PAS-C01 Operations and Maintenance Practice Question
An SAP system on AWS is experiencing intermittent connectivity issues between the application servers and the HANA database. The network team has confirmed that the VPC and subnets are configured correctly. What should the operations team check NEXT?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Security group rules on the database server.
Intermittent connectivity issues between application servers and HANA database often point to security group rules. Security groups act as virtual firewalls for EC2 instances. If the security group on the database server does not allow inbound traffic from the application servers on the required ports (e.g., 3xx41 for HANA), connections may fail intermittently. While route tables and NACLs could affect connectivity, they are typically stable and less likely to cause intermittent problems. DNS resolution issues would be more consistent. Therefore, the operations team should first check the security group rules on the database server.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
DNS resolution for the database endpoint.
Why it's wrong here
DNS resolution for the database endpoint. Incorrect. DNS issues usually cause persistent failures, not intermittent connectivity, and the network team already confirmed VPC/subnet configuration.
- ✗
VPC route tables for the application subnet.
Why it's wrong here
VPC route tables for the application subnet. Incorrect. Route tables rarely change and would affect all traffic consistently, not intermittently.
- ✓
Security group rules on the database server.
Why this is correct
Security group rules on the database server. Correct. Security groups can cause intermittent drops if rules are missing or have time-based issues.
- ✗
Network ACLs on the database subnet.
Why it's wrong here
Network ACLs on the database subnet. Incorrect. NACLs are stateless and typically allow all traffic unless explicit deny rules are added; they are less likely to cause intermittent issues.
Visual reference
Go deeper
Related to this question
About these practice questions
This PAS-C01 question is part of Courseiva's 1,616-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PAS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PAS-C01 exam.