PAS-C01 Operations and Maintenance Practice Question
An SAP system administrator is troubleshooting an issue where SAP users cannot log in to the SAP system. The administrator checks the SAP application server logs and finds that the connection to the SAP HANA database is failing with 'connection refused'. Which THREE AWS resources should be investigated to resolve the issue?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Network ACLs for the database subnet
Options B, D, and E are correct. Network ACLs for the database subnet must allow inbound and outbound traffic between the application server and database. Security group rules for the database instance must permit traffic from the application server's security group on the database port. Route tables for the application server subnet must have a route to the database subnet. Option A is incorrect because a VPC peering connection is not needed unless the resources are in different VPCs. Option C is incorrect because an Internet Gateway is not required for internal communication within a VPC.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
VPC peering connection
Why it's wrong here
If both instances are in the same VPC, peering is not needed.
- ✓
Network ACLs for the database subnet
Why this is correct
Network ACLs are stateless firewalls; misconfigured rules can block traffic.
- ✗
Internet Gateway
Why it's wrong here
Internal communication does not require an Internet Gateway.
- ✓
Security group rules for the database instance
Why this is correct
Security groups act as a virtual firewall; incorrect rules can block traffic.
- ✓
Route tables for the application server subnet
Why this is correct
Route tables must have a route to the database subnet.
Visual reference
Go deeper
Related to this question
About these practice questions
This PAS-C01 question is part of Courseiva's 1,616-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PAS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PAS-C01 exam.