. Which architecture should the company use to meet these requirements?

A.Deploy SAP HANA in a single Availability Zone with asynchronous replication to a secondary instance in another AZ, and use manual failover.
B.Deploy SAP HANA in a Multi-AZ cluster using synchronous replication across two Availability Zones, with the SAP application servers in an Auto Scaling group across the same AZs.
C.Deploy SAP HANA on a single EC2 instance with EBS snapshots every 5 minutes, and use a secondary instance in another AZ with snapshots restored.
D.Deploy SAP HANA on a single EC2 instance with hourly backups to Amazon S3 and a script to restore the backup on a new instance in a different AZ.
AnswerB

Multi-AZ synchronous replication provides automatic failover and meets RPO and RTO.

Why this answer

It uses synchronous replication for SAP HANA across two Availability Zones, which ensures zero data loss and meets the RPO of 15 minutes. The Multi-AZ cluster with automatic failover achieves the RTO of 2 hours, while the SAP application servers in an Auto Scaling group across the same AZs provide high availability and load balancing. This architecture aligns with AWS best practices for SAP HANA HA, leveraging HANA System Replication (HSR) in sync mode.

Exam trap

The trap here is that candidates confuse asynchronous replication (which risks data loss) with synchronous replication (which ensures zero RPO), or they underestimate the recovery time of snapshot-based or backup-based approaches, assuming they can meet strict RTO/RPO targets.

How to eliminate wrong answers

Option A is wrong because asynchronous replication can result in data loss exceeding the 15-minute RPO, and manual failover increases RTO beyond 2 hours. Option C is wrong because EBS snapshots every 5 minutes cannot guarantee an RPO of 15 minutes due to snapshot consistency delays and restore times that exceed the 2-hour RTO. Option D is wrong because hourly backups to S3 provide an RPO of up to 60 minutes, failing the 15-minute requirement, and restoring from S3 takes longer than 2 hours, violating the RTO.

Full explanation →
661
MCQmedium

A company runs SAP S/4HANA on AWS and needs to back up the SAP HANA database to Amazon S3. They want to automate backups and ensure they are encrypted at rest. Which solution should they use?

A.Use AWS Backup to schedule backups to S3
B.Use an S3 lifecycle policy to transition backups to S3
C.Configure SAP HANA Backint agent to back up directly to S3 with SSE-S3 encryption
D.Use AWS KMS to encrypt backups and store them manually
AnswerC

Backint agent integrates with SAP HANA and supports encryption.

Why this answer

SAP HANA Backint is the native, certified method for integrating SAP HANA backups directly with Amazon S3. The Backint agent handles automated backup scheduling and, when configured with SSE-S3, ensures data is encrypted at rest using Amazon S3's server-side encryption, meeting both automation and encryption requirements without additional infrastructure.

Exam trap

The trap here is that candidates often assume AWS Backup can handle any database backup, but it lacks the specific SAP HANA Backint integration required for application-consistent, automated backups to S3.

How to eliminate wrong answers

Option A is wrong because AWS Backup does not natively support SAP HANA database backups; it can back up EC2 instances or EBS volumes but lacks the application-consistent integration required for SAP HANA's Backint interface. Option B is wrong because an S3 lifecycle policy manages object transitions and expiration after data is already in S3, not the backup process itself; it cannot initiate or automate SAP HANA backups. Option D is wrong because manually storing backups with AWS KMS encryption does not provide automation, and manual processes are error-prone and not suitable for production SAP HANA environments requiring scheduled, reliable backups.

Full explanation →
662
MCQmedium

A company is running a critical SAP HANA database on AWS. The database administrator wants to ensure that the SAP HANA backup files are stored in a secure, durable, and cost-effective manner. They need to retain backups for 7 years to meet compliance requirements. Which AWS service should be used for long-term backup storage?

A.AWS Backup
B.Amazon S3 Glacier Deep Archive
C.Amazon EBS Snapshots
D.Amazon S3 Standard
AnswerB

Amazon S3 Glacier Deep Archive is the lowest-cost storage class for long-term retention of data that is accessed rarely.

Why this answer

Amazon S3 Glacier Deep Archive is the correct choice because it provides the lowest-cost storage for long-term retention of data that is accessed infrequently, with retrieval times of 12-48 hours. For a 7-year compliance retention requirement, this service offers secure, durable (99.999999999% durability), and cost-effective storage for SAP HANA backup files, which do not need immediate access.

Exam trap

The trap here is that candidates often confuse AWS Backup as a storage service rather than a backup orchestration service, leading them to select it for long-term storage instead of recognizing that S3 Glacier Deep Archive is the actual cost-effective storage tier for archival compliance.

How to eliminate wrong answers

Option A is wrong because AWS Backup is a centralized backup service that can manage backups across AWS services, but it does not provide the specific long-term, low-cost storage tier needed for 7-year retention; it would still require a storage destination like S3 Glacier Deep Archive for cost efficiency. Option C is wrong because Amazon EBS Snapshots are designed for point-in-time backups of EBS volumes, but they are not cost-effective for 7-year retention due to incremental storage costs and lack of a deep archive tier; they are better suited for short-term disaster recovery. Option D is wrong because Amazon S3 Standard is optimized for frequently accessed data with low latency and high throughput, making it too expensive for long-term archival of backups that are rarely accessed over 7 years.

Full explanation →
663
MCQeasy

A company runs SAP HANA on AWS. The operations team needs to automate the creation of AMI backups for the HANA database server. Which AWS service should they use to schedule and manage these backups?

A.Amazon S3 Lifecycle policies
B.AWS Backup
C.AWS Systems Manager
D.Amazon CloudWatch Events
AnswerB

AWS Backup is a managed service for scheduling and managing backups, including AMIs.

Why this answer

AWS Backup (option B) is the correct service for scheduling and managing AMI backups for SAP HANA on AWS. Option A (Amazon S3 Lifecycle policies) manages object lifecycles in S3, not AMI creation. Option C (AWS Systems Manager) can automate operational tasks but is not specialized for backup scheduling; AWS Backup provides a centralized backup solution.

Option D (Amazon CloudWatch Events) can trigger actions based on events but is not a backup service.

Full explanation →
664
MCQmedium

A company is running a critical SAP HANA database on an EC2 instance with a single EBS volume for /hana/data. They need to ensure high durability and recoverability of the data. Which storage configuration meets SAP best practices?

A.Mount an Amazon EFS filesystem for /hana/data.
B.Configure RAID 0 over multiple EBS volumes for the /hana/data filesystem.
C.Use a single gp3 EBS volume with provisioned IOPS.
D.Use EBS Multi-Attach to attach the same volume to multiple instances.
AnswerC

Correct. gp3 volumes can be provisioned with up to 16,000 IOPS and 1,000 MB/s throughput, meeting HANA requirements. A single volume simplifies management and is cost-effective.

Why this answer

For SAP HANA on AWS, a single gp3 EBS volume can be configured with up to 16,000 IOPS and speeds of up to 1,000 MB/s. This meets the performance requirements for many production HANA systems. RAID 0 striping adds complexity and does not improve durability; durability is achieved through backup and snapshots.

Using a single gp3 volume with sufficient provisioned IOPS is more cost-effective and simpler to manage. Therefore, option C is the best configuration for high durability and recoverability.

Full explanation →
665
MCQmedium

An SAP system administrator needs to automate the creation of an SAP HANA database backup and copy it to another AWS Region for disaster recovery. The backup is stored in an Amazon S3 bucket. Which AWS service should be used to replicate the backup to another Region?

A.S3 Cross-Region Replication (CRR)
B.S3 Lifecycle Policies
C.S3 Batch Operations
D.S3 Transfer Acceleration
AnswerA

CRR automatically replicates objects across regions.

Why this answer

S3 Cross-Region Replication (CRR) is the correct service because it automatically replicates objects from a source S3 bucket in one AWS Region to a destination bucket in another Region, meeting the requirement to copy the SAP HANA database backup to a different Region for disaster recovery. CRR operates asynchronously and can be configured with the appropriate IAM role to replicate existing and new objects, ensuring the backup is continuously available in the DR Region.

Exam trap

The trap here is that candidates confuse S3 Lifecycle Policies with replication, mistakenly thinking they can move data between Regions, when lifecycle policies only change storage class within the same Region.

How to eliminate wrong answers

Option B (S3 Lifecycle Policies) is wrong because lifecycle policies manage object transitions between storage classes (e.g., from S3 Standard to S3 Glacier) or expiration, not cross-Region replication. Option C (S3 Batch Operations) is wrong because batch operations perform bulk actions (e.g., copying objects, tagging) on a one-time basis, not continuous automated replication. Option D (S3 Transfer Acceleration) is wrong because it only speeds up uploads over long distances using AWS edge locations, but does not replicate data to another Region.

Full explanation →
666
MCQhard

An SAP system running on AWS experienced a database failure. The recovery plan uses cross-Region Amazon RDS snapshots. The RPO is 15 minutes and the RTO is 2 hours. Which AWS service should be used to automate snapshot replication across Regions?

A.AWS CloudFormation
B.AWS Backup
C.Amazon RDS automated backups
D.Amazon S3 Cross-Region Replication
AnswerB

AWS Backup can automate cross-Region snapshot copying with scheduled policies.

Why this answer

AWS Backup can automate cross-Region snapshot copying with scheduling. Option A is incorrect because AWS CloudFormation is used for infrastructure as code, not for automating snapshot replication. Option C is incorrect because Amazon RDS automated backups are region-specific and cannot be cross-Region.

Option D is incorrect because Amazon S3 Cross-Region Replication is for objects, not RDS snapshots.

Full explanation →
667
MCQhard

A company runs SAP on AWS using an SAP HANA multi-node cluster. The operations team needs to apply an OS-level security patch that requires a reboot. How can they minimize downtime?

A.Use AWS Systems Manager Run Command to apply the patch without reboot.
B.Reboot all nodes simultaneously during the maintenance window.
C.Use HANA scale-out to move services to other nodes, then reboot each node sequentially.
D.Create a new EC2 instance with the patch applied, then update DNS to point to the new instance.
AnswerC

This allows zero or minimal downtime by leveraging cluster redundancy.

Why this answer

In a HANA multi-node cluster, you can leverage HANA's scale-out capabilities to move services (e.g., using HANA system replication or failover) to other nodes, then reboot each node sequentially. This minimizes downtime as the database remains available through the other nodes. Option A is incorrect because AWS Systems Manager Run Command can apply the patch, but if a reboot is required, it will still need a reboot, causing downtime.

Option B is incorrect because rebooting all nodes simultaneously will cause complete downtime. Option D is incorrect because creating a new EC2 instance and updating DNS introduces complexity, potential connectivity issues, and is not a standard approach for HANA clusters; it also does not leverage HANA's built-in high availability features.

Full explanation →
668
MCQeasy

Refer to the exhibit. An SAP administrator is reviewing the block device mappings of an EC2 instance. What is the impact of the DeleteOnTermination setting on /dev/sdf?

A.The volume will persist after the instance is terminated
B.The volume will be automatically deleted after 30 days
C.The volume will be deleted when the instance is terminated
D.The volume is a snapshot of the root volume
AnswerA

The volume will remain and can be attached to another instance.

Why this answer

The DeleteOnTermination attribute controls whether an Amazon EBS volume is automatically deleted when the associated EC2 instance is terminated. For the volume at /dev/sdf, the setting is 'false', meaning the volume will persist after the instance is terminated. This is a common configuration for data volumes that need to be retained for backup, migration, or reuse purposes.

Exam trap

The trap here is that candidates assume all non-root volumes have DeleteOnTermination set to 'false' by default, but the exam often presents a scenario where the setting is explicitly changed, requiring careful reading of the exhibit to determine the actual value.

How to eliminate wrong answers

Option B is wrong because there is no AWS default or feature that automatically deletes EBS volumes after 30 days; deletion is tied to the instance lifecycle or manual action. Option C is wrong because it describes the behavior when DeleteOnTermination is set to 'true', but the exhibit shows it is 'false', so the volume will not be deleted upon termination. Option D is wrong because the volume at /dev/sdf is a separate EBS block device, not a snapshot of the root volume; snapshots are point-in-time backups stored in Amazon S3, not block device mappings.

Full explanation →
669
Multi-Selecteasy

A company runs SAP on AWS and wants to ensure that all API calls to create, modify, or delete EC2 instances are logged for auditing. Which TWO AWS services can be used together to achieve this? (Choose two.)

Select 2 answers
A.AWS CloudTrail
B.Amazon S3 server access logs
C.AWS Config
D.Amazon CloudWatch Logs
E.Amazon VPC Flow Logs
AnswersA, D

CloudTrail records all EC2 API calls.

Why this answer

AWS CloudTrail logs API calls to create, modify, or delete EC2 instances. Amazon CloudWatch Logs can store and analyze the CloudTrail logs for auditing. Option B (Amazon S3 server access logs) logs access to S3 buckets, not EC2 API calls.

Option C (AWS Config) tracks configuration changes but does not log all API calls. Option E (Amazon VPC Flow Logs) captures network traffic, not API calls.

Full explanation →
670
MCQhard

A company runs SAP BusinessObjects on AWS. The system includes a web application server and a CMS database on separate EC2 instances. The operations team receives alerts that the CMS database server's EBS volume is approaching its maximum capacity. The volume is a gp3 EBS volume with 3000 IOPS and 125 MB/s throughput. Upon investigation, the team finds that the volume is 90% full and write performance has degraded. The application is experiencing slow response times. What should the team do to resolve the issue without downtime?

A.Move the database to an instance store volume for better performance.
B.Migrate the database to an io2 Block Express volume with higher performance.
C.Increase the IOPS and throughput of the existing volume.
D.Expand the EBS volume size and extend the file system.
AnswerD

Expanding volume increases capacity and improves performance; online resize is possible.

Why this answer

Expanding the EBS volume size increases both capacity and, for gp3, the baseline throughput (since gp3 throughput scales with volume size up to a maximum), which can resolve the capacity issue and improve write performance. This operation can be performed online without downtime. Option A is incorrect because instance store volumes are ephemeral and not suitable for persistent database data; migrating would also require downtime.

Option B is incorrect because while io2 Block Express offers higher performance, it is not necessary for this scenario and may increase cost unnecessarily; the primary issue is capacity, which can be addressed by expanding the existing volume. Option C is incorrect because increasing only IOPS and throughput does not add storage capacity; the volume is 90% full, so capacity must also be increased.

Full explanation →
671
Multi-Selectmedium

A company is running SAP HANA on AWS and wants to implement a disaster recovery strategy using a standby system in another AWS Region. Which THREE components are essential for this setup?

Select 3 answers
A.Amazon Route53
B.A secondary EC2 instance in the DR Region
C.AWS CloudEndure Migration
D.Cross-Region VPC Peering or Transit Gateway
E.SAP HANA System Replication
AnswersB, D, E

The DR system runs on an EC2 instance.

Why this answer

A secondary EC2 instance in the DR Region is required to host the standby SAP HANA system. This instance must be sized and configured to match the primary, and it will receive replicated data via SAP HANA System Replication to enable failover.

Exam trap

The trap here is that candidates often confuse AWS CloudEndure Migration (a migration tool) with a disaster recovery solution, but SAP HANA has its own native replication mechanism that must be used for database-level DR, making CloudEndure irrelevant for this specific scenario.

Full explanation →
672
MCQeasy

A company wants to automate the deployment of SAP environments on AWS. Which AWS service should the company use to define the infrastructure as code?

A.AWS OpsWorks
B.AWS CodeDeploy
C.AWS Elastic Beanstalk
D.AWS CloudFormation
AnswerD

CloudFormation enables infrastructure as code.

Why this answer

AWS CloudFormation is the correct choice because it allows you to define your entire SAP infrastructure—including EC2 instances, VPCs, security groups, and storage—as code using JSON or YAML templates. This enables repeatable, version-controlled, and automated deployments of SAP environments, which is essential for infrastructure as code (IaC) practices.

Exam trap

The trap here is that candidates often confuse configuration management (OpsWorks) or application deployment (CodeDeploy) with infrastructure provisioning, leading them to select a service that manages servers or code rather than the underlying cloud resources.

How to eliminate wrong answers

Option A is wrong because AWS OpsWorks is a configuration management service that uses Chef and Puppet to manage server configurations, not to define infrastructure as code; it focuses on operating system and application configuration rather than provisioning cloud resources. Option B is wrong because AWS CodeDeploy is a deployment service that automates code deployments to running instances, not infrastructure provisioning; it handles application updates, not the underlying SAP infrastructure. Option C is wrong because AWS Elastic Beanstalk is a PaaS service for deploying web applications with automatic scaling and load balancing, but it does not support the complex, custom infrastructure requirements of SAP environments and lacks the granular control needed for SAP-specific configurations.

Full explanation →
673
MCQhard

An SAP system running on AWS is configured with a Multi-AZ RDS for SAP HANA database. The primary database fails, but the automatic failover does not occur. What is the most likely reason?

A.The Multi-AZ configuration was not paid for
B.The standby instance was not configured with EBS snapshots
C.Multi-AZ is not supported for RDS for SAP HANA
D.The primary instance does not have an Elastic IP attached
AnswerC

RDS for SAP HANA does not support Multi-AZ; use native HANA replication.

Why this answer

Multi-AZ for RDS for SAP HANA is not supported; RDS for SAP HANA does not have Multi-AZ capability. Option A is incorrect because Multi-AZ is not a paid option; it incurs costs but is not disabled by billing. Option B is incorrect because RDS for HANA does not use EBS snapshots for replication.

Option D is incorrect because RDS does not use Elastic IPs.

Full explanation →
674
Multi-Selectmedium

Which TWO AWS services can be used to create a private, low-latency network connection between an on-premises data center and an SAP environment on AWS? (Choose two.)

Select 2 answers
A.VPC peering
B.AWS Site-to-Site VPN
C.AWS Direct Connect
D.AWS Transit Gateway
E.AWS PrivateLink
AnswersB, C

Creates a secure connection over the internet between on-premises and AWS.

Why this answer

AWS Direct Connect provides a dedicated, private network connection from an on-premises data center to AWS, bypassing the public internet to deliver consistent low latency and high bandwidth, which is critical for SAP workloads. AWS Site-to-Site VPN creates an encrypted tunnel over the internet, offering a private connection that can supplement Direct Connect as a backup or for lower-cost scenarios, though it introduces internet variability. Both services establish private connectivity between on-premises and AWS, meeting the requirements for low-latency SAP environments.

Exam trap

The trap here is that candidates may confuse AWS Transit Gateway as a direct connection service, but it is a central hub that requires an underlying connection (Direct Connect or VPN) to reach on-premises, not a standalone private connection method.

Full explanation →
675
MCQmedium

A company is running SAP S/4HANA on AWS. They are experiencing high read latency on their EBS volumes used for /usr/sap. Which of the following is the MOST effective way to improve read performance?

A.Use io2 Block Express volumes with provisioned IOPS.
B.Change the volume type to gp3 with higher throughput.
C.Move to a larger instance type with more network bandwidth.
D.Configure RAID 0 across multiple volumes.
AnswerA

io2 Block Express provides consistent low latency.

Why this answer

The io2 Block Express volume type provides the highest durability and consistent low-latency performance for SAP workloads, with up to 256,000 provisioned IOPS per volume. For /usr/sap, which is sensitive to read latency due to frequent binary and configuration file access, io2 Block Express ensures predictable sub-millisecond latency even under high I/O demand, directly addressing the high read latency issue.

Exam trap

The trap here is that candidates often confuse throughput improvements (gp3 or RAID 0) with latency reduction, but the question specifically targets read latency, which requires a volume type designed for consistent low-latency performance like io2 Block Express.

How to eliminate wrong answers

Option B is wrong because gp3 volumes, while offering baseline performance and burst capability, cannot match the ultra-low latency and consistent IOPS of io2 Block Express for latency-sensitive SAP /usr/sap directories. Option C is wrong because moving to a larger instance type with more network bandwidth improves network throughput, not EBS volume read latency, which is a storage-level performance characteristic. Option D is wrong because RAID 0 across multiple volumes increases throughput and IOPS but does not inherently reduce read latency per I/O operation, and it introduces complexity and risk of data loss without addressing the underlying volume performance.

Full explanation →
Page 8

Page 9 of 22

Page 10

All pages

12345678910111213141516171819202122

Practice PAS-C01 by domain

Target a specific domain to shore up weak areas.

Design of SAP Workloads on AWSTechnologyMigrationOperations and Maintenance
See all domains with question counts →