PAS-C01 Design of SAP Workloads on AWS Practice Question
An SAP system is running on AWS and needs to be accessible over the internet securely. Which AWS service should be used to provide secure remote access for administrators?
⚠ Common exam trap
Candidates often assume a VPN or direct SSH access is required for secure remote administration, but AWS Systems Manager Session Manager provides a more secure and managed alternative that avoids exposing any network ports and eliminates the need for key management.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use AWS Systems Manager Session Manager
AWS Systems Manager Session Manager provides secure, auditable, browser-based or CLI-based remote access to EC2 instances without opening inbound ports, managing SSH keys, or using bastion hosts. It leverages the AWS SSM Agent and IAM policies to authenticate and authorize administrators, making it the most secure and operationally efficient option for SAP system administration on AWS.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Set up an AWS Site-to-Site VPN connection from the corporate network
Why it's wrong here
VPN is for network connectivity, not for remote admin access for individual administrators.
- ✓
Use AWS Systems Manager Session Manager
Why this is correct
Session Manager provides secure, audited shell access without opening inbound ports.
- ✗
Use Amazon WorkSpaces to provide a virtual desktop for administrators
Why it's wrong here
WorkSpaces is for desktop virtualization, not for direct SAP system administration.
- ✗
Configure the EC2 instance in a public subnet with SSH access from the internet
Why it's wrong here
Direct internet access is insecure and against best practices.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PAS-C01 question from scratch — 1,616 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PAS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PAS-C01 exam.