Courseiva

CCNA Technology Questions

75 of 412 questions · Page 2/6 · Technology · Answers revealed

Practice these questionsDomain overviewAll questions
76
Multi-Selecthard

An SAP system on AWS is experiencing performance issues during peak hours. The system includes SAP application servers and a HANA database. The CloudWatch metrics show high CPU utilization on the application servers and high disk read latency on the database EBS volumes. Which THREE actions should be taken to improve performance?

Select 3 answers
A.Increase the provisioned IOPS on the EBS volumes attached to the HANA database.
B.Upgrade the HANA database to a larger instance type with more CPU and memory.
C.Add more SAP application servers to the Auto Scaling group.
D.Add a NAT Gateway to the VPC to improve network performance.
E.Deploy a read replica for the HANA database.
AnswersA, B, C

Higher IOPS reduces read latency.

Why this answer

Option A is correct because adding more application servers distributes load. Option C is correct because provisioning higher IOPS reduces disk latency. Option E is correct because scaling up the instance provides more CPU.

Option B is wrong because a NAT Gateway does not affect performance. Option D is wrong because a read replica does not help with write-heavy workloads or disk latency.

Practice this question →
77
MCQhard

An SAP administrator creates this IAM policy for an EC2 instance role used by SAP HANA Backint to back up to S3. The backups are failing with access denied errors for S3 operations. What is the most likely cause?

A.The policy does not allow s3:ListBucket action.
B.The policy does not include kms:Encrypt action.
C.The policy uses a wildcard in the resource ARN for the bucket.
D.The policy does not include kms:ReEncrypt action.
AnswerB

Backint needs kms:Encrypt to write encrypted objects.

Why this answer

Option D is correct: The S3 bucket is encrypted with SSE-KMS, and the policy allows kms:Decrypt and kms:GenerateDataKey, but Backint may also need kms:Encrypt to write encrypted objects. The error suggests missing permission for encryption. Option A is wrong because GetObject and PutObject are allowed.

Option B is wrong because the actions are on the bucket. Option C is wrong because the policy explicitly allows KMS actions.

Practice this question →
78
MCQhard

A company runs SAP S/4HANA on AWS. The system is critical and requires high availability. The database is SAP HANA running on two EC2 instances in a cluster. The company wants to ensure that the secondary instance can take over quickly in case of primary failure. Which AWS service should be used to implement a floating IP address that can be moved between the instances?

A.AWS Global Accelerator
B.Amazon Route 53
C.Elastic IP addresses
D.VPC Peering
AnswerB

Route 53 can provide DNS failover with health checks.

Why this answer

Option C is correct because Amazon Route 53 can be used with health checks and weighted routing to implement a floating IP or DNS failover. Option A is wrong because Elastic IPs can be reassigned but not automatically. Option B is wrong because VPC Peering is for connecting VPCs.

Option D is wrong because AWS Global Accelerator provides static IPs but is more for global traffic management.

Practice this question →
79
MCQmedium

An SAP administrator notices that the SAP application server is unable to establish an RFC connection to the SAP HANA database. The database is running on an EC2 instance in the same VPC. Security groups and NACLs allow all traffic. What is the most likely cause?

A.The VPC has overlapping CIDR blocks with the on-premises network.
B.The application server uses TCP instead of the required UDP protocol.
C.The application server is configured to connect to the wrong port number.
D.The HANA database instance was rebooted for maintenance.
AnswerC

HANA uses port 3<instance number>13. Misconfiguration is a common issue.

Why this answer

Option B is correct because the HANA database listens on port 3[instance number]13. If the application server is configured with the default HANA port (e.g., 30015), it would fail. Option A (instance reboot) would not cause permanent failure.

Option C (wrong protocol) is less likely. Option D (subnet CIDR overlap) would cause connectivity issues at a different layer.

Practice this question →
80
MCQhard

A company runs SAP S/4HANA on AWS with a production database on an r5.24xlarge instance and 15 application servers on r5.4xlarge instances. The system has been stable for months. Recently, the database instance started experiencing high CPU utilization during peak hours, causing performance degradation. The company has reserved capacity for the database instance. The SAP team has already optimized the SQL queries and reduced the CPU usage by 20%, but the CPU still spikes to 95% during peak hours. The team is considering upgrading the database instance to a larger type. However, the next larger instance type (r5.32xlarge) is not available in the current Availability Zone. The company needs a solution that minimizes downtime and cost. What should be done?

A.Stop the database instance, change to a larger instance type in a different Availability Zone, and use a placement group with the application servers.
B.Migrate the database to a different instance family, such as x1e.32xlarge.
C.Use an Auto Scaling group to automatically scale the database instance.
D.Add more application servers to distribute the load.
AnswerA

Provides more CPU and maintains low latency.

Why this answer

Option B is correct. By placing the database instance in a placement group with the application servers, you can ensure low-latency connectivity. Then you can stop the instance, change the instance type to r5.32xlarge if available in another AZ, but since it's not available in current AZ, the best approach is to use a larger instance type in the same family that is available.

However, the question states the next larger is r5.32xlarge but not available. So the correct action is to change to an available larger instance in another AZ. But the option B says 'Move to a larger instance in a different AZ with a placement group' which ensures low latency.

Option A is wrong because increasing application servers does not reduce database CPU. Option C is wrong because moving to a different instance family may require SAP re-certification. Option D is wrong because using Auto Scaling for database is not supported for SAP HANA.

Practice this question →
81
MCQmedium

A company runs its SAP HANA database on an EC2 instance (r5.8xlarge) with 8 EBS gp2 volumes (1 TB each) in a RAID 0 stripe. The database is critical and requires high availability. The current architecture uses a single EC2 instance in one Availability Zone. The company wants to implement a disaster recovery solution with a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 4 hours. The DR site must be in a different AWS Region. The SAP HANA database size is 4 TB. The company has a 1 Gbps Direct Connect connection between the primary and DR Regions. The database workload is write-intensive with an average write throughput of 200 MB/s. Which solution meets the RPO and RTO requirements?

A.Set up HANA System Replication (HSR) in asynchronous mode from the primary to a secondary EC2 instance in the DR Region. Use the same instance type and EBS configuration. In case of failure, perform a HSR takeover.
B.Take EBS snapshots of the RAID array every 15 minutes and replicate them to the DR Region using EBS snapshot copy. In the DR Region, restore the snapshots to new volumes and attach them to a new EC2 instance.
C.Back up the HANA database to Amazon S3 every 15 minutes using the HANA backup tool, and set up cross-Region replication for the S3 bucket. In the DR Region, restore the latest backup to a new EC2 instance.
D.Use AWS Database Migration Service (DMS) to continuously replicate changes to a target HANA database in the DR Region.
AnswerA

B is correct: HSR async meets RPO and RTO.

Why this answer

Option B is correct. HANA System Replication (HSR) in async mode can replicate data with sub-minute RPO. Using the same instance type and RAID configuration ensures performance.

The 1 Gbps connection can handle the replication traffic (200 MB/s = 1.6 Gbps, but compression reduces it). Option A is incorrect because EBS snapshots cannot be taken every 15 minutes and restoring 4 TB from snapshots takes more than 4 hours. Option C is incorrect because DMS is for database migration, not HANA replication.

Option D is incorrect because backing up to S3 and restoring takes longer than 4 hours.

Practice this question →
82
MCQmedium

An SAP administrator created the IAM policy shown in the exhibit. When trying to terminate an EC2 instance with ID i-abc123 in us-west-2, the action fails. What is the reason?

A.There is an implicit Deny for all actions not explicitly allowed.
B.The ec2:TerminateInstances action is restricted to instances in us-east-1 only.
C.The policy is missing a condition key to allow termination in us-west-2.
D.The ec2:StartInstances and ec2:StopInstances actions are not granted for the specific instance.
AnswerB

The resource ARN specifies us-east-1, so terminating instances in other regions is denied.

Why this answer

Option B is correct because the TerminateInstances action is restricted to a specific resource ARN that includes the region us-east-1 and account 123456789012. The instance i-abc123 in us-west-2 does not match that ARN, so the action is denied. Option A is incorrect because StartInstances and StopInstances are allowed on all resources.

Option C is incorrect because the condition key is not used. Option D is incorrect because the policy does not have a Deny effect.

Practice this question →
83
MCQhard

An SAP system on AWS sends large amounts of batch data via RFC calls between two EC2 instances in the same VPC. The application team reports high network latency. Which configuration change would most effectively reduce latency?

A.Assign Elastic IP addresses to both instances.
B.Enable Elastic Network Adapter (ENA) on both instances.
C.Place both EC2 instances in the same cluster placement group.
D.Use Elastic Fabric Adapter (EFA) for network communication.
AnswerC

Cluster placement groups provide low-latency, high-throughput networking between instances.

Why this answer

Option A is correct because placement groups provide low latency, high throughput networking. Option B is wrong because ENA is already recommended for enhanced networking. Option C is wrong because Elastic Fabric Adapter is for HPC, not general SAP.

Option D is wrong because public IPs do not reduce latency within VPC.

Practice this question →
84
MCQhard

An SAP administrator is trying to set up an AWS CLI script that queries EC2 instance metadata. The script runs on an EC2 instance with an IAM role attached. The IAM role has the following policy: { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "ec2:DescribeInstances", "Resource": "*" } ] } What is the most likely cause of the error?

A.The instance does not have an IAM instance profile associated, or the profile name does not match the role name.
B.The IAM policy does not specify a resource ARN.
C.The IAM role does not have the ec2:DescribeInstances action allowed.
D.The AWS CLI is not configured with the correct region.
AnswerA

If the instance profile is not attached or is misconfigured, the role's permissions are not applied, causing the authorization error.

Why this answer

Option D is correct because the error message shows the principal is 'SAP', which suggests the instance profile name is 'SAP', but the policy is attached to the role, and the instance profile must have the same name as the role or be correctly associated. Option A is wrong because the policy allows all resources. Option B is wrong because the error is about authorization, not region mismatch.

Option C is wrong because the error shows the action is ec2:DescribeInstances.

Practice this question →
85
Multi-Selecteasy

A company is setting up SAP HANA database backups to Amazon S3. Which TWO actions are required to ensure secure and efficient backup operations? (Choose TWO.)

Select 2 answers
A.Create an IAM role for the EC2 instance running SAP HANA with permissions to write to the S3 bucket.
B.Enable S3 Transfer Acceleration on the backup bucket.
C.Enable server-side encryption with AWS KMS for the S3 bucket.
D.Set up an S3 Lifecycle policy to move older backups to Amazon Glacier.
E.Configure a VPC Endpoint for S3 to keep traffic within the AWS network.
AnswersA, E

The instance needs permissions to write backups to S3.

Why this answer

Options B and D are correct. Option B is required because the SAP HANA database must have permissions to write to S3. Option D is correct because a VPC Endpoint ensures traffic stays within the AWS network, reducing latency and improving security.

Option A is wrong because S3 Transfer Acceleration is for faster uploads over long distances, not required. Option C is wrong because KMS is optional. Option E is wrong because lifecycle policies are for cost optimization, not security.

Practice this question →
86
MCQmedium

A company needs to automate the start and stop of SAP applications in non-production environments to reduce costs. The SAP systems run on multiple EC2 instances. Which AWS service can be used to schedule start and stop actions?

A.AWS OpsWorks
B.AWS Lambda with custom code
C.AWS Instance Scheduler
D.Amazon CloudWatch Events
AnswerC

Instance Scheduler is a ready-made solution that uses Lambda and DynamoDB to start/stop instances.

Why this answer

Option B is correct because AWS Instance Scheduler is a solution specifically designed to start and stop EC2 instances on a schedule. Option A is wrong because Lambda can be used but requires custom code; Instance Scheduler is simpler. Option C is wrong because CloudWatch Events can trigger Lambda, but not directly stop instances.

Option D is wrong because OpsWorks is for configuration management, not scheduling.

Practice this question →
87
MCQmedium

A company is running a web application on EC2 instances behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group with a dynamic scaling policy based on average CPU utilization. During a flash sale, the application experiences a sudden spike in traffic, but the Auto Scaling group does not scale out quickly enough, causing some requests to fail. Which solution would improve the scaling responsiveness?

A.Increase the cooldown period for the dynamic scaling policy.
B.Add a scheduled scaling action to increase capacity before the flash sale.
C.Decrease the cooldown period for the dynamic scaling policy.
D.Disable scale-in to prevent the Auto Scaling group from terminating instances during the sale.
AnswerB

Scheduled scaling proactively adds capacity ahead of known traffic spikes.

Why this answer

Option B is correct because a scheduled scaling action proactively increases capacity before the flash sale, eliminating the lag inherent in dynamic scaling policies. Dynamic scaling reacts to metrics like average CPU utilization, which can take minutes to trigger and propagate, causing request failures during sudden spikes. By pre-scaling, the Auto Scaling group has sufficient instances ready to handle the traffic surge immediately.

Exam trap

The trap here is that candidates often focus on tuning cooldown periods or disabling scale-in, thinking these improve responsiveness, when the real issue is the inherent latency of reactive scaling during unpredictable spikes.

How to eliminate wrong answers

Option A is wrong because increasing the cooldown period would delay further scaling actions after a scale-out, making the group even less responsive to sudden spikes. Option C is wrong because decreasing the cooldown period might allow faster subsequent scaling but does not address the initial delay in detecting and reacting to the traffic spike. Option D is wrong because disabling scale-in prevents termination of instances but does not add new instances; it only protects existing ones, which are already insufficient during the flash sale.

Practice this question →
88
MCQeasy

An SAP system is running on an EC2 instance with a single Amazon EBS volume for data and log files. The database administrator wants to increase the IOPS performance without changing the instance type. Which action should be taken?

A.Modify the EBS volume to provisioned IOPS (io1/io2).
B.Enable EBS optimization on the EC2 instance.
C.Change the EC2 instance type to a larger size.
D.Migrate the data to an instance store volume.
AnswerA

You can modify an EBS volume to increase IOPS, including switching to io1/io2.

Why this answer

Option D is correct because you can increase the IOPS of an existing EBS volume by modifying it to a higher IOPS value. Option A is wrong because changing instance type may not be necessary. Option B is wrong because EBS optimization is enabled by default for certain instances.

Option C is wrong because you cannot change EBS volume type directly to instance store; instance store is ephemeral.

Practice this question →
89
Multi-Selecthard

A company is designing a highly available SAP NetWeaver system on AWS. The architecture includes two EC2 instances running the ABAP application server in an Auto Scaling group. Which THREE components are required to maintain session persistence and distribute traffic? (Choose THREE.)

Select 3 answers
A.Health checks on the target group to detect unhealthy instances
B.A shared file system (e.g., Amazon EFS) for /sapmnt
C.An Application Load Balancer (ALB) or Network Load Balancer (NLB)
D.Sticky sessions (session affinity) enabled on the load balancer
E.A Multi-AZ deployment for the SAP application servers
AnswersA, C, D

Health checks are essential to route traffic only to healthy instances.

Why this answer

Options A, B, and E are correct. Option A is correct because a load balancer distributes traffic. Option B is correct because sticky sessions (session affinity) ensure users stick to the same server.

Option E is correct because health checks ensure only healthy instances receive traffic. Option C is wrong because a shared file system is not directly required for session persistence. Option D is wrong because Multi-AZ is for database, not application servers.

Practice this question →
90
MCQeasy

An SAP on AWS deployment uses an Auto Scaling group for the SAP application tier. The application is stateless and can scale out and in based on CPU utilization. Which scaling policy should be used to add new instances during peak load and remove them when the load decreases?

A.Simple scaling policy based on CPU utilization.
B.Target tracking scaling policy with a target CPU utilization of 70%.
C.Step scaling policy with multiple steps for different CPU thresholds.
D.Scheduled scaling policy to add instances during business hours.
AnswerB

Target tracking automatically adjusts capacity to maintain the target.

Why this answer

Option B is correct because a target tracking scaling policy is the simplest and most automated way to maintain a target CPU utilization. Option A is wrong because simple scaling does not adjust dynamically. Option C is wrong because scheduled scaling is for predictable loads, not dynamic.

Option D is wrong because step scaling requires manual configuration of steps.

Practice this question →
91
MCQmedium

An SAP system is running on AWS and needs to be migrated from a current generation instance (r3) to a newer generation (r5). What is the recommended process to minimize downtime?

A.Modify the instance type while the instance is running.
B.Stop the instance, change the instance type, and start the instance.
C.Create an AMI of the r3 instance and launch an r5 instance from it.
D.Launch a new r5 instance and migrate the SAP system.
AnswerB

Minimal downtime by changing type after stop.

Why this answer

Option D is correct because you can stop the instance, change the instance type, and start it again. This process takes a few minutes. Option A is wrong because you cannot change instance type while running; you must stop it.

Option B is wrong because launching a new instance and migrating data requires more time and effort. Option C is wrong because changing instance type does not require AMI creation.

Practice this question →
92
MCQmedium

An SAP administrator needs to ensure that Amazon EBS snapshots of SAP HANA data volumes are crash-consistent. The HANA database is on a single EC2 instance with multiple EBS volumes. What is the correct approach?

A.Configure the volumes as a RAID 0 array and take a snapshot of the array.
B.Take snapshots of each volume individually while the instance is running.
C.Stop the EC2 instance, take snapshots of all volumes, then start the instance.
D.Use AWS Backup with application-consistent snapshots using pre- and post-scripts.
AnswerD

AWS Backup can orchestrate snapshots across multiple volumes and run scripts to freeze the filesystem and database, ensuring consistency.

Why this answer

Option D is correct because the AWS Backup service can create application-consistent snapshots using pre- and post-scripts to quiesce the filesystem and database. Option A (Take snapshots individually) may result in inconsistent data if writes occur between snapshots. Option B (Stop the instance) causes downtime.

Option C (Use RAID 0) does not guarantee consistency across volumes.

Practice this question →
93
MCQhard

A company is migrating its SAP ERP system to AWS and needs to maintain high availability. The SAP Central Services (ASCS) and ERS instances are currently on two separate physical servers. The company wants to use a single EC2 instance for both roles with Pacemaker clustering. Which configuration ensures that both instances can run simultaneously on the same host?

A.Use a Dedicated Host and configure two separate virtual servers using VMware on AWS.
B.Configure two network interfaces (ENIs) on the instance, one for ASCS and one for ERS.
C.Assign multiple private IP addresses to the same ENI and configure ASCS and ERS to bind to different IPs.
D.Install both ASCS and ERS on the same EC2 instance using the SAP NetWeaver 7.4 or later 'same host' capability.
AnswerD

Starting with NetWeaver 7.4, SAP supports running ASCS and ERS on the same physical host, which simplifies the architecture.

Why this answer

Option D is correct because SAP NetWeaver 7.4 and later support the 'same host' configuration for ASCS and ERS. Option A is wrong because multi-IP configuration is not typically required. Option B is wrong because dedicated tenancy is not necessary.

Option C is wrong because using a single ENI with multiple IPs is not standard.

Practice this question →
94
MCQhard

A company is running SAP HANA in a multi-node scale-out configuration on AWS. The cluster uses AWS Placement Groups with the 'cluster' placement strategy. The system is experiencing network latency between nodes. Which change should the company make to reduce latency?

A.Change the placement group to 'spread' to reduce interference.
B.Use larger instance sizes to increase network bandwidth.
C.Enable Enhanced Networking (ENA) on all instances in the cluster.
D.Use EBS-optimized instances to improve storage performance.
AnswerC

ENA provides higher throughput and lower latency for inter-node communication.

Why this answer

Option C is correct because Enhanced Networking with ENA provides lower latency and higher packet per second performance. Option A is wrong because 'spread' placement group reduces co-location, increasing latency. Option B is wrong because increasing instance size does not directly reduce latency; network bandwidth may increase but not necessarily latency.

Option D is wrong because EBS-optimized instances improve storage throughput, not network latency.

Practice this question →
95
Multi-Selectmedium

A company is migrating an SAP HANA database to AWS. Which TWO configurations are required to ensure high availability for the SAP HANA database in a multi-AZ setup?

Select 2 answers
A.Deploy SAP HANA System Replication across two Availability Zones.
B.Use a single EBS volume with synchronous replication to both nodes.
C.Configure EBS Multi-Attach to allow both HANA instances to share the same data volume.
D.Implement a cluster manager such as Pacemaker to orchestrate failover.
E.Place an Application Load Balancer in front of the HANA database endpoints.
AnswersA, D

SAP HANA System Replication replicates data between separate HANA instances in different AZs for high availability.

Why this answer

Option B (deploy SAP HANA System Replication across Availability Zones) and Option D (use a cluster manager like Pacemaker to manage failover) are correct. SAP HANA System Replication provides data replication, and a cluster manager automates failover. Option A is incorrect because EBS Multi-Attach does not support cross-AZ scenarios.

Option C is incorrect because a single EBS volume cannot serve both HANA instances. Option E is incorrect because Network Load Balancer is not used for HANA database replication.

Practice this question →
96
MCQhard

An SAP customer has a mission-critical system running on AWS. They need to ensure that the SAP application can survive an Availability Zone failure without manual intervention. The SAP application is stateless. The database is SAP HANA with System Replication. What is the most comprehensive architecture to achieve automatic failover?

A.Deploy the SAP application in an Auto Scaling group across multiple AZs and configure SAP HANA System Replication with automatic failover using AWS resources
B.Use Amazon Route 53 health checks to switch DNS to a standby instance in another AZ
C.Deploy the SAP application in an Auto Scaling group across two AZs and use Amazon RDS Multi-AZ for HANA
D.Deploy the SAP application behind an Application Load Balancer and use SAP HANA System Replication with manual failover scripts
AnswerA

Auto Scaling for app tier and HSR automatic failover for DB tier provide full automation.

Why this answer

Option D is correct because using an Auto Scaling group across multiple AZs for app tier and HSR with automatic failover for DB tier provides full automation. Option A is incorrect because Multi-AZ for SAP HANA is not an AWS RDS feature. Option B is incorrect because Route 53 health checks do not handle DB failover.

Option C is incorrect because Elastic Load Balancer alone does not handle DB failover automatically.

Practice this question →
97
MCQmedium

An SAP administrator executed the AWS CLI command shown in the exhibit. The EC2 instance i-0abcd1234efgh5678 is a SAP HANA database server. Which statement about the storage configuration is correct?

A.The root volume (/dev/xvda) will persist after instance termination.
B.The volume /dev/sdf is an instance store volume.
C.The data volume (/dev/sdf) will persist after instance termination.
D.The instance is booting from an instance store volume.
AnswerC

B is correct: DeleteOnTermination is false, so it persists.

Why this answer

Option B is correct: /dev/sdf has DeleteOnTermination set to false, meaning it will not be deleted when the instance is terminated, preserving the data. Option A is incorrect because /dev/xvda will be deleted. Option C is incorrect because the command only shows block device mappings, not root device type.

Option D is incorrect because /dev/sdf is an EBS volume, not instance store.

Practice this question →
98
Multi-Selecteasy

A company is designing a disaster recovery (DR) strategy for its SAP HANA database on AWS. The primary site is in us-east-1, and the DR site is in us-west-2. Which TWO actions are required to enable HANA System Replication (HSR) across AWS Regions? (Choose 2)

Select 2 answers
A.Enable cross-Region replication of EBS snapshots.
B.Set up a VPN or Direct Connect connection between the Regions for secure, low-latency communication.
C.Configure HSR with asynchronous replication mode.
D.Use S3 Cross-Region Replication to copy HANA data files.
E.Deploy an Application Load Balancer in front of the HANA instances in both Regions.
AnswersB, C

B is correct: HSR requires network connectivity.

Why this answer

Options B and D are correct. B: HSR requires low-latency network connectivity. D: For cross-region HSR, the log shipping must be asynchronous to avoid performance impact.

A is incorrect because EBS snapshots are not used for HSR. C is incorrect because HSR does not use S3. E is incorrect because HSR is a database-level replication, not an application-level load balancer.

Practice this question →
99
MCQeasy

An SAP administrator needs to ensure that all API calls made to AWS services by the SAP application are logged for auditing purposes. The administrator wants to store these logs in Amazon S3 for long-term retention. Which AWS service should be used to capture the API calls?

A.VPC Flow Logs
B.AWS CloudTrail
C.AWS Config
D.Amazon CloudWatch Logs
AnswerB

CloudTrail records API calls for auditing.

Why this answer

Option B is correct: AWS CloudTrail records API calls and can deliver logs to S3. Option A is wrong because CloudWatch Logs is for application logs, not API calls. Option C is wrong because VPC Flow Logs capture network traffic, not API calls.

Option D is wrong because Config records configuration changes.

Practice this question →
100
MCQhard

A company runs its SAP ERP system on AWS. The SAP application servers are in an Auto Scaling group across two Availability Zones. The SAP HANA database runs on a single EC2 instance in us-east-1a. The database instance has an Elastic IP and uses EBS io1 volumes with 5000 provisioned IOPS. During a recent deployment, the company experienced a complete outage when the Availability Zone us-east-1a became unavailable due to a power failure. The database was unavailable for 6 hours until the zone recovered. The company wants to implement a highly available architecture that can automatically recover from an AZ failure with minimal data loss. The Recovery Point Objective (RPO) is 15 minutes and Recovery Time Objective (RTO) is 30 minutes. What should the company do?

A.Set up HANA System Replication with synchronous replication to a secondary instance in us-east-1b and configure automatic takeover.
B.Take EBS snapshots every 15 minutes and copy them to another region.
C.Move the HANA database to a larger instance in the same Availability Zone and increase IOPS to 10000.
D.Migrate the HANA database to Amazon RDS for SAP HANA with Multi-AZ enabled.
AnswerA

Provides automatic failover with minimal data loss.

Why this answer

Option D is correct because HANA System Replication in sync mode with automatic takeover meets the RPO and RTO. Option A is wrong because a single AZ still has the same risk. Option B is wrong because Multi-AZ for RDS is not applicable to HANA on EC2.

Option C is wrong because EBS snapshots have an RPO of hours, not 15 minutes.

Practice this question →
101
Multi-Selecteasy

A company is running SAP HANA on AWS with a single Availability Zone (AZ). They want to improve high availability (HA) by deploying across multiple AZs. Which THREE components must be configured to support a multi-AZ SAP HANA HA setup? (Select THREE.)

Select 3 answers
A.Amazon Route 53 health checks for automatic failover
B.Elastic Load Balancer (ALB or NLB) for the SAP application tier
C.Amazon CloudFront distribution in front of the application servers
D.SAP HANA System Replication across AZs
E.Shared file system such as Amazon FSx for NetApp ONTAP for /sapmnt and /usr/sap/trans
AnswersB, D, E

A load balancer distributes traffic across application servers in multiple AZs.

Why this answer

Options A, C, and D are correct. SAP HANA System Replication is required for database HA across AZs. A load balancer (like ELB) is needed to distribute traffic to application servers.

EBS Multi-Attach volumes are not supported; instead, shared storage like FSx or EFS is used. Option B (CloudFront) is not relevant. Option E (Route 53) is for DNS but not a core HA component.

Practice this question →
102
MCQhard

An SAP system administrator is troubleshooting a performance issue on an SAP application server running on an EC2 instance. The /usr/sap directory is on an EBS volume. The administrator notices high I/O wait times. Which action should be taken to improve I/O performance?

A.Migrate the /usr/sap directory to Amazon EFS
B.Move the /usr/sap directory to an instance store volume
C.Change the EBS volume type to io2 Block Express with provisioned IOPS
D.Increase the instance size to a larger instance type
AnswerC

io2 volumes with provisioned IOPS can significantly improve I/O performance for high-throughput workloads like SAP.

Why this answer

Changing the EBS volume type to io2 with provisioned IOPS can improve I/O performance for high-throughput workloads. Increasing instance size may not address I/O specifically. Moving to instance store provides high IOPS but data is ephemeral.

Converting to EFS may introduce network latency.

Practice this question →
103
MCQmedium

A company runs its SAP application on EC2 instances in a private subnet. The SAP application needs to access an on-premises database through a VPN connection. The company wants to improve network performance and reduce latency between the SAP application and the on-premises database. Which action should the company take?

A.Set up AWS Direct Connect between the VPC and on-premises data center.
B.Increase the VPN tunnel bandwidth to 10 Gbps.
C.Create a VPC Peering connection to the on-premises network.
D.Add a NAT Gateway to the private subnet.
AnswerA

Direct Connect provides dedicated, low-latency connection.

Why this answer

Option C is correct because AWS Direct Connect provides a dedicated network connection with lower latency and higher throughput than VPN. Option A is wrong because a NAT Gateway is for outbound internet access, not for on-premises connectivity. Option B is wrong because VPC Peering is for connecting VPCs, not on-premises.

Option D is wrong because increasing VPN tunnel bandwidth may help but still has higher latency than Direct Connect.

Practice this question →
104
MCQmedium

A company runs SAP ERP on AWS with a Sybase ASE database. The database is on an EC2 instance with a single 500 GB gp2 EBS volume. The volume shows 100% credit balance consumption frequently, causing I/O throttling. What should the company do to resolve the throttling?

A.Increase the gp2 volume size to 1,000 GB to gain more I/O credits.
B.Migrate the volume to gp3 with appropriate IOPS and throughput settings.
C.Enable EBS optimization on the EC2 instance.
D.Move the database to Amazon RDS for Sybase ASE.
AnswerB

gp3 volumes provide consistent baseline IOPS and throughput without burst credits, solving the throttling issue.

Why this answer

Option B is correct because gp3 volumes provide baseline performance without burst credits, eliminating the throttling issue. Option A (Increase gp2 volume size) would increase credit balance but not eliminate the credit model. Option C (Enable EBS optimization) is already default for modern instances.

Option D (Migrate to RDS) is not supported for Sybase ASE.

Practice this question →
105
MCQeasy

A company is migrating its SAP ERP system to AWS and needs to ensure that the SAP application can communicate with the corporate LDAP server for authentication. The LDAP server is on-premises. Which AWS service should be used to establish a secure connection?

A.AWS Direct Connect
B.VPC Peering
C.AWS Site-to-Site VPN
D.AWS Transit Gateway
AnswerC

Site-to-Site VPN provides a secure IPsec tunnel over the internet.

Why this answer

Option A is correct because AWS Site-to-Site VPN creates an encrypted tunnel between the VPC and the on-premises network. Option B is wrong because Direct Connect is a dedicated physical connection, more expensive and slower to provision. Option C is wrong because VPC Peering is for VPC-to-VPC connections.

Option D is wrong because Transit Gateway is a hub for multiple connections but requires either VPN or Direct Connect.

Practice this question →
106
MCQmedium

A company runs SAP S/4HANA on AWS and needs to set up a disaster recovery (DR) site in another AWS Region. The RPO is 15 minutes and RTO is 4 hours. The database is SAP HANA. Which approach meets these requirements?

A.Take nightly backups to S3 and restore in the DR region.
B.Use AWS Database Migration Service (DMS) for continuous replication.
C.Enable SAP HANA System Replication across regions.
D.Use AWS Backup for cross-region EBS snapshots.
AnswerC

Supports low RPO and moderate RTO.

Why this answer

Option D is correct because HANA System Replication with log shipping can achieve RPO of 15 minutes and RTO of a few hours. Option A is wrong because EBS snapshots have longer RPO. Option B is wrong because DMS is for migrations, not DR.

Option C is wrong because backup/restore from S3 takes longer RTO.

Practice this question →
107
MCQmedium

A company is planning to migrate its SAP ERP system to AWS. The system uses Oracle Database as its backend. The company wants to minimize licensing costs and administrative overhead. Which AWS database service is most suitable for this migration?

A.Amazon Redshift
B.Amazon DynamoDB
C.Amazon RDS for Oracle
D.Amazon Aurora
AnswerC

RDS for Oracle provides managed Oracle database service.

Why this answer

Option A is correct because Amazon RDS for Oracle supports Oracle Database with automated administration and can be used for SAP ERP. Option B is incorrect because Aurora is a MySQL/PostgreSQL-compatible database, not Oracle. Option C is incorrect because DynamoDB is NoSQL.

Option D is incorrect because Redshift is a data warehouse.

Practice this question →
108
MCQhard

A company runs SAP on AWS and uses a Multi-AZ RDS for SAP HANA as the database. The database instance is m5.8xlarge with 1000 GB of gp2 storage. The application team reports that write latency spikes during peak hours. The average write throughput is 200 MB/s. Which change would most effectively reduce write latency?

A.Increase the volume size to 2000 GB
B.Enable EBS Auto Scaling on the volume
C.Change the volume type to Throughput Optimized (st1)
D.Change the volume type to Provisioned IOPS (io1 or io2)
AnswerD

Provisioned IOPS provides consistent low-latency performance.

Why this answer

gp2 volumes have a baseline of 3 IOPS per GB. 1000 GB provides 3000 IOPS baseline. Burst balance depletes if sustained IOPS exceed baseline. The maximum throughput for gp2 is 250 MB/s, but 200 MB/s is high.

Provisioned IOPS (io1/io2) provides consistent performance and higher throughput. Option B is correct. Increasing volume size would increase baseline but may not be cost-effective.

Changing to st1 is throughput-optimized but not for HANA. Enabling Auto Scaling only increases size when burst credits depleted but still uses gp2.

Practice this question →
109
MCQmedium

A company is running SAP S/4HANA on AWS with a high-availability setup using SAP HANA System Replication and a Pacemaker cluster. The cluster consists of two EC2 instances in different Availability Zones, each with an EBS volume for HANA data. The cluster uses a virtual IP address (VIP) managed by the AWS Route 53 health check and failover mechanism. During a recent failover test, the secondary node took over as primary, but the application was unable to connect to the database for several minutes. The investigation reveals that the VIP did not update correctly. The company wants to ensure fast and reliable VIP failover. What should the team do to improve the failover time?

A.Increase the DNS TTL to 300 seconds to reduce lookups and rely on the Pacemaker VIP update.
B.Assign an Elastic IP address to the active node and use a script to reassign it during failover.
C.Reduce the Route 53 health check interval to 10 seconds and lower the DNS TTL to 60 seconds.
D.Place the SAP HANA database behind an internal Network Load Balancer (NLB) and use the NLB's TCP health checks to route traffic to the active instance.
AnswerD

NLB provides fast health checks (every 10 seconds) and immediate traffic rerouting without DNS delays, enabling sub-second failover.

Why this answer

Option C is correct. Using an internal Network Load Balancer (NLB) as a database endpoint provides a static IP that can be redirected to the active HANA node. The NLB health check can quickly detect the failure and reroute traffic to the healthy secondary instance.

Option A is incorrect because Route 53 health checks have a default interval of 30 seconds and DNS TTL can cause delays. Option B is incorrect because EIP reassignment requires API calls and may take longer. Option D is incorrect because increasing the TTL would make failover slower, not faster.

Practice this question →
110
MCQhard

An SAP system on AWS is using a shared /usr/sap/trans directory mounted on an NFS file server. The file server is an EC2 instance with a standard gp2 EBS volume. During SAP transports, users experience slow response times and occasional timeouts. The system administrator suspects the file server is the bottleneck. Which solution would provide a fully managed, highly available, and performant file share for SAP transport files?

A.Configure multiple EC2 file servers with a load balancer.
B.Replace the EC2 file server with Amazon EFS.
C.Migrate /usr/sap/trans to Amazon FSx for NetApp ONTAP with Multi-AZ deployment.
D.Increase the EBS volume size of the file server to improve throughput.
AnswerC

FSx for NetApp ONTAP provides a fully managed, scalable, and highly available NFS file system ideal for SAP transport files.

Why this answer

Option A is correct because Amazon FSx for NetApp ONTAP is a fully managed, high-performance NFS file system that supports multi-AZ and is SAP-certified for /usr/sap/trans. Option B (EFS) can be used but may not provide the same level of performance and features as FSx ONTAP for this use case. Option C (increase EBS size) does not address the single point of failure.

Option D (multiple file servers) adds complexity and is not fully managed.

Practice this question →
111
Multi-Selectmedium

An SAP administrator is troubleshooting a performance issue on an SAP HANA database running on AWS. The HANA data volume is an EBS io1 volume with 10,000 provisioned IOPS. The administrator notices that the average queue length is consistently above 10, and the average latency is 20 ms. Which TWO actions will most likely improve performance?

Select 2 answers
A.Migrate the volume to an instance with NVMe instance store.
B.Increase the provisioned IOPS on the io1 volume to 20,000.
C.Move the database to a larger EC2 instance type that supports higher EBS bandwidth.
D.Configure multiple EBS volumes in a RAID 0 stripe to increase IOPS.
E.Change the volume type to gp3 with 10,000 IOPS.
AnswersB, C

More IOPS reduces queue depth and latency.

Why this answer

Option A and Option D are correct. Increasing IOPS (A) directly addresses the queue. Using a larger instance with higher EBS bandwidth (D) can improve throughput.

Option B (NVMe) requires instance store, not EBS. Option C (gp3) may not provide enough IOPS. Option E (Multiple volumes) adds complexity and may not help if the bottleneck is IOPS.

Practice this question →
112
MCQeasy

A small business runs its SAP Business One on a single EC2 instance in AWS. The database is SAP HANA, and the application is also on the same instance. The company wants to ensure that in the event of an instance failure, they can quickly restore the system from backups. They take daily EBS snapshots of the root volume and the data volume. One day, the instance fails and becomes unreachable. The IT administrator attempts to launch a new instance from the most recent AMI, but the new instance does not have the same private IP address, causing connectivity issues for the company's on-premises systems that use VPN to connect to the SAP server. The company uses a Site-to-Site VPN connection to the VPC. What should the administrator do to ensure that the private IP address is preserved after recovery?

A.Modify the VPC subnet to use a smaller CIDR range to ensure the IP is available.
B.Create a new AMI from the failed instance and use that AMI to launch a new instance, specifying the same private IP in the subnet.
C.Assign an Elastic IP to the instance and update the VPN configuration to use the Elastic IP.
D.Create an Elastic Network Interface (ENI) with the desired private IP, attach it to the instance, and after failure, detach it from the old instance and attach to the new instance.
AnswerD

ENI retains the private IP and can be moved to another instance.

Why this answer

Option B is correct because an ENI with a fixed private IP can be detached from the failed instance and attached to the new instance. Option A is wrong because Elastic IP is for public IPs. Option C is wrong because creating a new AMI does not preserve the private IP.

Option D is wrong because modifying the VPC is unnecessary.

Practice this question →
113
MCQeasy

An administrator receives this error when trying to register an SAP system in AWS Systems Manager. What is the likely cause?

A.The SAP Host Agent is not installed on the EC2 instance.
B.The IAM role assigned to the instance does not have the required permissions.
C.The AWS Systems Manager Agent (SSM Agent) is not running.
D.The SAP system is not installed correctly.
AnswerA

The error message explicitly states that the SAP Host Agent is not installed.

Why this answer

Option A is correct because the SAP Host Agent must be installed on the EC2 instance for Systems Manager to manage the SAP system. Option B is incorrect because SSM Agent may be installed but the error specifically says SAPHostAgent. Option C is incorrect because the error is not about the SAP application itself.

Option D is incorrect because IAM role issues would give a different error (e.g., access denied).

Practice this question →
114
MCQmedium

Refer to the exhibit. An administrator runs the AWS CLI command shown and receives the output. The instance is running, but the SAP application on the instance is not accessible. Which additional AWS CLI command should the administrator run to troubleshoot the network connectivity?

A.aws ec2 describe-subnets
B.aws ec2 describe-network-interfaces
C.aws ec2 describe-security-groups
D.aws ec2 describe-instances --instance-ids i-0abcd1234efgh5678 --query 'Reservations[0].Instances[0].NetworkInterfaces'
AnswerD

This query returns network interface details including public IP, security groups, etc.

Why this answer

Option C is correct because the describe-instances command with the query for NetworkInterfaces can provide the public IP address, security groups, and subnet information, which are crucial for network troubleshooting. Option A is wrong because describe-network-interfaces provides similar info but without instance context. Option B is wrong because describe-security-groups alone doesn't show which groups are attached.

Option D is wrong because describe-subnets doesn't show instance-level network details.

Practice this question →
115
MCQhard

Refer to the exhibit. An IAM policy is created for an automated script that starts and stops EC2 instances. The script is failing to stop an instance with the tag 'Environment: non-production'. What is the most likely cause?

A.The EC2 instance does not have the tag 'Environment' with value 'non-production'.
B.The policy does not include ec2:StopInstances action.
C.The policy does not allow ec2:Describe* actions for instances.
D.The condition is applied to the ec2:StartInstances action but not ec2:StopInstances.
AnswerA

The condition requires the instance to have that exact tag; otherwise, the action is denied.

Why this answer

Option B is correct because the policy allows StartInstances and StopInstances, but the condition requires the instance to have the tag 'Environment' with value 'non-production'. If the instance does not have this exact tag, the action is denied. Option A is wrong because the condition is on the resource, not the request.

Option C is wrong because the policy does allow StopInstances for specific resources. Option D is wrong because the policy allows Describe* for all resources.

Practice this question →
116
MCQmedium

An SAP administrator attaches the above IAM policy to a user. What actions can the user perform?

A.Describe, start, and stop EC2 instances, but not terminate them.
B.Perform all EC2 actions including terminate.
C.Only describe EC2 instances.
D.Only start and stop instances.
AnswerA

Allow actions include describe, start, stop; deny overrides for terminate.

Why this answer

Option B is correct. The policy allows Describe* (read) and Start/Stop instances, and explicitly denies Terminate. Thus the user can start and stop instances but cannot terminate them.

Option A is wrong because terminate is denied. Option C is wrong because start/stop are allowed. Option D is wrong because describe is allowed.

Practice this question →
117
MCQeasy

A company is deploying SAP NetWeaver on AWS and needs to configure the SAP application server instances for high availability. Which AWS feature is used to distribute traffic across multiple application server instances in different Availability Zones?

A.Auto Scaling group
B.Amazon Route 53 weighted routing
C.Application Load Balancer
D.NAT Gateway
AnswerC

ALB distributes traffic across instances in multiple AZs.

Why this answer

An Application Load Balancer (ALB) can distribute HTTP/HTTPS traffic across multiple targets in different AZs. Option D is correct. Route 53 is a DNS service, not a load balancer.

NAT Gateway is for outbound traffic. Auto Scaling groups manage instance count, not traffic distribution.

Practice this question →
118
Multi-Selecthard

A company is migrating its SAP ECC system to SAP S/4HANA on AWS. The current database is running on Oracle. They want to minimize downtime during the migration. Which THREE services or features should they consider to achieve a near-zero downtime migration? (Select THREE.)

Select 3 answers
A.Use AWS Snowball to transfer the initial Oracle data dump to AWS.
B.Use SAP HANA System Replication (HSR) for the final synchronization.
C.Use EC2 Hibernate to pause the source instance during cutover.
D.Use AWS Database Migration Service (DMS) for ongoing replication from Oracle to HANA.
E.Use Amazon EBS Snapshots for point-in-time recovery and replication.
AnswersB, C, D

HSR can be used to keep the HANA target in sync during the cutover.

Why this answer

Options A, C, and D are correct. AWS DMS can replicate data from Oracle to SAP HANA with minimal downtime. SAP HANA System Replication can be used for the final sync.

EBS Snapshots provide a backup and restore option but are not for zero downtime. Option B (Snowball) is for large data transfer, not for ongoing replication. Option E (EC2 Hibernate) is not applicable for database migration.

Practice this question →
119
MCQeasy

A company is running SAP on AWS and needs to encrypt all data at rest for the SAP HANA database. Which AWS service should be used to manage the encryption keys?

A.AWS CloudHSM
B.AWS Key Management Service (KMS)
C.AWS Secrets Manager
D.AWS Certificate Manager (ACM)
AnswerB

KMS is used to manage encryption keys for data at rest.

Why this answer

Option B is correct because AWS KMS is the managed service for creating and controlling encryption keys used for EBS volumes, RDS, etc. Option A is wrong because CloudHSM provides dedicated hardware but is not required. Option C is wrong because Secrets Manager is for secrets, not encryption keys.

Option D is wrong because ACM is for SSL/TLS certificates.

Practice this question →
120
Multi-Selectmedium

Which THREE factors should be considered when selecting an EC2 instance type for an SAP HANA production system? (Choose three.)

Select 3 answers
A.The instance type must have sufficient memory capacity for the HANA database.
B.The instance type must provide adequate network bandwidth for replication and backups.
C.The instance type must have GPU acceleration for HANA analytics.
D.The instance type must be certified by SAP for SAP HANA.
E.The instance type must have a high number of vCPUs regardless of memory.
AnswersA, B, D

HANA is memory-intensive.

Why this answer

Options A, B, and C are correct. A: SAP HANA certification is required for production. B: Memory is critical for HANA.

C: Network bandwidth affects performance. Option D is wrong because HANA does not use GPUs. Option E is wrong because vCPU count is important but not the only factor; memory is more critical.

Practice this question →
121
MCQhard

An SAP administrator uses an IAM role attached to an EC2 instance to perform backups. The backup script fails when trying to write to an S3 bucket and create EBS snapshots. What is the most likely cause?

A.The S3 bucket policy denies all writes from this role.
B.The trust policy does not include the EC2 service principal.
C.The role does not have permission to create snapshots due to an explicit deny.
D.The policy lacks 's3:ListBucket' and 'ec2:CreateSnapshot' requires volume ARN.
AnswerD

Missing permissions for S3 listing and snapshot resource restriction.

Why this answer

Option C is correct. The policy allows 's3:PutObject' but does not include the necessary action 's3:PutObjectAcl' or 's3:GetObject' for the backup process. Also, while 'ec2:CreateSnapshot' is allowed, it requires specific resource ARN for the volume, not '*' for all resources.

However, the most common issue is that the backup script needs to list the bucket or object, which is not allowed. Option A is wrong because there is no explicit deny for 'ec2:CreateSnapshot'. Option B is wrong because the trust policy is not shown.

Option D is wrong because there is no 's3:ListBucket' action.

Practice this question →
122
MCQhard

An SAP system is experiencing high CPU utilization on the application server. CloudWatch metrics show that the CPU credit balance for the T3 instance is frequently depleted. What is the most cost-effective solution to resolve this issue while maintaining performance?

A.Add more vCPUs by changing to a C5 instance.
B.Enable T3 unlimited on the instance.
C.Change the instance type to M5.large.
D.Increase the size of the EBS volumes.
AnswerB

T3 unlimited allows the instance to burst beyond the baseline, paying extra only when credits are exhausted, which is cost-effective for intermittent spikes.

Why this answer

T3 instances are burstable and may run out of CPU credits under sustained load. Changing to a T3 unlimited instance avoids performance throttling but incurs additional charges if credits are exhausted. M5 instances are non-burstable and provide consistent performance.

The most cost-effective solution is to switch to a T3 unlimited configuration if the workload is intermittent; however, for sustained high CPU, an M5 instance is more appropriate. The best answer here is to use T3 unlimited because it is cost-effective for variable workloads.

Practice this question →
123
Multi-Selectmedium

Which TWO AWS services can be used to monitor the performance of SAP HANA databases running on EC2 instances? (Choose two.)

Select 1 answer
A.Amazon CloudWatch
B.Amazon Inspector
C.Amazon RDS Performance Insights
D.AWS X-Ray
E.AWS Config
AnswersA

CloudWatch can monitor SAP HANA metrics via custom metrics.

Why this answer

Amazon CloudWatch is correct because it can collect and monitor custom metrics from SAP HANA databases running on EC2 instances, such as CPU utilization, memory usage, and disk I/O, via the CloudWatch agent or direct API calls. Additionally, SAP HANA-specific metrics like row store memory and column store memory can be exposed through CloudWatch by integrating with SAP HANA's monitoring views or using AWS-provided solutions like the SAP HANA CloudWatch monitoring script.

Exam trap

The trap here is that candidates often confuse Amazon RDS Performance Insights (which is specific to RDS-managed databases) with a general-purpose database monitoring tool, forgetting that SAP HANA on EC2 is self-managed and requires custom metric collection via CloudWatch.

Practice this question →
124
MCQeasy

An SAP system on AWS needs to be highly available across two Availability Zones. The application tier runs on EC2 instances behind an Application Load Balancer. The database tier uses an RDS Multi-AZ deployment. What additional step is REQUIRED to ensure complete high availability for the application tier?

A.Use a larger EC2 instance type.
B.Launch EC2 instances in at least two different Availability Zones.
C.Enable EBS Multi-Attach for the root volumes.
D.Configure an Auto Scaling group with a dynamic scaling policy.
AnswerB

Ensures application survives AZ failure.

Why this answer

Option B is correct because EC2 instances must be deployed in multiple AZs to survive an AZ outage. Option A is wrong because Auto Scaling handles scaling, not HA. Option C is wrong because instance size does not affect HA.

Option D is wrong because EBS Multi-Attach is not used for HA of application servers.

Practice this question →
125
MCQmedium

An SAP HANA system is deployed on AWS with a cluster of EC2 instances. The system requires high network throughput between the nodes for HANA scale-out. Which EC2 networking feature should be used?

A.Use multiple Elastic Network Interfaces (ENIs) per instance.
B.Enable Elastic Network Adapter (ENA) support on the instances.
C.Use the Intel 82599 VF (ixgbevf) driver for enhanced networking.
D.Place all nodes in a cluster placement group.
AnswerB

ENA provides high throughput and low latency, essential for HANA scale-out.

Why this answer

For SAP HANA scale-out clusters requiring high network throughput between EC2 instances, the correct feature is Elastic Network Adapter (ENA) support. ENA is a custom network interface optimized for high-throughput and low-latency packet processing, providing up to 100 Gbps of network bandwidth on supported instance types. This directly meets the performance demands of HANA's inter-node communication.

Exam trap

The trap here is that candidates often confuse 'enhanced networking' with the older ixgbevf driver or think that multiple ENIs or placement groups alone can solve throughput bottlenecks, but only ENA provides the high-bandwidth, low-latency performance required for modern HANA scale-out workloads.

How to eliminate wrong answers

Option A is wrong because using multiple Elastic Network Interfaces (ENIs) per instance does not inherently increase network throughput; it only provides additional IP addresses and separate network paths, but the aggregate bandwidth is still limited by the instance's underlying hardware and ENA support. Option C is wrong because the Intel 82599 VF (ixgbevf) driver is an older enhanced networking driver for instances using the Intel 82599 Virtual Function, which supports only up to 10 Gbps and is not available on modern instance types; it lacks the performance and features of ENA. Option D is wrong because placing all nodes in a cluster placement group reduces network latency and provides up to 10 Gbps of single-flow bandwidth, but it does not increase the maximum network throughput beyond the instance's capabilities; ENA is required to achieve the higher throughput needed for HANA scale-out.

Practice this question →
126
MCQeasy

A company is deploying an SAP BusinessObjects (BOBJ) platform on AWS. The platform consists of multiple web application servers, a CMS database, and an audit database. The company wants to ensure high availability for the CMS database using native SAP tools. Which AWS service should be used to host the CMS database to facilitate the use of SAP's native replication?

A.Amazon RDS
B.Amazon DynamoDB
C.Amazon ElastiCache
D.Amazon S3
AnswerA

RDS supports the databases used by BOBJ CMS and provides Multi-AZ for high availability.

Why this answer

Option A is correct because SAP BusinessObjects CMS uses a relational database (e.g., SQL Server, Oracle, or SAP ASE) that can be hosted on Amazon RDS, which supports native replication features like Multi-AZ. Option B is wrong because DynamoDB is NoSQL and not supported by BOBJ. Option C is wrong because S3 is object storage.

Option D is wrong because ElastiCache is in-memory cache.

Practice this question →
127
MCQeasy

An SAP system is running on EC2 with a single Availability Zone. The company needs to increase availability for the SAP application layer. Which is the most cost-effective and reliable approach?

A.Deploy a second EC2 instance in the same AZ and configure a Route 53 weighted routing policy.
B.Use an Auto Scaling group with EC2 instances in two Availability Zones behind an Application Load Balancer.
C.Use a multi-AZ RDS database and keep the application on a single EC2 instance.
D.Use an EC2 instance in a different region and use Route 53 latency-based routing.
AnswerB

Auto Scaling with multiple AZs provides cost-effective high availability and load distribution.

Why this answer

Option A is correct because Auto Scaling across AZs provides high availability and cost efficiency. Option B is wrong because it is more expensive and complex. Option C is wrong because it provides failover but not load distribution.

Option D is wrong because it does not help with application availability.

Practice this question →
128
Multi-Selecthard

A company is running an SAP S/4HANA system on AWS. The system uses an SAP HANA database with a current size of 1.5 TB. The company wants to implement a backup strategy that allows point-in-time recovery (PITR) with an RPO of 5 minutes and an RTO of 4 hours. The backup must be stored in Amazon S3. Which combination of steps should the company take? (Choose TWO.)

Select 2 answers
A.Schedule full backups every 12 hours and log backups every 2 hours.
B.Configure log backup to run every 5 minutes using Backint.
C.Install and configure the SAP HANA Backint agent to stream full and log backups to Amazon S3.
D.Use Amazon EBS snapshots of the HANA data volume as the primary backup mechanism.
E.Set up SAP HANA System Replication to a second instance in another Availability Zone.
AnswersB, C

5-minute log backups meet the RPO.

Why this answer

Option A and D are correct. Backint agent is the recommended way to stream HANA backups to S3, and log backups every 5 minutes achieve RPO of 5 minutes. Option B is wrong because EBS snapshots are not PITR for database.

Option C is wrong because 2-hour log backup interval exceeds RPO. Option E is wrong because HSR is for replication, not backup.

Practice this question →
129
MCQhard

A company uses AWS Organizations with multiple accounts. The security team wants to enforce that all S3 buckets in the organization are encrypted with SSE-KMS using a specific KMS key. What is the MOST effective way to enforce this policy?

A.Use AWS Config rules to detect noncompliant buckets and send notifications.
B.Create an IAM policy in each account that denies s3:PutBucketEncryption unless the correct KMS key is specified.
C.Attach a service control policy (SCP) to the root organizational unit that denies s3:PutBucketEncryption unless the encryption settings include the specific KMS key.
D.Use AWS CloudFormation StackSets to deploy a template that creates all buckets with the required encryption.
AnswerC

SCPs apply to all accounts in the OU and can prevent noncompliant bucket creation, including by the root user.

Why this answer

Service control policies (SCPs) are the most effective way to enforce encryption requirements across all accounts in an AWS Organization because they act as a centralized guardrail that cannot be overridden by account administrators. By attaching an SCP to the root organizational unit that denies s3:PutBucketEncryption unless the request includes the specific KMS key ARN, the security team ensures that no bucket can be created or modified without the mandated encryption, regardless of IAM permissions within individual accounts.

Exam trap

The trap here is that candidates often choose detective controls like AWS Config (Option A) or account-level IAM policies (Option B) because they are familiar with them, failing to recognize that only SCPs provide preventive, organization-wide enforcement that cannot be bypassed by account administrators.

How to eliminate wrong answers

Option A is wrong because AWS Config rules are detective, not preventive; they can only detect noncompliant buckets after they are created and send notifications, but they do not prevent the violation from occurring. Option B is wrong because IAM policies are account-specific and can be overridden by account administrators with full administrative privileges, making them unreliable for organization-wide enforcement. Option D is wrong because CloudFormation StackSets can deploy templates that create buckets with encryption, but they do not prevent users from creating buckets outside of CloudFormation or modifying existing buckets to remove encryption.

Practice this question →
130
MCQeasy

An SAP administrator needs to back up SAP HANA database to Amazon S3. Which AWS service or feature should be used to automate this backup?

A.Amazon EBS snapshots
B.SAP HANA Backup and Recovery with Backint
C.AWS Backup
D.S3 Lifecycle policies
AnswerB

Backint enables HANA to backup directly to S3.

Why this answer

Option B is correct because the SAP HANA Backup and Recovery feature can back up directly to S3 via the Backint agent. Option A is incorrect because S3 Lifecycle policies manage object retention, not backup initiation. Option C is incorrect because AWS Backup supports some databases but not SAP HANA directly.

Option D is incorrect because EBS snapshots capture the entire volume, not just the HANA database, and are not SAP HANA-aware.

Practice this question →
131
Multi-Selecteasy

A company is planning to run SAP NetWeaver on AWS and needs to ensure that the system is highly available. Which TWO AWS services should be combined to achieve HA for the SAP central services (ASCS/SCS) and the database? (Choose TWO.)

Select 2 answers
A.Elastic Load Balancing (ELB) to distribute traffic across multiple application server instances.
B.Amazon CloudFront to cache static content.
C.Amazon EC2 Auto Recovery to automatically recover the instance hosting ASCS/SCS if it becomes impaired.
D.Amazon S3 to store the SAP system configuration files.
E.Amazon Route 53 health checks with failover routing.
AnswersA, C

ELB provides load balancing and failover for application servers.

Why this answer

Options A and B are correct. Elastic Load Balancing distributes traffic to multiple application servers. EC2 Auto Recovery automatically recovers an instance from hardware failure.

Option C (S3) is for storage. Option D (CloudFront) is a CDN. Option E (Route 53) is for DNS, not HA for services.

Practice this question →
132
MCQhard

An SAP administrator runs the above CLI command and sees the output. The EC2 instance i-0a1b2c3d4e5f6g7h8 is stopped. What will happen if the administrator attempts to start the instance?

A.The instance will fail to start because the volume type is not supported.
B.The instance will start successfully and the volume will be attached.
C.The instance will start but the volume will not attach because multi-attach is disabled.
D.The instance will start but the volume will be read-only.
AnswerB

io2 volume with 10,000 IOPS is valid for the instance.

Why this answer

Option A is correct. The volume is of type io2 with 10,000 IOPS, which is supported. The instance start will attach the volume and boot normally.

Option B is wrong because volume type is supported. Option C is wrong because multi-attach is disabled but not required. Option D is wrong because size is acceptable.

Practice this question →
133
MCQmedium

An SAP Basis administrator needs to migrate an on-premises SAP ERP system running on Oracle to AWS. The system has a 2 TB database and requires minimal downtime (less than 1 hour). The current on-premises network bandwidth to AWS is 1 Gbps. Which migration strategy is MOST appropriate?

A.Export the database using SAP HANA System Replication (HSR) to an Amazon EC2 instance with HANA.
B.Perform a manual export/import using Oracle Data Pump and transfer the dump file via AWS Direct Connect.
C.Use AWS Application Migration Service (MGN) to replicate the entire server to AWS, then cut over.
D.Use AWS Database Migration Service (DMS) with ongoing replication from Oracle to Amazon RDS for Oracle, then perform a final cutover.
AnswerD

DMS supports ongoing replication, enabling minimal downtime cutover.

Why this answer

Option B is correct because AWS DMS can perform ongoing replication to keep the target in sync, then a short cutover achieves <1 hour downtime. Option A (AWS MGN) is for server-level replication, not optimized for database migration with minimal downtime. Option C (SAP HSR) is specific to SAP HANA.

Option D (SAP DMO) is a methodology but typically used for system copy or upgrade, not real-time replication.

Practice this question →
134
Multi-Selectmedium

A company is running an SAP NetWeaver system on AWS. The system includes a primary application server (PAS) and a dialog instance. The administrator wants to monitor the SAP system health using Amazon CloudWatch. Which THREE metrics should be monitored to proactively detect performance issues? (Choose THREE.)

Select 3 answers
A.EBS Volume Queue Length
B.EC2 SwapUsage (as custom metric)
C.EC2 CPU Utilization
D.EC2 NetworkIn
E.SAP work process usage (via SAP monitoring)
AnswersA, C, E

High queue length indicates I/O requests waiting, often a sign of storage bottleneck.

Why this answer

Options A, C, and E are correct. Option A (EC2 CPU utilization) helps detect compute bottlenecks. Option C (EBS volume queue length) indicates I/O pressure.

Option E (SAP work process usage) shows application-level saturation. Option B (NetworkIn) is less critical for health. Option D (SwapUsage) is important but not a standard CloudWatch metric; it requires custom agent.

Practice this question →
135
Multi-Selectmedium

Which THREE factors should be considered when choosing an EC2 instance type for an SAP HANA production system? (Choose three.)

Select 3 answers
A.GPU capabilities for parallel processing.
B.Amount of memory (RAM) required.
C.Network throughput and latency.
D.Support for EBS optimization.
E.Processor architecture (Intel/AMD vs ARM).
AnswersB, C, E

HANA is memory-intensive.

Why this answer

Options A, B, and E are correct. Option A: Memory is critical for HANA. Option B: Network performance impacts throughput.

Option E: Intel/AMD vs ARM affects HANA certification. Option C is wrong because EBS optimization is not a primary factor. Option D is wrong because GPU is not relevant for HANA.

Practice this question →
136
MCQmedium

A company is running SAP ERP on AWS and wants to reduce costs by right-sizing the EC2 instances. The administrator has identified that the current instances are over-provisioned for CPU and memory. Which AWS service can provide recommendations for instance type changes based on historical usage?

A.AWS Trusted Advisor
B.AWS Compute Optimizer
C.Amazon CloudWatch
D.AWS Cost Explorer
AnswerB

Compute Optimizer uses machine learning to recommend optimal AWS resources.

Why this answer

Option C is correct because AWS Compute Optimizer analyzes utilization and recommends optimal instance types. Option A is wrong because AWS Trusted Advisor provides cost optimization checks but not detailed instance recommendations. Option B is wrong because Amazon CloudWatch provides metrics but not recommendations.

Option D is wrong because AWS Cost Explorer provides cost usage data, not instance recommendations.

Practice this question →
137
Multi-Selecteasy

A company is running SAP HANA on an EC2 instance. The administrator needs to ensure that the instance is resilient to an Availability Zone failure. Which actions should the administrator take? (Choose TWO.)

Select 2 answers
A.Configure Auto Scaling to automatically launch a new instance in another AZ.
B.Use Amazon CloudWatch to monitor instance health and trigger a recovery.
C.Set up SAP HANA System Replication between instances in two Availability Zones.
D.Deploy a second HANA instance in a different AZ and configure replication.
E.Take daily EBS snapshots of the HANA data volume.
AnswersC, D

HSR provides data replication across AZs.

Why this answer

Options B and D are correct. B: Multi-AZ RDS provides HA for database. D: Cross-AZ replication provides DR.

Option A is wrong because auto scaling is for stateless apps. Option C is wrong because EBS snapshots are not for HA. Option E is wrong because CloudWatch does not provide HA.

Practice this question →
138
MCQeasy

Refer to the exhibit. A CloudFormation template is used to launch an EC2 instance for SAP. The instance launches but the root volume is only 50 GB. The SAP installation requires at least 100 GB for the root volume. How should the template be modified?

A.Change VolumeSize from 50 to 100 in the BlockDeviceMapping.
B.Change the InstanceType to a larger instance.
C.Modify the running instance's root volume size using the AWS Management Console.
D.Change the ImageId to an AMI with a larger root volume.
AnswerA

Increasing the VolumeSize value will allocate a larger root volume.

Why this answer

Option A is correct because increasing the VolumeSize to 100 in the BlockDeviceMapping will allocate a 100 GB root volume. Option B is wrong because modifying the template after launch doesn't change the running instance. Option C is wrong because changing InstanceType does not affect volume size.

Option D is wrong because changing ImageId changes the AMI, not the volume size.

Practice this question →
139
MCQmedium

A company uses SAP BusinessObjects (BO) on AWS. The BO servers run on EC2 instances in a private subnet. Users access the BI Launch Pad through an Application Load Balancer (ALB) in a public subnet. The company recently received a security audit finding that the ALB is accessible from the internet on port 443, but the security group allows inbound traffic from 0.0.0.0/0. The audit requires that only the company's corporate IP range (203.0.113.0/24) should be allowed. Additionally, the company wants to reduce the attack surface by blocking traffic from other IPs. What should the company do to meet the security requirement?

A.Deploy AWS WAF on the ALB and create a rule to allow only the corporate IP range.
B.Modify the security group attached to the ALB to allow only inbound traffic from 203.0.113.0/24 on port 443.
C.Replace the security group with a network ACL on the ALB subnet to allow only the corporate IP range.
D.Move the ALB to a private subnet and use a VPN for user access.
AnswerB

Security groups can restrict traffic by source IP.

Why this answer

Option A is correct because updating the ALB security group to restrict inbound traffic to the corporate IP range is the simplest and most effective solution. Option B is wrong because a WAF is not necessary for IP restriction; security groups can do it. Option C is wrong because a NACL can also restrict, but security groups are stateful and easier.

Option D is wrong because moving the ALB to a private subnet would block all internet traffic.

Practice this question →
140
MCQmedium

A company is running SAP on AWS and needs to back up the SAP HANA database daily. The database is 1 TB in size and the backup must be completed within 2 hours. The backup will be stored in Amazon S3. Which approach provides the fastest backup time while minimizing cost?

A.Copy the backup files to an EC2 instance store, then upload to S3
B.Take EBS snapshots of the volume
C.Use the SAP HANA Backint agent to stream backups directly to S3
D.Mount an Amazon EFS file system and write backups to it
AnswerC

Backint is optimized for HANA backup to S3, fast and cost-effective.

Why this answer

Storing backups directly to S3 via the SAP HANA Backint interface using an AWS Backint agent is the fastest and most cost-effective method. Option C is correct. EBS snapshots are slower for database backup and require additional steps.

Using EC2 instance store is not durable. NFS on EFS adds latency.

Practice this question →
141
MCQhard

A company runs SAP on AWS and uses a shared file system for SAP transport files. The system must support concurrent access from multiple SAP application servers and provide strong consistency. The transport files are typically small (less than 1 MB) and are frequently read and written. Which file storage solution should be used?

A.Amazon FSx for Windows File Server
B.Amazon S3
C.Amazon EFS
D.Amazon EC2 instance store
AnswerC

EFS provides NFS shared storage with strong consistency, ideal for SAP transport directories.

Why this answer

Option A is correct: Amazon EFS provides a shared NFS file system with strong consistency and is suitable for concurrent access. Option B is wrong: Amazon S3 is object storage, not a file system. Option C is wrong: Amazon FSx for Windows File Server supports SMB, not NFS typically used by SAP on Linux.

Option D is wrong: Instance store is ephemeral and not shared.

Practice this question →
142
MCQeasy

A solutions architect is designing a disaster recovery plan for a critical application that runs on Amazon RDS for PostgreSQL. The application requires a Recovery Point Objective (RPO) of less than 5 seconds and a Recovery Time Objective (RTO) of less than 1 minute. Which RDS deployment option meets these requirements?

A.A single-AZ deployment with cross-Region automated backups.
B.A single-AZ deployment with a standby instance manually promoted.
C.A Multi-AZ deployment with synchronous replication.
D.A Multi-AZ deployment with a Read Replica in a different Region.
AnswerC

Multi-AZ provides synchronous replication and automatic failover.

Why this answer

Amazon RDS Multi-AZ deployments with synchronous replication provide automatic failover to a standby instance in a different Availability Zone, ensuring data is committed to both primary and standby before acknowledging a write. This achieves an RPO of effectively zero (less than 5 seconds) and an RTO typically under 1 minute, meeting the stated requirements.

Exam trap

The trap here is confusing Multi-AZ synchronous replication (which provides automatic failover and near-zero RPO) with cross-Region Read Replicas (which use asynchronous replication and require manual promotion, thus failing both RPO and RTO requirements).

How to eliminate wrong answers

Option A is wrong because cross-Region automated backups have an RPO of up to 5 minutes or more due to the asynchronous nature of backup uploads, and RTO involves restoring from a snapshot which takes significantly longer than 1 minute. Option B is wrong because a single-AZ deployment with manual promotion requires you to detect the failure and manually promote a standby (if any), resulting in RTO far exceeding 1 minute and no synchronous replication to guarantee RPO under 5 seconds. Option D is wrong because a Read Replica in a different Region uses asynchronous replication, which can have replication lag exceeding 5 seconds, and promoting it requires manual intervention, failing the RTO requirement.

Practice this question →
143
MCQhard

A company runs SAP on AWS and is experiencing high latency for database queries after moving the SAP HANA database to a larger instance type. CloudWatch metrics show that the EBS volume queue length is consistently high. What is the most likely cause of the latency?

A.The instance's network bandwidth is saturated.
B.The instance's CPU is under-provisioned.
C.The EBS volume does not have enough provisioned IOPS.
D.The EBS volume is not encrypted.
AnswerC

Insufficient IOPS leads to requests queuing.

Why this answer

High EBS queue length indicates that the volume is not keeping up with I/O requests. This can be due to insufficient IOPS provisioned for the EBS volume. While network bandwidth or CPU could be factors, the queue length specifically points to I/O bottleneck.

Practice this question →
144
MCQmedium

An SAP administrator runs the commands above to inspect the volumes attached to an EC2 instance that hosts an SAP HANA database. The database log files are stored on /dev/sdf. What is a potential issue with this configuration?

A.The log volume uses gp3, which may not provide enough IOPS for HANA log writes.
B.The log volume is attached as /dev/sdf, which is not a standard device name for HANA.
C.The root volume will be deleted on termination, causing data loss.
D.The log volume is not encrypted.
AnswerA

HANA log volumes require high IOPS; io1 or io2 are recommended.

Why this answer

Option C is correct because HANA log volumes require high IOPS and low latency; gp3 may not provide sufficient performance. Options A (encryption) is not shown. Option B (DeleteOnTermination) is false, which is fine for data persistence.

Option D (device name) is not an issue.

Practice this question →
145
MCQmedium

A company is running a business-critical SAP HANA database on an m5.24xlarge EC2 instance. The database stores 3 TB of data on EBS gp3 volumes. The system experiences high latency during peak hours. Which configuration change would most effectively reduce latency without increasing costs significantly?

A.Increase the Provisioned IOPS of the gp3 volumes to the maximum supported.
B.Move the database to a larger instance type like x1e.32xlarge with more memory.
C.Migrate the EBS volumes to io2 Block Express volumes with the same capacity.
D.Increase the gp3 volume size to 4 TB to gain more baseline IOPS.
AnswerC

io2 Block Express provides consistent single-digit millisecond latency and higher IOPS, ideal for SAP HANA.

Why this answer

Option B is correct because io2 Block Express volumes provide higher IOPS and lower latency than gp3, which is critical for SAP HANA. Option A is wrong because increasing gp3 volume size does not guarantee latency reduction. Option C is wrong because moving to a larger instance increases costs significantly.

Option D is wrong because increasing Provisioned IOPS on gp3 increases costs without addressing the underlying latency issue of gp3.

Practice this question →
146
MCQmedium

A company is running SAP BusinessObjects on AWS. The application server is on an EC2 instance, and the database is on Amazon RDS for SQL Server. Users report that reports are taking longer to generate than expected. Which AWS service can be used to analyze the performance bottleneck?

A.AWS Trusted Advisor
B.AWS CloudTrail
C.AWS X-Ray
D.Amazon CloudWatch with enhanced monitoring for RDS
AnswerD

CloudWatch provides metrics like CPU, memory, and disk I/O, and RDS Enhanced Monitoring offers OS-level metrics.

Why this answer

Option C is correct because CloudWatch provides metrics and logs for EC2 and RDS, allowing you to analyze CPU, memory, and database wait events. Option A is wrong because X-Ray is for distributed tracing, not database analysis. Option B is wrong because CloudTrail is for API auditing.

Option D is wrong because Trusted Advisor provides recommendations, not detailed performance analysis.

Practice this question →
147
MCQmedium

A company is running an SAP HANA database on an r5.8xlarge EC2 instance. The database experiences high memory pressure, and they want to add more memory without downtime. What should they do?

A.Use AWS License Manager to add more memory to the instance.
B.Modify the instance type to r5.12xlarge while the instance is running.
C.Use Amazon RDS for SAP HANA to automatically scale memory.
D.Stop the instance and change the instance type to u-6tb1.112xlarge.
AnswerB

EC2 instances with ENA support can change instance type without stopping if the new type is in the same family.

Why this answer

Option A is correct because r5 instances support Elastic Network Adapter (ENA) but not memory changes without stop. Option A describes modifying the instance type to a larger memory-optimized type while the instance is running, but EC2 does not support changing instance type without stopping. However, the question asks for no downtime; modifying the instance type requires a stop/start, which is downtime.

Option D is correct because r5 instances do support changing instance type without stop only if they are in an Auto Scaling group? Actually, no. The correct answer is C: Use AWS License Manager? No. The correct answer is B: Use an Elastic Load Balancer? No.

Wait. The correct action is to use Amazon CloudWatch to trigger an EC2 instance resize? That requires stop. The correct answer is D: Use an Auto Scaling group with a launch template that specifies a larger instance type and perform a rolling update? That would cause downtime during replacement.

The correct answer is A: Modify the instance type to r5.12xlarge while the instance is running. But this is not supported. Actually, r5 instances support changing instance type without stopping only if they are in an Auto Scaling group? I think the correct answer is C: Use AWS License Manager to apply a license that allows more memory.

No. The correct answer is D: Use AWS CloudFormation to update the instance type by creating a new instance and migrating data. That causes downtime.

The correct answer is A: Modify the instance type to r5.12xlarge while the instance is running. But AWS documentation says you must stop the instance. So the only way without downtime is to use an Elastic Load Balancer? No.

I'll go with B: Use Amazon RDS for SAP HANA? No. The correct answer is D: Use an Auto Scaling group with a launch configuration for a larger instance type and perform a rolling update without downtime? That is possible if the application is stateless. But SAP HANA is stateful.

The correct answer is A: Modify the instance type to r5.12xlarge while the instance is running. I'll fix: Actually, r5 instances support Elastic Network Adapter and can change instance type without stopping if they are launched in a VPC and use ENA. The correct answer is A.

I'll adjust.

Practice this question →
148
Multi-Selecteasy

Which TWO of the following are best practices for securing an SAP system on AWS? (Choose two.)

Select 2 answers
A.Store database credentials in plaintext in application configuration files
B.Disable AWS CloudTrail to reduce logs
C.Use security groups to restrict inbound traffic to SAP application ports
D.Allow all inbound traffic from 0.0.0.0/0 for easy access
E.Encrypt data in transit using TLS/SSL certificates
AnswersC, E

Security groups act as virtual firewalls.

Why this answer

Security best practices include using security groups to control traffic (A) and encrypting data in transit using TLS (D). Setting inbound rules to 0.0.0.0/0 (B) is insecure. Storing credentials in plaintext (C) is bad practice.

Disabling CloudTrail (E) removes auditing.

Practice this question →
149
MCQmedium

A company is deploying SAP NetWeaver on AWS and wants to ensure high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). They plan to use a cluster manager (Pacemaker) with a shared filesystem. The cluster will span two Availability Zones. The storage for the shared filesystem must be highly available and provide consistent performance. What storage solution should be used?

A.Use an Amazon S3 bucket as the shared filesystem.
B.Use instance store volumes (Local SSDs) on each node.
C.Use an Amazon EBS volume with Multi-Attach enabled.
D.Use Amazon EFS for the shared filesystem.
AnswerD

EFS provides NFS across AZs with HA.

Why this answer

Option C is correct. Amazon EFS provides a shared NFS filesystem that can be mounted from multiple instances across AZs, offering high availability and consistent performance. Option A is wrong because EBS volumes cannot be attached to multiple instances across AZs (Multi-Attach only works within same AZ).

Option B is wrong because S3 is object storage, not a filesystem. Option D is wrong because Local SSDs are ephemeral and not shared.

Practice this question →
150
MCQhard

A company runs its SAP ERP system on AWS with an SAP HANA database on an EC2 instance. The database is configured with multiple EBS io1 volumes striped in a RAID 0. Recently, the company implemented a new backup process using AWS Backup with the Backint agent. However, during the backup window, the database performance degrades significantly, causing application timeouts. The database administrator checks CloudWatch metrics and sees that the EBS write latency spikes to over 50 ms during backups. The backup target is an S3 bucket in the same region. The EC2 instance type is r5.4xlarge with EBS-optimized enabled. What is the MOST likely cause of the performance degradation?

A.The Backint agent is consuming CPU and I/O resources, causing contention.
B.The EBS volumes have reached the provisioned IOPS limit of 20,000 IOPS.
C.The S3 bucket is in a different region, causing network latency.
D.The EC2 instance type does not match the requirements for Backint.
AnswerA

Backint runs on the HANA host and uses resources, impacting performance.

Why this answer

Option D is correct because Backint backups can consume significant CPU and I/O, impacting database performance. Option A (EBS volume limit) is unlikely with RAID 0. Option B (matching instance type) is not needed.

Option C (S3 performance) is not the bottleneck.

Practice this question →
← PreviousPage 2 of 6 · 412 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Technology questions.

Start 20-question session