Courseiva

CCNA Technology Questions

75 of 389 questions · Page 5/6 · Technology · Answers revealed

Practice these questionsDomain overviewAll questions
301
MCQhard

A company has deployed its SAP S/4HANA system on AWS in a single Availability Zone. The system consists of a primary application server (PAS), additional application servers (AAS), and a HANA database server, all running on EC2 instances. The company is experiencing occasional performance degradation during peak hours. The CloudWatch metrics show that the database server's CPU utilization spikes to 90% during these periods, while the application servers' CPU remains below 50%. The storage is configured with two EBS io1 volumes (each 1 TB, 10,000 IOPS) for HANA data and one io1 volume (500 GB, 5,000 IOPS) for log. The network throughput is not saturated. The company wants to resolve the performance issue without increasing costs significantly. Which course of action should the company take?

A.Implement SAP HANA System Replication with a secondary node in the same AZ to offload read operations.
B.Increase the Provisioned IOPS on the data volumes to 20,000 each.
C.Switch the EBS volumes from io1 to gp3 to reduce latency.
D.Upgrade the database instance to a larger type, such as r5.12xlarge.
AnswerA

HSR allows read workloads to be redirected to the secondary, reducing CPU on primary.

Why this answer

Implementing SAP HANA System Replication with a secondary node in the same Availability Zone allows read-only queries to be offloaded to the secondary node, reducing CPU load on the primary database server. This directly addresses the CPU spike during peak hours without significantly increasing costs. Option B is wrong because the performance issue is CPU-bound, not I/O-bound; increasing IOPS would add cost without resolving the CPU bottleneck.

Option C is wrong because switching from io1 to gp3 may reduce storage costs but does not improve CPU performance. Option D is wrong because upgrading to a larger instance is expensive and may not be necessary if HSR can distribute the load effectively.

Practice this question →
302
MCQeasy

An SAP system needs to send email notifications from the SAP application server running on EC2. Which AWS service should be used?

A.Amazon Simple Email Service (SES)
B.Amazon Pinpoint
C.Amazon Simple Queue Service (SQS)
D.Amazon Simple Notification Service (SNS)
AnswerA

SES is designed for sending email from applications.

Why this answer

Amazon Simple Email Service (SES) is the correct choice because it is a cloud-based email sending service designed specifically for sending transactional and notification emails from applications, including SAP systems running on EC2. SES supports SMTP and API-based integration, allowing the SAP application server to send outbound email notifications reliably without managing on-premises email infrastructure.

Exam trap

The trap here is that candidates often confuse SNS with SES because both can send email, but SNS is a pub/sub messaging service with limited email formatting and no SMTP support, whereas SES is the correct service for application-to-user transactional email.

How to eliminate wrong answers

Option B (Amazon Pinpoint) is wrong because Pinpoint is a marketing and engagement service focused on targeted campaigns, analytics, and multi-channel messaging (email, SMS, push), not a simple transactional email service for application notifications. Option C (Amazon Simple Queue Service) is wrong because SQS is a message queuing service for decoupling application components, not an email sending service. Option D (Amazon Simple Notification Service) is wrong because SNS is a pub/sub messaging service that can send notifications via SMS, email, or HTTP endpoints, but it is not designed for high-volume transactional email sending with SMTP integration; SES is the dedicated email service for such use cases.

Practice this question →
303
MCQhard

An SAP system administrator notices that an SAP S/4HANA system on AWS is experiencing high network latency between the application server and the database server. Both servers are in the same VPC but in different Availability Zones. What is the most effective way to reduce latency?

A.Set up VPC peering between the two subnets.
B.Deploy AWS Global Accelerator to optimize the traffic path.
C.Add multiple Elastic Network Interfaces (ENIs) to the instances.
D.Launch both instances in the same placement group and enable EBS optimization.
AnswerD

Placement groups ensure low-latency network performance between instances, and EBS optimization dedicates bandwidth for storage traffic.

Why this answer

Launching both instances in the same placement group ensures they are in close physical proximity within the same Availability Zone, which minimizes network latency. Enabling EBS-optimized instances dedicates network bandwidth to EBS I/O, reducing contention and further improving database performance. This directly addresses the high latency caused by cross-AZ traffic between the SAP application and database servers.

Exam trap

The trap here is that candidates often assume cross-AZ latency can be solved by network optimizations like VPC peering or Global Accelerator, but the fundamental fix is to co-locate the instances in the same Availability Zone using a placement group.

How to eliminate wrong answers

Option A is wrong because VPC peering connects separate VPCs, not subnets within the same VPC, and does not reduce latency between instances already in the same VPC. Option B is wrong because AWS Global Accelerator improves latency by routing traffic over the AWS global network for internet-facing applications, but it does not optimize traffic within a single VPC between two EC2 instances. Option C is wrong because adding multiple ENIs increases network throughput and allows for separate traffic flows, but it does not reduce the physical distance or cross-AZ latency between instances.

Practice this question →
304
MCQeasy

A company is running a critical SAP application on SAP HANA in an AWS Single-AZ deployment. The application has experienced downtime twice in the last month due to underlying hardware failures. What is the MOST cost-effective solution to minimize future downtime without compromising performance?

A.Move the SAP HANA instance to a larger instance type to improve hardware reliability.
B.Deploy the SAP HANA database in a Multi-AZ configuration using SAP HANA System Replication (HSR) across Availability Zones.
C.Use Dedicated Hosts to ensure physical isolation from other AWS customers.
D.Implement automated snapshots of the SAP HANA data volume and restore in case of failure.
AnswerB

Deploy the SAP HANA database in a Multi-AZ configuration using SAP HANA System Replication (HSR) across Availability Zones, providing automatic failover without downtime.

Why this answer

Deploying SAP HANA in a Multi-AZ configuration using SAP HANA System Replication (HSR) across Availability Zones provides synchronous replication and automatic failover in case of hardware failure. This minimizes downtime without requiring a larger instance or manual intervention, and maintains performance by using the same instance type and storage configuration as the primary.

Exam trap

The trap here is that candidates often confuse AWS RDS Multi-AZ with SAP HANA's HA approach. SAP HANA uses its own System Replication (HSR) across AZs, not a managed AWS service like Multi-AZ DB instance. The key is understanding that AWS provides infrastructure for HSR, but the replication is managed by SAP HANA itself.

How to eliminate wrong answers

Option A is wrong because moving to a larger instance type does not inherently improve hardware reliability; larger instances still run on a single physical host and are subject to the same failure risks, so this does not address the root cause of downtime. Option C is wrong because Dedicated Hosts provide physical isolation from other AWS customers but do not eliminate the risk of hardware failure on that single host; they do not offer automatic failover or redundancy across Availability Zones. Option D is wrong because automated snapshots are point-in-time backups that require manual restoration and significant recovery time (RTO), which does not minimize downtime as effectively as an active-passive Multi-AZ failover that occurs automatically within minutes.

Practice this question →
305
Multi-Selecteasy

Which TWO AWS services can be used to automate the backup of SAP HANA databases? (Choose two.)

Select 2 answers
A.Amazon RDS
B.AWS Lambda
C.AWS Storage Gateway
D.AWS Backup
E.SAP HANA Backint agent for Amazon S3
AnswersD, E

AWS Backup can schedule and manage EBS snapshots for HANA volumes.

Why this answer

AWS Backup is a fully managed backup service that supports SAP HANA databases on Amazon EC2 through the AWS Backup Gateway and integration with the SAP HANA Backint agent. It provides centralized backup management, automated scheduling, and lifecycle policies, making it a correct choice for automating SAP HANA backups.

Exam trap

The trap here is that candidates may confuse AWS Lambda's ability to run custom backup scripts with being a native backup automation service, but AWS Backup is the intended managed service for SAP HANA backup automation, and the SAP HANA Backint agent for Amazon S3 is a direct integration tool for database-level backups.

Practice this question →
306
MCQeasy

A company is migrating its SAP ERP system to AWS and wants to use SAP HANA as the database. Which AWS service can be used to automate the installation and configuration of SAP HANA?

A.AWS CodePipeline
B.AWS CloudFormation
C.AWS OpsWorks
D.AWS Systems Manager
AnswerD

Systems Manager automates tasks via runbooks and can install SAP HANA.

Why this answer

AWS Systems Manager provides the capability to automate the installation and configuration of SAP HANA through its Automation and Run Command features, which can execute custom scripts and workflows. Specifically, AWS offers pre-built Automation documents (e.g., AWS-ConfigureSAP) and integration with SAP Landscape Management to streamline SAP HANA deployment on EC2 instances. This makes Systems Manager the correct choice for automating SAP HANA setup in a migration context.

Exam trap

The trap here is that candidates often confuse AWS CloudFormation's ability to provision EC2 instances with the ability to install and configure SAP HANA, overlooking that CloudFormation alone cannot run the SAP HANA installer or apply OS-level tuning without additional automation like Systems Manager or custom scripts.

How to eliminate wrong answers

Option A is wrong because AWS CodePipeline is a continuous delivery service for building, testing, and deploying application code, not for automating OS-level or database installation tasks like SAP HANA. Option B is wrong because AWS CloudFormation is an Infrastructure as Code (IaC) service that provisions and manages AWS resources (e.g., EC2, VPC) but does not natively handle the installation or configuration of SAP HANA software on those resources without custom scripts or additional tools. Option C is wrong because AWS OpsWorks is a configuration management service based on Chef and Puppet, which is not designed or optimized for SAP HANA deployment; SAP HANA requires specific kernel parameters, file system layouts, and SAP-specific automation that Systems Manager handles more directly.

Practice this question →
307
MCQhard

A company runs its SAP ERP system on AWS using SAP HANA as the database. The HANA database is deployed on an EC2 instance with 488 GiB of memory. The system has been running for months, but recently the application team reported that some queries are taking significantly longer than usual. The operations team checks the CloudWatch metrics and sees that the database instance's CPU utilization is consistently above 90% during peak hours. They also notice that the EBS volume used for HANA data files has a read latency of over 20 ms. The volume is a gp3 volume with 16,000 IOPS. The instance type is an x1e.8xlarge. The team suspects that the instance is not optimized for the workload. What should they do to resolve the performance issue?

A.Change the EBS volume type to gp2 with a larger size.
B.Increase the gp3 volume IOPS to 32,000 to reduce read latency.
C.Replace the instance with an x1e.16xlarge instance to increase CPU and memory capacity.
D.Enable EBS optimization on the EC2 instance.
AnswerC

Upgrading to x1e.16xlarge provides double the vCPUs and memory (976 GiB), directly addressing the CPU bottleneck and providing more memory for HANA, even though the stated 2 TB memory requirement cannot be met by any x1e instance. This is the best option among those provided.

Why this answer

The x1e.8xlarge instance provides 4 vCPUs and 488 GiB of memory, which are insufficient for the workload causing consistently high CPU utilization. Upgrading to an x1e.16xlarge instance increases vCPUs to 8 and memory to 976 GiB, directly addressing the CPU bottleneck and memory pressure. The high EBS read latency may be a secondary effect of the overloaded instance, and additional capacity can help alleviate storage performance issues.

Option A is incorrect because changing to gp2 with a larger size does not guarantee lower latency and does not address the CPU constraint. Option B is incorrect because increasing IOPS on the gp3 volume only addresses storage performance, not the compute bottleneck. Option D is incorrect because EBS optimization is enabled by default on x1e instances; there is no additional setting to toggle.

Practice this question →
308
MCQhard

You are an AWS administrator for a company running SAP S/4HANA on AWS. The system uses a three-tier architecture: web dispatchers, application servers, and a HANA database. All components are in a single VPC. Security requirements demand that the web dispatchers are in a public subnet, application servers in private subnets, and the database in a private subnet. The web dispatchers need to communicate with the application servers on port 443, and application servers communicate with the database on port 31341. You have configured security groups accordingly. However, the web dispatchers cannot connect to the application servers. The network ACL for the public subnet allows inbound HTTPS from the internet and outbound all traffic. The private subnet NACL allows inbound HTTPS from the public subnet and outbound all traffic. The security group for the web dispatchers allows outbound HTTPS to the application security group. The application security group allows inbound HTTPS from the web security group. What is the issue?

A.The network ACL for the public subnet does not allow inbound ephemeral ports from the private subnet.
B.The security group for the application servers does not allow inbound HTTPS from the web dispatchers.
C.The security group for the web dispatchers does not allow outbound HTTPS to the application security group.
D.The VPC does not have a route between the public and private subnets.
AnswerA

The response traffic from the application servers uses ephemeral ports; the public NACL must allow inbound on those ports from the private subnet.

Why this answer

The issue is that network ACLs are stateless. The web dispatchers initiate outbound HTTPS connections to the application servers. The application servers respond using ephemeral ports.

The public subnet NACL allows inbound HTTPS from the internet, but it does not allow inbound traffic on ephemeral ports from the private subnet. This blocks the return traffic. Therefore, option A is correct.

Options B and C are incorrect because security groups are stateful and allow return traffic automatically. Option D is incorrect because the VPC's local route handles traffic between subnets.

Practice this question →
309
MCQmedium

A company is running SAP BusinessObjects on AWS. The application servers are behind an Application Load Balancer (ALB). The ALB is configured to use a single target group. The company wants to deploy a new version of the application with zero downtime. Which deployment strategy should be used?

A.Perform a rolling update by terminating one instance at a time and launching a new one.
B.Implement a blue/green deployment by creating a new target group and updating the ALB listener.
C.Create a new ALB and update the DNS record to point to the new ALB.
D.Use a canary release by routing 10% of traffic to the new version.
AnswerB

Blue/green allows instant traffic switch with no downtime.

Why this answer

A blue/green deployment allows you to create a completely new target group with the new application version, then update the ALB listener rule to route all traffic from the existing target group to the new one. This ensures zero downtime because the switch is instantaneous at the listener level, and the old environment remains intact for immediate rollback if needed.

Exam trap

The trap here is that candidates confuse a rolling update (which can cause brief downtime) with a blue/green deployment (which provides instant, zero-downtime cutover), especially when the question explicitly requires zero downtime and the ALB is already in place.

How to eliminate wrong answers

Option A is wrong because a rolling update terminates instances one at a time, which can cause brief periods of reduced capacity or failed health checks, leading to potential downtime for SAP BusinessObjects sessions. Option C is wrong because creating a new ALB and updating DNS introduces propagation delays (DNS TTL), which cannot guarantee zero downtime during the transition. Option D is wrong because a canary release routes only a portion of traffic (e.g., 10%) to the new version, which does not achieve full zero-downtime deployment for the entire application; it is a testing strategy, not a complete cutover.

Practice this question →
310
Multi-Selectmedium

Which TWO options are valid methods for encrypting data at rest in an SAP HANA database running on Amazon EBS? (Choose two.)

Select 2 answers
A.Use SSL/TLS connections to the database.
B.Enable SAP HANA native encryption for the database.
C.Use AWS KMS to encrypt the database schema.
D.Store database files in Amazon S3 with SSE-S3.
E.Enable EBS encryption when launching the EC2 instance.
AnswersB, E

HANA can encrypt data at rest.

Why this answer

SAP HANA provides native encryption capabilities that encrypt data at rest within the database itself, including data files, log files, and backups. This encryption is managed by SAP HANA's own key management system and operates independently of the underlying storage layer, making it a valid method for encrypting data at rest on Amazon EBS.

Exam trap

The trap here is that candidates often confuse encryption in transit (SSL/TLS) with encryption at rest, or incorrectly assume that AWS KMS can directly encrypt database schemas, when in fact KMS is a key management service that must be integrated with a specific encryption implementation like EBS encryption or SAP HANA native encryption.

Practice this question →
311
MCQhard

A company runs SAP on AWS and wants to automate the failover of their SAP HANA database across Availability Zones using a multi-AZ setup. They are using Pacemaker and STONITH fencing. Which AWS resource is commonly used as a fencing device for SAP HANA multi-AZ clusters?

A.Amazon Simple Notification Service (SNS)
B.Amazon Simple Queue Service (SQS)
C.Amazon RDS
D.Amazon CloudWatch alarm and EC2 API
AnswerD

The AWS STONITH agent uses CloudWatch and EC2 API to stop an unresponsive node.

Why this answer

STONITH (Shoot The Other Node In The Head) fencing in a multi-AZ SAP HANA cluster on AWS requires a mechanism to forcibly isolate or terminate an unresponsive node. Amazon CloudWatch alarms combined with EC2 API calls (e.g., `aws ec2 stop-instances` or `aws ec2 terminate-instances`) serve as the fencing device by triggering an API action to shut down the faulty instance, ensuring data integrity and preventing split-brain scenarios.

Exam trap

The trap here is that candidates confuse high-level AWS services like SNS or SQS with the actual low-level EC2 API calls required for STONITH fencing, mistakenly thinking notification or queuing services can directly perform instance termination.

How to eliminate wrong answers

Option A is wrong because Amazon SNS is a pub/sub notification service used for sending alerts or triggering workflows, but it cannot directly execute EC2 instance termination or stop actions required for STONITH fencing. Option B is wrong because Amazon SQS is a message queue service for decoupling application components; it lacks the ability to perform EC2 API calls to fence a node. Option C is wrong because Amazon RDS is a managed database service and is not used as a fencing device for SAP HANA clusters running on EC2; SAP HANA multi-AZ clusters rely on Pacemaker and custom fencing scripts, not RDS.

Practice this question →
312
MCQmedium

An SAP Basis administrator is deploying a new SAP S/4HANA system on AWS. The architecture uses a multi-AZ deployment for high availability: primary database in us-east-1a, standby in us-east-1b. The ASCS instance is in us-east-1a with a replicated enqueue server (ERS) in us-east-1b. For the application servers, two instances are in us-east-1a and two in us-east-1b. The administrator needs to ensure that the SAP system remains available if an entire Availability Zone fails. What is the MOST important configuration step to achieve this?

A.Configure Amazon Route53 with a failover routing policy for the SAP application URLs.
B.Place an Application Load Balancer in front of the database instances.
C.Enable HANA system replication and configure ASCS with enqueue replication across the two AZs.
D.Use larger instance types for all SAP instances to handle the load.
AnswerC

These are the standard SAP HA mechanisms for cross-AZ failover.

Why this answer

High availability across AZs requires both HANA system replication and enqueue replication. HANA system replication ensures the database can fail over to the standby in the other AZ. Enqueue replication (ERS) ensures that the lock table is replicated so that the ASCS can fail over without losing locks.

Option A is wrong because Route53 routing only handles DNS resolution, not automatic failover of SAP services. Option B is wrong because an Application Load Balancer does not provide database failover; it distributes traffic to application servers. Option D is wrong because larger instance sizes increase capacity but do not provide high availability in case of AZ failure.

Practice this question →
313
MCQeasy

A company wants to migrate its SAP HANA database to AWS and needs to minimize downtime. Which AWS service should be used for a near-zero downtime migration?

A.AWS Direct Connect
B.AWS Snowball
C.AWS Database Migration Service (DMS)
D.AWS Server Migration Service (SMS)
AnswerC

DMS supports continuous replication for minimal downtime.

Why this answer

AWS Database Migration Service (DMS) supports ongoing replication and can migrate SAP HANA to AWS with minimal downtime. Server Migration Service (SMS) is for server migrations, Snowball is for large data transfers offline, and Direct Connect is for network connectivity.

Practice this question →
314
MCQmedium

A company is designing a disaster recovery solution for a critical SAP HANA database running on AWS. The primary site is in us-east-1 and the recovery site must be in us-west-2. The database must have a Recovery Point Objective (RPO) of less than 15 minutes and a Recovery Time Objective (RTO) of less than 2 hours. Which approach meets these requirements with the least operational overhead?

A.Use AWS Backup to take snapshots of the HANA data volume every 5 minutes and copy them to us-west-2.
B.Use Amazon S3 Cross-Region Replication to copy HANA data files to us-west-2.
C.Set up AWS Database Migration Service (DMS) with ongoing replication from the primary to a secondary HANA database.
D.Configure SAP HANA System Replication (HSR) in active/standby mode between the primary and secondary regions.
AnswerD

HSR provides synchronous or near-synchronous replication with low RPO and fast failover, meeting requirements.

Why this answer

SAP HANA System Replication (HSR) in active/standby mode is the native, AWS-recommended disaster recovery solution for SAP HANA databases. It provides synchronous or asynchronous replication of the entire in-memory database to a standby instance in us-west-2, enabling an RPO of less than 15 minutes (asynchronous mode) and an RTO of under 2 hours through a controlled takeover. This approach minimizes operational overhead because it is built into SAP HANA, requires no external services, and automates log shipping and data synchronization.

Exam trap

The trap here is that candidates assume AWS-managed services like AWS Backup or DMS are always simpler, but for SAP HANA, the native HSR replication is actually the lowest-overhead option because it avoids the complexity of external tools and leverages HANA's own log shipping and takeover mechanisms.

How to eliminate wrong answers

Option A is wrong because AWS Backup snapshots of HANA data volumes taken every 5 minutes cannot guarantee an RPO of less than 15 minutes due to snapshot scheduling delays and the time required to copy snapshots across regions, plus restoring from snapshots would exceed the 2-hour RTO. Option B is wrong because Amazon S3 Cross-Region Replication copies only object-level data in S3, not live HANA database files or logs, and HANA cannot directly read/write its data files to S3 in a way that supports continuous replication with sub-15-minute RPO. Option C is wrong because AWS DMS with ongoing replication is designed for homogeneous or heterogeneous database migrations, not for SAP HANA native replication; it introduces significant overhead, latency, and complexity, and does not support the in-memory replication semantics required for HANA's ACID compliance.

Practice this question →
315
Multi-Selecteasy

Which TWO AWS services can be used to provide shared storage for SAP systems running on multiple EC2 instances?

Select 2 answers
A.EC2 Instance Store
B.Amazon S3
C.Amazon EBS
D.Amazon FSx for NetApp ONTAP
E.Amazon EFS
AnswersD, E

FSx for ONTAP provides shared NFS/SMB storage.

Why this answer

Amazon FSx for NetApp ONTAP provides a fully managed, shared file system with NFS and SMB support, offering features like deduplication and snapshots ideal for SAP clustered deployments. Amazon EFS also provides a shared NFSv4.1 file system accessible from multiple EC2 instances concurrently, making it suitable for SAP workloads that require shared storage. Both services enable shared storage for SAP systems running on multiple instances, while EC2 Instance Store is ephemeral, S3 is object storage, and EBS volumes are single-instance attached.

Exam trap

A common trap is assuming that only Amazon FSx for NetApp ONTAP can serve as shared storage for SAP, but Amazon EFS is also a valid option. Candidates may incorrectly choose S3 (object storage, not a file system) or EBS (block storage attached to a single instance) or EC2 Instance Store (ephemeral). The correct choices are both EFS and FSx for ONTAP because both provide network-attached, concurrent file access to multiple EC2 instances.

Practice this question →
316
MCQmedium

A company runs an SAP HANA database on an AWS EC2 instance. The database experiences high latency during peak hours. The operations team suspects network bottlenecks. Which AWS service should be used to analyze network traffic patterns and identify the source of latency?

A.VPC Flow Logs
B.AWS X-Ray
C.AWS Trusted Advisor
D.AWS CloudTrail
AnswerA

VPC Flow Logs capture IP traffic information for network interfaces, enabling analysis of traffic patterns and bottlenecks.

Why this answer

VPC Flow Logs capture IP traffic information for network interfaces, enabling analysis of traffic patterns and bottlenecks. AWS CloudTrail logs API calls, not network traffic. AWS Trusted Advisor provides best-practice checks but not detailed network analysis.

AWS X-Ray traces application requests, not network-level traffic.

Practice this question →
317
Multi-Selecteasy

An SAP system on AWS is experiencing performance issues. The operations team wants to set up monitoring to identify bottlenecks. Which AWS service should they use to collect and analyze SAP performance metrics?

Select 1 answer
A.AWS Config
B.AWS X-Ray
C.Amazon CloudWatch
D.AWS CloudTrail
E.AWS Trusted Advisor
AnswersC

CloudWatch can collect and store SAP performance metrics such as CPU, memory, and custom application metrics.

Why this answer

Amazon CloudWatch is correct because CloudWatch can collect custom metrics from SAP and EC2 instances, enabling performance monitoring. The other options are incorrect: AWS Config tracks resource compliance, AWS X-Ray traces microservices, AWS CloudTrail logs API calls for auditing, and AWS Trusted Advisor provides recommendations but not granular performance metrics.

Exam trap

Candidates may wrongly assume CloudTrail can monitor performance because it records API calls, but performance monitoring requires metric collection tools like CloudWatch.

Practice this question →
318
MCQmedium

An SAP administrator notices that the SAP HANA database on an r5.8xlarge instance is experiencing high swap usage. The instance has 256 GB of RAM. The SAP HANA memory usage is 200 GB. What is the most likely cause?

A.The instance memory is exhausted
B.HANA is using huge pages instead of swap
C.The swap space is too small for the HANA workload
D.Swap is disabled on the instance
AnswerC

HANA recommends swap equal to RAM; 256 GB swap is needed.

Why this answer

High swap usage on an r5.8xlarge instance with 256 GB RAM when SAP HANA is using 200 GB indicates that the system is actively paging memory to disk. SAP HANA is designed to run in-memory and should not normally use swap; however, if the swap space is too small to accommodate the overflow when memory pressure occurs, the system will exhibit high swap activity. The correct answer is C because insufficient swap space forces the kernel to thrash, causing high swap usage even when total memory is not fully exhausted.

Exam trap

The trap here is that candidates assume high swap usage always means memory is exhausted, but in AWS PAS-C01, the focus is on swap sizing best practices for SAP HANA, where even with free RAM, a small swap partition can cause excessive paging.

How to eliminate wrong answers

Option A is wrong because the instance has 256 GB of RAM and HANA is using 200 GB, leaving 56 GB free; memory is not exhausted. Option B is wrong because huge pages are a memory allocation mechanism that reduces TLB misses, not a substitute for swap; HANA uses huge pages to improve performance, but they do not cause or prevent swap usage. Option D is wrong because if swap were disabled, the system would not show high swap usage; it would instead trigger OOM (Out-Of-Memory) killer or fail allocations.

Practice this question →
319
MCQeasy

An SAP system on AWS is experiencing intermittent connectivity issues between the application server and the HANA database. The application team confirms the database is healthy. Which AWS service should be used to analyze network traffic between the two instances?

A.AWS Config
B.AWS CloudTrail
C.VPC Flow Logs
D.Amazon CloudWatch Logs
AnswerC

VPC Flow Logs capture IP traffic information for network interfaces, enabling analysis of network traffic between instances.

Why this answer

VPC Flow Logs capture IP traffic information for network interfaces, allowing analysis of network traffic between the application server and HANA database to identify dropped packets or blocked traffic. AWS Config records resource configurations (not network traffic), CloudTrail logs API calls (not network flows), and CloudWatch Logs aggregates application and system logs (not network-level traffic).

Practice this question →
320
MCQmedium

An SAP system running on AWS is experiencing performance issues. The operations team suspects that the Amazon EBS volumes attached to the SAP application server are not providing sufficient IOPS. Which AWS service should be used to monitor the IOPS performance of the EBS volumes?

A.AWS Config
B.AWS CloudTrail
C.Amazon Inspector
D.Amazon CloudWatch
AnswerD

Amazon CloudWatch provides detailed metrics for EBS volumes, including IOPS.

Why this answer

Amazon CloudWatch provides detailed monitoring metrics for Amazon EBS volumes, including `VolumeReadOps` and `VolumeWriteOps`, which directly measure IOPS performance. By using CloudWatch metrics, the operations team can track the actual IOPS delivered to the SAP application server and identify whether the volumes are throttled or under-provisioned.

Exam trap

The trap here is that candidates may confuse CloudTrail (auditing) or Config (compliance) with monitoring services, but only CloudWatch provides the granular, real-time performance metrics needed to diagnose EBS IOPS issues.

How to eliminate wrong answers

Option A is wrong because AWS Config is used for resource inventory, compliance auditing, and configuration change tracking, not for real-time performance monitoring of EBS IOPS. Option B is wrong because AWS CloudTrail records API calls and user activity for auditing and security analysis, not for monitoring volume-level performance metrics like IOPS. Option C is wrong because Amazon Inspector is a vulnerability management service that scans for software vulnerabilities and unintended network exposure, not for monitoring storage performance.

Practice this question →
321
MCQhard

An SAP administrator attaches this IAM policy to a user. Which action will the user be allowed to perform on an EC2 instance with the tag 'Environment: Production'?

A.Start the instance
B.Terminate the instance
C.Reboot the instance
D.Modify the instance type
AnswerC

Correct. The policy grants ec2:RebootInstances with a condition that the resource must have the tag 'Environment: Production'. Therefore, the user is allowed to reboot instances with that tag.

Why this answer

The IAM policy grants the ec2:RebootInstances action with a condition that the resource must have the tag 'Environment: Production'. Therefore, the user is allowed to reboot any EC2 instance that carries that tag. The other actions (start, terminate, modify instance type) are not explicitly allowed by the policy, so they are denied by default.

Exam trap

The trap here is that candidates assume the policy implicitly allows all actions on tagged instances, but IAM requires each action to be explicitly listed; the presence of a condition does not expand the allowed actions beyond those specified.

How to eliminate wrong answers

Option A is wrong because the policy does not include the ec2:StartInstances action; without an explicit Allow, the request is denied by default. Option B is wrong because the policy does not include ec2:TerminateInstances, and termination requires explicit permission. Option D is wrong because modifying the instance type requires ec2:ModifyInstanceAttribute, which is not listed in the policy.

Practice this question →
322
MCQhard

A company runs a stateful web application on EC2 instances in an Auto Scaling group with a dynamic scaling policy based on CPU utilization. The application maintains session state in memory on each instance. Users report that they are frequently logged out and lose their session data during scaling events. What should the company do to resolve this issue?

A.Change the scaling policy to a simple scaling policy instead of dynamic scaling
B.Enable sticky sessions (session affinity) on the Application Load Balancer
C.Modify the application to store session state in an Amazon ElastiCache cluster
D.Increase the cooldown period for the Auto Scaling group
AnswerC

ElastiCache provides a centralized session store that persists across instance terminations, ensuring session continuity during scaling events.

Why this answer

Storing session state externally in ElastiCache decouples session data from individual EC2 instances. This ensures that when instances are terminated or added during scaling events, users retain their session state regardless of which instance serves their request. ElastiCache provides a low-latency, in-memory cache that is ideal for session persistence in stateful web applications.

Exam trap

The trap here is that candidates often confuse sticky sessions (session affinity) with true session persistence, not realizing that sticky sessions only route traffic to the same instance but do not protect against instance termination during scaling events.

How to eliminate wrong answers

Option A is wrong because changing to a simple scaling policy does not address the root cause of session loss; simple scaling still terminates instances and does not preserve in-memory session state. Option B is wrong because sticky sessions (session affinity) on the Application Load Balancer only route a user to the same instance, but if that instance is terminated during scale-in, the session is lost and the user cannot be reconnected to the same instance. Option D is wrong because increasing the cooldown period only delays the next scaling activity but does not prevent session loss when instances are eventually terminated.

Practice this question →
323
Multi-Selecthard

Which TWO options are valid strategies for backing up an SAP HANA database running on Amazon EC2? (Choose two.)

Select 2 answers
A.Use Amazon RDS automated backups for SAP HANA.
B.Use SAP HANA Backint to back up to Amazon S3.
C.Use AWS Backup to create EBS snapshots of the HANA data volumes.
D.Use Amazon S3 Lifecycle policies to transition HANA backups to Glacier.
E.Use EC2 instance store to copy HANA data files.
AnswersB, C

Backint is the native SAP HANA backup integration.

Why this answer

SAP HANA Backint is a certified interface for integrating SAP HANA backups directly with Amazon S3, allowing native backup and restore operations without additional infrastructure. Option C is correct because AWS Backup can create crash-consistent EBS snapshots of HANA data volumes, which can be used for recovery if the database is in backup mode or if you use pre- and post-scripts to ensure consistency.

Exam trap

The trap here is that candidates confuse Amazon RDS with SAP HANA on EC2, or assume S3 Lifecycle policies can trigger backups, when in fact they only manage existing objects, and they overlook that instance store is ephemeral and unsuitable for persistent data.

Practice this question →
324
Multi-Selectmedium

An SAP system administrator is planning to migrate an on-premises SAP ERP system to AWS. The system uses Oracle Database. Which THREE AWS services can be used to migrate the Oracle database to Amazon RDS for Oracle with minimal downtime? (Choose 3)

Select 2 answers
A.Oracle Data Guard
B.AWS Snowball Edge
C.AWS Schema Conversion Tool (SCT)
D.AWS Database Migration Service (DMS)
E.AWS CloudEndure Migration
AnswersC, D

AWS Schema Conversion Tool (SCT) converts the Oracle schema to Amazon RDS for Oracle, ensuring compatibility and can be used in conjunction with DMS for minimal downtime.

Why this answer

Options C and D are the correct AWS services for migrating an Oracle database to Amazon RDS for Oracle with minimal downtime. Option A (Oracle Data Guard) is not an AWS service; it is an Oracle database feature and does not meet the requirement of being an AWS service. Option B (AWS Snowball Edge) is for offline data transfer, not live migration.

Option E (AWS CloudEndure Migration) is for server migration, not database migration. AWS Schema Conversion Tool (SCT) ensures schema compatibility, and AWS Database Migration Service (DMS) performs continuous replication to minimize downtime.

Practice this question →
325
MCQmedium

A company is migrating its SAP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS/ERS) instance. The solution must support automatic failover in case of an instance failure. Which AWS service should be used to manage the floating IP address required for the SAP high availability setup?

A.Amazon Route 53
B.Elastic IP address
C.Amazon CloudFront
D.AWS Global Accelerator
AnswerA

Route 53 with health checks and failover routing can manage floating IP via DNS.

Why this answer

Amazon Route 53 can be configured with health checks and DNS failover to manage the floating IP address required for SAP Central Services (ASCS/ERS) high availability. When the primary ASCS instance fails, Route 53 automatically updates DNS resolution to point to the secondary instance's IP address, enabling automatic failover without requiring a static floating IP.

Exam trap

The trap here is that candidates often assume Elastic IP addresses are the cloud equivalent of a floating IP, but Elastic IPs cannot be automatically reassigned based on health checks and require manual or scripted reattachment, making Route 53 DNS failover the correct AWS-native solution for SAP high availability.

How to eliminate wrong answers

Option B (Elastic IP address) is wrong because Elastic IPs are static public IPv4 addresses that cannot be automatically reassigned between instances during failover without manual intervention or custom scripting, and they do not support health-check-based automatic failover natively. Option C (Amazon CloudFront) is wrong because CloudFront is a content delivery network (CDN) service designed for caching and distributing static/dynamic content at edge locations, not for managing floating IPs or SAP high availability failover. Option D (AWS Global Accelerator) is wrong because it provides static anycast IP addresses for traffic routing to optimal endpoints using the AWS global network, but it does not manage floating IPs for SAP ASCS/ERS failover and lacks the DNS-level health-check-based failover mechanism required for this use case.

Practice this question →
326
MCQmedium

An SAP system is running on EC2 and uses a Classic Load Balancer to distribute traffic to web dispatchers. The operations team notices that the load balancer is not distributing traffic evenly. What is the most likely cause?

A.Cross-zone load balancing is disabled.
B.Connection draining is not enabled.
C.The load balancer uses a flow hash algorithm that may not evenly distribute requests with many long-lived connections.
D.The health check interval is set too high.
AnswerC

Classic Load Balancer's flow hash can lead to uneven distribution for persistent connections.

Why this answer

Classic Load Balancers use a flow hash algorithm based on the source IP, destination IP, source port, destination port, and protocol to route requests. This algorithm can cause uneven distribution when many long-lived connections (such as SAP GUI or HTTP persistent connections) are present, because the same flow hash consistently maps to the same backend instance, leading to imbalance. This is the most likely cause given the scenario of an SAP system with web dispatchers.

Exam trap

The trap here is that candidates often assume uneven traffic distribution is always due to misconfigured health checks or cross-zone settings, but the real issue is the flow hash algorithm's behavior with long-lived connections, which is a specific characteristic of Classic Load Balancers.

How to eliminate wrong answers

Option A is wrong because cross-zone load balancing affects distribution across Availability Zones, not the evenness of traffic among instances within the same zone; disabling it would cause traffic to only go to instances in the same zone as the client, but the question describes uneven distribution generally, not a zone-level issue. Option B is wrong because connection draining is a feature that allows in-flight requests to complete before an instance is deregistered, and it does not influence how traffic is distributed during normal operation. Option D is wrong because a high health check interval would cause slower detection of unhealthy instances, but it would not cause uneven distribution of traffic among healthy instances; the load balancer would still route traffic to all healthy instances based on the flow hash algorithm.

Practice this question →
327
MCQhard

Refer to the exhibit. An SAP application load balancer (ALB) is configured with the CloudFormation snippet. The ALB is not distributing traffic to the EC2 instances. What is the most likely cause?

A.The security group does not allow inbound traffic
B.The target type is instance but the instances are not registered
C.The target group is not associated with the load balancer
D.The load balancer scheme is internet-facing but instances are in private subnets
AnswerC

A listener is needed to associate the target group; missing listener prevents traffic distribution.

Why this answer

The snippet does not include a listener for the ALB. Without a listener, the ALB cannot accept traffic. The target group is defined but not associated with the ALB via a listener rule.

The scheme is internet-facing, which is correct. The security group may allow traffic, but no listener exists.

Practice this question →
328
MCQhard

An SAP system on AWS is experiencing slow performance for batch jobs. The jobs are I/O intensive and write large amounts of data to EBS volumes. CloudWatch metrics show that the EBS volumes are reaching their throughput limits. Which action will MOST effectively improve performance?

A.Add read replicas to offload read traffic.
B.Increase the size of the EBS volumes to improve baseline throughput.
C.Use Multi-AZ for the database.
D.Move the data to instance store volumes.
AnswerB

Larger gp2/gp3 volumes have higher throughput.

Why this answer

Increasing the size of EBS volumes directly improves their baseline throughput performance because EBS throughput scales with volume size. For gp2 volumes, baseline throughput is 128 MiB/s for volumes up to 170 GiB, then increases by 0.5 MiB/s per GiB beyond that; for gp3, baseline throughput is 125 MiB/s regardless of size, but you can provision additional throughput. Since the batch jobs are I/O-intensive and hitting throughput limits, larger volumes provide higher throughput without requiring architectural changes.

Exam trap

The trap here is that candidates may confuse throughput limits with IOPS limits or assume that adding read replicas (Option A) or Multi-AZ (Option C) can improve write performance, when in fact they only address read scaling or availability, not the underlying EBS throughput bottleneck.

How to eliminate wrong answers

Option A is wrong because read replicas offload read traffic from the primary database, but the issue is EBS throughput limits for I/O-intensive batch jobs writing large amounts of data, not read-heavy database queries. Option C is wrong because Multi-AZ provides high availability and failover support, not increased throughput or performance for EBS volumes. Option D is wrong because instance store volumes provide temporary, block-level storage that is physically attached to the host, but they are ephemeral (data is lost on instance stop/termination) and not suitable for persistent SAP data; moreover, they do not address the throughput limit issue directly and may introduce data durability risks.

Practice this question →
329
MCQmedium

An SAP system is deployed on AWS using an Auto Scaling group of EC2 instances for the SAP application server layer. The application servers are stateless. The company wants to ensure that when a new instance is launched, it automatically registers with the SAP Web Dispatcher. The Web Dispatcher is configured with an Application Load Balancer (ALB). What is the best way to achieve automatic registration?

A.Use Amazon CloudWatch Events to trigger an AWS Lambda function that registers the instance.
B.Use AWS Systems Manager State Manager to run a registration script on the instance.
C.Configure the EC2 instance's user data to run a script that registers with the Web Dispatcher.
D.Attach the Auto Scaling group to an ALB target group.
AnswerD

Auto Scaling automatically registers instances with the target group.

Why this answer

Attaching the Auto Scaling group directly to an ALB target group ensures that any instance launched by the Auto Scaling group is automatically registered with the ALB. Since the SAP Web Dispatcher is configured behind the ALB, this automatically registers the instance with the Web Dispatcher. Option C is incorrect because user data scripts can be used for initial configuration, but relying on them for registration is less reliable and does not integrate with the ALB's health checks.

Option A is incorrect because using CloudWatch Events and Lambda adds unnecessary complexity and latency. Option B is incorrect because AWS Systems Manager State Manager is designed for maintaining consistent state, not for immediate registration upon launch.

Practice this question →
330
Multi-Selecthard

Which THREE considerations are important when designing an SAP HANA multi-node (scale-out) deployment on AWS? (Choose three.)

Select 3 answers
A.Use a cluster placement group for low-latency network.
B.Use EBS Multi-Attach to share volumes between nodes.
C.The number of nodes is limited by the instance type's network and EBS performance.
D.Use a single large EC2 instance with many vCPUs.
E.Each node should have its own EBS volume for data.
AnswersA, C, E

Placement groups ensure low latency between nodes.

Why this answer

A cluster placement group provides low-latency network connectivity between EC2 instances by placing them in a single Availability Zone with non-blocking, fully bisectional bandwidth. For SAP HANA multi-node (scale-out) deployments, this low-latency, high-throughput network is essential for the internal communication between nodes, as HANA relies on fast inter-node data exchange for distributed queries and replication.

Exam trap

The trap here is that candidates may confuse EBS Multi-Attach with shared storage solutions like Amazon EFS or FSx, or mistakenly think that a single large instance can replace a multi-node deployment, but SAP HANA scale-out explicitly requires multiple instances with dedicated storage and low-latency networking.

Practice this question →
331
Multi-Selecthard

Which THREE services can be used together to implement a disaster recovery solution for SAP S/4HANA on AWS with a recovery time objective (RTO) of less than 1 hour and a recovery point objective (RPO) of less than 15 minutes?

Select 3 answers
A.SAP HANA System Replication across regions.
B.AWS CloudEndure Disaster Recovery.
C.AWS Database Migration Service (DMS) for ongoing replication.
D.Amazon S3 Glacier for long-term backups.
E.Amazon S3 for storing HANA log backups.
AnswersA, B, E

HSR provides low RPO.

Why this answer

SAP HANA System Replication (HSR) across AWS regions provides synchronous or near-synchronous replication of HANA databases, enabling an RPO of less than 15 minutes and an RTO under 1 hour when combined with automated failover. This is the primary mechanism for achieving low RPO/RTO in SAP S/4HANA disaster recovery on AWS.

Exam trap

The trap here is that candidates often confuse AWS DMS with native SAP HANA replication, but DMS does not support SAP HANA as a source for ongoing replication with low RPO, and Glacier's retrieval latency makes it unsuitable for sub-1-hour RTO.

Practice this question →
332
MCQhard

Refer to the exhibit. A CloudFormation stack creation failed with the message 'WaitCondition received failed signal'. What is the most likely cause?

A.The security group rules are blocking the cfn-signal communication
B.The stack creation timed out after 1 hour
C.The script executed via cfn-signal failed to complete successfully
D.The EC2 instance type is not supported in the region
AnswerC

The WaitCondition expects a success signal; failure indicates script error.

Why this answer

The `WaitCondition` resource in CloudFormation is designed to pause stack creation until it receives a success signal from a resource, typically an EC2 instance running a cfn-init script. The 'WaitCondition received failed signal' error indicates that the signal sent was explicitly a failure signal (e.g., via `cfn-signal --exit-code 1`), not that the signal was lost or blocked. This most commonly occurs when the script executed by cfn-init or a user-data script encounters an error and exits with a non-zero exit code, causing cfn-signal to send a failure signal to the WaitCondition.

Exam trap

The most common pitfall is confusing a timeout (no signal received) with a failed signal (signal with non-zero exit code). Candidates often assume network issues like security groups blocking cfn-signal, but the error explicitly states a failed signal was received, indicating a script error on the instance.

How to eliminate wrong answers

Option A is wrong because if security group rules were blocking cfn-signal communication, the WaitCondition would likely time out (never receive a signal) rather than receive a failed signal; the error message explicitly states a failed signal was received, not that it was missing. Option B is wrong because a stack creation timeout would produce a different error message (e.g., 'WaitCondition timed out' or 'Stack creation failed due to timeout'), not a 'received failed signal' error. Option D is wrong because an unsupported EC2 instance type would cause a stack creation failure with an error like 'Instance type not supported' during resource creation, not a WaitCondition signal failure.

Practice this question →
333
Matchingmedium

Match the AWS service to its primary use in an SAP environment.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Shared file storage for SAP NetWeaver

High-performance NFS for SAP HANA

Centralized backup management for SAP workloads

DNS resolution for SAP systems

Why these pairings

In SAP on AWS, Amazon EC2 provides compute, Amazon EBS provides block storage, Amazon S3 is used for backup/archive, and Amazon FSx for Windows File Server provides shared file storage. Distractors swap these roles.

Practice this question →
334
MCQhard

An SAP HANA database is running on an EC2 instance with 16 EBS volumes in a striped RAID 0 configuration. The system administrator notices that one of the volumes is degraded in the RAID array. How can the administrator recover the array with minimal downtime?

A.Detach the degraded volume, create a new volume of the same size and type, attach it to the instance, and add it to the RAID array.
B.Detach the degraded volume and attach a new volume with the same device name.
C.Take a snapshot of the degraded volume and restore it to a new volume.
D.Run a filesystem repair on the degraded volume while it is still attached.
AnswerA

This is the correct procedure. It allows minimal downtime as the array can be rebuilt after adding the new volume.

Why this answer

It outlines the proper procedure to replace a degraded volume in a RAID 0 array with minimal downtime: detach the faulty volume, create a new EBS volume of the same size and type, attach it to the instance, and add it to the RAID array. This approach avoids disrupting the remaining volumes and allows the array to be rebuilt quickly. Option B is incomplete because simply attaching a new volume with the same device name does not automatically incorporate it into the RAID array.

Option C is not optimal as creating a snapshot and restoring it introduces unnecessary steps and longer downtime. Option D is ineffective because filesystem repair cannot fix a physical volume failure.

Practice this question →
335
MCQmedium

Refer to the exhibit. An SAP administrator checks the configuration of an EBS volume. The volume is attached to an SAP HANA instance. What is the potential performance bottleneck?

A.The IOPS and throughput are too low for SAP HANA
B.The volume is attached to an instance in a different Availability Zone
C.The DeleteOnTermination flag is set to false
D.The volume is not encrypted
AnswerA

SAP HANA typically requires higher IOPS and throughput than gp3 baseline.

Why this answer

The volume type is gp3 with 3000 IOPS and 125 MB/s throughput. SAP HANA requires high IOPS and throughput. With only 3000 IOPS and 125 MB/s, this volume may be a bottleneck for production HANA workloads.

The DeleteOnTermination setting is not a performance issue. The size and snapshot are not immediate concerns.

Practice this question →
336
MCQmedium

A company is deploying SAP S/4HANA on AWS and needs to ensure that the system can be recovered within 4 hours in case of a disaster in the primary region. The secondary region is in a different AWS region. Which approach should be used to meet the recovery time objective (RTO)?

A.Configure SAP HANA system replication to a secondary region with a pre-provisioned standby instance
B.Use cross-region EBS snapshots and restore them in the secondary region
C.Back up SAP HANA to Amazon S3 and restore in the secondary region
D.Set up a pilot light environment using application-level replication
AnswerA

HANA system replication with pre-provisioned standby allows fast failover, potentially within minutes, meeting the RTO.

Why this answer

Replicating SAP HANA to a standby instance in another region using HANA system replication with pre-provisioned infrastructure allows fast failover. Cross-region EBS snapshots take time to restore. Backup and restore from S3 may be slower.

Pilot light with application-level replication is not sufficient for HANA.

Practice this question →
337
Multi-Selecteasy

Which TWO AWS services can be used to automate the backup of SAP HANA databases? (Choose two.)

Select 2 answers
A.AWS Lambda
B.AWS Storage Gateway
C.Amazon EBS Snapshots
D.Amazon S3
E.AWS Backup
AnswersC, E

EBS Snapshots can be automated using lifecycle policies.

Why this answer

Amazon EBS Snapshots are correct because they provide point-in-time, incremental backups of the underlying block storage volumes that host SAP HANA data and log files. AWS Backup is correct because it offers a fully managed, policy-driven backup service that can orchestrate EBS Snapshots and other resources, supporting SAP HANA backup automation with centralized scheduling and retention management.

Exam trap

The trap here is that candidates may confuse Amazon S3 as a backup automation service when it is merely a storage target, or think AWS Lambda alone qualifies as a backup automation solution, but the question specifically asks for services that 'automate' the backup process, which AWS Backup and EBS Snapshots directly provide.

Practice this question →
338
MCQmedium

Refer to the exhibit. An SAP administrator is reviewing the EBS volume configuration for a SAP HANA /hana/data volume. The volume is 500 GB gp2 with DeleteOnTermination set to false. The instance is in us-east-1a. Which action should the administrator take to improve performance for SAP HANA?

A.Take a snapshot and create a new volume in us-east-1b.
B.Enable encryption on the volume.
C.Modify the volume to gp3 and provision 5000 IOPS.
D.Set DeleteOnTermination to true.
AnswerC

gp3 allows provisioning higher IOPS independently of size.

Why this answer

SAP HANA requires a minimum of 5000 IOPS for /hana/data. The gp2 volume provides 1500 IOPS (3 IOPS per GB). The administrator should either increase the volume size to at least 1667 GB to get 5000 IOPS, or change to gp3 with provisioned IOPS of 5000 or more.

The best practice for SAP HANA is to use multiple volumes in RAID 0, but the question asks about improving performance for this volume. Changing to gp3 with higher IOPS is a direct improvement.

Practice this question →
339
Multi-Selecthard

Which TWO AWS services can be used to monitor SAP system availability and send notifications when a system goes down? (Choose two.)

Select 2 answers
A.AWS Trusted Advisor
B.Amazon CloudWatch Events
C.Amazon S3 event notifications
D.Amazon CloudWatch Alarms
E.AWS Config
AnswersB, D

Can trigger notifications based on events.

Why this answer

Amazon CloudWatch Events (now part of Amazon EventBridge) can monitor SAP system health by capturing state changes or custom events emitted by SAP via the SAP Cloud Platform Integration or AWS Lambda, and route them to targets like SNS or Lambda for notification. Amazon CloudWatch Alarms can monitor SAP-specific metrics (e.g., from SAP Host Agent or custom metrics published via the CloudWatch agent) and trigger actions such as sending an SNS notification when a threshold (e.g., system down) is breached. Together, they provide event-driven and metric-based monitoring and alerting for SAP availability.

Exam trap

The trap here is that candidates often confuse AWS Config (which tracks resource configuration changes) with a monitoring and alerting service, or they incorrectly assume S3 event notifications can be used for application-level health checks, when in fact only CloudWatch Events and CloudWatch Alarms provide the necessary event-driven and metric-based monitoring for SAP availability.

Practice this question →
340
MCQhard

An SAP customer is using AWS Direct Connect to connect their on-premises network to AWS. They have multiple SAP systems in different VPCs. The network team wants to centralize connectivity and simplify routing. Which AWS service should they use to connect all VPCs to the on-premises network?

A.Use a VPN connection from each VPC to the on-premises network
B.Use VPC Peering between each VPC and the Direct Connect VIF
C.Use AWS Transit Gateway to connect all VPCs and the Direct Connect gateway
D.Use AWS PrivateLink to connect services across VPCs
AnswerC

Transit Gateway provides a hub for multiple VPCs and Direct Connect.

Why this answer

AWS Transit Gateway acts as a central hub that interconnects VPCs and on-premises networks via a Direct Connect Gateway. This allows the customer to attach multiple VPCs to a single Transit Gateway and connect that Transit Gateway to the Direct Connect Gateway, simplifying routing and eliminating the need for multiple Direct Connect Virtual Interfaces (VIFs) or complex peering arrangements.

Exam trap

The trap here is that candidates often confuse VPC Peering with transitive routing, mistakenly thinking that peering multiple VPCs to a Direct Connect VIF can centralize connectivity, but VPC Peering does not support transitive routing and cannot connect to a Direct Connect VIF directly.

How to eliminate wrong answers

Option A is wrong because using a VPN connection from each VPC to the on-premises network introduces multiple VPN tunnels, adds latency, and does not centralize connectivity or simplify routing; it also bypasses the existing Direct Connect investment. Option B is wrong because VPC Peering is a one-to-one connection between two VPCs and cannot be used to connect a VPC directly to a Direct Connect VIF; VPC Peering does not support transitive routing, so it cannot centralize connectivity to on-premises. Option D is wrong because AWS PrivateLink is designed to expose services privately across VPCs or on-premises via Network Load Balancers and ENIs, not to route traffic between multiple VPCs and an on-premises network; it does not provide a hub-and-spoke routing architecture.

Practice this question →
341
Multi-Selecteasy

A company is migrating an SAP ERP system to AWS. The migration must be completed within a limited time window. Which THREE services can be used to accelerate the migration? (Choose three.)

Select 3 answers
A.AWS CloudEndure Migration
B.AWS Database Migration Service (DMS)
C.AWS Server Migration Service (SMS)
D.AWS Trusted Advisor
E.AWS CloudFormation
AnswersA, B, C

CloudEndure provides continuous replication for servers.

Why this answer

Options A, B, and C are correct: AWS SMS (now MGN) can automate server replication, AWS DMS can migrate databases, and AWS CloudEndure (now part of MGN) can replicate servers. Option D is incorrect because Trusted Advisor is for optimization, not migration. Option E is incorrect because CloudFormation is for infrastructure provisioning, not data migration.

Practice this question →
342
Multi-Selecteasy

Which TWO of the following are valid methods for monitoring SAP system performance on AWS? (Choose two.)

Select 2 answers
A.Enable AWS CloudTrail to capture system performance logs.
B.Configure SAP Solution Manager to send monitoring data to Amazon CloudWatch via the SAP Cloud Platform.
C.Use AWS Trusted Advisor to monitor real-time CPU utilization.
D.Use Amazon CloudWatch custom metrics to monitor SAP application metrics.
E.Use VPC Flow Logs to monitor database query performance.
AnswersB, D

Solution Manager integration provides comprehensive monitoring.

Why this answer

SAP Solution Manager can be configured to forward monitoring data to Amazon CloudWatch via the SAP Cloud Platform (now SAP BTP) using the Cloud Management Gateway or direct integration. This allows SAP-specific metrics like system load, work process usage, and response times to be visualized and alerted on in CloudWatch, enabling unified monitoring alongside AWS infrastructure metrics.

Exam trap

The trap here is that candidates confuse AWS CloudTrail (audit logging) with performance monitoring, or assume VPC Flow Logs can measure database query performance when they only capture network-level metadata.

Practice this question →
343
Multi-Selecthard

A company runs SAP S/4HANA on AWS using a multi-ABAP application server setup with a central services instance (ASCS) and enqueue replication. After a recent OS patching, the secondary application server fails to start, with errors indicating it cannot connect to the enqueue replication server (ERS). The ERS process is running on the ASCS instance. The network team confirms that security groups and NACLs are properly configured. Which THREE steps should be taken to resolve this issue? (Choose three.)

Select 3 answers
A.Change the secondary application server instance type to a larger size.
B.Check the SAP instance profile for the enqueue replication parameters (e.g., rdisp/enq_repl_server).
C.Confirm that the ERS process (enre) is running on the ASCS instance and is listening on the correct port.
D.Verify that the DNS or /etc/hosts file on the secondary application server resolves the ERS hostname correctly.
E.Update the SAP kernel on the secondary application server to the latest version.
AnswersB, C, D

Profile parameters define ERS connection details.

Why this answer

The SAP instance profile on the secondary application server may have lost or misconfigured the enqueue replication parameters (e.g., rdisp/enq_repl_server) during the OS patching, which would prevent it from connecting to the ERS. Option C is correct because the ERS process (enre) must be running on the ASCS instance and listening on the correct port; if it stopped or changed ports after patching, connectivity fails. Option D is correct because the secondary application server needs to resolve the ERS hostname correctly via DNS or /etc/hosts; patching may have altered hostname resolution.

Option A is incorrect because changing the instance type does not address connectivity to the ERS; the issue is network or configuration, not sizing. Option E is incorrect because the SAP kernel version is unlikely to change due to OS patching, and updating the kernel is not a standard troubleshooting step for this specific ERS connection issue.

Practice this question →
344
MCQeasy

A company is planning to run SAP Business Suite on AWS. They need to ensure that the SAP systems are backed up according to best practices. Which backup strategy is recommended for SAP HANA databases on AWS?

A.Use AWS Backup to automatically back up the HANA database
B.Schedule HANA backups to Amazon S3 using the HANA backup tool
C.Perform daily full EBS snapshots and store them in Glacier
D.Use only EBS snapshots for all SAP HANA volumes
AnswerB

SAP HANA backups to S3 are recommended for durability and cost-effectiveness, using Backint or similar tools.

Why this answer

SAP HANA backups should be stored on Amazon S3 for durability and cost-effectiveness. EBS snapshots are not sufficient for HANA because they are crash-consistent but not application-consistent for HANA. Combining EBS snapshots with HANA backups ensures both crash consistency and recoverability.

Daily full backups are not required; incremental/differential backups are more efficient.

Practice this question →
345
Multi-Selecteasy

Which TWO of the following are benefits of using SAP HANA System Replication (HSR) on AWS? (Choose 2.)

Select 2 answers
A.Supports replication across AWS Regions for disaster recovery
B.Provides near real-time data replication for high availability
C.Improves query performance by distributing workloads
D.Automatically scales storage based on database growth
E.Automatically load balances read queries between primary and secondary
AnswersA, B

HSR can be configured across regions.

Why this answer

SAP HANA System Replication (HSR) supports asynchronous replication across AWS Regions, enabling disaster recovery by maintaining a secondary system in a different geographic region. This allows failover to the secondary site if the primary region becomes unavailable, meeting RPO and RTO requirements for cross-region DR scenarios.

Exam trap

The trap here is that candidates confuse HSR's ability to support read-enabled secondaries (which is an optional configuration, not automatic load balancing) with the automatic read query distribution seen in other database technologies like Amazon Aurora, leading them to incorrectly select Option E.

Practice this question →
346
Multi-Selecthard

Which THREE of the following are requirements for running SAP HANA in an AWS multi-zone HA cluster? (Choose three.)

Select 3 answers
A.At least two EC2 instances in different Availability Zones per node type.
B.Separate EBS volumes for /hana/data and /hana/log directories.
C.Use of an Elastic Load Balancer to distribute traffic to the HANA nodes.
D.All nodes must use instance store volumes for the HANA data.
E.The cluster nodes must be within the same AWS region.
AnswersA, B, E

Multi-AZ provides high availability.

Why this answer

SAP HANA in a multi-zone HA cluster requires at least two EC2 instances per node type (e.g., worker, standby) deployed in different Availability Zones to ensure high availability. This architecture allows automatic failover between zones, maintaining SAP HANA system replication and cluster quorum in the event of an AZ failure.

Exam trap

The trap here is that candidates often assume an Elastic Load Balancer is needed for distributing traffic to HANA nodes, but SAP HANA HA uses system replication and cluster-managed virtual IPs, not load balancers, for failover.

Practice this question →
347
MCQmedium

A company runs a critical SAP HANA database on an m5.24xlarge EC2 instance. The database has high transaction volume and requires low latency storage. The current setup uses EBS gp2 volumes with 10,000 IOPS. During peak hours, the database performance degrades due to IOPS burst balance depletion. Which storage solution should the company use to maintain consistent performance?

A.Migrate to EBS gp3 volumes with provisioned IOPS of 10,000.
B.Use EC2 Instance Store (NVMe SSD) for the database data and logs.
C.Provision EBS io2 Block Express volumes with 10,000 provisioned IOPS.
D.Move the database to Amazon EFS with provisioned throughput.
AnswerC

io2 Block Express provides consistent IOPS and is designed for high-performance workloads.

Why this answer

EBS io2 Block Express volumes provide consistent, low-latency performance with provisioned IOPS, making them the recommended choice for SAP HANA workloads. Option A is wrong because although gp3 volumes can provision 10,000 IOPS and would eliminate burst balance depletion, io2 Block Express is specifically designed for high-performance databases like SAP HANA, offering higher durability and consistent low-latency performance. Option B is wrong because Instance Store is ephemeral and data is lost if the instance stops.

Option D is wrong because EFS is a file system, not suitable for block-level database storage.

Practice this question →
348
Multi-Selectmedium

An SAP administrator is configuring high availability for SAP HANA on AWS. Which TWO components are essential for a Pacemaker-based cluster?

Select 2 answers
A.A quorum device (e.g., STONITH)
B.An Application Load Balancer
C.Amazon Route 53 health checks
D.A virtual IP address
E.Amazon CloudWatch alarms
AnswersA, D

STONITH ensures node fencing to prevent split-brain.

Why this answer

A quorum device (e.g., STONITH) is essential for a Pacemaker-based cluster because it provides fencing, which ensures that a failed or partitioned node cannot continue to access shared resources or cause data corruption. STONITH (Shoot The Other Node In The Head) acts as the cluster's final arbiter, forcibly isolating or powering off an unresponsive node to maintain data integrity and prevent split-brain scenarios.

Exam trap

The trap here is that candidates often confuse high-availability components like load balancers or DNS health checks with the cluster-internal mechanisms (fencing and VIP) that Pacemaker specifically requires to maintain data consistency and provide a single endpoint for SAP HANA clients.

Practice this question →
349
Multi-Selectmedium

A company is deploying SAP NetWeaver on AWS and needs to set up high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). The company uses a shared file system for the transport directory. Which components are essential for the HA setup? (Choose TWO.)

Select 2 answers
A.Amazon S3 as the transport directory.
B.An internal Application Load Balancer (ALB) to distribute traffic to the ASCS instance.
C.Both ASCS and ERS instances must run on the same EC2 instance.
D.Amazon RDS Multi-AZ for the SAP database.
E.The ASCS and ERS instances must be located in different Availability Zones.
AnswersB, E

ALB provides a virtual IP for ASCS.

Why this answer

An internal Application Load Balancer (ALB) is essential because it provides a virtual IP address and health checks for the SAP ASCS instance. In a multi-AZ HA setup, the ALB routes client traffic to the active ASCS instance and automatically fails over to the standby instance if the primary fails, ensuring continuous access to SAP Central Services.

Exam trap

The trap here is that candidates often confuse the HA requirements for SAP Central Services with those for the database layer, leading them to select Amazon RDS Multi-AZ (Option D) instead of focusing on the ASCS/ERS-specific components like the ALB and multi-AZ placement.

Practice this question →
350
MCQmedium

A company is migrating its SAP ERP system from on-premises to AWS. The migration involves a heterogeneous database migration from Oracle to SAP HANA. Which AWS service should be used to perform the database migration with minimal downtime?

A.AWS Schema Conversion Tool (AWS SCT)
B.AWS Server Migration Service (SMS)
C.AWS Database Migration Service (AWS DMS) with a heterogeneous migration using the SAP HANA target endpoint
D.AWS Database Migration Service (AWS DMS) with a homogeneous migration
AnswerC

DMS supports heterogeneous migrations using the SAP HANA endpoint, allowing schema and data conversion with minimal downtime.

Why this answer

AWS DMS supports heterogeneous migrations, including from Oracle to SAP HANA, by using built-in conversion capabilities or integrating with AWS SCT for schema transformation. This allows continuous data replication with minimal downtime, as DMS can perform ongoing changes from the source during the migration window.

Exam trap

The trap here is that candidates confuse AWS SCT (schema conversion) with AWS DMS (data migration), or assume homogeneous migration is sufficient, not realizing that Oracle to SAP HANA is a heterogeneous migration requiring DMS with a specific SAP HANA target endpoint.

How to eliminate wrong answers

Option A is wrong because AWS SCT is a schema conversion tool, not a data migration service; it generates schema and code conversion scripts but does not perform the actual data replication or handle ongoing changes to minimize downtime. Option B is wrong because AWS Server Migration Service (SMS) is designed for migrating entire virtual machines (VMware, Hyper-V) to AWS, not for heterogeneous database migrations like Oracle to SAP HANA. Option D is wrong because a homogeneous migration (same database engine) does not apply here; the migration is from Oracle to SAP HANA, which are different database engines, requiring heterogeneous migration capabilities.

Practice this question →
351
Multi-Selectmedium

An SAP customer is planning to use AWS for their SAP HANA environment. They need to ensure that the chosen EC2 instance types are certified by SAP for HANA. Which THREE sources can they use to verify SAP HANA certification for AWS instance types? (Select THREE.)

Select 3 answers
A.AWS documentation on SAP HANA certified instances
B.SAP Cloud Appliance Library (CAL)
C.AWS Support Center
D.AWS Pricing Calculator
E.SAP HANA Hardware Directory (SAP website)
AnswersA, B, E

AWS publishes a list of SAP HANA certified instance types.

Why this answer

Options A, B, and E are correct. AWS documentation on SAP HANA certified instances provides a list of certified instance types. The SAP Cloud Appliance Library offers pre-configured HANA environments that are certified.

The SAP HANA Hardware Directory is the official SAP source for certified hardware, including AWS instances. Option C (AWS Support Center) can provide guidance but is not a direct source for certification lists. Option D (AWS Pricing Calculator) does not include certification information.

Practice this question →
352
MCQmedium

An SAP system uses AWS Direct Connect to connect to on-premises systems. The SAP application servers are in a private subnet, and the HANA database is in a separate private subnet. Both subnets are in the same VPC. The application servers can connect to the HANA database, but the application servers cannot connect to an on-premises file server via the Direct Connect. The on-premises network team confirms that the file server is reachable from other on-premises resources. The VPC route tables have a route for the on-premises CIDR pointing to the Direct Connect virtual gateway. The security groups allow all outbound traffic. What is the MOST likely cause of the issue?

A.The network ACL for the application subnet is blocking outbound traffic to the on-premises CIDR.
B.The on-premises file server is not reachable because it requires VPN instead of Direct Connect.
C.The Direct Connect virtual interface is in a 'down' state.
D.The route table associated with the application subnet does not have a route to the on-premises CIDR via the virtual gateway.
AnswerD

Missing route prevents traffic from reaching Direct Connect.

Why this answer

The most likely cause is that the route table associated with the application subnet does not have a route to the on-premises CIDR via the virtual gateway. Since the application servers are in a different subnet, they need an explicit route in their subnet's route table to reach the on-premises network through Direct Connect. Without this route, traffic cannot be forwarded to the virtual gateway.

Option A is unlikely because the security groups allow all outbound traffic, and NACLs might be blocking, but the question states security groups allow all outbound, and typically NACLs are configured permissive by default. Option C is not indicated as the on-premises team confirms the file server is reachable from other on-premises resources, implying Direct Connect is up. Option B (VPN) is not relevant; Direct Connect is already in use.

Practice this question →
353
MCQhard

A company is running SAP ERP on AWS with an Oracle database. The database is hosted on an EC2 instance with multiple EBS volumes. The company wants to encrypt the database at rest using AWS KMS. What is the correct procedure to enable encryption for the existing Oracle database without downtime?

A.Enable EBS encryption on the existing volumes by modifying the volume attribute
B.Migrate the database to Amazon RDS Custom for Oracle with encryption enabled
C.Use Oracle Transparent Data Encryption (TDE) with AWS KMS as the key store
D.Use AWS KMS to encrypt the EBS volumes by creating a new encrypted volume and attaching it
AnswerC

Oracle TDE can be enabled online with minimal downtime and can use AWS CloudHSM or KMS as the key store.

Why this answer

Enabling EBS encryption on a running instance requires creating an encrypted snapshot, restoring a new encrypted volume, and attaching it; this involves downtime. Oracle TDE can be enabled online with minimal impact. AWS KMS does not provide database-level encryption natively; it is used for EBS encryption.

Changing to RDS Custom requires migration.

Practice this question →
354
MCQmedium

A company is deploying a new SAP S/4HANA system on AWS and needs to ensure that the application servers can communicate with the database servers securely and with low latency. The application servers and database servers are in different VPCs. Which AWS service should be used to connect these VPCs?

A.AWS VPN
B.Amazon API Gateway
C.VPC Peering
D.AWS Direct Connect
AnswerC

VPC Peering provides direct, low-latency connectivity between VPCs.

Why this answer

VPC Peering is the correct choice because it establishes a direct network connection between two VPCs using AWS's internal infrastructure, enabling private IPv4 or IPv6 traffic with low latency and high throughput. For SAP S/4HANA, where application-to-database communication requires consistent sub-millisecond latency and avoids internet transit, VPC Peering provides the necessary Layer-3 connectivity without bandwidth bottlenecks or single points of failure. Unlike VPN or Direct Connect, VPC Peering does not introduce additional hop latency or third-party hardware, making it ideal for this intra-region, cross-VPC scenario.

Exam trap

The trap here is that candidates often confuse VPC Peering with AWS Direct Connect, mistakenly thinking a dedicated connection is required for low latency, but Direct Connect is for on-premises connectivity, not VPC-to-VPC, and VPC Peering provides the same private, low-latency path within a region without additional cost or complexity.

How to eliminate wrong answers

Option A is wrong because AWS VPN creates an encrypted tunnel over the public internet, introducing additional latency and potential throughput variability that is unsuitable for the low-latency, high-performance requirements of SAP S/4HANA database communication. Option B is wrong because Amazon API Gateway is a fully managed service for creating, publishing, and securing RESTful or WebSocket APIs, not a mechanism for connecting VPCs or enabling direct network-layer traffic between application and database servers. Option D is wrong because AWS Direct Connect is a dedicated physical connection from on-premises to AWS, designed for hybrid cloud scenarios, and does not connect two VPCs within AWS; using it for VPC-to-VPC connectivity would be unnecessary, costly, and architecturally incorrect.

Practice this question →
355
MCQmedium

An SAP system on AWS uses a Multi-AZ DB instance for its database. The operations team notices that during a recent Availability Zone outage, the database failover did not occur automatically. What is the MOST likely cause?

A.The database is configured with asynchronous replication.
B.The Multi-AZ option is not supported for this database engine.
C.The database is configured as a read replica.
D.The secondary DB instance is in the same Availability Zone as the primary.
AnswerD

Multi-AZ requires instances in different AZs.

Why this answer

In a Multi-AZ DB instance deployment, AWS automatically provisions and maintains a standby DB instance in a different Availability Zone (AZ). If the primary DB instance fails or the AZ becomes unavailable, Amazon RDS automatically fails over to the standby. If the secondary DB instance is in the same AZ as the primary, a failure of that AZ will affect both instances, preventing automatic failover.

This is the most likely cause because the Multi-AZ architecture relies on physical separation of AZs to provide high availability.

Exam trap

The trap here is that candidates may assume Multi-AZ automatically implies different AZs, but the question tests whether you know that a misconfiguration (both instances in the same AZ) will break failover, and they might incorrectly blame replication mode or engine support instead.

How to eliminate wrong answers

Option A is wrong because asynchronous replication is the standard replication mode for Multi-AZ DB instances (using synchronous replication to the standby), and it does not prevent automatic failover; in fact, Multi-AZ uses synchronous replication to ensure data consistency. Option B is wrong because the Multi-AZ option is supported for all major database engines that AWS RDS offers for SAP workloads, including Oracle, SQL Server, and PostgreSQL. Option C is wrong because a read replica is a separate concept from a Multi-AZ standby; a read replica is used for read scaling and does not serve as a failover target, but the question describes a Multi-AZ DB instance, which by definition has a standby that is not a read replica.

Practice this question →
356
MCQeasy

An SAP system running on AWS is experiencing intermittent network connectivity issues between the application server and the database server. Both servers are in the same VPC but in different Availability Zones. The network ACLs and security groups are properly configured. What is the most likely cause and solution?

A.The security groups are stateful and blocking return traffic; use network ACLs instead
B.The route tables are not correctly configured for cross-AZ traffic; verify and update route tables
C.Use AWS Transit Gateway to connect the subnets in different AZs
D.The network ACLs are blocking traffic between Availability Zones; update the NACLs
AnswerB

Cross-AZ traffic requires appropriate route table entries.

Why this answer

The most likely cause is that the route tables in the subnets do not have routes for the destination CIDR of the other Availability Zone (AZ). By default, each subnet in a VPC is associated with a route table, and for traffic to flow between subnets in different AZs, the route tables must include a local route for the VPC CIDR. If the route tables are misconfigured (e.g., missing the local route or pointing to an incorrect target), cross-AZ traffic will fail, causing intermittent connectivity issues between the application and database servers.

Exam trap

The trap here is that candidates often assume security groups or NACLs are the cause of cross-AZ connectivity issues, but the real culprit is usually route table misconfiguration, as AWS relies on the local route for all intra-VPC traffic regardless of AZ boundaries.

How to eliminate wrong answers

Option A is wrong because security groups are stateful, meaning they automatically allow return traffic for outbound connections; they do not block return traffic, and using network ACLs (which are stateless) would require explicit rules for both inbound and outbound traffic, making this a less likely cause. Option C is wrong because AWS Transit Gateway is used to connect multiple VPCs or on-premises networks, not for routing within a single VPC; using it for cross-AZ subnets in the same VPC is unnecessary and adds complexity. Option D is wrong because network ACLs are stateless and apply at the subnet level, but if they were blocking traffic between AZs, the issue would be consistent (not intermittent) and would affect all traffic, not just specific connections; the problem description states NACLs are properly configured, so this is not the cause.

Practice this question →
357
Multi-Selecthard

Which THREE of the following are valid methods to automate the installation of SAP HANA on AWS? (Choose three.)

Select 3 answers
A.AWS Systems Manager Automation
B.AWS Launch Wizard for SAP
C.SAP Cloud Appliance Library
D.AWS OpsWorks
E.AWS CloudFormation with a custom template
AnswersB, C, E

Launch Wizard automates SAP HANA deployment.

Why this answer

AWS Launch Wizard for SAP (Option B) is a valid method to automate SAP HANA installation because it provides a guided, automated deployment experience that collects input for infrastructure sizing, configuration, and software installation, then orchestrates the provisioning of AWS resources and the SAP HANA software setup. It reduces manual effort by automating the deployment of SAP HANA on AWS, making it a correct choice for this question.

Exam trap

The trap here is that candidates often confuse AWS Systems Manager Automation (Option A) with a general-purpose automation tool, but it lacks the SAP-specific logic and lifecycle management required for HANA installation, making AWS Launch Wizard for SAP and SAP Cloud Appliance Library the correct SAP-focused automation methods.

Practice this question →
358
MCQeasy

A company runs its SAP ERP system on AWS using an SAP HANA database on a single EC2 instance. The system experiences intermittent performance degradation during peak hours. The operations team suspects CPU contention, as the instance type is an r5.4xlarge (16 vCPUs). When they check Amazon CloudWatch metrics, they notice that the CPU utilization averages 60%, but occasionally spikes to 100% for a few seconds. The team wants to improve performance without changing the instance type. They are considering using AWS Compute Optimizer or enabling T2/T3 unlimited. What is the MOST effective action to address the CPU spikes?

A.Use AWS Global Accelerator to improve network performance and reduce CPU overhead.
B.Attach an Elastic Fabric Adapter to offload network processing from the CPU.
C.Upgrade the instance to a larger size in the r5 family, such as r5.8xlarge, to provide more CPU capacity.
D.Enable T3 unlimited on the instance to allow sustained high CPU performance.
AnswerA

AWS Global Accelerator improves network performance and reduces CPU overhead, helping to mitigate CPU spikes.

Why this answer

AWS Global Accelerator improves network performance by routing traffic over the AWS global network, reducing latency and jitter. This reduces the CPU overhead incurred by the EC2 instance for handling network processing, which can help alleviate CPU spikes during peak hours. The other options are either ineffective or require changing the instance type, which the team wants to avoid.

Practice this question →
359
Multi-Selectmedium

A company is running SAP HANA on AWS and needs to backup the database. Which TWO services can be used together to create a backup strategy that meets the requirement of point-in-time recovery? (Choose two.)

Select 2 answers
A.AWS Database Migration Service
B.Amazon EBS snapshots
C.AWS Backup
D.Amazon S3 Lifecycle policies
E.AWS Storage Gateway
AnswersB, C

EBS snapshots are used for point-in-time backups of volumes.

Why this answer

Amazon EBS snapshots (B) provide point-in-time backups of SAP HANA data volumes, and AWS Backup (C) can orchestrate and manage these snapshots, enabling a comprehensive backup strategy with point-in-time recovery. AWS Database Migration Service (A) is for database migration, not backup. Amazon S3 Lifecycle policies (D) manage object transitions, not database backups.

AWS Storage Gateway (E) is for hybrid cloud storage, not SAP HANA backup.

Practice this question →
360
MCQmedium

An SAP HANA administrator sees the error log entry shown in the exhibit. The error occurs when a scheduled job tries to insert data into the BKPF table. What is the MOST likely cause?

A.The credentials used by the scheduled job are incorrect.
B.The user does not have INSERT privilege on the BKPF table.
C.The SQL statement has a syntax error.
D.The table BKPF is full and cannot accept new rows.
AnswerA

The error message explicitly says invalid user or password.

Why this answer

The error log entry indicates that the scheduled job is failing during an INSERT operation on the BKPF table. In SAP HANA, when a scheduled job fails with an authentication or authorization error, the most common cause is incorrect credentials being used by the job's connection to the database. This is because the job's runtime context does not have the correct user or password to establish a valid session, leading to a failure before any SQL operation is attempted.

Exam trap

The trap here is that candidates often confuse authentication (credential validation) with authorization (privilege checks), assuming that a failure during an INSERT operation must be a privilege issue, when in fact the error log points to a connection-level failure due to incorrect credentials.

How to eliminate wrong answers

Option B is wrong because an INSERT privilege error would produce a specific 'insufficient privilege' or 'no privilege' error message, not a generic authentication failure. Option C is wrong because a syntax error would generate a SQL syntax error message (e.g., 'syntax error' or 'incorrect syntax') and would occur at parse time, not during execution. Option D is wrong because a full table would result in a 'table is full' or 'no more space' error, not an authentication-related error.

Practice this question →
361
MCQmedium

A company is running SAP on AWS and wants to automate the installation of SAP applications using infrastructure as code. Which AWS service should be used to define the infrastructure?

A.AWS OpsWorks
B.AWS CodeDeploy
C.AWS Elastic Beanstalk
D.AWS CloudFormation
AnswerD

CloudFormation allows you to define AWS infrastructure as code.

Why this answer

AWS CloudFormation allows defining infrastructure as code. Option A is wrong because OpsWorks is for Chef/Puppet. Option B is wrong because CodeDeploy is for application deployment, not infrastructure.

Option C is wrong because Elastic Beanstalk is for web applications, not infrastructure.

Practice this question →
362
MCQhard

An SAP system on AWS is experiencing slow performance. The SAP team suspects that the Amazon EBS volumes used for the database are not providing sufficient IOPS. Which step should be taken to identify the bottleneck?

A.Monitor the EBS volume metrics in CloudWatch
B.Use AWS Trusted Advisor to check performance
C.Enable VPC Flow Logs to analyze network traffic
D.Review the AWS Config rules for EBS
AnswerA

CloudWatch metrics like VolumeQueueLength indicate IOPS saturation.

Why this answer

Amazon CloudWatch provides detailed metrics for EBS volumes, including `VolumeReadOps`, `VolumeWriteOps`, `VolumeQueueLength`, and `VolumeThroughputPercentage`. By monitoring these metrics, you can directly determine whether the EBS volume is reaching its provisioned IOPS limit or experiencing queue buildup, which would confirm an IOPS bottleneck. This is the most direct and actionable step to diagnose insufficient IOPS for the SAP database.

Exam trap

The trap here is that candidates may confuse high-level advisory tools (Trusted Advisor) or network-focused logs (VPC Flow Logs) with the precise storage performance metrics needed to diagnose an IOPS bottleneck, overlooking CloudWatch as the definitive source for EBS performance data.

How to eliminate wrong answers

Option B is wrong because AWS Trusted Advisor provides high-level best-practice checks (e.g., idle resources, security groups) but does not offer real-time, granular EBS performance metrics like IOPS or queue depth; it cannot pinpoint an IOPS bottleneck. Option C is wrong because VPC Flow Logs capture network traffic metadata (IP addresses, ports, packet counts) but do not measure EBS volume IOPS or latency; they are irrelevant for storage-level performance issues. Option D is wrong because AWS Config rules evaluate resource compliance against desired configurations (e.g., encryption, tagging) and do not monitor runtime performance metrics such as IOPS or throughput.

Practice this question →
363
MCQhard

Refer to the exhibit. An IAM policy is attached to an IAM role used by an SAP automation script. The script is failing to start an EC2 instance. What is the most likely cause?

A.The policy does not grant permission to start instances.
B.The policy does not allow ec2:DescribeInstances.
C.The script does not have access to the S3 bucket.
D.The script is not using HTTPS, so the Deny statement blocks all actions.
AnswerD

The Deny statement with aws:SecureTransport: false blocks all actions if not using HTTPS.

Why this answer

The Deny statement in the policy blocks all actions unless the request uses HTTPS. Since the SAP automation script is failing to start an EC2 instance, the most likely cause is that the script is making HTTP requests instead of HTTPS, triggering the Deny and preventing any action, including ec2:StartInstances. This is a common security control to enforce encryption in transit.

Exam trap

AWS often tests the nuance that a Deny statement with a condition (like aws:SecureTransport) can override all Allow statements, leading candidates to overlook the condition and incorrectly focus on missing permissions.

How to eliminate wrong answers

Option A is wrong because the policy includes an Allow for ec2:StartInstances, so permission to start instances is explicitly granted. Option B is wrong because ec2:DescribeInstances is not required to start an instance; the failure is due to the Deny statement, not a missing Describe permission. Option C is wrong because the policy does not reference any S3 bucket, and the script's failure to start an EC2 instance is unrelated to S3 access.

Practice this question →
364
MCQmedium

An SAP system running on AWS is experiencing high latency for database writes. The database is running on an RDS instance with General Purpose (gp2) storage. What change will PROVIDE the most immediate performance improvement?

A.Change the storage type to Provisioned IOPS (io1 or io2).
B.Add a read replica to offload read traffic.
C.Increase the allocated storage size to increase baseline IOPS.
D.Enable Multi-AZ deployment.
AnswerA

Provides consistent low latency for writes.

Why this answer

The SAP system is experiencing high latency for database writes, which is a latency-sensitive workload. General Purpose (gp2) storage provides a baseline of 3 IOPS per GB, but its burst model can lead to performance degradation under sustained high write loads. Changing to Provisioned IOPS (io1 or io2) guarantees consistent, low-latency I/O performance by allowing you to provision a specific number of IOPS independently of storage size, providing the most immediate performance improvement for write-heavy operations.

Exam trap

The trap here is that candidates often assume increasing storage size (Option C) will immediately boost IOPS, but they overlook the gp2 burst credit mechanism and the fact that Provisioned IOPS provides a guaranteed, immediate performance floor without relying on credits or size-dependent baselines.

How to eliminate wrong answers

Option B is wrong because adding a read replica offloads read traffic, but it does not improve write latency on the primary database instance; writes still go to the primary, and the replica does not affect write performance. Option C is wrong because increasing allocated storage size on gp2 increases baseline IOPS (3 IOPS per GB), but this is a gradual improvement and may not provide immediate relief for high latency, especially if the current burst balance is depleted; it also does not guarantee consistent performance for write-heavy SAP workloads. Option D is wrong because enabling Multi-AZ deployment provides high availability and automatic failover, but it does not improve write latency; in fact, synchronous replication to a standby instance can slightly increase write latency due to the additional replication overhead.

Practice this question →
365
MCQeasy

A company is planning to run SAP S/4HANA on AWS and needs to ensure that the SAP system is backed up according to best practices. Which backup strategy is recommended?

A.Use EBS snapshots after quiescing the SAP system, combined with database backups to S3.
B.Use EBS snapshots of the data volumes without quiescing the application.
C.Store backup files on instance store volumes for quick recovery.
D.Use AWS Backup to take snapshots of the EC2 instance only.
AnswerA

Application-consistent snapshots plus database backups to S3 follow AWS best practices.

Why this answer

For SAP S/4HANA on AWS, the recommended backup strategy combines EBS snapshots taken after quiescing the SAP system (to ensure file system consistency) with database backups to Amazon S3. Quiescing the application ensures that all pending I/O operations are flushed and the file system is in a consistent state, preventing data corruption. Database backups to S3 provide a separate, application-consistent recovery point that can be used for point-in-time recovery, which is critical for SAP systems.

Exam trap

The trap here is that candidates may assume EBS snapshots alone are sufficient for SAP backups, overlooking the need for application quiescing and separate database backups to ensure both file system and database consistency.

How to eliminate wrong answers

Option B is wrong because taking EBS snapshots without quiescing the application risks creating an inconsistent file system state, which can lead to data corruption or an unrecoverable SAP system. Option C is wrong because instance store volumes are ephemeral and provide no data durability; they cannot be used for reliable backups as data is lost if the instance stops or fails. Option D is wrong because AWS Backup snapshots of only the EC2 instance do not capture the database state or ensure application consistency, and they lack the granularity needed for SAP database recovery.

Practice this question →
366
MCQhard

A company is using SAP Landscape Management (LaMa) to automate the provisioning and decommissioning of SAP application servers in an AWS environment. The SAP systems are deployed on EC2 instances using Amazon EBS volumes. The operations team has observed that when LaMa triggers a scale-in operation to remove an application server, the instance is terminated, but the associated EBS volumes (including the root volume) are not deleted, resulting in orphaned volumes and increasing storage costs. The team wants to ensure that EBS volumes are automatically deleted when an instance is terminated, especially during LaMa-driven operations. Which solution should the team implement?

A.Configure an Amazon Data Lifecycle Manager (DLM) policy to delete volumes that are not attached to a running instance.
B.Set the 'Delete on Termination' attribute to 'True' on all EBS volumes attached to the instance when it is launched by LaMa.
C.Create an AWS Lambda function that is triggered by EC2 instance termination events to delete unattached EBS volumes.
D.Use AWS CloudTrail to monitor TerminateInstances events and trigger an AWS Step Function workflow to delete the volumes.
AnswerB

With DeleteOnTermination enabled, when LaMa terminates the instance, the volumes are automatically deleted, preventing orphaned volumes.

Why this answer

The correct solution is to set the 'Delete on Termination' attribute to 'True' on all EBS volumes attached to the instance when it is launched by LaMa. This ensures that when the instance is terminated (e.g., during a LaMa scale-in operation), the EBS volumes are automatically deleted, preventing orphaned volumes. Option A is incorrect because Amazon Data Lifecycle Manager (DLM) is used for managing snapshot schedules, not for immediate deletion on termination.

Option C is incorrect because while a Lambda function could delete volumes after termination, it adds complexity and may have timing issues; the simpler and more reliable method is to set the flag at launch. Option D is incorrect because CloudTrail logs API calls but does not directly perform actions; setting up Step Functions for this purpose is overly complex compared to the native 'Delete on Termination' attribute.

Practice this question →
367
MCQmedium

A company is planning to migrate its SAP ERP system from an on-premises data center to AWS. The system uses SAP HANA as the database. The current on-premises HANA database size is 1 TB. The company wants to minimize downtime during the migration. The network connection between on-premises and AWS has a bandwidth of 1 Gbps. The company has already set up a Direct Connect connection. They plan to use SAP HANA system replication to replicate the database to an EC2 instance in AWS. However, the initial data transfer will take too long due to the large dataset. What should they do to reduce the initial replication time?

A.Order an additional Direct Connect circuit to increase bandwidth.
B.Enable compression on the HANA system replication.
C.Set up a VPN connection over the internet for faster transfer.
D.Use AWS Snowball Edge to physically transfer the initial HANA backup.
AnswerD

Snowball provides high-speed physical transfer.

Why this answer

Using AWS Snowball Edge to physically transfer the initial HANA backup is much faster than transferring over the network, even with Direct Connect. Option A is wrong because ordering an additional Direct Connect circuit is costly and does not address the time limitation of the 1 Gbps link. Option B is wrong because enabling compression on HANA system replication may help but is still constrained by the available bandwidth.

Option C is wrong because setting up a VPN over the internet is typically slower and less reliable than the existing Direct Connect connection.

Practice this question →
368
MCQhard

An SAP system is deployed across multiple Availability Zones using an Application Load Balancer (ALB) for the SAP Web Dispatcher. Users report that sessions are frequently dropped during peak hours. Which configuration change should resolve this?

A.Disable cross-zone load balancing on the ALB.
B.Increase the number of Web Dispatcher instances in each Availability Zone.
C.Enable deletion protection on the ALB.
D.Enable sticky sessions (session affinity) on the ALB target group.
AnswerD

Sticky sessions ensure requests from a user go to the same instance.

Why this answer

Enabling sticky sessions (session affinity) on the ALB target group ensures that all requests from a user session are routed to the same Web Dispatcher instance. Without session affinity, the ALB distributes requests across multiple Web Dispatcher instances, and if the session state is stored locally on each instance, subsequent requests may land on a different instance that does not have the session data, causing the session to be dropped. This is a common issue during peak hours when the load balancer distributes traffic more aggressively.

Exam trap

The trap here is that candidates may confuse horizontal scaling (Option B) with solving session persistence issues, not realizing that adding more instances without sticky sessions actually worsens the problem by increasing the chance of a request landing on an instance without the session context.

How to eliminate wrong answers

Option A is wrong because disabling cross-zone load balancing would restrict traffic to Web Dispatcher instances only within the same Availability Zone as the client, which could lead to uneven load distribution and increased session drops, not resolve them. Option B is wrong because increasing the number of Web Dispatcher instances does not address the root cause of session drops; it only adds capacity, but if sessions are not pinned to a specific instance, new instances will still cause session routing issues. Option C is wrong because enabling deletion protection on the ALB prevents accidental deletion of the load balancer but has no effect on session persistence or traffic routing behavior.

Practice this question →
369
MCQeasy

The exhibit shows an IAM policy for an SAP backup process that uploads backups to S3. An administrator wants to ensure that all uploads are encrypted using SSE-S3. What does this policy enforce?

A.The backup process must encrypt the files before uploading them.
B.The backup process must use AWS KMS to encrypt the objects.
C.Any PutObject request that does not include the encryption header will be denied.
D.The bucket automatically encrypts objects with SSE-S3 even if the request does not specify it.
AnswerC

The condition requires the encryption header; without it, the request fails.

Why this answer

The policy uses a `Deny` effect with a `StringNotEquals` condition on the `s3:x-amz-server-side-encryption` header, requiring it to be `AES256`. This enforces that any `PutObject` request must include the `x-amz-server-side-encryption: AES256` header; otherwise, the request is denied. Option C correctly states that requests without the encryption header will be denied.

Exam trap

The trap here is that candidates often confuse the `StringNotEquals` condition with a requirement for client-side encryption or KMS, or assume that bucket default encryption would automatically satisfy the policy, when in fact the policy explicitly denies requests that do not include the correct header.

How to eliminate wrong answers

Option A is wrong because the policy does not require client-side encryption before upload; it enforces server-side encryption (SSE-S3) by mandating the encryption header on the request. Option B is wrong because the policy specifies `AES256`, which corresponds to SSE-S3, not AWS KMS (which uses `aws:kms` as the header value). Option D is wrong because the policy does not enable default bucket encryption; it uses an explicit Deny to reject requests that lack the required header, rather than relying on automatic encryption.

Practice this question →
370
MCQeasy

A company is running an SAP HANA database on an EC2 instance with an EBS gp3 volume. The workload is write-intensive and latency-sensitive. Which configuration change would provide the most consistent I/O performance?

A.Switch to an EBS st1 (throughput-optimized HDD) volume
B.Enable EBS Multi-Attach for the gp3 volume
C.Increase the size of the existing gp3 volume to increase baseline throughput
D.Use an EBS io2 Block Express volume with provisioned IOPS
AnswerD

io2 Block Express provides consistent low-latency and high IOPS for SAP HANA.

Why this answer

An SAP HANA database is extremely sensitive to I/O latency and requires consistent, high IOPS for write-intensive workloads. EBS io2 Block Express volumes provide up to 256,000 provisioned IOPS with 99.999% durability, delivering the predictable low-latency performance that gp3 volumes cannot guarantee under sustained write pressure. This makes D the correct choice for consistent I/O performance.

Exam trap

The trap here is that candidates often assume increasing volume size (Option C) will solve performance issues, but gp3's performance scales linearly with size only for throughput, not for IOPS consistency under sustained write loads, which is the key requirement for SAP HANA.

How to eliminate wrong answers

Option A is wrong because st1 (throughput-optimized HDD) volumes are designed for large, sequential workloads like big data and log processing, not for latency-sensitive, write-intensive databases like SAP HANA; they have a baseline throughput of only 40 MB/s per TB and cannot deliver the sub-millisecond latency required. Option B is wrong because EBS Multi-Attach allows a single volume to be attached to multiple EC2 instances, but it does not improve I/O performance or consistency for a single-instance workload; it is intended for clustered applications like WSFC, not for reducing latency or increasing IOPS. Option C is wrong because increasing the size of a gp3 volume increases its baseline throughput (e.g., from 125 MB/s at 1 GB to higher values), but gp3 volumes have a burst model and can experience performance throttling under sustained high write loads, whereas SAP HANA requires consistent, provisioned IOPS without reliance on burst credits.

Practice this question →
371
MCQeasy

A company is planning to migrate its SAP landscape to AWS. The SAP systems include a production system, a QA system, and a development system. All systems use the same SAP S/4HANA version. Which strategy is MOST cost-effective for the DR (disaster recovery) setup?

A.Set up warm standby in a second Region with a standby application server and database.
B.Use cross-Region replication with AWS reserved instances for the DR systems.
C.Use a pilot light strategy with AWS DMS ongoing replication.
D.Deploy active-active SAP systems in two AWS Regions with Elastic Load Balancing.
AnswerC

Correct. Pilot light with AWS DMS ongoing replication uses minimal resources (e.g., a small database instance) to keep data synchronized, while application servers and other components are not running. Only during a failover are additional resources provisioned, leading to the lowest possible cost for DR.

Why this answer

For SAP systems where all environments use the same S/4HANA version, the most cost-effective DR approach is a pilot light strategy using AWS DMS ongoing replication. This minimizes costs by replicating only the data (e.g., via DMS) and keeping only essential infrastructure running (e.g., a small standby database) while leaving additional compute resources (application servers, etc.) off until failover. In contrast, cross-Region replication with reserved instances (Option B) incurs significant ongoing costs because reserved instances must be paid for upfront or over time even when not running, and the DR systems would need to be sized for peak capacity, leading to waste.

Warm standby (Option A) and active-active (Option D) are more expensive due to the need for continuously running infrastructure or load balancing across regions. Therefore, pilot light with DMS is the most cost-effective for this scenario.

Exam trap

Candidates often assume that cross-Region replication with reserved instances is cost-effective because of the discounts, but they forget that reserved instances represent a long-term financial commitment. For DR workloads that are not continuously active, a pilot light approach that avoids paying for idle compute is actually cheaper.

How to eliminate wrong answers

Option A is wrong because a warm standby setup in a second Region with a standby application server and database incurs higher costs due to running additional EC2 instances and database instances continuously, which is not the most cost-effective strategy for DR. Option C is wrong because a pilot light strategy with AWS DMS ongoing replication is typically used for database migration or minimal DR setups, but it does not leverage reserved instances for cost savings and may not provide the same cost efficiency as cross-Region replication with reserved instances for SAP systems. Option D is wrong because deploying active-active SAP systems in two AWS Regions with Elastic Load Balancing is overkill and extremely expensive, as it requires running full production workloads in both Regions simultaneously, which is unnecessary for DR and not cost-effective.

Practice this question →
372
Multi-Selecthard

A company is running SAP HANA on EC2 instances with EBS volumes. They need to ensure data durability and backup. Which THREE actions should be taken?

Select 3 answers
A.Disable automated backups to reduce costs.
B.Use instance store volumes for HANA data.
C.Enable SAP HANA System Replication to a secondary instance.
D.Configure SAP HANA backup to Amazon S3 using Backint.
E.Take regular EBS snapshots of the HANA data volumes.
AnswersC, D, E

Replication provides high availability and disaster recovery.

Why this answer

SAP HANA System Replication provides synchronous or asynchronous data replication to a secondary EC2 instance, ensuring high availability and data durability by maintaining a real-time copy of the HANA database. This is a native SAP feature that protects against instance failure and supports automatic failover, which is critical for production HANA workloads.

Exam trap

The trap here is that candidates may confuse instance store volumes with EBS volumes, assuming they provide similar durability, or mistakenly think disabling backups is a cost-saving measure without considering the critical need for recoverability in SAP HANA environments.

Practice this question →
373
MCQmedium

A company runs a critical web application on EC2 instances behind an Application Load Balancer (ALB). The application experiences intermittent high latency, and the operations team suspects that the load balancer is not distributing traffic evenly. Which configuration should the team check to confirm or rule out uneven traffic distribution?

A.Configure slow start on the target group
B.Increase the deregistration delay on the target group
C.Enable sticky sessions (session affinity) on the target group
D.Verify that cross-zone load balancing is enabled on the ALB
AnswerD

Cross-zone load balancing distributes traffic evenly across all instances in all enabled AZs. If disabled, each ALB node only sends traffic to instances in its own AZ, causing uneven distribution.

Why this answer

Uneven traffic distribution across EC2 instances behind an ALB is most commonly caused by cross-zone load balancing being disabled. By default, ALBs have cross-zone load balancing enabled, which distributes traffic evenly across all registered instances in all enabled Availability Zones. If it is disabled, each ALB node distributes traffic only to instances in its own Availability Zone, leading to imbalances when instance counts or capacities differ across zones.

Verifying this setting directly addresses the suspected uneven distribution.

Exam trap

The trap here is that candidates often confuse uneven distribution with session affinity (sticky sessions) or connection draining, but the root cause is typically the cross-zone load balancing setting, which directly controls whether traffic is balanced across all targets or confined to each Availability Zone.

How to eliminate wrong answers

Option A is wrong because slow start gradually ramps up traffic to new targets, which addresses cold-start latency but does not cause or resolve uneven distribution across healthy instances. Option B is wrong because increasing the deregistration delay keeps in-flight connections open during instance de-registration, which affects graceful shutdowns but has no impact on traffic distribution during normal operation. Option C is wrong because sticky sessions (session affinity) bind a client to a specific target, which can actually worsen uneven distribution by concentrating traffic on certain instances, not fix it.

Practice this question →
374
MCQeasy

A company is running an SAP HANA database on an Amazon EC2 instance. The storage is configured with multiple EBS volumes striped using LVM. The company wants to ensure the database performance is consistent and can detect potential bottlenecks. Which AWS service should be used to monitor the EBS volume metrics such as Average Queue Length and Throughput?

A.AWS Trusted Advisor
B.Amazon Inspector
C.Amazon CloudWatch
D.AWS CloudTrail
AnswerC

CloudWatch provides EBS performance metrics.

Why this answer

Amazon CloudWatch is the correct service because it provides detailed, granular monitoring of EBS volume metrics such as Average Queue Length (AverageQueueLength) and Throughput (VolumeReadBytes/VolumeWriteBytes). These metrics are collected at 1-minute intervals by default for EBS volumes attached to Nitro-based EC2 instances, enabling you to detect performance bottlenecks like high queue depths or throughput saturation. CloudWatch also allows you to set alarms and create dashboards for proactive monitoring of SAP HANA database storage performance.

Exam trap

The trap here is that candidates may confuse AWS Trusted Advisor's 'performance' checks (which only flag underutilized or overutilized resources at a high level) with the granular, real-time metrics that CloudWatch provides for EBS volumes, leading them to incorrectly select Trusted Advisor.

How to eliminate wrong answers

Option A is wrong because AWS Trusted Advisor provides high-level best-practice checks (e.g., idle resources, security groups, cost optimization) but does not expose real-time, per-volume metrics like Average Queue Length or Throughput. Option B is wrong because Amazon Inspector is a vulnerability management service that scans for software vulnerabilities and unintended network exposure, not a monitoring tool for EBS performance metrics. Option D is wrong because AWS CloudTrail records API activity and governance events (e.g., who created or deleted an EBS volume) but does not capture storage-level performance metrics such as queue depth or throughput.

Practice this question →
375
MCQhard

You are managing an SAP S/4HANA system on AWS. The system uses a multi-AZ deployment with two application servers (one in us-east-1a, one in us-east-1b) and a HANA database in us-east-1a with a standby in us-east-1b using HSR. The /sapmnt and /usr/sap/trans are on an EFS file system. Recently, you noticed that during a failover test of the HANA database, the application servers lost connectivity to the database for several minutes, causing errors. You also observed that after the failover, the application servers could not reconnect until the EFS mount was remounted. What is the most likely cause and solution?

A.Increase the provisioned throughput on the EFS file system to handle the increased load during failover.
B.Migrate the shared file systems to Amazon FSx for NetApp ONTAP with multi-AZ deployment.
C.Configure EFS mount targets in each AZ and use an EFS access point with a consistent mount path.
D.Reconfigure SAP HANA System Replication to use synchronous replication.
AnswerC

This ensures that after failover, the application servers can mount the file system using the access point that resolves in the AZ.

Why this answer

The issue is that during a HANA database failover, the application servers lost connectivity and could not reconnect until the EFS mount was remounted. This indicates that the EFS mount targets are not properly configured for multi-AZ access. When the database fails over to the standby in us-east-1b, the application servers may be trying to access the EFS file system through a mount target that is only in us-east-1a, or the DNS resolution leads to a mount target in the wrong AZ, causing connectivity loss.

Option C is correct because configuring EFS mount targets in each AZ and using an EFS access point with a consistent mount path ensures that application servers in any AZ can reliably mount and access the shared file system without relying on cross-AZ connectivity. Option A (increase EFS throughput) does not address connectivity issues during failover. Option B (migrate to FSx for ONTAP) is not the immediate solution and may be unnecessary.

Option D (synchronous replication) does not fix the EFS connectivity problem.

Practice this question →
← PreviousPage 5 of 6 · 389 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Technology questions.

Start 20-question session