Knowledge + Practice

CCNA Technology Questions

75 of 389 questions · Page 4/6 · Technology · Answers revealed

Practice these questions Domain overview All questions

226

MCQhard

A company is troubleshooting an issue where SAP users cannot log in to the SAP GUI. The SAP application server is running on an EC2 instance behind an Application Load Balancer (ALB). The ALB is configured to use the HTTPS listener on port 443. Which configuration is most likely causing the issue?

A.The ALB's target group is not configured with health checks.

B.The security group for the ALB does not allow inbound traffic on port 3300.

C.The ALB is terminating HTTPS connections, but the SAP application server expects unencrypted DIAG protocol.

D.The ALB's stickiness settings are misconfigured, causing session persistence issues.

AnswerC

SAP GUI uses DIAG (TCP 3200), not HTTP/HTTPS; an ALB is not suitable for non-HTTP traffic.

Why this answer

SAP GUI uses the DIAG protocol over TCP port 3200, not HTTPS. The ALB terminates HTTPS connections, but the backend SAP application server expects unencrypted DIAG traffic, so the protocol mismatch prevents successful login. Option A is incorrect because health checks affect target availability, not user authentication.

Option B is incorrect because port 3300 is not the standard DIAG port (3200 is), and security group rules are not the primary cause. Option D is incorrect because stickiness settings influence session persistence but do not block initial login when protocol mismatch exists.

Practice this question →

227

Multi-Selecteasy

An SAP system is running on AWS with a production HANA database. The database administrator wants to ensure that backups are consistent and can be restored. Which TWO approaches should be used together for a robust backup strategy?

Select 2 answers

A.AWS Backup with a backup plan that includes both EBS snapshots and Backint.

B.Regular EBS snapshots of the data volume.

C.Amazon EC2 Auto Scaling to create backup instances.

D.AWS Database Migration Service (DMS) for continuous replication.

E.SAP HANA Backint integration with AWS Backup.

AnswersA, E

Combining both provides crash-consistent and application-consistent backups.

Why this answer

Options A and E are correct. AWS Backup with a backup plan that includes both EBS snapshots (crash-consistent) and Backint integration (application-consistent) provides a comprehensive backup strategy for SAP HANA on AWS. Option A ensures crash-consistent backups at the storage level, while Option E uses SAP HANA Backint to produce application-consistent backups that can be orchestrated by AWS Backup.

Option B (regular EBS snapshots without coordination) lacks application consistency. Option C (Auto Scaling) is not a backup mechanism. Option D (DMS) is for database migration, not backup.

Practice this question →

228

MCQhard

An SAP HANA database running on an EC2 instance is configured with multiple EBS volumes using RAID 0 for increased throughput. During a backup operation, the instance experiences a significant drop in I/O performance. Which solution would best address this without affecting ongoing backups?

A.Add more EBS volumes to the RAID 0 array to increase total I/O bandwidth.

B.Use instance store volumes for the HANA data instead of EBS.

C.Use EBS snapshots for backup instead of file-level backup to reduce I/O load.

D.Reduce the number of EBS volumes to limit the RAID 0 penalty.

AnswerA

More volumes in RAID 0 increase parallelism and throughput, helping during backup.

Why this answer

Adding more EBS volumes to the RAID 0 array increases the total number of I/O channels available, which directly improves aggregate throughput and reduces per-volume I/O pressure during backup operations. This is because RAID 0 stripes data across all volumes, so additional volumes distribute the I/O load more evenly, mitigating the performance drop without interrupting the ongoing backup.

Exam trap

The trap here is that candidates may think reducing volumes or switching to instance store will solve performance issues, but they overlook that RAID 0 performance scales linearly with the number of volumes, and instance store lacks durability for critical SAP HANA data.

How to eliminate wrong answers

Option B is wrong because instance store volumes are ephemeral and provide no data persistence; if the instance stops or fails, all HANA data is lost, making them unsuitable for a production database. Option C is wrong because EBS snapshots are a backup method but do not reduce I/O load during the backup process; in fact, snapshotting can cause additional I/O latency due to the need to flush caches and read data from the volumes. Option D is wrong because reducing the number of EBS volumes in a RAID 0 array decreases the total I/O bandwidth and increases the I/O load on each remaining volume, worsening the performance drop rather than addressing it.

Practice this question →

229

Multi-Selecthard

An SAP HANA database is running on an EC2 instance with multiple EBS volumes for /hana/data, /hana/log, and /hana/shared. Which TWO AWS features should be used to ensure that the EBS volumes are backed up consistently?

Select 2 answers

A.Amazon S3

B.AWS Storage Gateway

C.EBS snapshots

D.EBS Lifecycle Manager

E.AWS Backup

AnswersC, E

EBS snapshots are the primary backup mechanism.

Why this answer

EBS snapshots are the standard backup method for EBS volumes. However, to ensure consistency across multiple volumes (e.g., for a striped filesystem), the volumes should be snapshotted at the same point in time. AWS Backup can automate this with snapshot consistency groups.

While AWS Backup can create consistent snapshots, it also supports application-consistent backups. The two correct options are EBS snapshots and AWS Backup. Lifecycle Manager can create snapshots but does not ensure cross-volume consistency by default.

Practice this question →

230

Multi-Selecthard

A company is deploying SAP S/4HANA on AWS and needs to choose instance types that are certified by SAP. Which TWO instance families are SAP-certified for production SAP HANA workloads?

Select 2 answers

A.R5

B.T3

C.X1e

D.M5

E.P3

AnswersA, C

Correct. R5 is memory-optimized and SAP-certified for production HANA.

Why this answer

The question asks for two certified instance families for production SAP HANA workloads. Among the provided options, only R5 (A) and X1e (C) are SAP-certified for production HANA. T3, M5, and P3 are not certified.

Therefore, the correct answers are A and C.

Exam trap

Candidates may think general-purpose or other instance families are certified, but only memory-optimized families like R5 and X1e are certified for production HANA. Do not select uncertified families.

Practice this question →

231

MCQeasy

An SAP system on AWS needs to store sensitive configuration files securely and automatically rotate the encryption keys. Which AWS service should be used?

A.AWS Systems Manager Parameter Store with AWS KMS.

B.Amazon S3 with server-side encryption.

C.AWS Key Management Service (KMS) alone.

D.AWS Secrets Manager.

AnswerA

Parameter Store can store configuration securely and use KMS for encryption with automatic key rotation.

Why this answer

AWS Systems Manager Parameter Store integrated with AWS KMS is the correct choice because it provides a secure, hierarchical store for sensitive configuration data (like SAP configuration files) and supports automatic key rotation via KMS-managed keys. Parameter Store can store encrypted strings using KMS keys, and KMS can be configured to rotate the underlying encryption key automatically every year (or on demand), meeting the requirement for both secure storage and automated key rotation.

Exam trap

The trap here is that candidates often confuse AWS Secrets Manager with Parameter Store, but Secrets Manager is designed for rotating secrets (like passwords) automatically, not for storing configuration files, and it lacks the hierarchical parameter organization that Parameter Store provides for SAP configuration management.

How to eliminate wrong answers

Option B is wrong because Amazon S3 with server-side encryption (SSE-S3 or SSE-KMS) can store files securely, but it does not natively support automatic rotation of the encryption keys; SSE-S3 uses AWS-managed keys with automatic rotation, but the key material is not customer-controlled, and the requirement specifies 'automatically rotate the encryption keys' in a way that implies customer-managed key rotation, which S3 alone does not provide. Option C is wrong because AWS KMS alone is a key management service that can create and rotate keys, but it does not store the configuration files themselves; it lacks the storage and retrieval capabilities needed for the SAP configuration files. Option D is wrong because AWS Secrets Manager is designed for managing secrets like database credentials and API keys, and while it supports automatic rotation of secrets, it is not optimized for storing configuration files (which may be larger or structured differently) and does not provide the hierarchical parameter store features that Parameter Store offers for configuration management.

Practice this question →

232

Multi-Selectmedium

Which TWO are best practices for securing SAP on AWS?

Select 2 answers

A.Place all SAP systems in the default VPC.

B.Attach public IP addresses to all SAP EC2 instances for easy management.

C.Use security groups to control traffic between SAP components.

D.Disable security groups and rely on SSH key pairs only.

E.Use IAM roles for EC2 instances to access AWS services securely.

AnswersC, E

Security groups are stateful firewalls.

Why this answer

Security groups act as a virtual firewall for EC2 instances, allowing you to control inbound and outbound traffic at the instance level. For SAP on AWS, using security groups to restrict traffic between SAP components (e.g., between the SAP application server and database server) is a best practice because it enforces least-privilege access and reduces the attack surface. IAM roles for EC2 instances enable secure, automated access to AWS services (like S3 for backups or CloudWatch for monitoring) without embedding long-term credentials in the instance, which is critical for compliance and operational security.

Exam trap

The trap here is that candidates often assume that because SAP systems are business-critical, they should be placed in the default VPC for simplicity, or that public IPs are needed for management access, when in fact AWS best practices mandate private subnets, bastion hosts, and IAM roles to maintain security and compliance.

Practice this question →

233

MCQhard

An SAP system running on AWS uses a shared file system via Amazon EFS for transport directories. The system administrator notices that file operations are slow across multiple application servers. The EFS file system is configured with Bursting Throughput mode. What is the most effective way to improve performance?

A.Switch the file system to Provisioned Throughput mode and set a higher throughput value.

B.Use EFS Access Points to enforce a different UID/GID for each application server.

C.Increase the burst credit balance by reducing file operations during off-peak hours.

D.Create additional mount targets in each Availability Zone to distribute load.

AnswerA

Provisioned Throughput mode allows you to specify a higher throughput level, providing consistent performance independent of burst credits.

Why this answer

Provisioned Throughput mode allows you to specify a higher throughput level for your Amazon EFS file system, providing consistent performance independent of burst credits. Option B is incorrect: using EFS Access Points does not affect throughput, they enforce access permissions. Option C is incorrect: reducing operations during off-peak hours may conserve burst credits but does not directly increase performance; significant improvement requires Provisioned Throughput.

Option D is incorrect: additional mount targets in each AZ do not increase throughput as they share the same file system throughput.

Practice this question →

234

MCQmedium

A company is planning to run SAP BusinessObjects (BOBJ) on AWS. The application servers require consistent low-latency access to a shared file system for storing reports and configuration files. Which AWS storage solution is BEST suited for this requirement?

A.Amazon Elastic Block Store (Amazon EBS) with a multi-attach enabled volume.

B.Amazon Elastic File System (Amazon EFS).

C.Amazon Simple Storage Service (Amazon S3).

D.Amazon FSx for Windows File Server.

AnswerB

EFS provides a scalable, shared NFS file system for Linux instances.

Why this answer

Amazon EFS provides a fully managed, scalable, and shared file system that can be accessed concurrently by multiple EC2 instances via the NFSv4.1 protocol. For SAP BusinessObjects application servers requiring consistent low-latency access to shared reports and configuration files, EFS delivers the necessary POSIX permissions, strong consistency, and automatic scaling without provisioning overhead, making it the ideal choice.

Exam trap

The trap here is that candidates often confuse Amazon EBS Multi-Attach with a true shared file system, not realizing that EBS Multi-Attach is limited to a single Availability Zone and does not support concurrent writes from multiple instances, whereas EFS is designed for exactly that use case with full NFS semantics.

How to eliminate wrong answers

Option A is wrong because Amazon EBS with multi-attach is limited to a maximum of 16 Nitro-based EC2 instances in the same Availability Zone, and it does not support the concurrent read/write workloads typical of shared report storage; it also lacks the automatic scaling and shared file system semantics required. Option C is wrong because Amazon S3 is an object storage service that does not provide a POSIX-compliant file system interface, and accessing it via S3 File Gateway or mount points introduces latency and consistency trade-offs unsuitable for low-latency shared file access. Option D is wrong because Amazon FSx for Windows File Server uses the SMB protocol and is designed for Windows-based workloads, whereas SAP BusinessObjects typically runs on Linux and requires NFS-based shared storage for optimal performance.

Practice this question →

235

MCQmedium

A company is designing a disaster recovery solution for SAP HANA. The primary site is in us-east-1 and the DR site is in us-west-2. The RPO is 5 minutes and the RTO is 30 minutes. Which replication method meets these requirements?

A.Amazon RDS Multi-AZ deployment

B.Scheduled EBS snapshots copied to us-west-2

C.SAP HANA System Replication with synchronous mode

D.AWS Database Migration Service with ongoing replication

AnswerC

HANA System Replication can achieve sub-minute RPO synchronously.

Why this answer

SAP HANA System Replication with synchronous mode is the correct choice because it provides continuous, real-time data replication to the DR site in us-west-2, enabling an RPO of 5 minutes or less and an RTO of 30 minutes. Synchronous replication ensures that every committed transaction is acknowledged by the secondary site before the primary confirms to the application, meeting the strict RPO requirement. This method is purpose-built for SAP HANA and supports automatic failover, which aligns with the 30-minute RTO.

Exam trap

The trap here is that candidates often confuse AWS-native services like RDS Multi-AZ or DMS with SAP HANA-specific replication, failing to recognize that SAP HANA requires its own replication technology to meet low RPO/RTO and that cross-region replication demands synchronous mode for near-zero data loss.

How to eliminate wrong answers

Option A is wrong because Amazon RDS Multi-AZ deployment is designed for relational databases like MySQL or PostgreSQL, not for SAP HANA, and it operates within a single AWS region, not across us-east-1 and us-west-2. Option B is wrong because scheduled EBS snapshots copied to us-west-2 can only achieve an RPO of minutes to hours (snapshot intervals are typically 1 hour or more), far exceeding the 5-minute RPO, and recovery from snapshots requires manual steps that would likely exceed the 30-minute RTO. Option D is wrong because AWS Database Migration Service (DMS) with ongoing replication is a heterogeneous migration tool that does not support SAP HANA as a source for continuous replication, and its change data capture (CDC) introduces latency that cannot guarantee a 5-minute RPO for SAP HANA workloads.

Practice this question →

236

MCQmedium

A company is running SAP on AWS and needs to migrate a large on-premises SAP HANA database to AWS with minimal downtime. Which approach is most suitable?

A.Export the HANA database to a file, upload to S3, and import into a new HANA instance on EC2.

B.Use AWS Server Migration Service (SMS) to replicate the entire on-premises server to AWS.

C.Use AWS Database Migration Service (DMS) to continuously replicate data to an Amazon RDS for SAP HANA instance.

D.Set up SAP HANA System Replication between the on-premises system and an EC2 instance running HANA in AWS.

AnswerD

HSR provides asynchronous or synchronous replication with minimal downtime.

Why this answer

SAP HANA System Replication (HSR) is the native, low-latency replication mechanism designed for HANA databases, enabling near-continuous data synchronization between an on-premises system and an EC2 instance. This approach supports a controlled takeover with minimal downtime, as it replicates transactions in real time using log shipping or synchronous replication, making it the most suitable for large databases requiring minimal interruption.

Exam trap

The trap here is that candidates often confuse AWS DMS with a database-agnostic replication tool, but DMS does not support SAP HANA as a target, and Amazon RDS for SAP HANA does not exist, leading to the incorrect assumption that DMS can handle the migration with minimal downtime.

How to eliminate wrong answers

Option A is wrong because exporting a HANA database to a file, uploading to S3, and importing is a full offline backup/restore process that incurs significant downtime, not minimal. Option B is wrong because AWS Server Migration Service (SMS) is designed for server-level replication of virtual machines, not for database-level replication, and it cannot handle the transactional consistency required for SAP HANA without additional complexity and downtime. Option C is wrong because AWS Database Migration Service (DMS) does not support SAP HANA as a target for continuous replication; DMS is primarily for homogeneous/heterogeneous migrations to RDS or Aurora, and Amazon RDS for SAP HANA is not a supported service (SAP HANA on AWS runs on EC2, not RDS).

Practice this question →

237

MCQmedium

A company is running SAP HANA on a bare metal EC2 instance. The system experiences a hardware failure that causes an instance stop. The company needs to recover the instance quickly. What should the company do to minimize recovery time?

A.Use AWS CloudFormation to recreate the instance

B.Manually start the instance from the EC2 console

C.Restore the instance from the latest EBS snapshot

D.Configure an Amazon CloudWatch alarm to automatically recover the instance

AnswerD

CloudWatch can automatically recover an instance on healthy hardware.

Why this answer

Amazon CloudWatch can automatically recover an impaired EC2 instance by restarting it on new underlying hardware, preserving the instance ID, private IP, Elastic IP, and EBS attachments. This minimizes recovery time by eliminating manual intervention and leveraging AWS's automated recovery mechanism, which is specifically designed for hardware failures on bare metal instances like those running SAP HANA.

Exam trap

The trap here is that candidates mistakenly think manual restart (Option B) or snapshot restore (Option C) are faster, but they overlook that CloudWatch automatic recovery is the only option that preserves the instance identity and minimizes downtime for hardware failures on bare metal instances.

How to eliminate wrong answers

Option A is wrong because AWS CloudFormation is an infrastructure-as-code service for provisioning resources, not a recovery mechanism; recreating the instance from scratch would take longer and lose the existing instance configuration and data. Option B is wrong because manually starting the instance from the EC2 console will not resolve a hardware failure on a bare metal instance; the instance stop was caused by underlying hardware issues, and starting it again would likely fail or require manual migration to new hardware. Option C is wrong because restoring from the latest EBS snapshot would require creating a new instance, reattaching volumes, and reconfiguring networking, which is significantly slower than automatic recovery and does not preserve the instance ID or attached resources.

Practice this question →

238

MCQeasy

Refer to the exhibit. A CloudFormation template is used to launch an SAP application server. The stack creation succeeds, but the application server fails to start correctly. What is the most likely reason?

A.The template is missing an output parameter to verify the instance status.

B.The instance type r5.2xlarge is not supported for SAP application servers.

C.The AMI ID is invalid because it contains numeric characters.

D.The UserData script may not be executed due to timing issues; the sleep command may be insufficient.

AnswerD

The script has a 30-second sleep, but if the instance is not fully ready, the script may fail.

Why this answer

The UserData script includes a 'sleep 30' command, which may not be sufficient if the instance takes longer to become ready, causing the application server to fail to start correctly. Option A is incorrect because missing an output parameter does not affect the startup of the application server; outputs are for stack information. Option B is incorrect because the r5.2xlarge instance type is supported for SAP application servers on AWS.

Option C is incorrect because AMI IDs can contain numeric characters; the example AMI ID is valid.

Practice this question →

239

MCQhard

A company runs its SAP HANA database on an EC2 instance with EBS volumes. The database requires consistent low-latency I/O with a high number of IOPS. The current configuration uses EBS gp2 volumes. During peak loads, the application experiences performance degradation. Which change will provide the most consistent performance for SAP HANA?

A.Switch to EBS st1 (Throughput Optimized HDD) volumes.

B.Migrate to EBS io2 Block Express volumes with provisioned IOPS.

C.Configure multiple EBS gp2 volumes in a RAID 0 array to increase IOPS.

D.Increase the size of the existing gp2 volumes to gain higher baseline IOPS.

AnswerB

io2 Block Express volumes offer provisioned IOPS with consistent low latency, meeting the demanding I/O requirements of SAP HANA.

Why this answer

EBS io2 Block Express volumes (Option B) provide provisioned IOPS with consistent low latency, making them ideal for SAP HANA workloads that require high and predictable performance. st1 volumes (Option A) are throughput-optimized HDDs and not designed for high IOPS. RAID 0 with gp2 volumes (Option C) can increase IOPS but lacks the consistency and guaranteed performance of io2. Increasing gp2 volume size (Option D) improves baseline IOPS but does not guarantee consistent performance under peak load like provisioned IOPS.

Practice this question →

240

MCQhard

An SAP system on AWS is experiencing high latency for database transactions. The system uses a single EBS volume for the SAP HANA data volume. The operations team needs to improve I/O performance without changing the instance type. Which action should be taken?

A.Use a single EBS volume for both data and log

B.Switch to EBS io2 Block Express volumes

C.Increase the EBS volume size to gain more IOPS

D.Enable EBS optimization on the instance

AnswerB

io2 Block Express offers sub-millisecond latency and high IOPS, suitable for SAP HANA.

Why this answer

Switching to EBS io2 Block Express volumes provides higher IOPS and lower latency compared to gp3. Increasing volume size does not necessarily improve latency. Using a single volume for log and data is not recommended.

Enabling EBS optimization is already enabled on current generation instances.

Practice this question →

241

MCQmedium

A company operates an SAP system on AWS with a shared SAP HANA database across multiple SAP applications. The database size is 5 TB. The operations team wants to implement a disaster recovery strategy with a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 2 hours. Which solution meets these requirements with the least operational overhead?

A.Use AWS DMS to replicate data to an S3 bucket in a different Region

B.Use SAP HANA backup to S3 and restore in another Region

C.Configure SAP HANA System Replication (HSR) to a secondary instance in another AWS Region

D.Use AWS CloudEndure Disaster Recovery to replicate the entire server

AnswerC

HSR provides near-real-time replication and fast failover.

Why this answer

SAP HANA System Replication (HSR) to a secondary instance in another AWS Region meets the RPO of 15 minutes and RTO of 2 hours with the least operational overhead because HSR provides synchronous or near-synchronous replication at the database level, ensuring minimal data loss and fast failover. It is natively supported by SAP HANA, requires no additional third-party tools, and integrates directly with AWS for cross-Region networking via VPC peering or Direct Connect, making it the most efficient and low-maintenance DR solution for a shared 5 TB HANA database.

Exam trap

The trap here is that candidates often confuse backup-based recovery (Option B) with replication-based recovery, underestimating the time required to restore a 5 TB database from S3, or they overcomplicate the solution by choosing a generic server replication tool (Option D) instead of the native, database-optimized replication provided by SAP HANA System Replication.

How to eliminate wrong answers

Option A is wrong because AWS DMS is designed for heterogeneous database migrations and continuous change data capture, not for SAP HANA native replication; it cannot achieve the required RPO of 15 minutes for a 5 TB HANA database without significant overhead and latency, and it does not support SAP HANA-specific features like multi-tenant database containers. Option B is wrong because SAP HANA backup to S3 and restore in another Region is a backup-based approach, not a replication strategy; the RTO of 2 hours cannot be reliably met due to the time required to restore a 5 TB database from S3, and the RPO of 15 minutes would require frequent full or incremental backups that consume excessive storage and compute resources. Option D is wrong because AWS CloudEndure Disaster Recovery replicates the entire server at the block level, which introduces unnecessary overhead for a database-only DR scenario, does not understand SAP HANA transaction consistency, and would require additional configuration to ensure crash-consistent recovery, making it less efficient than native HSR.

Practice this question →

242

MCQeasy

A company wants to automate the backup of its SAP HANA database to Amazon S3. The database is running on an EC2 instance with a 500 GB gp3 volume. The backup should be encrypted at rest in S3. What is the most efficient way to achieve this with minimal operational overhead?

A.Use the SAP HANA Backup and Restore integration with Amazon S3 to back up directly to S3 buckets, enabling default S3 encryption.

B.Back up to an EBS snapshot, then copy the snapshot to S3 using AWS Backup.

C.Schedule an AWS Backup plan to back up the EC2 instance and its EBS volumes.

D.Use AWS Storage Gateway to back up the database to S3, then enable S3 encryption.

AnswerA

SAP natively supports backing up to S3, which is efficient and supports encryption.

Why this answer

SAP HANA natively supports direct backup to Amazon S3 via the SAP HANA Backup and Restore integration, which uses the S3 API to stream backup files directly to an S3 bucket. This eliminates the need for intermediate storage or additional services, and enabling default S3 encryption (SSE-S3 or SSE-KMS) ensures data is encrypted at rest with minimal configuration overhead, meeting the requirement for efficiency and low operational burden.

Exam trap

The trap here is that candidates often assume AWS Backup or EBS snapshots are the simplest approach for database backups, but they fail to recognize that SAP HANA has a native, direct-to-S3 backup feature that avoids the overhead of volume-level snapshots and ensures application consistency without additional scripting.

How to eliminate wrong answers

Option B is wrong because backing up to an EBS snapshot and then copying it to S3 using AWS Backup is inefficient; it requires an intermediate EBS snapshot step, adds latency, and does not leverage SAP HANA's native S3 integration, increasing operational overhead. Option C is wrong because scheduling an AWS Backup plan to back up the EC2 instance and its EBS volumes captures the entire volume (including OS and non-database files), not a consistent SAP HANA database backup, and it does not provide application-consistent backups for SAP HANA without additional pre/post-scripts, leading to potential data corruption. Option D is wrong because using AWS Storage Gateway to back up the database to S3 introduces an unnecessary intermediary service, adds complexity and latency, and does not integrate directly with SAP HANA's backup mechanisms, making it less efficient than native S3 backup.

Practice this question →

243

MCQhard

An SAP Basis administrator needs to apply an SAP kernel patch to the SAP Central Services (ASCS) instance running on an EC2 instance in a Multi-AZ deployment. The ASCS instance is configured with a floating IP address using Elastic IP. The administrator wants to minimize downtime during the patching process. Which approach should the administrator take?

A.Stop the ASCS instance, apply the patch, and start the instance.

B.Create a new EC2 instance with the patched kernel, associate the Elastic IP to the new instance, and terminate the old one.

C.Add the ASCS instance to an Application Load Balancer and then perform the patch.

D.Use an Auto Scaling group with a rolling update to apply the patch.

AnswerB

It implements a blue/green deployment. By creating a new EC2 instance with the patched kernel and associating the Elastic IP, the running ASCS instance is not affected, and downtime is minimized to the brief period required to update the Elastic IP association.

Why this answer

It implements a blue/green deployment, allowing the patch to be applied on a new EC2 instance without affecting the running ASCS instance. After patching, associate the Elastic IP to the new instance and terminate the old one, minimizing downtime to a brief DNS propagation delay. Option A is wrong because stopping the instance causes downtime during the patch.

Option C is wrong because an Application Load Balancer does not support floating IP setups like Elastic IP for ASCS. Option D is wrong because Auto Scaling rolling updates are designed for scaling groups, not a single ASCS instance, and would still cause downtime.

Practice this question →

244

MCQmedium

A company is using AWS CloudFormation to manage infrastructure. The development team wants to deploy a new version of a stack that updates an existing RDS DB instance's DB engine version. The update requires a replacement of the database. Which CloudFormation stack policy setting allows the update to proceed while preventing other resources from being replaced or updated?

A.Set a stack policy that allows updates to RDS resources only.

B.Set a stack policy that allows updates to the specific RDS DB instance resource.

C.Set a stack policy that denies all updates.

D.Set a stack policy that allows all updates.

AnswerB

Stack policies can be written to allow updates to specific resources.

Why this answer

A stack policy in AWS CloudFormation can be set to explicitly allow updates to a specific resource (e.g., the RDS DB instance) while denying updates to all other resources by default. Since the update requires a replacement of the database, the policy must permit the update action on that exact resource logical ID, ensuring the DB engine version change proceeds without risking unintended modifications to other stack resources.

Exam trap

The trap here is that candidates often confuse a stack policy with an IAM policy or resource-level permissions, mistakenly thinking that allowing updates to a resource type (Option A) is sufficient, when in fact the policy must target the specific resource logical ID to avoid unintended updates to other resources of the same type.

How to eliminate wrong answers

Option A is wrong because allowing updates to all RDS resources is too broad; it would permit updates to any RDS resource in the stack, not just the specific DB instance, potentially causing unintended replacements or updates to other RDS resources like DB subnet groups or read replicas. Option C is wrong because denying all updates would block the intended DB engine version update entirely, preventing the deployment from proceeding. Option D is wrong because allowing all updates removes any protection, making every resource in the stack vulnerable to accidental replacement or modification, which defeats the purpose of using a stack policy for controlled updates.

Practice this question →

245

MCQmedium

A company is running an SAP S/4HANA system on AWS. The SAP application is deployed on EC2 instances in a Multi-AZ setup with a shared /sapmnt directory using Amazon EFS. The database is running on Amazon RDS for SAP ASE. Performance monitoring reveals that the /sapmnt volume is experiencing high read latency during peak hours. Which action would most effectively reduce latency?

A.Migrate /sapmnt to Amazon FSx for NetApp ONTAP.

B.Use Amazon ElastiCache for Redis to cache /sapmnt data.

C.Increase the provisioned throughput on the EFS file system.

D.Increase the size of the EC2 instances running SAP.

AnswerA

Migrating /sapmnt to Amazon FSx for NetApp ONTAP provides a high-performance, low-latency shared file system optimized for SAP S/4HANA, effectively reducing read latency.

Why this answer

Migrating /sapmnt to Amazon FSx for NetApp ONTAP provides a high-performance, low-latency shared file system that is fully supported for SAP S/4HANA. FSx for NetApp ONTAP offers consistent low-latency access and is optimized for SAP workloads. Option B (using Amazon ElastiCache for Redis) is not a file system solution and cannot replace the shared /sapmnt directory.

Option C (increasing the provisioned throughput on the EFS file system) may improve performance but is less effective than using FSx, as EFS is a general-purpose file system with higher latency compared to FSx for NetApp ONTAP. Option D (increasing EC2 instance size) addresses compute capacity, not storage latency, and thus would not reduce read latency on the file system.

Practice this question →

246

MCQmedium

A company wants to automate the installation of SAP HANA on AWS using CloudFormation. Which AWS resource should be used to run a script that downloads and installs SAP HANA software on an EC2 instance after the instance is launched?

A.AWS::CloudFormation::Init (cfn-init)

B.AWS::CloudFormation::CreationPolicy with cfn-signal

C.AWS Lambda function triggered by EC2 state change

D.EC2 User Data

AnswerB

CreationPolicy waits for signals from cfn-signal after script completes.

Why this answer

AWS CloudFormation's CreationPolicy with cfn-signal allows you to control the stack creation process by waiting for a signal from the EC2 instance after it has completed its configuration. When using a CreationPolicy, CloudFormation will not mark the resource as created until it receives a signal (e.g., via cfn-signal) indicating that the installation script has finished. This is ideal for automating SAP HANA installations where you need to ensure the software is fully installed before proceeding.

Option A is incorrect because AWS::CloudFormation::Init (cfn-init) is used to install packages, create files, and run commands during instance launch, but it does not provide a mechanism for CloudFormation to wait for the completion of long-running scripts; it runs as part of the user data and returns immediately. Option C is incorrect because while a Lambda function can be triggered by EC2 state changes, it does not integrate directly with CloudFormation's stack creation process to signal completion. You would need additional custom logic to send a signal back to CloudFormation, making it less straightforward than using CreationPolicy.

Option D is incorrect because EC2 User Data runs once at instance launch, but CloudFormation does not inherently wait for user data scripts to finish. Without a CreationPolicy or similar mechanism, CloudFormation will proceed to the next resource immediately after launching the instance, even if the script is still running.

Practice this question →

247

MCQhard

An SAP system on AWS is using a Multi-AZ deployment for high availability. The SAP Central Services (ASCS) and Enqueue Replication Server (ERS) are running on separate EC2 instances. During a failover test, the ASCS instance fails, but the ERS does not take over. What is the most likely cause?

A.The ERS instance does not have the required security group rules

B.The DNS TTL is set too high

C.The ERS instance is in a different subnet

D.The floating IP address is not configured to move to the ERS instance

AnswerD

Without floating IP reassignment, clients cannot reach the ERS.

Why this answer

SAP Enqueue Replication requires a floating IP address (using AWS Elastic IP or Route 53) that moves from ASCS to ERS during failover. If the floating IP is not properly configured, the ERS cannot take over. DNS resolution is not the primary method.

Health checks are not the issue. Instance type is irrelevant.

Practice this question →

248

MCQmedium

A company is migrating its on-premises SAP landscape to AWS. The SAP system uses Oracle Database. The migration must minimize downtime. Which AWS service should be used for the database migration?

A.AWS Snowball Edge

B.AWS Database Migration Service (DMS)

C.AWS CloudEndure Migration

D.Amazon S3 Transfer Acceleration

AnswerB

AWS DMS supports ongoing replication to minimize downtime during migration.

Why this answer

AWS Database Migration Service (DMS) is the correct choice because it supports ongoing replication from Oracle to a target database (e.g., Amazon RDS for Oracle or Amazon Aurora) with minimal downtime. DMS can perform a full load followed by continuous change data capture (CDC) using Oracle LogMiner or binary reader to keep the source and target synchronized until cutover.

Exam trap

The trap here is that candidates often confuse AWS DMS with general-purpose migration tools like CloudEndure or Snowball, not realizing that DMS is the only service purpose-built for live database migrations with minimal downtime via CDC.

How to eliminate wrong answers

Option A is wrong because AWS Snowball Edge is a physical data transfer device designed for offline bulk data migration, not for minimizing downtime during an active database migration with ongoing replication. Option C is wrong because AWS CloudEndure Migration is a lift-and-shift server migration service that replicates entire servers at the block level, not a database-specific migration tool, and it does not natively handle Oracle database schema conversion or CDC for minimal downtime. Option D is wrong because Amazon S3 Transfer Acceleration is a service that speeds up uploads to S3 over the internet using optimized network paths; it has no capability to migrate or replicate a live Oracle database.

Practice this question →

249

MCQmedium

A company is running a production SAP HANA database on an AWS EC2 instance with a single EBS gp3 volume. The database frequently experiences high write latency during peak hours. Which design change would MOST effectively reduce write latency?

A.Replace the single gp3 volume with multiple io2 Block Express volumes configured in a RAID 0 stripe.

B.Increase the size of the existing gp3 volume to maximize its baseline throughput.

C.Migrate the database to a larger EC2 instance type with higher network bandwidth.

D.Move the SAP HANA database to Amazon RDS for SAP HANA.

AnswerA

io2 Block Express volumes provide very high IOPS and low latency; RAID 0 stripes I/O across volumes to maximize performance.

Why this answer

Replacing a single gp3 volume with multiple io2 Block Express volumes in a RAID 0 stripe increases the available IOPS and reduces write latency by distributing write operations across multiple volumes in parallel. io2 Block Express volumes offer up to 256,000 IOPS per volume and sub-millisecond latency, which directly addresses the high write latency during peak hours. RAID 0 striping further aggregates the IOPS and throughput of multiple volumes, providing the performance needed for SAP HANA's demanding write workloads.

Exam trap

The trap here is that candidates may assume increasing gp3 volume size or moving to a larger instance will solve latency issues, but the core problem is the volume type's inherent latency and IOPS ceiling, not capacity or compute.

How to eliminate wrong answers

Option B is wrong because increasing the size of a gp3 volume only increases its baseline throughput (up to 1,000 MiB/s) and does not significantly improve IOPS beyond the gp3 baseline of 3,000 IOPS (or 16,000 with provisioning); it does not reduce write latency for a database that already experiences high write latency, as gp3's latency is higher than io2 Block Express. Option C is wrong because migrating to a larger EC2 instance with higher network bandwidth does not affect the latency of local EBS storage; write latency is a function of the EBS volume type and configuration, not the instance's network bandwidth. Option D is wrong because Amazon RDS for SAP HANA does not exist; SAP HANA is not supported on Amazon RDS, and the service is not available for SAP HANA databases.

Practice this question →

250

MCQmedium

An SAP HANA administrator runs the AWS CLI command shown in the exhibit. The volume is attached to an SAP HANA server. The HANA database is experiencing low write throughput. Which action would most likely improve performance?

A.Detach the volume and reattach it to a different instance.

B.Increase the volume size to 1 TB to double the baseline IOPS.

C.Change the volume type to io2 and provision 6000 IOPS.

D.Enable EBS optimization on the attached instance.

AnswerC

io2 provides consistent high IOPS.

Why this answer

The AWS CLI command output shows the volume is a gp2 volume with a size of 500 GB. gp2 volumes provide a baseline IOPS of 3 per GB, so this volume has 1,500 baseline IOPS. For SAP HANA workloads requiring high write throughput, gp2's burst model is insufficient. Changing to io2 Block Express with provisioned 6000 IOPS delivers consistent, high-performance IOPS needed for sustained write operations, directly addressing the low write throughput issue.

Exam trap

The trap here is that candidates often assume increasing volume size (Option B) or enabling EBS optimization (Option D) will solve throughput issues, but they overlook that gp2's burst model is fundamentally unsuitable for sustained SAP HANA write workloads, whereas io2 with provisioned IOPS directly guarantees performance.

How to eliminate wrong answers

Option A is wrong because detaching and reattaching the volume to a different instance does not change the volume's performance characteristics; it only moves the same gp2 volume with its 1,500 baseline IOPS to another instance, which will not improve write throughput. Option B is wrong because increasing the volume size to 1 TB would double the baseline IOPS to 3,000 (at 3 IOPS/GB for gp2), but this is still below the required 6000 IOPS and does not address the need for provisioned IOPS for SAP HANA's sustained write demands. Option D is wrong because EBS optimization on the instance ensures dedicated network bandwidth for EBS traffic but does not increase the volume's IOPS or throughput limits; the bottleneck is the gp2 volume's performance, not the instance's network path.

Practice this question →

251

MCQeasy

An SAP system administrator needs to ensure that an EC2 instance running SAP can access an S3 bucket containing installation media. The instance is in a private subnet without internet access. What is the recommended way to provide access to S3?

A.Set up a VPN connection to S3.

B.Create a VPC Gateway Endpoint for S3.

C.Set up a NAT Gateway in the public subnet.

D.Use AWS Direct Connect to connect to S3.

AnswerB

Gateway Endpoints provide private access to S3.

Why this answer

A VPC Gateway Endpoint for S3 allows instances in a private subnet to access S3 without internet access. NAT Gateway is for internet access, Direct Connect is for on-premises connectivity, and VPN is for site-to-site.

Practice this question →

252

MCQmedium

An SAP administrator created an IAM policy to allow an EC2 instance to upload backups to an S3 bucket. The policy is shown in the exhibit. However, the backup job fails with an access denied error. What is the most likely cause?

A.The KMS key policy does not grant the EC2 instance permission to use the key

B.The policy requires server-side encryption with KMS, but the backup job does not include the required encryption header

C.The resource ARN is incorrect because it does not include the bucket name correctly

D.The IAM role does not have permission to call s3:PutObject

AnswerB

The condition requires the encryption header, which may be missing.

Why this answer

The IAM policy includes the `s3:x-amz-server-side-encryption` condition key set to `aws:kms`, which enforces server-side encryption with KMS (SSE-KMS) for all `s3:PutObject` requests. If the backup job does not include the `x-amz-server-side-encryption: aws:kms` header in its PUT request, S3 will deny the request with an access denied error, even if the IAM role has the necessary permissions.

Exam trap

The trap here is that candidates assume the access denied error is due to missing IAM permissions (Option D) or incorrect ARN syntax (Option C), rather than recognizing that the policy's condition key enforces a specific request header that the backup job fails to include.

How to eliminate wrong answers

Option A is wrong because the question does not mention KMS key usage in the backup job; the policy enforces SSE-KMS via a condition, but the error is caused by the missing encryption header, not a missing key policy grant. Option C is wrong because the resource ARN `arn:aws:s3:::my-bucket/*` is correctly formatted for an S3 bucket and its objects; the bucket name is included after the service namespace. Option D is wrong because the IAM role does have permission to call `s3:PutObject` as shown in the policy's Action element; the failure is due to the condition requiring the encryption header, not a missing action permission.

Practice this question →

253

Multi-Selectmedium

A company is deploying SAP NetWeaver on AWS and needs to ensure high availability for the SAP Central Services (ASCS) instance. Which TWO AWS features should be used together to achieve this?

Select 2 answers

A.Network Load Balancer (NLB)

B.Amazon RDS Multi-AZ

C.Application Load Balancer (ALB)

D.Amazon S3

E.Amazon EFS

AnswersA, E

NLB provides a virtual IP address for the ASCS cluster.

Why this answer

Amazon EFS provides a shared filesystem for the ASCS cluster, and a Network Load Balancer (NLB) is used to distribute traffic to the active ASCS instance. S3 is not suitable for shared files, and Multi-AZ for RDS is for databases, not ASCS.

Practice this question →

254

Multi-Selecthard

A company has a mission-critical SAP S/4HANA system running on AWS with a multi-node HANA database. The system must be highly available with an RPO of 0 and an RTO of less than 30 minutes. The database uses SAP HANA System Replication (HSR) with synchronous replication. Which THREE components are essential for this high-availability architecture?

Select 3 answers

A.An Application Load Balancer to distribute traffic between HANA nodes.

B.A VPN connection between the two Availability Zones.

C.An ENSA2 (Enqueue Replication 2) enqueue server.

D.A secondary HANA instance in a different Availability Zone.

E.A cluster manager such as Pacemaker to orchestrate failover.

AnswersC, D, E

ENSA2 provides high availability for the enqueue service.

Why this answer

SAP S/4HANA with a multi-node HANA database requires the ENSA2 (Enqueue Replication 2) enqueue server to replicate the application-level lock table synchronously between the active and standby central services (ASCS and ERS) instances. This ensures that in the event of a failover, the enqueue locks are preserved, preventing data inconsistencies and enabling a seamless transition within the required RTO of less than 30 minutes.

Exam trap

A common misconception is that an Application Load Balancer is needed for database-level high availability, but in SAP HANA HSR, the replication is handled directly between database nodes, and traffic distribution is not a requirement for the database tier.

Practice this question →

255

MCQeasy

A company running SAP on AWS needs to back up their SAP HANA database daily with point-in-time recovery. Which service should they use to achieve this with minimal operational overhead?

A.Amazon RDS automated backups.

B.Amazon EBS snapshots via a script.

C.AWS Backup with the SAP HANA backup plan.

D.Amazon S3 with lifecycle policies.

AnswerC

AWS Backup provides automated, policy-based backups for SAP HANA.

Why this answer

AWS Backup with the SAP HANA backup plan is the correct choice because it provides a fully managed, policy-driven backup service that integrates directly with SAP HANA to perform database-consistent, log-based backups for point-in-time recovery. This eliminates the need for custom scripts or manual orchestration, minimizing operational overhead while ensuring compliance with SAP's backup requirements.

Exam trap

The trap here is that candidates often confuse Amazon RDS automated backups or EBS snapshots as viable for SAP HANA, not realizing that SAP HANA requires database-aware backup mechanisms (like Backint) to ensure transaction log consistency and point-in-time recovery, which only AWS Backup with the SAP HANA plan provides natively.

How to eliminate wrong answers

Option A is wrong because Amazon RDS automated backups are designed for relational databases like MySQL, PostgreSQL, or Oracle, not for SAP HANA, which is an in-memory database that requires SAP-specific backup integration via Backint or AWS Backup. Option B is wrong because Amazon EBS snapshots via a script capture block-level volume data but cannot guarantee SAP HANA database consistency or support point-in-time recovery at the transaction log level without additional, complex scripting and coordination. Option D is wrong because Amazon S3 with lifecycle policies is a storage optimization feature for object lifecycle management, not a backup service; it cannot perform SAP HANA database backups or enable point-in-time recovery.

Practice this question →

256

MCQmedium

A company is running a critical SAP HANA database on a single EC2 instance with a large gp2 EBS volume. They need to ensure high availability with a Recovery Time Objective (RTO) of less than 15 minutes and a Recovery Point Objective (RPO) of less than 5 minutes. Which solution meets these requirements?

A.Deploy the SAP HANA database on Amazon RDS for SAP HANA in a Multi-AZ configuration.

B.Use AWS Backup to take daily snapshots of the EBS volume and restore to a new instance in another Availability Zone.

C.Use AWS Application Recovery Controller to continuously replicate data to a standby EC2 instance in another region.

D.Configure SAP HANA System Replication in scale-up mode with a standby HANA instance in a different Availability Zone.

AnswerD

SAP HANA System Replication provides near-synchronous replication and automatic failover, meeting RPO and RTO.

Why this answer

SAP HANA System Replication in scale-up mode with a standby instance in a different Availability Zone meets the RTO of less than 15 minutes and RPO of less than 5 minutes by continuously replicating data synchronously or near-synchronously to a standby EC2 instance. This allows automatic failover to the standby instance, ensuring minimal data loss and rapid recovery without relying on EBS snapshots or cross-region replication.

Exam trap

The trap here is that candidates may confuse AWS Application Recovery Controller (a traffic management service) with a data replication solution, or assume that EBS snapshots can meet low RPO/RTO requirements, when in fact SAP HANA's native replication is required for sub-5-minute RPO and sub-15-minute RTO.

How to eliminate wrong answers

Option A is wrong because Amazon RDS for SAP HANA does not exist; SAP HANA is not supported on Amazon RDS, and RDS Multi-AZ is not applicable for SAP HANA workloads. Option B is wrong because daily snapshots cannot achieve an RPO of less than 5 minutes (snapshots are point-in-time and taken at most every few hours) and restoring from snapshots typically takes longer than 15 minutes for large volumes. Option C is wrong because AWS Application Recovery Controller is a traffic routing and failover orchestration service, not a data replication tool; it does not continuously replicate SAP HANA data, and cross-region replication would introduce latency that cannot meet the sub-5-minute RPO for synchronous replication.

Practice this question →

257

MCQeasy

An SAP system uses Amazon EFS for shared file storage. The SAP application writes many small files concurrently, causing high metadata operations. Which EFS performance mode should be selected to optimize for this workload?

A.General Purpose

B.Throughput Optimized

C.Max I/O

D.Provisioned Throughput

AnswerC

Max I/O mode is designed for high throughput and parallel metadata operations.

Why this answer

Max I/O mode is designed for workloads with high concurrency and metadata-intensive operations, such as many small files being written simultaneously. It scales to higher levels of aggregate throughput and IOPS than General Purpose mode, making it the correct choice for this SAP workload.

Exam trap

The trap here is confusing EFS performance modes with throughput settings or S3 storage classes, leading candidates to select 'Throughput Optimized' (which does not exist for EFS) or 'Provisioned Throughput' (which controls throughput, not metadata performance).

How to eliminate wrong answers

Option A is wrong because General Purpose mode is optimized for low-latency workloads with moderate metadata operations and does not provide the high concurrency scaling needed for many small files. Option B is wrong because Throughput Optimized is not a valid EFS performance mode; it is a storage class for S3. Option D is wrong because Provisioned Throughput is a throughput setting (not a performance mode) that allows you to specify a fixed throughput rate, but it does not address the metadata scaling requirements of high-concurrency small-file writes.

Practice this question →

258

MCQmedium

A company is deploying SAP NetWeaver on AWS and needs to ensure high availability for the ASCS instance. They plan to use a shared file system for the transport directory. Which AWS storage service is most appropriate for this shared file system?

A.Amazon EFS

B.Amazon EBS volumes with multi-attach

C.EC2 Instance Store

D.Amazon S3

AnswerA

EFS provides a shared NFS file system that can be accessed from multiple EC2 instances.

Why this answer

Amazon EFS provides a fully managed, scalable, and highly available NFS file system that can be mounted concurrently by multiple EC2 instances across multiple Availability Zones. For SAP NetWeaver ASCS high availability, the transport directory (/usr/sap/trans) must be shared between the active and passive ASCS instances, and EFS supports the required NFSv4 protocol with strong consistency and POSIX permissions, making it the most appropriate choice.

Exam trap

The trap here is that candidates confuse 'shared file system' with 'shared block storage' and choose EBS multi-attach, not realizing that EBS multi-attach is limited to a single AZ and lacks the cross-AZ high availability required for SAP ASCS failover.

How to eliminate wrong answers

Option B is wrong because Amazon EBS volumes with multi-attach support up to 16 Nitro-based instances but only within a single Availability Zone, which cannot provide cross-AZ high availability required for SAP ASCS failover. Option C is wrong because EC2 Instance Store provides ephemeral block storage that is physically attached to the host and data is lost when the instance stops or terminates, making it unsuitable for persistent shared file systems. Option D is wrong because Amazon S3 is an object storage service that does not support POSIX file system semantics, NFS protocol, or concurrent file locking required by SAP transport directory operations.

Practice this question →

259

Multi-Selecthard

Which THREE AWS services are commonly used to implement high availability for SAP HANA databases on AWS? (Choose three.)

Select 3 answers

A.Amazon EC2 Auto Recovery

B.AWS Global Accelerator

C.Multi-AZ deployment of SAP HANA

D.Amazon Route 53

E.Elastic Load Balancing

AnswersA, C, E

Auto Recovery can automatically recover an instance from hardware failure.

Why this answer

Amazon EC2 Auto Recovery is correct because it automatically recovers an impaired EC2 instance by restarting it on a new healthy host within the same Availability Zone, preserving the instance ID, private IP, and Elastic IP. For SAP HANA, this minimizes downtime by quickly restoring the database instance without manual intervention, though it does not protect against an entire Availability Zone failure.

Exam trap

The trap here is that candidates often confuse DNS-based routing (Route 53) or global traffic acceleration (Global Accelerator) with direct database high availability mechanisms, but AWS expects you to recognize that SAP HANA HA relies on instance recovery, multi-AZ replication, and load balancing at the application layer, not just network-level traffic management.

Practice this question →

260

MCQhard

A company is running a stateful application on EC2 instances in an Auto Scaling group. The instances store session state locally. The group uses a simple scaling policy based on network traffic. The company notices that when instances are terminated during scale-in, active sessions are lost. What is the MOST effective way to preserve session state during scaling events?

A.Use a step scaling policy instead of a simple scaling policy.

B.Use a lifecycle hook to gracefully drain sessions before instance termination.

C.Increase the cooldown period for the Auto Scaling group.

D.Use a launch configuration that enables termination protection.

AnswerB

Lifecycle hooks allow instances to perform custom actions before being terminated.

Why this answer

A lifecycle hook is the most effective solution because it pauses the instance termination process during scale-in, allowing the application to drain active sessions (e.g., by transferring session state to a shared data store like ElastiCache or DynamoDB) before the instance is fully terminated. This preserves session continuity without requiring architectural changes to the application's stateful design.

Exam trap

The trap here is that candidates often confuse termination protection (which prevents manual termination) with lifecycle hooks (which manage the termination process), or they mistakenly believe that scaling policy types or cooldowns can influence session state preservation.

How to eliminate wrong answers

Option A is wrong because a step scaling policy only adjusts the number of instances to be added or removed based on alarm thresholds; it does not affect the termination process or provide any mechanism to preserve session state during scale-in. Option C is wrong because increasing the cooldown period merely delays the next scaling activity, but it does not prevent active sessions from being lost when an instance is eventually terminated. Option D is wrong because termination protection prevents an instance from being terminated via the EC2 console or API, but Auto Scaling can still terminate instances during scale-in unless the protection is set at the Auto Scaling group level (which is not supported); moreover, it would prevent scale-in entirely, defeating the purpose of dynamic scaling.

Practice this question →

261

MCQeasy

An SAP environment uses Amazon CloudWatch to monitor EC2 instances. The operations team wants to receive a notification when the CPU utilization exceeds 90% for 5 consecutive minutes. Which AWS service should they use?

A.Amazon CloudWatch Alarms with Amazon SNS.

B.AWS Config.

C.Amazon CloudWatch Logs.

D.AWS CloudTrail.

AnswerA

Alarms send notifications via SNS when thresholds are breached.

Why this answer

Amazon CloudWatch Alarms can monitor a metric (like CPUUtilization) and trigger an action when the metric crosses a defined threshold for a specified number of consecutive evaluation periods. By setting the alarm to evaluate CPU utilization > 90% for 5 consecutive minutes (e.g., 5 periods of 1 minute each) and configuring the alarm action to publish to an Amazon SNS topic, the operations team receives a notification directly. This is the native, serverless way to react to CloudWatch metrics without additional infrastructure.

Exam trap

The trap here is that candidates confuse AWS Config (configuration compliance) or CloudTrail (API auditing) with real-time metric monitoring, or they think CloudWatch Logs can directly alert on CPU metrics, but only CloudWatch Alarms with SNS provide the precise threshold-based notification for CloudWatch metrics.

How to eliminate wrong answers

Option B (AWS Config) is wrong because AWS Config is a service for evaluating and recording resource configuration changes and compliance against rules, not for monitoring real-time metric thresholds like CPU utilization. Option C (Amazon CloudWatch Logs) is wrong because CloudWatch Logs is used to store, monitor, and access log files from EC2 instances or other sources; it does not natively trigger notifications based on metric thresholds (it can trigger on log patterns via metric filters, but not on CPU utilization directly). Option D (AWS CloudTrail) is wrong because CloudTrail records API activity and governance events for auditing, not real-time performance metric monitoring or alerting.

Practice this question →

262

MCQhard

An SAP Basis team is implementing SAP HANA system replication across two AWS Availability Zones. The HANA primary instance uses Provisioned IOPS SSD (io2) EBS volumes. The secondary instance must be kept in sync with minimal data loss. Which networking configuration is required to ensure low-latency, high-throughput replication traffic between the instances?

A.Use ClassicLink to connect the instances.

B.Set up a VPN connection between the instances.

C.Enable Enhanced Networking (ENA) on both instances.

D.Configure VPC peering between the two subnets.

AnswerC

Enhanced Networking (ENA) provides the high throughput and low latency required for SAP HANA system replication traffic across Availability Zones. Cluster placement groups are not valid for cross-AZ placement because they are limited to a single Availability Zone.

Why this answer

The correct configuration is to enable Enhanced Networking (ENA) on both instances. ENA provides high throughput and low latency for SAP HANA replication traffic across Availability Zones. ClassicLink is deprecated, VPN adds unnecessary latency, and VPC peering is not needed between subnets already in the same VPC.

Cluster placement groups cannot span Availability Zones.

Exam trap

Do not confuse low-latency placement with networking requirements. Cluster placement groups are limited to a single Availability Zone and cannot be used for cross-AZ HANA replication. Enhanced Networking (ENA) is the key requirement for high-throughput, low-latency replication traffic.

How to eliminate wrong answers

Option A is wrong because ClassicLink is a legacy feature for connecting EC2-Classic instances to a VPC, and it does not provide the low-latency, high-throughput networking required for SAP HANA replication; it also does not apply to instances already in a VPC. Option B is wrong because a VPN connection introduces encryption overhead and traverses the public internet or AWS VPN endpoints, adding latency and reducing throughput, which is unsuitable for synchronous HANA replication. Option D is wrong because VPC peering connects two separate VPCs, but the question states the instances are in two Availability Zones, which are within the same VPC; VPC peering does not optimize intra-VPC network performance or reduce latency between AZs.

Practice this question →

263

Matchingmedium

Match the AWS service to its role in SAP high availability.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Automatically adjusts capacity of SAP application servers

DNS failover and health checks

Distributes traffic across SAP instances

Infrastructure as code for multi-AZ deployment

Why these pairings

In SAP on AWS, Elastic Load Balancing and Route 53 are key HA services. ELB distributes traffic across healthy instances, and Route 53 provides DNS failover. Auto Scaling helps maintain capacity but does not distribute traffic, and Lambda is not a primary HA component.

Practice this question →

264

MCQmedium

Refer to the exhibit. An SAP administrator has the IAM policy shown. The administrator needs to attach an EBS volume to an EC2 instance that is tagged with SAPSystem=DEV. Will the administrator be able to perform the attach operation?

A.No, because the condition requires the tag SAPSystem=PRD

B.No, because the policy does not allow attaching volumes

C.Yes, because the policy allows the actions

D.Yes, because the resource is not restricted

AnswerA

The condition StringEquals requires the tag to be PRD, not DEV.

Why this answer

The policy allows AttachVolume and DetachVolume actions, but only when the volume or instance resource has the tag SAPSystem=PRD. Since the instance is tagged DEV, the condition is not met, and the operation will be denied.

Practice this question →

265

MCQeasy

A company runs production workloads on AWS. The Security Team requires that all Amazon S3 buckets with server access logging enabled must have logs delivered to a centralized S3 bucket in a separate account. Which solution meets this requirement?

A.Use S3 bucket policies to restrict log delivery to only the source account.

B.Use S3 replication rules to copy objects from source buckets to the centralized bucket.

C.Enable AWS CloudTrail to log all S3 API calls and store logs in the centralized bucket.

D.Configure the source bucket to deliver logs to the destination bucket. Attach a bucket policy on the destination bucket that grants the log delivery group (e.g., Amazon S3 Log Delivery) write permissions.

AnswerD

S3 server access logs can be delivered to a bucket in another account (cross-account) by configuring the source bucket's logging settings to point to the destination bucket, and the destination bucket must have a bucket policy that grants the S3 log delivery group write permissions.

Why this answer

S3 server access logs can be delivered to a bucket in another account (cross-account) by configuring the source bucket's logging settings to point to the destination bucket, and the destination bucket must have a bucket policy that grants the S3 log delivery group write permissions. Option A is incorrect because bucket policies do not restrict log delivery to only the source account; cross-account delivery is supported. Option B is incorrect because S3 replication copies objects to another bucket after they are logged, but it does not deliver the server access logs themselves.

Option C is incorrect because AWS CloudTrail logs API calls, not the server access logs that record requests made to S3 buckets.

Practice this question →

266

MCQeasy

A company is designing a disaster recovery (DR) strategy for its SAP environment on AWS. The primary region is us-east-1 and the DR region is us-west-2. The SAP application and database must be recoverable within 4 hours (RTO) and with a maximum data loss of 15 minutes (RPO). The database is SAP HANA. Which combination of services meets these requirements?

A.Use Amazon EBS snapshots replicated across regions, restoring in the DR region with a CloudFormation template.

B.Back up the HANA database to Amazon S3 and copy the backup to the DR region using cross-region replication.

C.Configure HANA System Replication (HSR) between the primary and DR regions, with a standby EC2 instance in us-west-2.

D.Use AWS Database Migration Service (DMS) with ongoing replication to an RDS for SAP HANA instance in the DR region.

AnswerC

HSR provides near-synchronous replication with RPO as low as seconds, meeting the 15-minute requirement.

Why this answer

HANA System Replication (HSR) with log shipping provides near real-time data replication to the DR region, achieving an RPO of 15 minutes or less. The standby EC2 instance in us-west-2 can be promoted to primary within 4 hours (RTO) by performing a takeover. Option A is incorrect because EBS snapshots are typically taken every few hours and cross-region copy time adds latency, making it difficult to meet a 15-minute RPO.

Option B is incorrect because Amazon S3 cross-region replication for HANA backups is asynchronous and may not ensure consistent log backups every 15 minutes, also requiring manual restore steps that exceed the RTO. Option D is incorrect because AWS DMS does not support SAP HANA as a target for ongoing replication; RDS for SAP HANA is not a supported service, and DMS is designed for homogeneous database migrations, not SAP HANA replication.

Practice this question →

267

Multi-Selectmedium

An organization runs SAP on AWS and wants to encrypt all data at rest for the SAP HANA database. The encryption keys must be managed by the customer and rotated annually. Which THREE AWS services can be used together to meet these requirements? (Choose THREE.)

Select 3 answers

A.Amazon S3 server-side encryption

B.Amazon EBS encryption

C.AWS Key Management Service (KMS)

D.AWS CloudHSM

E.AWS Certificate Manager (ACM)

AnswersB, C, D

EBS volumes can be encrypted using KMS keys.

Why this answer

Amazon EBS encryption is correct because SAP HANA databases on AWS typically store data on EBS volumes, and enabling EBS encryption ensures data at rest is encrypted using AWS KMS keys. This directly meets the requirement for encrypting the SAP HANA database storage.

Exam trap

A common mistake is to confuse ACM (which handles certificates for encryption in transit) with services that handle encryption at rest (KMS, CloudHSM, EBS encryption). ACM does not provide encryption at rest and is not relevant for encrypting SAP HANA database storage.

Practice this question →

268

MCQeasy

A company is designing a network architecture for SAP S/4HANA on AWS. The architecture must support high availability by distributing application servers across two Availability Zones. Which AWS service can provide automatic failover for the SAP central services (ASCS) instance?

A.Amazon Route 53 with DNS failover routing

B.AWS Direct Connect

C.Application Load Balancer (ALB)

D.Amazon CloudFront

AnswerA

Route 53 can perform health checks and fail DNS to a standby ASCS in case of primary failure.

Why this answer

Amazon Route 53 with DNS failover routing is correct because SAP ASCS (ABAP SAP Central Services) requires a virtual hostname that clients use to connect. Route 53 can monitor the health of the ASCS instance in the primary Availability Zone and automatically update DNS resolution to point to the standby ASCS instance in the secondary Availability Zone when a failure is detected. This provides the automatic failover needed for SAP central services without requiring a shared IP address across zones.

Exam trap

The trap here is that candidates often assume a load balancer (ALB or NLB) is required for high availability, but SAP ASCS does not support load balancing across multiple active instances—it requires active/passive failover with a single virtual hostname, which DNS failover routing provides.

How to eliminate wrong answers

Option B is wrong because AWS Direct Connect is a dedicated network connection from on-premises to AWS, not a service that provides automatic failover for SAP ASCS instances. Option C is wrong because an Application Load Balancer (ALB) operates at Layer 7 and distributes HTTP/HTTPS traffic, but SAP ASCS uses proprietary protocols (e.g., Message Server, Enqueue Server) that are not HTTP-based and cannot be load-balanced by an ALB. Option D is wrong because Amazon CloudFront is a content delivery network (CDN) that caches static and dynamic content at edge locations, and it does not provide failover routing for SAP central services instances.

Practice this question →

269

Multi-Selecthard

Which TWO of the following are valid considerations when sizing an SAP HANA instance on AWS for a production environment? (Choose 2.)

Select 2 answers

A.Use EBS consistency groups for snapshot backups

B.Consider instance store volumes for temporary data and high I/O throughput

C.Ensure the instance type supports EBS optimization for dedicated network bandwidth

D.Select an instance with at least 64 GB memory per HANA node

E.Use a single large EBS volume to simplify management

AnswersB, C

Instance store provides high performance for temp data.

Why this answer

Instance store volumes provide very high I/O throughput and low latency, which is critical for SAP HANA's temporary data (e.g., /hana/tmp, /hana/log) and for redo log writes. They are ephemeral but offer the performance needed for production workloads, making this a valid sizing consideration.

Exam trap

The trap here is that candidates often confuse backup strategies (EBS consistency groups) with sizing considerations, or assume a fixed memory minimum (64 GB) that is not universally required by SAP HANA on AWS.

Practice this question →

270

Multi-Selecthard

A company is running an SAP S/4HANA system on AWS. The system experiences high memory usage. The administrator wants to monitor the SAP HANA memory consumption and set alarms for when memory usage exceeds 85% of available memory. Which steps should the administrator take to achieve this? (Choose THREE.)

Select 3 answers

A.Configure an Amazon SNS topic to send email notifications when memory usage is high.

B.Use SAP HANA SQL queries to monitor memory usage and publish custom metrics to CloudWatch.

C.Install the Amazon CloudWatch agent on the EC2 instance to collect memory metrics.

D.Use Amazon CloudWatch Synthetics to monitor HANA memory.

E.Create a CloudWatch alarm on the memory metric with a threshold of 85%.

AnswersB, C, E

Custom metrics can be published via CloudWatch PutMetricData.

Why this answer

Options B, C, and E are correct. B: SAP HANA provides detailed memory consumption metrics via SQL views, which can be queried and published as custom CloudWatch metrics. C: The CloudWatch agent collects OS-level memory metrics from the EC2 instance, enabling monitoring of overall system memory.

E: A CloudWatch alarm can be set on the memory metric (either custom HANA metric or OS-level metric) with a threshold of 85% to trigger notifications via SNS. Option A is incorrect because SNS alone does not provide monitoring; it only delivers notifications. Option D is incorrect because CloudWatch Synthetics is used for endpoint monitoring, not for HANA memory metrics.

Practice this question →

271

MCQmedium

A company is running SAP NetWeaver on AWS with an Oracle database on an EC2 instance. The database uses Oracle Data Guard for disaster recovery across Regions. The primary database is in us-east-1, and the standby is in us-west-2. The database size is 500 GB and the network link between Regions has about 100 Mbps throughput. During a recent disaster recovery drill, the failover to the standby took over 2 hours because the Data Guard redo logs were not fully applied. The team wants to reduce the recovery time objective (RTO). They are considering using Amazon S3 to store archived redo logs, increasing the bandwidth, or using a different replication method. What is the MOST effective action to reduce the RTO?

A.Configure the primary database to automatically archive redo logs to Amazon S3, and have the standby download them from S3.

B.Use Oracle Automatic Storage Management (ASM) to mirror data across Regions.

C.Replace Oracle Data Guard with Amazon EBS snapshot replication across Regions.

D.Increase the network bandwidth between the Regions to reduce redo log shipping lag.

AnswerD

Higher bandwidth reduces the time to transfer redo logs to the standby, allowing it to apply logs faster and be ready for failover sooner.

Why this answer

Increasing the bandwidth between Regions will reduce the lag in redo log shipping, allowing the standby to apply logs more quickly and be ready faster. Option A is incorrect because storing archived logs on S3 still requires transferring them to the standby. Option B is incorrect because EBS replication does not apply to cross-Region scenarios.

Option C is incorrect because ASM is a storage management layer, not a replication solution.

Practice this question →

272

MCQeasy

An SAP system uses an Application Load Balancer (ALB) to distribute traffic to web servers. The ALB is configured with a health check that fails, causing the web servers to be marked as unhealthy. What is a possible reason for the health check failure?

A.The instance is in a private subnet

B.The instance type is not supported by the ALB

C.The security group for the ALB does not allow outbound traffic

D.The web server is not configured to respond to the health check path

AnswerD

If the health check path is not configured, the server returns an error.

Why this answer

A common health check failure is when the health check path (e.g., /health) returns a non-200 status code. The security group allowing traffic from the ALB is required. Instance type does not affect health check.

The subnet is not a direct cause.

Practice this question →

273

MCQhard

A company runs SAP on AWS and uses AWS Transit Gateway to connect multiple VPCs. They notice that inter-VPC traffic is being dropped. What is a likely cause?

A.Security groups not allowing return traffic.

B.Missing routes in the VPC route tables pointing to the Transit Gateway.

C.Transit Gateway does not support transitive routing.

D.Network ACLs blocking traffic.

AnswerB

Without routes, traffic cannot be forwarded to Transit Gateway.

Why this answer

AWS Transit Gateway requires explicit routes in each VPC's route table pointing to the Transit Gateway attachment ID for traffic to be forwarded between VPCs. Without these routes, the VPCs have no path to reach the Transit Gateway, causing inter-VPC traffic to be dropped at the VPC router level.

Exam trap

The trap here is that candidates often assume Transit Gateway automatically enables inter-VPC routing without requiring explicit VPC route table entries, confusing Transit Gateway's transitive routing capability with the need for proper route propagation in each VPC.

How to eliminate wrong answers

Option A is wrong because security groups are stateful and automatically allow return traffic for permitted outbound flows, so they would not cause inter-VPC traffic drops unless the initial outbound traffic was blocked. Option C is wrong because AWS Transit Gateway does support transitive routing by default, allowing any attached VPC to communicate with any other attached VPC as long as route tables are properly configured. Option D is wrong because network ACLs are stateless and could block traffic, but the question states traffic is being dropped between VPCs, and the most common cause is missing routes to the Transit Gateway, not ACL misconfiguration.

Practice this question →

274

Multi-Selectmedium

A company is planning to migrate its SAP ERP system to SAP HANA on AWS. Which TWO AWS services can be used to assess the current on-premises environment and plan the migration?

Select 2 answers

A.AWS Server Migration Service (SMS)

B.AWS Database Migration Service (DMS)

C.AWS Migration Hub

D.AWS CloudEndure Migration

E.AWS Application Discovery Service

AnswersC, E

Migration Hub provides visibility into migration progress and integrates with discovery tools.

Why this answer

AWS Migration Hub provides a single location to track the progress of application migrations across multiple AWS and partner solutions, including SAP HANA migrations. It integrates with AWS Application Discovery Service to collect data about on-premises servers, applications, and dependencies, enabling you to assess the current environment and plan the migration. For SAP ERP to SAP HANA on AWS, Migration Hub helps you visualize the migration status and group servers into migration waves.

Exam trap

The trap here is that candidates often confuse migration execution tools (like SMS, DMS, or CloudEndure) with assessment and planning services, leading them to select a tool that actually performs the migration rather than one that discovers and analyzes the current environment.

Practice this question →

275

MCQmedium

A company is migrating its SAP system to AWS and wants to use AWS Backup to manage backups of SAP HANA databases running on EC2 instances. What is the prerequisite for this integration?

A.The HANA database must be configured to use in-memory backups.

B.The HANA database must not use EBS snapshots for backup.

C.The EC2 instance must be running on a Dedicated Host.

D.The HANA database must be registered as a resource in AWS Backup using the Backint agent.

AnswerD

AWS Backup for SAP HANA requires the Backint agent to be installed and configured.

Why this answer

AWS Backup supports HANA databases via the SAP HANA Backint integration. The HANA database must be registered as a resource in AWS Backup, which requires the Backint agent. Options A (SAP HANA in-memory backup) is not a thing.

Option B (Dedicated Host) is not required. Option C (not using EBS snapshots) is unnecessary.

Practice this question →

276

MCQhard

A company is migrating an SAP ERP system to AWS. The system requires low-latency access to a shared file system for SAP transport directories. The file system must be accessible from multiple EC2 instances in different Availability Zones. Which storage solution meets these requirements?

A.Amazon EBS volumes snapshotted and shared across instances.

B.Instance store volumes on each EC2 instance.

C.Amazon S3 with Transfer Acceleration.

D.Amazon EFS file system.

AnswerD

Provides shared, low-latency file system across AZs.

Why this answer

Amazon EFS provides a fully managed, NFS-based shared file system that can be mounted concurrently by multiple EC2 instances across different Availability Zones, offering the low-latency access required for SAP transport directories. It automatically scales storage capacity and throughput, ensuring consistent performance for SAP workloads without manual provisioning.

Exam trap

The trap here is that candidates may confuse EBS snapshots or S3 with a shared file system, overlooking that EFS is the only option that provides a POSIX-compliant, multi-AZ shared file system with low-latency access required for SAP transport directories.

How to eliminate wrong answers

Option A is wrong because Amazon EBS volumes are block-level storage that can only be attached to a single EC2 instance at a time; while snapshots can be shared, they cannot provide concurrent, low-latency access from multiple instances across AZs. Option B is wrong because instance store volumes are ephemeral and tied to the specific EC2 instance's lifecycle, so they cannot be shared across instances or persist independently. Option C is wrong because Amazon S3 is object storage accessed via HTTP/S, not a POSIX-compliant file system, and Transfer Acceleration only improves upload speed over long distances, not low-latency shared file access for SAP transport directories.

Practice this question →

277

MCQeasy

An SAP application must be highly available across two Availability Zones in a single Region. The SAP Central Services (ASCS) and ERS are to be deployed on EC2 instances. Which AWS service should be used to manage the floating IP address for the ASCS instance?

A.Network Load Balancer

B.AWS Global Accelerator

C.Amazon Route 53 with failover routing

D.Elastic IP address

AnswerC

Route 53 failover routing can automatically redirect traffic to a healthy IP.

Why this answer

In an SAP on AWS deployment, the ASCS instance requires a floating IP address for clients to connect to the active instance. Amazon Route 53 with failover routing can manage this by using health checks to automatically update DNS records to point to the secondary ASCS instance in case of failure. This provides a DNS-based failover mechanism for the floating IP.

Option A (Network Load Balancer) is incorrect because while an NLB can front-end the ASCS service, it does not manage a floating IP; it provides a static IP but requires a load balancer configuration. Option B (AWS Global Accelerator) is designed for global traffic and not for intra-region floating IP management for SAP ASCS. Option D (Elastic IP address) can be remapped manually but does not provide automatic failover without additional scripting.

Practice this question →

278

MCQmedium

A company is running an SAP HANA database on an Amazon EC2 instance. The instance type is r5.4xlarge with 16 vCPUs and 128 GiB of memory. The storage is configured with a single 400 GB gp2 EBS volume for /hana/data and a separate 100 GB gp2 volume for /hana/log. The database experiences high latency during peak loads. Which change will most likely improve performance?

A.Change the EBS volumes to io2 Block Express volumes with provisioned IOPS.

B.Increase the instance size to r5.8xlarge.

C.Disable the EBS volume caching.

D.Create a RAID 0 stripe of multiple gp2 volumes.

AnswerA

io2 Block Express provides consistent low latency and high IOPS, critical for SAP HANA.

Why this answer

SAP HANA on EC2 requires consistently low latency for /hana/data and /hana/log volumes, especially under peak loads. The gp2 volume's burst model can deplete credits, causing throughput throttling and high latency. io2 Block Express volumes provide consistent, provisioned IOPS performance without reliance on burst credits, directly addressing the latency issue.

Exam trap

The trap here is that candidates often assume increasing instance size (Option B) will resolve all performance issues, overlooking that SAP HANA's high-latency problem under peak load is typically storage-bound, not compute-bound, and that gp2's burst model is the root cause.

How to eliminate wrong answers

Option B is wrong because increasing the instance size to r5.8xlarge adds more CPU and memory but does not fix the underlying storage I/O bottleneck; the gp2 volumes will still suffer from credit exhaustion and latency spikes. Option C is wrong because disabling EBS volume caching would actually increase latency by forcing all I/O to go directly to the disk, worsening performance. Option D is wrong because RAID 0 striping of multiple gp2 volumes can improve throughput but does not eliminate the burst credit model; each gp2 volume still depletes credits independently, and under sustained peak load, all volumes can throttle simultaneously, failing to resolve the high-latency issue.

Practice this question →

279

MCQhard

A company is migrating its SAP landscape to AWS. The SAP systems consist of multiple instances (development, quality, production) running on different EC2 instances. The company wants to automate the provisioning of these instances using infrastructure as code. Which AWS service should be used to define and provision the SAP infrastructure in a repeatable manner?

A.AWS Elastic Beanstalk

B.AWS CloudFormation

C.AWS Service Catalog

D.AWS OpsWorks

AnswerB

CloudFormation enables you to model and provision AWS resources using templates.

Why this answer

AWS CloudFormation is the correct service because it allows you to define your entire SAP infrastructure—including EC2 instances, VPCs, security groups, and storage—as code using a JSON or YAML template. This enables repeatable, version-controlled provisioning of development, quality, and production environments, which is essential for an SAP migration requiring consistent and automated deployments.

Exam trap

The trap here is that candidates often confuse AWS OpsWorks or Elastic Beanstalk as infrastructure-as-code solutions, but they are designed for application management and configuration, not for declarative provisioning of raw infrastructure resources like EC2 instances for SAP.

How to eliminate wrong answers

Option A is wrong because AWS Elastic Beanstalk is a Platform-as-a-Service (PaaS) solution designed for web applications and does not provide the granular control over EC2 instances, operating systems, and SAP-specific configurations required for an SAP landscape. Option C is wrong because AWS Service Catalog is a governance tool that allows you to create and manage a catalog of approved IT services, but it does not directly define and provision infrastructure; it relies on CloudFormation templates underneath for provisioning. Option D is wrong because AWS OpsWorks is a configuration management service based on Chef and Puppet, which is more suited for application configuration and lifecycle management, not for defining and provisioning the underlying infrastructure in a repeatable, declarative manner like CloudFormation.

Practice this question →

280

MCQeasy

A company is running SAP NetWeaver on AWS and wants to implement high availability for the ASCS instance. Which AWS service can be used to monitor and automatically restart the ASCS instance if it fails?

A.EC2 Auto Scaling group

B.AWS Lambda with a scheduled function

C.Elastic Load Balancing (ELB)

D.Amazon CloudWatch with EC2 Auto Recovery

AnswerD

CloudWatch can detect instance failure and automatically recover the instance.

Why this answer

Amazon CloudWatch with EC2 Auto Recovery is the correct choice because it monitors the health of an EC2 instance at the hypervisor level and can automatically recover a failed instance by restarting it on a new host. For SAP NetWeaver ASCS instances, which require persistent state and are typically tied to a single instance, Auto Recovery ensures the instance is restored with the same private IP, Elastic IP, and instance metadata, maintaining the SAP cluster quorum without manual intervention.

Exam trap

The trap here is that candidates often confuse EC2 Auto Recovery with EC2 Auto Scaling, assuming both can restart a failed instance, but Auto Scaling replaces instances rather than recovering them in-place, which breaks the persistent IP and state required for SAP ASCS high availability.

How to eliminate wrong answers

Option A is wrong because EC2 Auto Scaling groups are designed for horizontal scaling by launching new instances based on scaling policies, not for monitoring and restarting a single critical instance like ASCS; they would replace the instance with a new one, potentially losing the persistent state and IP required for SAP high availability. Option B is wrong because AWS Lambda with a scheduled function can run custom scripts to check instance status and trigger a restart, but it operates at the application layer and cannot perform a hypervisor-level recovery that preserves the instance's private IP and metadata, which is essential for ASCS cluster communication. Option C is wrong because Elastic Load Balancing (ELB) distributes incoming traffic across multiple targets and does not monitor or restart individual instances; it is used for load balancing, not instance recovery.

Practice this question →

281

MCQhard

A company is running SAP S/4HANA on AWS and needs to ensure that the system can survive a single Availability Zone failure. The SAP HANA database is 1.5 TB in size. What is the most cost-effective high availability solution that meets SAP's support requirements?

A.Implement SAP HANA System Replication (HSR) with two EC2 instances in different Availability Zones.

B.Deploy SAP HANA on Amazon RDS for SAP HANA in Multi-AZ.

C.Use Amazon RDS Multi-AZ for the SAP HANA database.

D.Use a single EC2 instance with EBS snapshots taken every 5 minutes.

AnswerA

HSR is SAP's recommended HA solution and supports automatic failover across AZs.

Why this answer

SAP HANA System Replication (HSR) with two EC2 instances in different Availability Zones provides synchronous replication to meet SAP's support requirements for high availability (HA) while surviving a single AZ failure. This is the most cost-effective solution as it uses standard EC2 instances and does not require additional licensing or managed services, and it supports the 1.5 TB database size without the limitations of RDS for SAP HANA.

Exam trap

The trap here is that candidates may confuse Amazon RDS Multi-AZ with a valid option for SAP HANA, but RDS Multi-AZ is not supported for SAP HANA, and AWS does not offer a managed RDS service for SAP HANA, leading to the misconception that a managed database service can be used.

How to eliminate wrong answers

Option B is wrong because Amazon RDS for SAP HANA does not exist as a service; AWS does not offer a managed RDS service for SAP HANA, and SAP HANA must be self-managed on EC2. Option C is wrong because Amazon RDS Multi-AZ is not supported for SAP HANA databases; RDS Multi-AZ is designed for relational databases like MySQL, PostgreSQL, and Oracle, not for SAP HANA. Option D is wrong because using a single EC2 instance with EBS snapshots every 5 minutes does not meet SAP's support requirements for high availability, as it cannot provide automatic failover within the required recovery time objective (RTO) and can result in data loss (RPO) of up to 5 minutes, failing to survive an AZ failure.

Practice this question →

282

MCQmedium

An SAP system administrator is configuring an SAP HANA database on an EC2 instance with multiple EBS volumes. The administrator wants to ensure that the data volumes are mirrored to protect against volume failure. Which RAID configuration should the administrator use for the HANA data volumes?

A.RAID 5

B.RAID 0

C.RAID 10

D.RAID 6

AnswerC

RAID 10 combines mirroring and striping for performance and redundancy.

Why this answer

RAID 10 (striping + mirroring) is recommended for SAP HANA data volumes on AWS because it provides both high performance through striping and redundancy through mirroring, protecting against EBS volume failure. RAID 0 offers no fault tolerance. RAID 5 and RAID 6 introduce significant write penalties due to parity calculations, which can degrade HANA performance.

Practice this question →

283

MCQmedium

You are an SAP Basis consultant for a company running SAP ECC on Oracle on AWS. The system is hosted on a single EC2 instance (r5.8xlarge) with a separate EC2 instance for the database (Oracle on RDS). Recently, users have reported that the system becomes unresponsive for a few minutes every day at 10:00 AM. You check CloudWatch metrics and see a spike in CPU utilization on the application server at that time, but the database metrics are normal. The application server is running SAP instance and also a custom batch job that runs daily at 10:00 AM. The batch job is using a significant amount of CPU. You need to resolve the issue without losing the functionality of the batch job. Which action should you take?

A.Reschedule the batch job to run at a different time, such as 2:00 AM.

B.Move the custom batch job to a separate EC2 instance dedicated to running batch processes.

C.Upgrade the application server instance to a larger size, such as r5.16xlarge.

D.Create an RDS read replica and offload the batch job's database queries to it.

AnswerB

Isolating the batch job prevents it from competing for CPU with the SAP application.

Why this answer

The correct answer. Moving the custom batch job to a separate EC2 instance isolates the CPU-intensive process from the main SAP application server, preventing it from impacting user sessions. This resolves the issue without losing batch job functionality.

Option A (rescheduling) might avoid peak hours but does not address resource contention if the batch job overlaps with other activities. Option C (upgrading instance) is costly and may not be necessary. Option D (RDS read replica) only offloads database queries and does not address application server CPU spikes.

Practice this question →

284

Multi-Selectmedium

A company is running SAP HANA on an EC2 instance. The storage is provided by multiple EBS volumes. Which THREE considerations are important when configuring EBS volumes for SAP HANA? (Choose THREE.)

Select 3 answers

A.Use RAID 0 striping across multiple EBS volumes to increase throughput.

B.Use gp2 volumes with burst credits to handle peak IOPS.

C.Separate data and log volumes to avoid I/O contention.

D.Enable EBS bursting for all volumes to ensure high throughput.

E.Provision EBS volumes with sufficient IOPS to meet SAP HANA performance requirements.

AnswersA, C, E

RAID 0 improves performance by combining multiple volumes.

Why this answer

Options A, C, and E are correct. Option A is correct because using RAID 0 striping across multiple EBS volumes increases aggregated throughput and IOPS, which benefits SAP HANA workloads. Option C is correct because separating data and log volumes prevents I/O contention and aligns with SAP best practices.

Option E is correct because SAP HANA requires consistent, sufficient IOPS; provisioning volumes with adequate provisioned IOPS meets performance requirements. Option B is incorrect because gp2 burst credits are not reliable for production HANA; provisioned IOPS volumes (e.g., io1/io2) or gp3 are recommended. Option D is incorrect because EBS bursting introduces variability and is not suitable for production HANA; volumes should be sized for baseline performance.

Practice this question →

285

MCQhard

An SAP system running on AWS experiences a significant performance degradation after a patching activity. The SAP application (PAS) and database (HANA) run on separate EC2 instances. The network throughput between the two instances has dropped. What is the MOST likely cause?

A.The EBS-optimization feature was disabled on the database instance.

B.The instances were moved out of a cluster placement group, reducing network throughput.

C.The security group rules were modified during patching, restricting traffic.

D.The route tables were updated, causing traffic to traverse a NAT gateway.

AnswerB

Cluster placement groups provide low-latency, high-throughput networking; leaving the placement group can significantly reduce network performance.

Why this answer

A cluster placement group provides low-latency, high-bandwidth network connectivity between instances by placing them in the same high-speed, non-blocking rack. Moving instances out of a cluster placement group removes this benefit, reducing network throughput between the SAP PAS and HANA instances, which directly causes performance degradation.

Exam trap

The trap here is that candidates often confuse EBS-optimization with network throughput, or assume security group changes are the primary cause of performance degradation after patching, when in fact the placement group change is a subtle but critical networking change that directly impacts inter-instance bandwidth.

How to eliminate wrong answers

Option A is wrong because EBS-optimization affects storage I/O throughput to EBS volumes, not network throughput between EC2 instances. Option C is wrong because security group rules control traffic allowed to/from instances; modifying them would either block or allow traffic, not gradually reduce throughput. Option D is wrong because route table changes that force traffic through a NAT gateway would add latency and potentially reduce throughput, but this is a less likely outcome of a patching activity compared to placement group changes, and NAT gateways are typically used for outbound internet traffic, not inter-instance communication within a VPC.

Practice this question →

286

Multi-Selectmedium

A company is designing an SAP HANA disaster recovery solution on AWS. The primary system is in us-east-1, and the DR system must be in us-west-2. The RPO is 15 minutes, and RTO is 1 hour. Which TWO approaches meet these requirements? (Choose TWO.)

Select 2 answers

A.Use AWS Database Migration Service (DMS) with ongoing replication from the primary HANA database to a target HANA database in us-west-2.

B.Take EBS snapshots of HANA data volumes every 15 minutes and copy them to us-west-2.

C.Use Amazon S3 Cross-Region Replication to copy HANA backup files to us-west-2.

D.Configure SAP HANA System Replication (HSR) from the primary to a secondary HANA instance in us-west-2.

E.Use AWS Application Migration Service (MGN) to replicate the entire HANA server to us-west-2.

AnswersA, D

DMS can replicate changes continuously, meeting RPO.

Why this answer

AWS DMS with ongoing replication can capture and apply changes from the primary SAP HANA database to a target HANA database in us-west-2 with low latency, supporting an RPO of 15 minutes. DMS uses log-based CDC (Change Data Capture) to replicate transactions continuously, making it suitable for near-real-time replication. This approach meets the RTO of 1 hour because the target database can be promoted quickly.

Exam trap

The trap here is that candidates often confuse server-level replication (MGN) or backup-based approaches (EBS snapshots, S3 replication) with database-level replication, failing to recognize that only HSR and DMS provide the transaction-consistent, low-latency replication needed for SAP HANA's RPO and RTO requirements.

Practice this question →

287

MCQmedium

An SAP system on AWS is experiencing high latency between the application server and the database server. Both are in the same VPC but different subnets. What is the most effective way to reduce latency?

A.Move the database to a different Availability Zone.

B.Use a VPN connection between subnets.

C.Increase the instance size of both servers.

D.Place both instances in a placement group in the same Availability Zone.

AnswerD

Placement groups provide low-latency network.

Why this answer

Placing both the SAP application server and database server in a placement group within the same Availability Zone ensures they are in close physical proximity, often on the same rack or within the same cluster. This minimizes network hops and reduces latency to single-digit microseconds, which is critical for SAP's high-throughput, low-latency communication between application and database layers.

Exam trap

The trap here is that candidates often assume increasing instance size or changing subnets will fix latency, but AWS explicitly tests the understanding that physical proximity via placement groups is the only way to guarantee minimal network latency within a single Availability Zone.

How to eliminate wrong answers

Option A is wrong because moving the database to a different Availability Zone increases physical distance and network latency, often adding 1–2 milliseconds of inter-AZ latency, which would worsen the high-latency issue. Option B is wrong because a VPN connection between subnets introduces encryption overhead and additional network hops, increasing latency rather than reducing it; VPNs are for secure connectivity across networks, not for optimizing intra-VPC performance. Option C is wrong because increasing instance sizes improves compute or memory capacity but does not reduce network latency between instances; latency is determined by network path and physical proximity, not instance size.

Practice this question →

288

MCQmedium

A company is running SAP on AWS and wants to ensure high availability for the SAP Central Services (ASCS) instance. They have two EC2 instances in different Availability Zones within a single AWS Region. Which AWS service should be used to automatically fail over the ASCS instance if the primary instance fails?

A.Application Load Balancer (ALB)

B.AWS Auto Scaling

C.AWS CloudFormation

D.Amazon Route 53

AnswerD

Route 53 health checks and failover routing can direct traffic to the healthy instance.

Why this answer

Amazon Route 53 can be configured with a health check that monitors the primary ASCS instance. When the health check fails, Route 53 automatically updates DNS records to point to the secondary instance in the other Availability Zone, enabling failover routing. This provides a DNS-level failover mechanism that is suitable for SAP Central Services, which requires a stable IP address or hostname for client connections.

Exam trap

The trap here is that candidates often assume a load balancer (ALB) is needed for high availability, but SAP ASCS requires a single active endpoint and cannot use load balancing, making Route 53's DNS failover the correct choice.

How to eliminate wrong answers

Option A is wrong because an Application Load Balancer (ALB) operates at Layer 7 and distributes traffic across multiple targets, but SAP ASCS typically requires a single active IP address and does not support load-balanced connections; ALB cannot perform automatic failover with a single active instance. Option B is wrong because AWS Auto Scaling is designed to automatically adjust the number of EC2 instances based on demand, not to fail over a specific instance role like ASCS; it does not provide health-check-driven DNS failover. Option C is wrong because AWS CloudFormation is an infrastructure-as-code service for provisioning and managing resources, not a runtime failover mechanism; it cannot react to instance failures and redirect traffic automatically.

Practice this question →

289

MCQhard

During an SAP migration to AWS, the migration team faces a challenge with the Transport Management System (TMS). The SAP system landscape includes development, quality assurance, and production systems running on separate EC2 instances. The TMS is configured with transport routes between these systems. After migration, transports fail with errors related to missing files on the transport directory. What should the team do to ensure the TMS works correctly?

A.Create an EBS volume for each SAP system and copy transport files manually.

B.Set up an Amazon EFS file system and mount it as the transport directory on all SAP instances.

C.Store the transport directory in an S3 bucket and mount it using S3FS.

D.Use AWS Storage Gateway with SMB file share to host the transport directory.

AnswerB

Amazon EFS provides a fully managed NFS file system that can be mounted on multiple EC2 instances, making it the ideal shared transport directory for TMS.

Why this answer

The Transport Management System (TMS) requires a shared transport directory accessible by all SAP instances (DEV, QAS, PRD). Option B is correct because Amazon EFS provides a scalable NFS file system that can be mounted on multiple EC2 instances simultaneously, satisfying the shared storage requirement. Option A is incorrect because EBS volumes are block storage that can only be attached to a single instance; manual file copying is not feasible for ongoing TMS operations.

Option C is incorrect because mounting an S3 bucket via S3FS introduces performance and consistency issues; S3 is object storage not designed for low-latency file sharing required by TMS. Option D is incorrect because AWS Storage Gateway with SMB file share adds unnecessary complexity; EFS with NFS is the standard and simpler solution for shared transport directories in SAP on AWS.

Practice this question →

290

MCQhard

A company is running SAP ERP on AWS and using a shared file system for the SAP transport directory. The file system must be accessible from multiple EC2 instances in different Availability Zones. Which AWS storage solution should be used?

A.Amazon FSx for Windows File Server

B.Amazon EFS

C.Amazon S3

D.Amazon EBS

AnswerB

EFS provides a shared NFS file system accessible from multiple AZs.

Why this answer

Amazon EFS provides a scalable, shared file system that can be mounted from multiple EC2 instances across Availability Zones. Amazon S3 is object storage, not a file system. Amazon FSx for Windows File Server is for Windows-based environments.

Amazon EBS cannot be shared across instances.

Practice this question →

291

Multi-Selectmedium

A company is deploying a multi-tier web application on AWS. The application consists of an Application Load Balancer (ALB), a fleet of EC2 instances in an Auto Scaling group, and an Amazon RDS MySQL Multi-AZ DB instance. The security team requires that all traffic between the ALB and EC2 instances is encrypted, and that the EC2 instances can only be accessed by the ALB. Which TWO steps should be taken to meet these requirements? (Choose TWO.)

Select 2 answers

A.In the EC2 security group, allow inbound HTTPS traffic from 0.0.0.0/0.

B.Enable encryption at rest on the EC2 instances using EBS encryption.

C.In the EC2 security group, allow inbound traffic on port 443 from the ALB's security group.

D.Configure the target group of the ALB to use HTTPS protocol.

E.Configure the ALB with an HTTPS listener and upload the SSL/TLS certificate.

AnswersC, D

This restricts access to only the ALB, meeting the requirement.

Why this answer

Referencing the ALB's security group in the inbound rule of the EC2 security group ensures that only traffic originating from the ALB is allowed, meeting the requirement that EC2 instances can only be accessed by the ALB. Option D is correct because configuring the target group to use HTTPS protocol ensures that traffic between the ALB and EC2 instances is encrypted using TLS, satisfying the encryption requirement.

Exam trap

The trap here is that candidates often confuse the ALB listener protocol (which encrypts client-to-ALB traffic) with the target group protocol (which encrypts ALB-to-instance traffic), leading them to select Option E instead of Option D.

Practice this question →

292

MCQeasy

A company is deploying a new SAP S/4HANA system on AWS. The system will be used by 500 concurrent users. The SAP application server and the HANA database will run on separate EC2 instances. The company needs to ensure that the database instance has enough memory for the HANA database, which requires 512 GB of RAM. The application server requires 32 vCPUs and 128 GB of RAM. The company wants to minimize costs while meeting these requirements. Which combination of EC2 instance types should the company choose?

A.Use an r5.12xlarge for the database and an m5.4xlarge for the application server.

B.Use an x1e.8xlarge for the database and an r5.8xlarge for the application server.

C.Use an x1e.32xlarge for the database and an m5.8xlarge for the application server.

D.Use an r5.24xlarge for the database and an r5.8xlarge for the application server.

AnswerD

r5.24xlarge has 768 GB, sufficient; r5.8xlarge has 32 vCPU and 256 GB, sufficient.

Why this answer

The HANA database requires 512 GB of RAM. The r5.24xlarge provides 768 GB of RAM and 96 vCPUs, which is sufficient and cost-effective for the database. The r5.8xlarge provides 32 vCPUs and 256 GB of RAM, meeting the application server's requirements of 32 vCPUs and 128 GB.

Option A uses an r5.12xlarge (384 GB RAM) for the database, which is insufficient for 512 GB. Option B uses an x1e.8xlarge (244 GB RAM) for the database, also insufficient. Option C uses an x1e.32xlarge (976 GB RAM) for the database, which is overkill and more expensive, and the m5.8xlarge (32 vCPUs, 128 GB RAM) for the application is adequate but the database choice increases cost unnecessarily.

Therefore, D minimizes cost while meeting requirements.

Practice this question →

293

Drag & Dropmedium

Drag and drop the steps to migrate an on-premises SAP system to AWS using AWS Application Migration Service (MGN) into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

Why this order

MGN migration involves installing agent, configuring replication, testing, cutover, and post-migration steps.

Practice this question →

294

MCQmedium

A company is migrating an SAP NetWeaver system to AWS. The system uses a shared file system for central transport directories and logs. Which AWS storage service should be used to provide a scalable, highly available, and shared file system that can be mounted by multiple EC2 instances across different Availability Zones?

A.Amazon EBS with Multi-Attach enabled

B.Amazon EFS

C.EC2 Instance Store

D.Amazon S3 with S3 File Gateway

AnswerB

Amazon EFS provides a fully managed, highly available, and scalable NFS file system that can be accessed from multiple EC2 instances across different AZs, ideal for SAP shared directories.

Why this answer

Amazon EFS (Option B) is correct because it provides a scalable, highly available, shared NFS file system that can be mounted by multiple EC2 instances across different Availability Zones, making it suitable for SAP shared file systems. Option A (EBS with Multi-Attach) is incorrect because Multi-Attach only works within a single AZ and has limited attach instances (up to 16), not across AZs. Option C (EC2 Instance Store) is incorrect because it is ephemeral and cannot be shared across instances.

Option D (Amazon S3 with S3 File Gateway) is incorrect because it is not a native shared file system; File Gateway provides NFS/SMB access to S3 but adds complexity and latency, and is not the recommended service for SAP shared directories.

Practice this question →

295

Multi-Selecthard

A company runs SAP on AWS and uses SAP HANA as its database. The system is experiencing high latency during peak hours. The SAP HANA administrator wants to identify performance bottlenecks at the CPU, memory, and disk I/O levels. Which TWO AWS services can be used together to monitor and correlate these metrics?

Select 2 answers

A.AWS Config

B.Amazon CloudWatch Logs

C.Amazon Inspector

D.Amazon CloudWatch

E.AWS X-Ray

AnswersB, D

CloudWatch Logs can ingest HANA traces for correlation.

Why this answer

Amazon CloudWatch (Option D) collects and stores CPU, memory, and disk I/O metrics from SAP HANA instances via the CloudWatch Agent or direct integration. Amazon CloudWatch Logs (Option B) ingests SAP HANA diagnostic logs, such as trace files and performance dumps, enabling correlation of log events with metric spikes. Together, they provide a unified view to pinpoint bottlenecks at the CPU, memory, and I/O levels during peak hours.

Exam trap

The trap here is that candidates often confuse AWS X-Ray (application tracing) with infrastructure-level monitoring, or assume AWS Config can track performance metrics, when in fact only CloudWatch and CloudWatch Logs together provide the necessary metric and log correlation for SAP HANA bottleneck analysis.

Practice this question →

296

MCQmedium

A company is deploying SAP NetWeaver on AWS and wants to use Amazon FSx for NetApp ONTAP as the shared file system for the SAP transport directory (/usr/sap/trans). The company needs to ensure that the transport directory is highly available and can be accessed from multiple SAP application servers across different Availability Zones. Which configuration should the SAP administrator use?

A.Use Amazon EFS with a mount target in each AZ.

B.Mount the transport directory from an Amazon EC2 instance running NFS in the same AZ.

C.Store the transport directory in Amazon S3 and use an S3 mount point.

D.Create an FSx for ONTAP file system with Multi-AZ configuration and mount the NFS share on all SAP servers.

AnswerD

FSx for ONTAP Multi-AZ provides HA and cross-AZ access.

Why this answer

Amazon FSx for NetApp ONTAP with Multi-AZ configuration provides a highly available NFS share that can be accessed from SAP application servers across multiple Availability Zones, meeting the requirements for the SAP transport directory. Option A is incorrect because Amazon EFS, while highly available, is not the specified service required by the scenario (FSx for ONTAP is explicitly mentioned). Option B is incorrect because mounting from a single EC2 instance is not highly available and introduces a single point of failure.

Option C is incorrect because Amazon S3 is not a POSIX-compliant file system and is not suitable for SAP transport directories.

Practice this question →

297

Multi-Selectmedium

A company is designing an SAP HANA disaster recovery solution using SAP HANA System Replication. Which TWO AWS services are required to enable automatic failover across AWS Regions?

Select 2 answers

A.AWS Elastic Load Balancing (NLB)

B.AWS Direct Connect

C.AWS CloudFormation

D.AWS Route 53

E.AWS Shield

AnswersA, D

NLB can be used with a static IP and health checks to route traffic to the active HANA instance.

Why this answer

AWS Route 53 provides DNS-based failover routing to redirect traffic to the DR region. AWS Elastic Load Balancing (NLB) is used to distribute traffic to the HANA instances and can be used with a floating IP. AWS Direct Connect is not required.

AWS CloudFormation is not needed for automatic failover. AWS Shield is for DDoS protection.

Practice this question →

298

Multi-Selectmedium

A company is running SAP ERP on AWS and wants to implement a disaster recovery (DR) strategy with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. The primary site is in us-east-1, and the DR site is in us-west-2. Which TWO AWS features should be combined to achieve this? (Choose TWO.)

Select 2 answers

A.Amazon RDS Multi-Region replication

B.Amazon S3 Cross-Region Replication for database backups

C.AWS CloudEndure Disaster Recovery

D.Amazon EBS Multi-AZ snapshots

E.EC2 AMI Copy to copy server images to the DR region

AnswersB, E

S3 CRR can replicate backups to the DR region with low RPO.

Why this answer

Amazon S3 Cross-Region Replication (CRR) for database backups ensures that backup files are automatically replicated to the DR region within minutes, supporting an RPO of 15 minutes. EC2 AMI Copy allows you to copy pre-configured server images (including OS and SAP application layers) to the DR region, enabling rapid recovery of EC2 instances within the 2-hour RTO. Together, these two features provide a cost-effective, fully automated DR solution for SAP on AWS without requiring third-party tools.

Exam trap

The trap here is that candidates often confuse AWS CloudEndure Disaster Recovery (a third-party tool) with a native AWS feature, or they mistakenly think Amazon RDS Multi-Region replication applies to SAP ERP databases, which are typically self-managed on EC2, not RDS.

Practice this question →

299

MCQmedium

An SAP system running on AWS is experiencing performance degradation. The system uses a shared file system for /sapmnt and /usr/sap/trans. The file system is hosted on an Amazon EFS file system. Which configuration change is most likely to improve throughput for these file systems?

A.Change the EFS performance mode to Max I/O to support higher levels of aggregate throughput and operations per second.

B.Increase the Provisioned Throughput of the EFS file system.

C.Switch the EFS file system to General Purpose (Burstable) performance mode.

D.Enable burst credits on the EFS file system to handle peak loads.

AnswerA

Max I/O mode is designed for large-scale, parallel workloads like SAP shared directories.

Why this answer

Amazon EFS Max I/O performance mode is designed for workloads with high throughput and parallel operations, such as SAP shared file systems for /sapmnt and /usr/sap/trans. Option B (Provisioned Throughput) provides consistent throughput but is not specifically optimized for parallel access and may incur additional cost. Option C (General Purpose Burstable) is the default mode, which is suitable for lower throughput workloads and would not improve performance.

Option D (Enable burst credits) is not a configurable option; EFS automatically uses burst credits when in Burstable mode, so enabling them is not applicable.

Practice this question →

300

Multi-Selectmedium

Which THREE factors should be considered when selecting an EC2 instance type for an SAP HANA production system?

Select 3 answers

A.Memory (RAM) size

B.SAP certification

C.Network bandwidth

D.Instance store volumes

E.GPU capabilities

AnswersA, B, C

HANA is an in-memory database; RAM size is primary.

Why this answer

The correct answers are A, B, and C. SAP HANA is an in-memory database, so memory size (RAM) is critical. The instance must be SAP-certified to ensure compatibility and performance.

Network bandwidth is important for HANA system replication and data transfer. Option D is incorrect because HANA uses EBS volumes for persistent storage, not instance store (which is ephemeral). Option E is incorrect because GPUs are not required for SAP HANA.

Practice this question →

← PreviousPage 4 of 6 · 389 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Technology questions.

Start 20-question session