Knowledge + Practice

CCNA Sap Migration Questions

75 of 339 questions · Page 4/5 · Sap Migration topic · Answers revealed

Practice these questions Exam hub All questions

226

MCQhard

A company is migrating an SAP system to AWS and needs to ensure high availability for SAP Central Services (ASCS) and Enqueue Replication Server (ERS). Which architecture meets SAP's high availability requirements?

A.Use a cluster solution with a shared file system and a virtual IP address in a multi-AZ setup

B.Deploy ASCS and ERS in a single Availability Zone with an automatic restart

C.Use an Application Load Balancer to distribute traffic between ASCS and ERS

D.Configure Amazon Route 53 health checks to failover between ASCS and ERS

AnswerA

This is the recommended architecture for SAP ASCS/ERS HA, using Pacemaker and a floating IP.

Why this answer

A cluster solution with a shared file system and a virtual IP address in a multi-AZ setup meets SAP's high availability requirements for ASCS and ERS. This architecture ensures automatic failover across Availability Zones (AZs) and is the standard recommendation for SAP HA. Option B is incorrect because deploying ASCS and ERS in a single AZ with automatic restart does not protect against AZ failure.

Option C is incorrect because an Application Load Balancer is designed for HTTP/HTTPS traffic, not for SAP Central Services which require a shared file system and virtual IP. Option D is incorrect because Amazon Route 53 health checks alone do not provide the fast failover required; they are typically used with DNS-based failover, not cluster-based HA.

Practice this question →

227

MCQhard

An SAP administrator is trying to run an AWS DMS replication task from an EC2 instance that has this IAM role. The task fails with an access denied error. What is the most likely cause?

A.The EC2 instance role is not attached to the instance.

B.The S3 bucket name is incorrect.

C.The S3 actions require additional permissions for the bucket.

D.The policy does not include permissions for dms:DescribeReplicationTasks.

AnswerD

To start a task, DMS may need to describe replication tasks first.

Why this answer

The IAM policy attached to the EC2 instance role does not include permissions for the dms:DescribeReplicationTasks action. When the DMS replication task is started, the DMS service needs to describe the task status and list replication tasks, which requires this action. Without it, the API call fails with an access denied error.

Although the policy includes dms:CreateReplicationTask and dms:StartReplicationTask, the absence of dms:DescribeReplicationTasks causes the failure. Option D correctly identifies this missing permission.

Practice this question →

228

MCQmedium

A company is migrating a critical SAP HANA database to AWS. The database size is 2 TB. They require the highest network throughput and low latency between EC2 instances. Which EC2 placement strategy should they use?

A.Spread Placement Group across multiple Availability Zones

B.Partition Placement Group

C.Dedicated Hosts

D.Cluster Placement Group

AnswerD

Cluster group provides low latency and high throughput within a single AZ.

Why this answer

Placement Groups with Cluster Placement provide low latency and high throughput within a single AZ. Option D (Cluster Placement Group) is correct. Option A (Spread Placement Group) is for high availability, not performance.

Option B (Partition Placement Group) is for large distributed systems. Option C (Dedicated Hosts) provides licensing benefits, not network performance.

Practice this question →

229

Multi-Selectmedium

A company is migrating its SAP HANA database to AWS. They need to validate that the target AWS environment meets SAP's certification requirements. Which two steps should they take? (Choose TWO.)

Select 2 answers

A.Configure the instance with 10 Gbps network bandwidth

B.Use an Amazon Machine Image (AMI) from the AWS Marketplace that includes SAP HANA

C.Ensure that the EBS volumes are optimized for high throughput

D.Confirm that the operating system is SAP certified for HANA

E.Verify that the EC2 instance type is listed in the SAP HANA certified instance list

AnswersD, E

OS certification is required.

Why this answer

To validate that the target AWS environment meets SAP HANA certification requirements, two key checks are necessary: (1) the EC2 instance type must be listed in the SAP HANA certified instance list (Option E), and (2) the operating system must be SAP certified for HANA (Option D). Option A (configuring 10 Gbps network bandwidth) is not a certification requirement; SAP HANA instances automatically use enhanced networking with adequate bandwidth. Option B (using an AMI from AWS Marketplace) is not required; you can install SAP HANA on any certified OS.

Option C (ensuring EBS volumes are optimized for high throughput) is not a specific certification criterion; EBS optimization is automatically enabled on supported instance types.

Practice this question →

230

Multi-Selecteasy

Which TWO AWS services can be used to migrate an on-premises Microsoft SQL Server database to Amazon RDS for SQL Server with minimal downtime? (Choose two.)

Select 2 answers

A.AWS Snowball Edge

B.AWS Schema Conversion Tool (SCT)

C.Amazon EC2 with SQL Server

D.AWS Database Migration Service (DMS)

E.AWS Direct Connect

AnswersB, D

SCT converts schema and can optimize for RDS.

Why this answer

Correct options: B and D. AWS Database Migration Service (DMS) can perform live migration with continuous change data capture (CDC) for minimal downtime. AWS Schema Conversion Tool (SCT) helps convert the on-premises SQL Server schema to be compatible with Amazon RDS for SQL Server.

Options A, C, and E are incorrect: AWS Snowball Edge (A) is for offline data transfer, not minimal downtime; Amazon EC2 with SQL Server (C) is a target but not a migration service; AWS Direct Connect (E) provides network connectivity but does not perform the migration itself.

Practice this question →

231

MCQmedium

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. They need to minimize downtime and ensure data consistency. Which AWS service or feature should they use?

A.AWS Database Migration Service (AWS DMS) with ongoing replication

B.RDS Read Replica

C.VPC Peering

D.AWS Schema Conversion Tool (AWS SCT)

AnswerA

DMS with ongoing replication supports near-zero downtime migration.

Why this answer

(AWS DMS with ongoing replication) is correct because it supports a full load followed by continuous change data capture (CDC) replication, enabling minimal downtime and data consistency during migration from on-premises Oracle to Amazon RDS for Oracle. Option B (RDS Read Replica) is wrong because it is used for scaling read traffic, not for migrating data. Option C (VPC Peering) is a networking feature that connects VPCs but does not perform data migration.

Option D (AWS SCT) is wrong because it only converts database schemas and code, not the actual data.

Practice this question →

232

MCQeasy

An SAP administrator wants to deploy a SAP system across two Availability Zones for high availability. The administrator runs the command shown in the exhibit. How many subnets are available for the deployment?

A.4

B.2

C.3

D.1

AnswerB

Two subnets are listed.

Why this answer

The output shows two subnets, one in us-east-1a and one in us-east-1b. Option A is wrong because there are two subnets. Option C is wrong because there are not four.

Option D is wrong because there are exactly two.

Practice this question →

233

MCQmedium

Refer to the exhibit. An administrator is setting up an AWS DMS task to migrate an SAP database. They receive an error that they are not authorized to perform the operation. Which statement is true about the IAM policy?

A.The policy allows all DMS actions

B.The policy is missing the dms:CreateEndpoint and dms:DescribeEndpoints actions

C.The policy is missing the dms:CreateReplicationTask action

D.The policy should specify an ARN instead of a wildcard for Resource

AnswerB

DMS needs these permissions to create and manage endpoints.

Why this answer

The error 'not authorized' indicates the IAM policy lacks necessary permissions for the DMS task. The missing actions are dms:CreateEndpoint and dms:DescribeEndpoints, which are required to create and describe endpoints during the migration. Option B is correct because the policy explicitly denies these actions (or does not include them).

Option A is incorrect because the policy does not allow all DMS actions; it is missing these two. Option C is incorrect because the error is not related to dms:CreateReplicationTask. Option D is incorrect because using a wildcard for Resource is not the cause; the issue is the missing actions, not the resource scope.

Practice this question →

234

Multi-Selectmedium

A company is migrating its SAP HANA database to AWS. The migration requires minimal downtime and data consistency. Which THREE steps should the company take to achieve this?

Select 3 answers

A.Take a full backup of the source database and restore it on the target.

B.Use AWS DMS with change data capture (CDC) for ongoing replication.

C.Create the target HANA database and schema in advance.

D.Perform a full load of the data using AWS DMS before enabling CDC.

E.Disable all logging on the source database to reduce overhead.

AnswersB, C, D

CDC enables continuous replication of changes.

Why this answer

To achieve minimal downtime and data consistency when migrating an SAP HANA database to AWS, the company should: Use AWS DMS with change data capture (CDC) for ongoing replication (B), create the target HANA database and schema in advance (C), and perform a full load of the data using AWS DMS before enabling CDC (D). A full backup and restore (A) would cause downtime, and disabling logging (E) is incorrect as it would compromise data consistency and recovery.

Practice this question →

235

MCQeasy

A company is migrating a web application from an on-premises data center to AWS. The application uses a MySQL database that is 500 GB in size. The company wants to minimize downtime during the migration. Which approach should the company use?

A.Use an RDS read replica and promote it

B.Use AWS Database Migration Service (DMS) with ongoing replication

C.Stop the database, take a mysqldump, and restore to RDS

D.Use AWS Schema Conversion Tool (SCT) to migrate the schema and data

AnswerB

DMS migrates data while changes are replicated, minimizing downtime.

Why this answer

AWS Database Migration Service (DMS) with ongoing replication (change data capture, CDC) allows you to perform a live migration with minimal downtime. You can start a full load of the 500 GB MySQL database while the source remains operational, then enable CDC to replicate ongoing changes until you cut over to the target RDS instance, reducing the downtime window to seconds.

Exam trap

The trap here is that candidates often confuse AWS DMS with AWS SCT, assuming SCT handles data migration, when in fact SCT only converts schema and code, while DMS is the service that performs the actual data migration with minimal downtime via CDC.

How to eliminate wrong answers

Option A is wrong because an RDS read replica can only be created from an existing RDS instance, not from an on-premises MySQL database, so it cannot be used for migrating from on-premises to AWS. Option C is wrong because stopping the database to take a mysqldump and restore it causes significant downtime (hours for 500 GB), which contradicts the requirement to minimize downtime. Option D is wrong because AWS Schema Conversion Tool (SCT) is designed for heterogeneous migrations (e.g., Oracle to Aurora) or schema conversion, not for minimizing downtime in a homogeneous MySQL-to-RDS migration; it does not provide ongoing replication to reduce cutover time.

Practice this question →

236

MCQhard

Refer to the exhibit. A company is migrating its data to Amazon S3. The security team has provided this IAM policy for the migration user. However, the migration fails with an Access Denied error when trying to upload files to the bucket. What is the most likely cause?

A.The bucket policy explicitly denies the s3:PutObject action for the IAM user.

B.The IAM policy does not include s3:PutObject permission.

C.The IAM policy does not include kms:Decrypt permission.

D.The bucket has default encryption enabled and the IAM user does not have permission to use the encryption key.

AnswerA

A bucket policy with a deny statement would override the IAM allow, causing Access Denied.

Why this answer

The IAM policy allows s3:PutObject on the specified bucket. However, if the bucket has an explicit deny statement in its bucket policy that denies s3:PutObject for the user or any principal, that deny will override the IAM policy allow. Since the migration fails with Access Denied, the most likely cause is that the bucket policy explicitly denies the s3:PutObject action for the IAM user.

Therefore, Option A is correct. Options B, C, and D are incorrect: Option B is wrong because the IAM policy does include s3:PutObject; Option C is wrong because there is no encryption requirement in the policy; Option D is wrong because default encryption does not cause Access Denied if the user lacks permission to use the key, but the policy does not mention KMS permissions.

Practice this question →

237

MCQmedium

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database size is 2 TB and the network bandwidth between the on-premises data center and AWS is 100 Mbps. The company needs to minimize the migration time and wants to use AWS DMS. Which approach should they take?

A.Use AWS Database Migration Service (DMS) with AWS Direct Connect to increase bandwidth.

B.Use AWS DMS with a full load over the network, then ongoing replication.

C.Use AWS DMS with AWS Snowball Edge for the full load, then ongoing replication.

D.Use AWS Schema Conversion Tool (SCT) to convert the schema and then AWS DMS for full load.

AnswerC

Snowball Edge accelerates initial load; ongoing replication uses DMS.

Why this answer

AWS Snowball Edge can be used with AWS DMS to transfer the full load of large databases over a physical device, avoiding long upload times over limited bandwidth. After the full load, ongoing replication via DMS handles changes. Option A is incorrect because Direct Connect does not increase bandwidth beyond the 100 Mbps limit; it only provides a dedicated connection.

Option B is incorrect because a full load over the network at 100 Mbps would take too long for 2 TB. Option D is incorrect because Schema Conversion Tool (SCT) is used for heterogeneous migrations (e.g., Oracle to PostgreSQL), but here the target is also Oracle (homogeneous), so SCT is unnecessary.

Practice this question →

238

MCQmedium

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database is 2 TB in size and has a 24-hour migration window. The company has a 1 Gbps dedicated connection to AWS. Which migration approach minimizes downtime?

A.Use AWS Schema Conversion Tool (AWS SCT) to convert the schema and AWS DMS for full load only.

B.Use native Oracle Data Pump export and import to transfer the database over the dedicated connection.

C.Use AWS Database Migration Service (AWS DMS) with ongoing replication from the on-premises database to Amazon RDS.

D.Use AWS DataSync to copy the database files to Amazon S3, then restore to Amazon RDS.

AnswerC

Ongoing replication minimizes downtime by keeping the target in sync until cutover.

Why this answer

AWS DMS with ongoing replication allows continuous data synchronization, minimizing downtime by enabling a cutover with minimal data loss. Option A is wrong because AWS SCT is for schema conversion, not data migration. Option B is wrong because a native Oracle export/import requires downtime for the export and import operations.

Option D is wrong because AWS DataSync is for file-based data, not databases.

Practice this question →

239

MCQeasy

A company is migrating its SAP environment to AWS and needs to ensure that the SAP systems can communicate with each other using their hostnames without relying on a DNS service. Which AWS feature should be used?

A.Network Load Balancer (NLB)

B.Security Group rules

C.VPC Peering

D.Amazon Route 53 private hosted zone

AnswerD

Private hosted zones enable DNS resolution within VPCs.

Why this answer

Amazon Route 53 private hosted zones allow DNS resolution for custom domain names (such as hostnames) within Amazon VPCs without requiring an external DNS service. Option A (Network Load Balancer) is incorrect because an NLB distributes incoming traffic across targets, it does not provide DNS resolution. Option B (Security Group rules) is incorrect because security groups act as virtual firewalls to control traffic, not DNS.

Option C (VPC Peering) is incorrect because VPC peering connects networks at the IP level but does not offer hostname resolution. Option D is correct because a Route 53 private hosted zone is specifically designed for DNS resolution within VPCs, enabling hostname-based communication between SAP systems.

Practice this question →

240

MCQeasy

A company plans to migrate 50 TB of archived data from on-premises tape storage to Amazon S3 Glacier Deep Archive. The data is rarely accessed. Which migration method is most cost-effective and suitable for the data volume?

A.AWS DataSync

B.AWS CLI with multipart upload

C.AWS Snowball Edge

D.AWS Database Migration Service (DMS)

AnswerC

Snowball Edge is designed for large offline data transfers.

Why this answer

AWS Snowball Edge is a physical device that can transfer large amounts of data offline, avoiding high network costs. For 50 TB, Snowball Edge is cost-effective and efficient. Option C is correct.

Option A (AWS DataSync) is for network-based transfers, which may be slow and costly for 50 TB. Option B (AWS CLI with multipart upload) would require significant network bandwidth and time. Option D (AWS Database Migration Service) is for database migration.

Practice this question →

241

Multi-Selectmedium

A company is migrating SAP to AWS and needs to set up connectivity between on-premises and AWS VPC with high bandwidth and low latency. Which TWO AWS services should be used? (Choose TWO.)

Select 2 answers

A.AWS Transit Gateway

B.AWS Client VPN

C.AWS VPN CloudHub

D.AWS Site-to-Site VPN

E.AWS Direct Connect

AnswersA, E

AWS Transit Gateway is correct because it provides a central hub to connect multiple VPCs and on-premises networks, enabling high-bandwidth, low-latency connectivity.

Why this answer

AWS Direct Connect provides a dedicated network connection with high bandwidth and low latency, ideal for SAP migration. AWS Transit Gateway allows central management of connectivity between multiple VPCs and on-premises networks, simplifying network architecture. Options B, C, and D are incorrect: AWS Client VPN is for remote user access, not site-to-site; AWS VPN CloudHub connects multiple VPN connections but lacks dedicated bandwidth; AWS Site-to-Site VPN uses the public internet, which cannot guarantee the low latency and high bandwidth required for SAP workloads.

Practice this question →

242

MCQeasy

A company is migrating its SAP systems to AWS and needs to ensure high availability for the SAP Central Services (ASCS) instance. Which AWS service can be used to implement a failover cluster for ASCS?

A.Amazon S3

B.Application Load Balancer (ALB)

C.AWS using shared file system and DNS-based failover

D.Amazon RDS Multi-AZ

AnswerC

Shared file system (e.g., EFS) with DNS-based routing provides ASCS failover.

Why this answer

For SAP ASCS failover, AWS recommends using a shared file system (e.g., Amazon EFS) combined with DNS-based failover via Route53. This provides high availability without requiring additional clustering software. Option C correctly describes this approach.

Option A (Amazon S3) is object storage, not suitable for ASCS. Option B (Application Load Balancer) handles inbound traffic, not ASCS clustering. Option D (Amazon RDS Multi-AZ) is for database high availability, not ASCS.

Practice this question →

243

Multi-Selecteasy

Which TWO AWS services can be used to migrate on-premises SAP systems to AWS? (Choose 2.)

Select 2 answers

A.AWS Schema Conversion Tool (SCT)

B.AWS Direct Connect

C.AWS Server Migration Service (SMS)

D.AWS Database Migration Service (DMS)

E.Amazon CloudFront

AnswersC, D

SMS is used for server-level migration.

Why this answer

AWS Server Migration Service (SMS) is correct because it automates the replication of live on-premises servers, including SAP application servers, to AWS as Amazon Machine Images (AMIs). This allows you to migrate the entire SAP server stack (OS, SAP binaries, configurations) without needing to reinstall or reconfigure the SAP software, making it ideal for lift-and-shift migrations.

Exam trap

The trap here is that candidates often confuse AWS DMS as only a database migration tool and overlook that it can also migrate SAP databases (e.g., SAP HANA, SAP ASE) to AWS, while simultaneously thinking that AWS SCT (a schema conversion tool) is needed for SAP migrations, when in fact SCT is irrelevant for SAP systems that are not changing database engines.

Practice this question →

244

MCQmedium

A company is migrating their SAP ERP system running on an on-premises IBM Db2 database to Amazon RDS for Db2. The migration must have minimal downtime. The current database size is 2 TB. The network link between on-premises and AWS is 1 Gbps. The migration team plans to use AWS DMS with a full load followed by ongoing replication. During a test migration, they notice that the full load takes longer than expected, causing the change data capture (CDC) lag to grow. They need to adjust the migration approach to meet the downtime window. What should they do?

A.Use multiple DMS tasks in parallel for the full load

B.Increase the compute capacity of the DMS replication instance

C.Create an RDS read replica to offload the initial load

D.Use AWS Snowball to transfer the initial load and then resume CDC

AnswerB

Increasing the compute capacity of the DMS replication instance provides more processing power to handle the full load faster, reducing the time taken and preventing CDC lag from growing.

Why this answer

Increasing the compute capacity of the DMS replication instance provides more processing power to handle the full load faster, reducing the time taken and preventing CDC lag from growing. Option A is incorrect because using multiple DMS tasks in parallel can cause conflicts and may not improve performance due to constraints on the source database. Option C is incorrect because an RDS read replica cannot offload the initial load from an on-premises source.

Option D is incorrect because using Snowball for offline transfer would interrupt ongoing replication and is not suitable for minimal downtime.

Practice this question →

245

Multi-Selectmedium

A company is migrating an SAP system to AWS and wants to ensure that the migration process is compliant with SAP's requirements. Which TWO of the following are recommended practices? (Choose 2)

Select 2 answers

A.Use a database engine that is not supported by SAP to reduce licensing costs.

B.Skip the testing phase to accelerate the migration timeline.

C.Reduce the memory allocation of the SAP application to save costs.

D.Follow SAP migration notes and best practices.

E.Use EC2 instance types that are certified by SAP for the specific SAP workload.

AnswersD, E

SAP provides detailed notes for migration.

Why this answer

Using certified EC2 instance types and following SAP notes are mandatory. Reducing memory is not recommended. Using unsupported DB engines violates compliance.

Skipping testing is risky.

Practice this question →

246

MCQmedium

An organization is migrating a large SAP HANA workload to AWS. The current on-premises environment uses IBM Spectrum Scale (GPFS) for shared storage. Which AWS storage solution should they use to provide a similar shared file system for SAP HANA?

A.Amazon S3

B.Amazon Elastic Block Store (EBS)

C.Amazon FSx for NetApp ONTAP

D.Amazon Elastic File System (EFS)

AnswerC

FSx for ONTAP provides a high-performance shared file system compatible with SAP HANA.

Why this answer

Amazon FSx for NetApp ONTAP provides a fully managed shared file system that supports NFS, SMB, and iSCSI protocols, and can replace GPFS for SAP HANA. EBS is block storage not shared. S3 is object storage.

EFS is NFS but lacks some enterprise features needed for HANA.

Practice this question →

247

MCQmedium

A company is migrating an SAP HANA database to AWS. The database is 2 TB in size and runs on a single server. The company needs to minimize downtime during the migration. Which AWS service should be used for the initial data transfer?

A.AWS Snowball Edge

B.AWS Database Migration Service (DMS) with ongoing replication

C.AWS Direct Connect

D.Amazon S3 Transfer Acceleration

AnswerA

Snowball Edge provides a physical device for large data transfer, minimizing network usage and downtime.

Why this answer

AWS Snowball Edge is a physical device designed for large-scale data transfer, allowing the 2 TB SAP HANA database to be shipped to AWS, bypassing network limitations and minimizing downtime. Option B is incorrect because AWS DMS with ongoing replication is intended for continuous synchronization after initial load, not for the initial bulk transfer, and still relies on network speed. Option C is incorrect because AWS Direct Connect provides a dedicated network connection but does not eliminate transfer time for large datasets like 2 TB.

Option D is incorrect because Amazon S3 Transfer Acceleration speeds up uploads over the public internet, but for 2 TB, network transfer would still be slower and less predictable than a physical device.

Practice this question →

248

MCQhard

A company is migrating a large SAP HANA workload to AWS. The source system runs on IBM Power Systems. They need to ensure that the target AWS infrastructure meets SAP certification requirements. Which EC2 instance type should they choose?

A.m5.24xlarge

B.c5.18xlarge

C.i3en.24xlarge

D.x1e.32xlarge

AnswerD

x1e instances are SAP HANA certified and memory-optimized.

Why this answer

x1e.32xlarge is certified for SAP HANA production workloads. Therefore, Option D is correct. Option A (m5.24xlarge) is a general-purpose instance and not certified for SAP HANA.

Option B (c5.18xlarge) is compute-optimized and not suitable for SAP HANA's memory requirements. Option C (i3en.24xlarge) is storage-optimized and not SAP HANA certified.

Practice this question →

249

MCQeasy

A company is migrating an SAP system to AWS and needs to retain the same hostname for the SAP application server after migration. Which configuration should the company use?

A.Assign an Elastic IP to the EC2 instance and update the /etc/hosts file

B.Create a private hosted zone in Amazon Route 53 with an A record

C.Create a CNAME record in a public hosted zone pointing to the EC2 instance

D.Use a public hosted zone in Route 53 with an A record

AnswerB

Provides internal DNS resolution within VPC.

Why this answer

A private hosted zone in Amazon Route 53 allows you to create an A record that maps a custom hostname to the private IP address of an EC2 instance. This ensures that the SAP application server retains the same hostname after migration, as DNS resolution within the VPC will consistently return the instance's private IP, regardless of instance changes or restarts.

Exam trap

The trap here is that candidates often confuse Elastic IPs with hostname persistence, assuming a static public IP is sufficient, but SAP systems rely on internal hostname resolution via DNS or /etc/hosts, not public IPs, and a private hosted zone provides the necessary centralized, scalable DNS solution within the VPC.

How to eliminate wrong answers

Option A is wrong because assigning an Elastic IP to the EC2 instance only provides a static public IP, but the hostname resolution still relies on DNS or /etc/hosts; updating /etc/hosts is a manual, non-scalable solution that does not provide centralized DNS management and can break if the instance IP changes. Option C is wrong because a CNAME record in a public hosted zone points to a DNS name (e.g., the EC2 instance's public DNS), not to the instance directly, and public hosted zones are accessible from the internet, which is unnecessary and introduces security risks for an internal SAP system. Option D is wrong because a public hosted zone with an A record would expose the SAP application server's hostname to the public internet, which is not required for internal migration and violates security best practices.

Practice this question →

250

MCQmedium

A company is migrating a highly critical SAP HANA database to AWS. They need to ensure data consistency and minimal downtime. Which approach should they use?

A.Create an AMI of the on-premises HANA server and launch it on AWS

B.Use AWS DMS with ongoing replication

C.Export HANA data to S3 and import into a new HANA instance

D.Use SAP HANA system replication and AWS Launch Wizard

AnswerD

System replication provides low RPO/RTO; Launch Wizard simplifies deployment.

Why this answer

Using SAP HANA system replication (HSR) with AWS Launch Wizard ensures minimal downtime by providing real-time data replication to an AWS-hosted HANA instance, with Launch Wizard automating the setup and configuration. Option A (AMI) is incorrect because an AMI snapshots the entire server state but does not guarantee HANA data consistency and requires downtime. Option B (AWS DMS with ongoing replication) is not the best fit because DMS may not fully support HANA-specific replication features and can introduce complexity.

Option C (export to S3 and import) is incorrect because it incurs significant downtime for export/import and does not provide continuous replication.

Practice this question →

251

MCQmedium

A company is migrating an on-premises SAP HANA database to AWS. The current HANA system uses 2 TB of storage and requires high IOPS. The company wants to use Amazon EBS for storage. Which EBS volume type is most suitable for the HANA data volume?

A.sc1

B.st1

C.gp3

D.io2 Block Express

AnswerD

io2 Block Express offers up to 256,000 IOPS and low latency, meeting HANA requirements.

Why this answer

SAP HANA requires high IOPS and low latency, and io2 Block Express provides the highest performance for such requirements. Option A is wrong because sc1 is a cold HDD, which provides low IOPS and is not suitable for SAP HANA. Option B is wrong because st1 is throughput-optimized HDD, designed for large sequential workloads, not for high IOPS.

Option C is wrong because gp3 is a general-purpose SSD; while it can provide up to 16,000 IOPS, io2 Block Express offers higher and more consistent IOPS and lower latency, making it the preferred choice for SAP HANA data volumes.

Practice this question →

252

MCQmedium

During the migration of an SAP HANA database to AWS, the migration team encounters high latency on the database connections. The team is using AWS Direct Connect. Which configuration change can help reduce latency?

A.Enable jumbo frames on the Direct Connect interface

B.Switch from Direct Connect to a VPN connection

C.Increase the bandwidth of the Direct Connect connection

D.Place the EC2 instances in the same Availability Zone

AnswerA

Enabling jumbo frames allows larger packets, reducing the number of packets and overhead, which can reduce latency for large transfers like SAP HANA.

Why this answer

Enabling jumbo frames reduces overhead by allowing larger packets, which can improve latency for large data transfers. Option B is incorrect because a VPN connection adds encapsulation overhead and can increase latency. Option C is incorrect because increasing bandwidth increases throughput but does not reduce latency; latency is affected by packet size and network path.

Option D is incorrect because placing EC2 instances in the same Availability Zone reduces physical distance but does not guarantee reduced latency if the network path is not optimized.

Practice this question →

253

Multi-Selectmedium

A company is migrating a SAP HANA database to AWS. Which THREE factors should be considered when choosing the EC2 instance type for SAP HANA?

Select 3 answers

A.The instance must be listed in the SAP HANA certified instance list.

B.The instance must have enough memory (RAM) to hold the entire HANA database.

C.The instance must have a GPU for accelerated processing.

D.The instance must be EBS-optimized by default.

E.The instance must have high network bandwidth for SAP HANA system replication.

AnswersA, B, E

Only certified instances support HANA.

Why this answer

Correct options: A, B, E. SAP HANA requires AWS certified instance types (A), enough memory to hold the database in RAM (B), and high network bandwidth for system replication (E). GPU is not required (C).

EBS-optimized is not a selection factor; it is a feature that may be enabled on certain instance types but not a primary consideration for choosing the instance type (D).

Exam trap

A common trap is to think that EBS-optimized is a requirement, but it is not; what matters is the instance being certified and having sufficient memory and network bandwidth.

Practice this question →

254

MCQhard

A company is migrating SAP HANA to AWS and needs to ensure high availability. The database must be replicated synchronously across two Availability Zones with automatic failover. Which AWS service should be used?

A.SAP HANA System Replication (HSR) with Pacemaker

B.Amazon EBS Multi-Attach volumes

C.AWS Database Migration Service (DMS)

D.Amazon RDS Multi-AZ deployment

AnswerA

HSR with Pacemaker provides synchronous replication and automatic failover.

Why this answer

SAP HANA System Replication (HSR) with Pacemaker provides synchronous replication and automatic failover, making it the appropriate solution for high availability across Availability Zones. Amazon EBS Multi-Attach is incorrect because it is limited to a single AZ and not designed for SAP HANA replication. AWS DMS is for database migration, not ongoing HA.

Amazon RDS Multi-AZ is for RDS databases and does not support SAP HANA.

Practice this question →

255

MCQeasy

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. They want to minimize downtime and ensure data consistency. Which AWS service should be used for the migration?

A.AWS Schema Conversion Tool (SCT)

B.AWS Database Migration Service (DMS)

C.AWS Server Migration Service (SMS)

D.AWS DataSync

AnswerB

DMS performs live data migration with minimal downtime.

Why this answer

AWS Database Migration Service (DMS) is designed for minimal-downtime database migrations. Option B is correct. Option A (SCT) is used for schema conversion, not the migration itself.

Option C (Server Migration Service) is for server-level migrations. Option D (DataSync) is for file-based data transfer.

Practice this question →

256

Multi-Selecteasy

Which TWO components are typically migrated as part of an SAP workload migration to AWS?

Select 2 answers

A.AWS KMS encryption keys.

B.SAP Central Services (ASCS/SCS).

C.AWS Direct Connect virtual interface.

D.IAM roles and policies.

E.SAP HANA database.

AnswersB, E

Application services are migrated.

Why this answer

When migrating an SAP workload to AWS, the key components that are typically migrated include SAP Central Services (ASCS/SCS) and the SAP HANA database. These are core parts of the SAP system. Option A is incorrect because AWS KMS encryption keys are infrastructure security components, not part of the workload itself.

Option C is incorrect because AWS Direct Connect is a network connectivity service, not migrated. Option D is incorrect because IAM roles and policies are AWS access control mechanisms, not workload components.

Practice this question →

257

MCQhard

A company is migrating an SAP Business Suite system on Oracle to SAP S/4HANA on AWS. The migration involves a near-zero downtime requirement. The current system uses SAP Oracle on Linux. Which combination of tools should the company use?

A.Use AWS Schema Conversion Tool (AWS SCT) and AWS Database Migration Service (AWS DMS) with ongoing replication.

B.Use AWS Database Migration Service (AWS DMS) to migrate the Oracle database to Amazon RDS for SAP HANA.

C.Use SAP Landscape Transformation (SLT) to replicate data to SAP HANA, then switch applications.

D.Use SAP Software Update Manager (SUM) with the Database Migration Option (DMO) and the near-zero downtime option.

AnswerD

SUM DMO with NZDT is the SAP-recommended approach for near-zero downtime migration to S/4HANA.

Why this answer

For migrating an SAP Business Suite on Oracle to SAP S/4HANA with near-zero downtime, the recommended tool is SAP Software Update Manager (SUM) with the Database Migration Option (DMO) and the near-zero downtime (NZDT) option. This allows for a combined system upgrade and database migration with minimal downtime. Option A is incorrect because AWS SCT is not designed for SAP HANA migrations.

Option B is incorrect because AWS DMS does not support SAP HANA as a target. Option C is incorrect because SLT is used for data replication, not for system conversion or migration.

Practice this question →

258

MCQmedium

A company is migrating an SAP BW system to AWS. The source runs on Oracle. The target is SAP HANA. Which AWS service can help with the migration of custom ABAP code and stored procedures?

A.AWS Schema Conversion Tool (AWS SCT)

B.SAP HANA Studio

C.SAP DMO

D.AWS Database Migration Service (AWS DMS)

AnswerA

SCT can convert stored procedures and ABAP code to SQLScript.

Why this answer

AWS SCT can convert Oracle PL/SQL and ABAP code to SAP HANA SQLScript. SAP HANA Studio can manually rewrite but not automate. AWS DMS does not handle code.

SAP DMO is for system migration but may not convert custom code as efficiently as SCT.

Practice this question →

259

MCQmedium

A company is migrating its SAP NetWeaver system to AWS. The system uses an Oracle database. The company wants to use the SAP Software Provisioning Manager (SWPM) to perform a system copy. The target database will be Amazon RDS for Oracle. Which of the following backup types can be used as the source for the SWPM system copy?

A.An Oracle Data Pump export

B.An AWS DMS snapshot of the Oracle database

C.An Oracle Export utility (exp) dump

D.An Oracle RMAN backup

AnswerD

SWPM accepts RMAN backups as source.

Why this answer

SAP Software Provisioning Manager (SWPM) supports using Oracle Recovery Manager (RMAN) backups as the source for a system copy to Amazon RDS for Oracle. Options A, B, and C are incorrect because SWPM does not support Oracle Data Pump exports, AWS DMS snapshots, or Oracle Export utility dumps as direct input for the system copy process.

Practice this question →

260

MCQhard

A company is migrating SAP applications to AWS and needs to test the migration process without affecting the production environment. Which AWS service should be used to create an isolated test environment?

A.AWS CodePipeline

B.AWS Service Catalog

C.AWS OpsWorks

D.AWS CloudFormation

AnswerD

CloudFormation can create isolated stacks for testing.

Why this answer

AWS CloudFormation (option D) allows you to create an isolated test environment using infrastructure as code (IaC) templates, enabling you to replicate the production setup without affecting the live environment. Option A is wrong because AWS CodePipeline is a CI/CD service for automating build, test, and deploy pipelines, not for creating test environments. Option B is wrong because AWS Service Catalog is for creating and managing catalogs of IT services, not for provisioning isolated test environments.

Option C is wrong because AWS OpsWorks is a configuration management service using Chef and Puppet, not primarily for creating isolated test environments. Therefore, D is correct.

Practice this question →

261

MCQeasy

A company is migrating their SAP Business Warehouse (BW) system to AWS. They want to use Amazon S3 for BW near-line storage (NLS). They have set up an S3 bucket and configured the SAP BW NLS connection. However, when they test the connection, it fails. What is the MOST likely cause?

A.The S3 bucket is encrypted with AWS KMS and SAP cannot access it

B.The S3 bucket name does not match the AWS region

C.The S3 bucket is not configured for multipart uploads

D.Missing AWS Storage Gateway File Gateway setup between SAP and S3

AnswerD

SAP BW NLS needs a file interface like File Gateway.

Why this answer

SAP BW near-line storage (NLS) requires an S3-compatible interface. AWS Storage Gateway File Gateway provides a file system interface that SAP can mount and use as NLS, bridging the gap between SAP's NFS-based requirements and Amazon S3 object storage. Option A is incorrect: KMS encryption does not block SAP access; SAP can be configured to access encrypted buckets.

Option B is incorrect: S3 bucket names are globally unique, so a name mismatch with region is not possible. Option C is incorrect: Multipart uploads are enabled by default for all S3 buckets and are not a prerequisite for NLS.

Practice this question →

262

MCQmedium

A company is migrating an SAP HANA database to AWS. The source system uses a Linux filesystem with a specific block size. After migration, the performance is lower than expected. What is the most likely cause?

A.The EC2 instance is not in a placement group

B.The Amazon EBS volume is not provisioned with enough IOPS

C.The Amazon EBS volume block size does not match the SAP HANA requirements

D.The EBS volume encryption is enabled, causing overhead

AnswerC

SAP HANA requires 4 KiB block size on AWS, mismatch reduces performance.

Why this answer

SAP HANA on AWS requires the EBS volume to have a block size that matches SAP HANA's requirements (typically 4 KiB). If the source system used a different block size (e.g., 512 bytes), performance degradation can occur. Option A (placement group) affects network latency, not block size performance.

Option B (IOPS) is provisioned, but even with sufficient IOPS, block size mismatch can cause poor performance. Option D (encryption) does not impact block size or performance significantly.

Practice this question →

263

Multi-Selecteasy

A company is migrating an on-premises data center to AWS. The company needs to transfer 50 TB of data to Amazon S3. Which TWO AWS services can be used for this data transfer?

Select 2 answers

A.AWS Snowball Edge

B.AWS Application Migration Service (MGN)

C.AWS CloudFormation

D.AWS DataSync

E.AWS Database Migration Service (DMS)

AnswersA, D

Physical device for offline transfer.

Why this answer

AWS Snowball Edge is a petabyte-scale data transport solution that uses secure physical devices to transfer large amounts of data into and out of AWS. For a 50 TB migration, Snowball Edge provides a faster and more reliable option than internet-based transfers, as it avoids bandwidth limitations and long transfer times. The device is shipped to the customer, data is copied locally, and then returned to AWS for ingestion into Amazon S3.

Exam trap

The trap here is that candidates may confuse AWS DataSync with AWS DMS or think that AWS Application Migration Service can handle bulk file transfers, but DataSync is specifically optimized for large-scale file and object transfers to S3, while Snowball Edge is the offline alternative for very large datasets.

Practice this question →

264

MCQeasy

A company is migrating a custom CRM application to AWS. The application uses a PostgreSQL database. Which migration approach minimizes downtime?

A.Use AWS Database Migration Service (DMS) with ongoing replication (CDC).

B.Use AWS Backup to create a snapshot and restore to RDS.

C.Take a full backup of the source database, restore to RDS for PostgreSQL, and then cut over.

D.Use pg_dump to export the database and pg_restore to import into RDS.

AnswerA

DMS with CDC allows continuous sync and minimal downtime.

Why this answer

AWS Database Migration Service (DMS) with ongoing change data capture (CDC) enables near-zero downtime migration by continuously replicating changes from the source to the target until cutover. Options B, C, and D all require taking the source database offline for backup or export, resulting in significant downtime.

Practice this question →

265

Matchingmedium

Match the SAP transport type to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

For ABAP development objects

For configuration changes

Copies transport without original history

Moves objects between systems preserving change history

Why these pairings

Workbench transports carry repository objects (ABAP programs, dictionary objects), while Customizing transports carry client-specific configuration. Transport of Copies duplicates existing transport requests. Common confusions involve swapping these definitions.

Practice this question →

266

MCQhard

Refer to the exhibit. An administrator runs the CLI command to check the status of SAP application instances. The output shows two instances. The administrator needs to stop the running instance and start the stopped instance for a planned migration. Which command should they run?

A.aws ec2 start-instances --instance-ids i-0dcba4321hgfe8765 && aws ec2 stop-instances --instance-ids i-0abcd1234efgh5678

B.aws ec2 start-instances --instance-ids i-0abcd1234efgh5678 && aws ec2 stop-instances --instance-ids i-0dcba4321hgfe8765

C.aws ec2 start-instances --instance-ids i-0abcd1234efgh5678 && aws ec2 stop-instances --instance-ids i-0abcd1234efgh5678

D.aws ec2 stop-instances --instance-ids i-0dcba4321hgfe8765 && aws ec2 start-instances --instance-ids i-0dcba4321hgfe8765

AnswerB

This correctly starts the stopped instance and stops the running instance.

Why this answer

They need to start i-0abcd1234efgh5678 (stopped) and then stop i-0dcba4321hgfe8765 (running). Option A is wrong because the order is reversed. Option C is wrong because they start the wrong instance.

Option D is wrong because they stop the wrong instance.

Practice this question →

267

MCQhard

A company is migrating a multi-tier application to AWS and wants to ensure high availability. The application has a web tier, application tier, and database tier. The database is currently running on a single on-premises server. Which migration strategy minimizes downtime and provides the HIGHEST availability for the database tier?

A.Use AWS Database Migration Service (DMS) to migrate to Amazon RDS in a single-AZ deployment, then manually take snapshots.

B.Migrate the database to a single large Amazon EC2 instance using AWS Application Migration Service.

C.Use AWS DMS to migrate the database to Amazon RDS Multi-AZ deployment.

D.Migrate to Amazon RDS with Multi-AZ deployment and use DMS for initial load.

AnswerC

DMS can perform the initial migration with minimal downtime, and RDS Multi-AZ provides synchronous standby for automatic failover, ensuring high availability.

Why this answer

AWS DMS can perform a live migration with minimal downtime by continuously replicating changes from the source database to the target Amazon RDS Multi-AZ deployment. Multi-AZ provides automatic failover to a standby replica in a different Availability Zone, ensuring the highest availability for the database tier. This combination minimizes downtime during migration and provides built-in high availability post-migration.

Exam trap

The trap here is that candidates often think migrating to a single-AZ RDS with snapshots is sufficient for high availability, but they overlook that Multi-AZ is required for automatic failover and that DMS should be used for the migration itself, not as an afterthought.

How to eliminate wrong answers

Option A is wrong because a single-AZ RDS deployment does not provide high availability; if the AZ fails, the database becomes unavailable until manual recovery from snapshots, which incurs significant downtime. Option B is wrong because migrating to a single large EC2 instance creates a single point of failure; if the instance or its underlying hardware fails, the database is unavailable, and there is no automatic failover. Option D is wrong because it reverses the recommended order: you should use DMS for the initial load and ongoing replication to a Multi-AZ target, not migrate first and then use DMS; the described approach would require an additional migration step and does not leverage DMS for minimizing downtime.

Practice this question →

268

MCQeasy

A company is migrating an SAP NetWeaver system to AWS. The system uses SAProuter for secure network communication. What is the recommended approach to preserve the SAProuter functionality during the migration?

A.Deploy SAProuter on an EC2 instance with an Elastic IP address

B.Use an AWS NAT Gateway to route traffic

C.Establish an AWS Site-to-Site VPN connection

D.Use an AWS Application Load Balancer

AnswerA

EC2 with Elastic IP provides a stable endpoint and allows existing SAProuter rules to be reused.

Why this answer

Deploying SAProuter on an EC2 instance with an Elastic IP address preserves the existing SAProuter configuration and ensures a stable endpoint that can be referenced in firewall rules and SAP routing tables. Option B (AWS NAT Gateway) is incorrect because a NAT Gateway is used for outbound internet traffic from private subnets and does not provide a persistent inbound endpoint for SAProuter connections. Option C (AWS Site-to-Site VPN) is incorrect because while a VPN provides secure connectivity between on-premises and AWS, it does not replace the need for SAProuter, which operates at the application layer.

Option D (Application Load Balancer) is incorrect because an ALB is designed for HTTP/HTTPS traffic and cannot handle the proprietary protocol used by SAProuter.

Practice this question →

269

MCQeasy

An organization is planning a migration of SAP applications to AWS. Which AWS service should be used to track and manage the migration project's tasks and milestones?

A.AWS Config

B.AWS Systems Manager

C.AWS Migration Hub

D.AWS CloudFormation

AnswerC

AWS Migration Hub is designed exactly for this purpose: it tracks migration tasks and milestones across multiple tools.

Why this answer

AWS Migration Hub provides a single location to track migration progress across multiple AWS and partner tools, making it the appropriate service for managing migration project tasks and milestones. AWS Config (Option A) is for compliance and resource tracking, not migration management. AWS Systems Manager (Option B) is for operational management, not migration tracking.

AWS CloudFormation (Option D) is for infrastructure as code. Therefore, Option C is correct.

Exam trap

Trap: Candidates may think AWS Systems Manager (B) is for migration because of its 'Automation' features, but it is not a migration tracking service.

Practice this question →

270

Multi-Selecthard

A company is migrating its SAP landscape to AWS and plans to use an SAP HANA multi-node scale-out configuration. Which THREE considerations are important for the network design?

Select 3 answers

A.Use a placement group to ensure nodes are in close proximity

B.Dedicate a separate network interface for HANA inter-node traffic

C.Use a NAT Gateway for inter-node traffic

D.Use public IP addresses for inter-node communication

E.Ensure low latency (less than 1ms RTT) between all nodes

AnswersA, B, E

Placement groups reduce latency between instances.

Why this answer

For SAP HANA multi-node scale-out on AWS, three key network considerations are: using a placement group to ensure all nodes are in close physical proximity (option A), dedicating a separate network interface for HANA inter-node traffic to maximize performance (option B), and ensuring less than 1ms RTT latency between all nodes to meet HANA's strict requirements (option E). Option C (NAT Gateway) is incorrect because NAT Gateways provide outbound internet access, not inter-node connectivity. Option D (public IP addresses) is unnecessary and insecure for inter-node communication; private IPs with placement groups and low latency are sufficient.

Practice this question →

271

MCQhard

A company is migrating a large SAP S/4HANA system (8 TB total data, high I/O) from on-premises to AWS. The SAP system runs on HANA database and uses a three-tier architecture with application servers and database servers. The migration plan must minimize downtime and ensure data consistency. The company has a 10 Gbps direct connection to AWS. They have considered using AWS DMS, but the database is SAP HANA, which is not supported as a source by DMS. The migration team needs to transfer the HANA database and also the application files. They also need to replicate ongoing changes to minimize downtime. Which combination of AWS services should the migration team use? (Choose the best answer.)

A.Use AWS Application Migration Service (MGN) for the application servers. Use HANA Backint agent to back up the database to S3 and perform incremental backups for ongoing replication.

B.Use AWS DataSync to copy the entire HANA database files (data and log volumes) and application files to AWS. Then restore from the copied files.

C.Use AWS Database Migration Service (DMS) with SAP HANA as a source by installing a custom connector. Use AWS DataSync for application files.

D.Use AWS DMS for the HANA database using a homogeneous migration. Use AWS MGN for the application servers.

AnswerA

MGN can replicate the application servers with minimal downtime. HANA Backint to S3 allows full and incremental backups, enabling point-in-time recovery and minimal downtime.

Why this answer

AWS DMS does not support SAP HANA as a source, eliminating options C and D. Option B (DataSync) can copy files but lacks ongoing replication to minimize downtime. Option A uses AWS MGN to replicate application servers continuously, and HANA Backint agent to back up the HANA database to S3 with incremental backups, enabling point-in-time recovery and minimal downtime.

This combination addresses both the database and application migration requirements effectively.

Practice this question →

272

MCQeasy

A company is migrating an on-premises application to AWS. The application requires low-latency access to a shared file system that can be mounted by multiple EC2 instances simultaneously. Which storage solution should they use?

A.Amazon Elastic File System (EFS)

B.Amazon Elastic Block Store (EBS)

C.Amazon Simple Storage Service (S3)

D.Amazon EC2 Instance Store

AnswerA

EFS is a managed NFS file system for multiple instances.

Why this answer

Amazon EFS provides a scalable, shared file system for multiple EC2 instances. Option A is correct. Option B is wrong because EBS volumes can be attached to only one instance.

Option C is wrong because S3 is object storage, not a file system. Option D is wrong because Instance Store is ephemeral.

Practice this question →

273

MCQeasy

A company is planning to migrate a legacy Oracle database to Amazon RDS for Oracle. The database is 500 GB and has a 24/7 workload. The company needs minimal downtime. Which AWS service should be used for the migration?

A.AWS Command Line Interface (CLI)

B.AWS Schema Conversion Tool (SCT)

C.AWS Snowball

D.AWS Database Migration Service (DMS)

AnswerD

DMS supports minimal-downtime migrations with ongoing replication.

Why this answer

AWS Database Migration Service (DMS). AWS DMS supports homogeneous migrations (Oracle to Oracle) and can perform minimal-downtime migrations by using change data capture (CDC) to replicate ongoing changes after the initial full load. Option A (AWS CLI) is not a migration service; it's a command-line tool for managing AWS services.

Option B (AWS Schema Conversion Tool) is used for converting schema when migrating between different database engines, not for data migration itself. Option C (AWS Snowball) is a physical data transfer device for large datasets, but it does not support minimal-downtime online migrations for a 24/7 workload.

Practice this question →

274

MCQhard

Refer to the exhibit. An EC2 instance is running and has a public IP address. A security engineer needs to verify that the instance is not publicly accessible from the internet. Which additional step is required?

A.Check if the instance has a public IP.

B.Check the route table for an internet gateway.

C.Check the security group inbound rules.

D.Check the network ACL of the subnet.

AnswerC

The security group inbound rules explicitly control which traffic is allowed to reach the instance. To verify that the instance is not publicly accessible, you must check that no inbound rules allow traffic from 0.0.0.0/0 or any other public source.

Why this answer

Security group inbound rules determine whether traffic from the internet is allowed to reach the instance. Option A is incorrect because having a public IP does not guarantee accessibility; the security group must allow inbound traffic. Option B is incorrect because the route table's internet gateway entry is necessary but not sufficient; inbound rules must permit access.

Option D is incorrect because network ACLs provide stateless filtering at the subnet level, but the question specifically requires verifying that the instance is not publicly accessible, which is primarily controlled by security group inbound rules.

Practice this question →

275

MCQmedium

A company is migrating an SAP system to AWS and needs to ensure that the migration complies with regulatory requirements for data residency. The source system is in Germany and the target AWS Region is Frankfurt. Which step should be taken to address data residency?

A.Use AWS Artifact to review and accept the Data Processing Agreement (DPA) for the Frankfurt region.

B.Enable cross-region replication to the eu-west-1 (Ireland) region for disaster recovery.

C.Use AWS Database Migration Service (AWS DMS) with ongoing replication to a secondary cluster in Frankfurt.

D.Configure AWS Config rules to prevent data from leaving the Frankfurt region.

AnswerA

AWS Artifact provides compliance documents and DPAs that address data residency requirements.

Why this answer

AWS Artifact provides access to the Data Processing Agreement (DPA) for the Frankfurt region. Reviewing and accepting this DPA ensures contractual compliance with EU data residency requirements. Option B is incorrect because enabling cross-region replication to eu-west-1 (Ireland) would move data out of Frankfurt, violating data residency.

Option C is incorrect because using AWS DMS with ongoing replication does not provide a contractual guarantee of data residency; it only enables data movement within or across regions. Option D is incorrect because AWS Config rules can monitor and alert on resource configurations but cannot enforce data residency at a contractual or legal level.

Practice this question →

276

MCQmedium

An organization is migrating a legacy Windows-based .NET application to AWS. The application currently uses IIS and SQL Server on a single server. They want to minimize changes to the application code. Which migration strategy is most appropriate?

A.Replatform by moving to Amazon RDS for SQL Server and Elastic Beanstalk

B.Rehost the application on Amazon EC2 with the same OS and database

C.Refactor the application to use a microservices architecture

D.Repurchase by moving to a SaaS-based application

AnswerB

Rehosting moves the workload as-is, minimizing code changes.

Why this answer

Rehosting (lift-and-shift) involves moving the application to AWS as-is, typically using Amazon EC2, which minimizes code changes. Option B is correct. Option A (Replatform) would involve moving to Amazon RDS for SQL Server and Elastic Beanstalk, which may require some configuration changes.

Option C (Refactor) would require significant code changes to adopt microservices. Option D (Repurchase) means buying a new SaaS product, which is not minimal change.

Practice this question →

277

MCQhard

A company is migrating a large SAP ERP system to AWS. The system has multiple interfaces with external systems using RFC connections. During the migration, the team needs to minimize changes to the external systems' configurations. What approach should be taken for the RFC connections?

A.Change the external systems to use DNS names instead of IP addresses

B.Use the private IP address of the EC2 instance

C.Use a NAT Gateway to route the RFC traffic

D.Assign an Elastic IP address to the SAP application server

AnswerD

Assigning an Elastic IP address ensures that the public IP address remains the same after migration, so external systems do not need to update their RFC connection configurations.

Why this answer

Assigning an Elastic IP address to the SAP application server ensures that the public IP address remains the same after migration, so external systems do not need to update their RFC connection configurations. Option A (changing external systems to use DNS names) would require changes to external systems, which contradicts the goal of minimizing changes. Option B (using the private IP) would not be reachable from external systems over the internet.

Option C (NAT Gateway) is used for outbound traffic, not for inbound RFC connections. Option D (Elastic IP) correctly provides a static public IP address for inbound RFC traffic.

Practice this question →

278

MCQhard

A company is migrating an SAP BusinessObjects (BO) system to AWS. The system includes a large number of reports and users. What is the recommended approach to migrate the SAP BO repository?

A.Reinstall SAP BO on AWS and manually copy the report files

B.Use AWS Database Migration Service (DMS) to replicate the repository database

C.Use the SAP BusinessObjects Promotion Management tool to export and import the repository

D.Manually extract the repository files from the database and copy them to AWS

AnswerC

Promotion Management is designed for this purpose.

Why this answer

SAP BusinessObjects provides a built-in Promotion Management tool for exporting and importing the repository, ensuring a clean migration of reports, users, and other content. Option A is incorrect because reinstalling and manually copying report files is error-prone and misses the repository structure. Option B is incorrect because AWS DMS is designed for database migration, not for SAP BO application-level content.

Option D is incorrect because manual extraction is not recommended and lacks integrity checks.

Practice this question →

279

MCQeasy

During a migration of an SAP system to AWS, the SAP application team reports that batch jobs are failing with an error 'RFC connection refused'. The on-premises system and AWS are connected via a VPN. What is the MOST likely cause?

A.The security group attached to the SAP instance does not allow inbound RFC traffic

B.The VPN bandwidth is insufficient causing timeouts

C.The network ACLs are blocking the RFC ports

D.The route table does not have a route to the on-premises network

AnswerA

Security group rules control inbound traffic to the instance.

Why this answer

Security groups act as a virtual firewall for EC2 instances, controlling inbound and outbound traffic. If the security group for the SAP instance does not allow inbound RFC traffic (e.g., on ports 3300 or 3200 for SAP RFC), connections will be refused. Option B (VPN bandwidth) would cause timeouts or slow transfers, not immediate connection refusal.

Option C (network ACLs) operates at the subnet level and stateless; they could block RFC ports, but since the error is specifically 'RFC connection refused' and it's a common misconfiguration, security groups are more likely the culprit. Option D (route table) is for routing traffic between networks; if there were no route to on-premises, traffic would not reach AWS at all, rather than being refused.

Practice this question →

280

MCQeasy

A manufacturing company is planning to migrate a legacy inventory application from a data center to AWS. The application runs on Windows Server 2012 R2 and uses a SQL Server 2014 database. The application requires low-latency access to a shared file system for storing CAD drawings. The current on-premises environment uses a SAN-based storage array for the database and a Windows File Server for the CAD files. The company wants to minimize operational overhead and avoid refactoring the application. The migration must be completed within 3 months. The company has already established a Direct Connect connection between the data center and AWS. Which migration strategy should the company use?

A.Use AWS App2Container to containerize the Windows application and deploy it on Amazon ECS. Migrate the database to Amazon RDS for SQL Server. Use Amazon EFS for the CAD file share.

B.Use AWS Database Migration Service (DMS) to migrate the SQL Server database to Amazon RDS for SQL Server. Use AWS Server Migration Service (SMS) to replicate the Windows server to an EC2 instance. Use AWS Storage Gateway file gateway to present the CAD files from Amazon S3.

C.Use AWS Application Migration Service (AWS MGN) to replicate the Windows server to an EC2 instance. Migrate the SQL Server database using native backup and restore. Use Amazon S3 with a VPC endpoint for the CAD file share, and mount S3 as a network drive using an S3 file gateway.

D.Use AWS Application Migration Service (AWS MGN) to replicate the on-premises Windows server to an EC2 instance. Migrate the SQL Server database using native backup and restore. Use Amazon FSx for Windows File Server to replace the on-premises file server, and mount the file share via SMB.

AnswerD

This minimizes refactoring, uses a managed file service, and supports SMB protocol required by the application.

Why this answer

It uses AWS Application Migration Service (AWS MGN) to lift-and-shift the Windows Server 2012 R2 instance without refactoring, native backup/restore for SQL Server 2014 to minimize complexity, and Amazon FSx for Windows File Server to provide a fully managed SMB file share with low-latency access for CAD drawings. This approach meets the 3-month timeline, avoids application refactoring, and reduces operational overhead by replacing the SAN and Windows File Server with managed AWS services.

Exam trap

The trap here is that candidates often choose Amazon EFS or S3 File Gateway for file shares, but they fail to recognize that the legacy Windows application requires SMB protocol and Windows-native features, which only Amazon FSx for Windows File Server provides without refactoring or additional complexity.

How to eliminate wrong answers

Option A is wrong because App2Container requires containerizing the application, which involves refactoring and does not meet the 'avoid refactoring' requirement; also, Amazon EFS uses NFS, not SMB, so it cannot natively replace a Windows File Server for CAD drawings without additional configuration. Option B is wrong because AWS Server Migration Service (SMS) has been deprecated and is not recommended for new migrations; additionally, AWS Storage Gateway file gateway introduces latency for low-latency CAD file access compared to a native SMB file share. Option C is wrong because mounting Amazon S3 as a network drive via S3 File Gateway uses NFS or SMB but incurs higher latency and lacks the native Windows file-sharing features (e.g., SMB protocol, Windows ACLs) required for CAD drawings; also, using a VPC endpoint for S3 does not provide a file-system interface.

Practice this question →

281

Multi-Selecteasy

A company is migrating an SAP system to AWS. They want to use an AWS service to automate the deployment of SAP applications according to best practices. Which TWO services can be used for this purpose? (Choose TWO.)

Select 2 answers

A.AWS OpsWorks

B.AWS Elastic Beanstalk

C.AWS CodeDeploy

D.AWS CloudFormation

E.AWS Launch Wizard

AnswersD, E

Can deploy SAP infrastructure as code.

Why this answer

AWS Launch Wizard and AWS CloudFormation can automate SAP deployments according to best practices. Option A (AWS OpsWorks) is for configuration management, not SAP-specific deployment. Option B (AWS Elastic Beanstalk) is for general web applications, not SAP.

Option C (AWS CodeDeploy) is for application deployment, not infrastructure provisioning. Options D and E are correct.

Practice this question →

282

MCQeasy

A company is migrating its SAP environment to AWS and wants to ensure that the migration complies with SAP's software licensing requirements. What is the most important consideration regarding SAP license mobility?

A.Use SAP's Bring Your Own License (BYOL) program for Amazon RDS

B.Ensure that the AWS account is linked to SAP's licensing portal

C.Purchase a new SAP license from the AWS Marketplace

D.Confirm that the SAP license agreement allows running on AWS and that the target instance types are SAP certified

AnswerD

SAP license mobility requires certification and support.

Why this answer

SAP license mobility allows customers to run their existing SAP licenses on AWS, but only if the license agreement explicitly permits it. Additionally, the target AWS instance types must be SAP certified to ensure compliance with SAP's technical requirements. Option D is correct because it addresses both contractual and technical prerequisites.

Option A is incorrect because Amazon RDS does not support SAP BYOL; SAP databases on AWS use EC2. Option B is incorrect because linking AWS account to SAP's portal is not a licensing requirement. Option C is incorrect because purchasing a new license from AWS Marketplace is not necessary for license mobility.

Practice this question →

283

MCQhard

A company is migrating an SAP HANA system from on-premises to AWS. The HANA system uses a large amount of memory (2 TB). Which EC2 instance type is most suitable for this workload?

A.x2iedn.32xlarge

B.c5n.18xlarge

C.m5n.24xlarge

D.r5.24xlarge

AnswerA

The x2iedn.32xlarge instance is memory-optimized and can support up to 4 TB of memory, making it ideal for large SAP HANA deployments.

Why this answer

(x2iedn.32xlarge) is correct because it is a memory-optimized instance with up to 4 TB of memory, making it suitable for SAP HANA workloads requiring 2 TB of memory. Option B (c5n.18xlarge) is wrong because c5n instances are compute-optimized and have less memory. Option C (m5n.24xlarge) is wrong because m5n instances are general-purpose and cannot support 2 TB of memory.

Option D (r5.24xlarge) is wrong because r5 instances have a maximum memory of 768 GB.

Practice this question →

284

MCQmedium

A company is migrating an SAP HANA database to AWS using the SAP HANA System Replication (HSR) with asynchronous mode. The database size is 5 TB. The migration must be completed within 8 hours. Which AWS resource is most critical to ensure the initial data synchronization completes within the time window?

A.EC2 instance with high network bandwidth and Enhanced Networking

B.EBS snapshots for the initial data copy

C.EBS gp3 volumes with sufficient IOPS

D.Amazon S3 multipart upload for initial data

AnswerA

HSR initial sync is network-bound; high bandwidth instances reduce sync time.

Why this answer

The initial data synchronization in SAP HANA System Replication (HSR) is network-intensive, as it transfers the full 5 TB database from the source to the target. High network bandwidth (e.g., using Enhanced Networking with ENA) directly reduces transfer time, making it the most critical resource to meet the 8-hour window. While EBS gp3 volumes (Option C) provide sufficient IOPS, they are secondary because the bottleneck is network throughput, not storage performance.

Option B (EBS snapshots) is not used in HSR, and Option D (S3 multipart upload) is irrelevant for HSR.

Practice this question →

285

MCQhard

A company is migrating a legacy SAP ECC 6.0 system to SAP S/4HANA on AWS. The current database is IBM Db2. Which AWS service should be used to assess the source system and plan the migration?

A.AWS Migration Evaluator

B.AWS Application Discovery Service

C.AWS CloudEndure Migration

D.AWS Database Migration Service (DMS)

AnswerA

It provides business case analysis for SAP migrations.

Why this answer

AWS Migration Evaluator (formerly TSO Logic) is the correct service for assessing the source SAP ECC 6.0 system and planning the migration to SAP S/4HANA. It provides a data-driven business case, including SAP-specific insights such as system sizing, licensing, and total cost of ownership. AWS Application Discovery Service is used for server-level discovery and dependency mapping, not SAP-specific assessment.

AWS CloudEndure Migration is for lift-and-shift migration, not assessment. AWS Database Migration Service (DMS) is for migrating databases, not assessment.

Practice this question →

286

MCQmedium

An SAP administrator is migrating an on-premises SAP system to AWS using this IAM policy. When attempting to launch a new EC2 instance from an AMI stored in the S3 bucket, the launch fails. What is the likely cause?

A.The policy does not allow stopping or starting instances.

B.The IAM policy does not include ec2:RunInstances.

C.The S3 bucket policy does not allow reading the AMI object.

D.The policy does not allow describing EC2 instances.

AnswerB

Correct. ec2:RunInstances is required to launch EC2 instances and is missing from the policy.

Why this answer

The launch fails because the IAM policy does not include the ec2:RunInstances permission, which is required to launch new EC2 instances. Option A is incorrect because the ability to stop or start instances is not relevant to launching new instances. Option C is incorrect because the failure is due to the IAM policy, not the S3 bucket policy; the IAM policy may allow s3:GetObject but that does not overcome the lack of ec2:RunInstances.

Option D is incorrect because describing instances is not a prerequisite for launching.

Practice this question →

287

MCQhard

A company is migrating its SAP production system to AWS and needs to ensure that the migration does not exceed the allowed downtime window of 4 hours. The source database is 5 TB. Which migration strategy should be used?

A.Homogeneous migration using AWS Schema Conversion Tool (SCT) and AWS DMS

B.Heterogeneous migration using AWS DMS with ongoing replication

C.AWS Snowball Edge for offline data transfer

D.AWS Application Migration Service (MGN) replication

AnswerB

DMS with ongoing replication minimizes downtime.

Why this answer

Heterogeneous migration using AWS DMS with ongoing replication allows near-zero downtime by continuously replicating changes from the source to the target database during the migration, enabling a short cutover window. Option A is incorrect because homogeneous migration using AWS SCT and DMS is typically for same-database-engine migrations, but SCT is unnecessary for homogeneous, and the combination may not achieve the 4-hour window without ongoing replication. Option C is incorrect because AWS Snowball Edge is an offline data transfer method that involves shipping physical devices, which takes days to transfer 5 TB, exceeding the 4-hour window.

Option D is incorrect because AWS Application Migration Service (MGN) is designed for server migration (rehosting), not database migration, and does not provide the database-level replication needed for this scenario.

Practice this question →

288

MCQeasy

A company wants to migrate a 50 TB SAP HANA database to AWS with minimal downtime. Which migration approach should be used?

A.Configure SAP HANA System Replication (HSR) between source and target.

B.Export the database to a file and upload to Amazon S3, then restore on RDS for HANA.

C.Use AWS SCT to convert the HANA schema to Aurora.

D.Use AWS DMS with ongoing replication from HANA to HANA.

AnswerA

HSR provides near-zero downtime replication.

Why this answer

SAP HANA System Replication (HSR) is the recommended method for migrating large HANA databases with minimal downtime, typically achieving near-zero downtime by replicating data continuously. Option B is incorrect because exporting the database to a file and uploading to S3 involves significant downtime for the export and restore process. Option C is incorrect because AWS SCT is used for schema conversion to different database engines, not for migrating HANA to HANA; converting to Aurora would change the database system and incur additional complexity and downtime.

Option D is incorrect because AWS DMS does not support SAP HANA as a source for ongoing replication, and even if it did, HSR is more efficient for HANA-to-HANA migration.

Practice this question →

289

MCQeasy

A company plans to migrate its SAP systems to AWS and needs to set up a secure connection to the corporate data center. The company requires consistent network performance and low latency. Which AWS service should be used?

A.AWS Transit Gateway

B.AWS Site-to-Site VPN

C.AWS Direct Connect

D.AWS Client VPN

AnswerC

Direct Connect provides a dedicated, consistent network connection with low latency.

Why this answer

(AWS Direct Connect) is correct because it provides a dedicated private network connection from the corporate data center to AWS, ensuring consistent network performance and low latency. Option A (AWS Transit Gateway) is a network transit hub but does not itself provide a direct connection; it can be used with Direct Connect or VPN attachments. Option B (AWS Site-to-Site VPN) uses the public internet, which can lead to variable performance and latency.

Option D (AWS Client VPN) is designed for individual remote clients, not for site-to-site connectivity.

Practice this question →

290

MCQmedium

A company is migrating a large SAP HANA workload to AWS. They need to ensure the fastest network throughput for data transfer between on-premises and AWS. Which AWS service or feature should they use?

A.AWS Snowball Edge

B.AWS Site-to-Site VPN

C.AWS Direct Connect

D.AWS Client VPN

AnswerC

Direct Connect provides dedicated, high-speed connectivity for large data transfers.

Why this answer

AWS Direct Connect provides a dedicated, private network connection from on-premises to AWS, ensuring consistent high throughput and low latency—ideal for large SAP HANA migrations. Option A (Snowball Edge) is a physical device for offline data transfer, not suitable for real-time network throughput. Option B (Site-to-Site VPN) uses the public internet and may have variable performance, making it less optimal than Direct Connect.

Option D (Client VPN) is designed for individual user remote access, not for high-volume data transfer.

Practice this question →

291

Multi-Selectmedium

A company is migrating its SAP landscape to AWS. They need to choose a migration method for each system. Which TWO factors are most important to consider when selecting a migration method for SAP systems? (Choose TWO.)

Select 2 answers

A.Total cost of migration

B.Frequency of database backups

C.Source and target platform (OS, DB)

D.Number of SAP users

E.SAP release and database version

AnswersC, E

Affects tool choice (e.g., HSR for HANA).

Why this answer

Options C and E are correct. The source and target platform (OS, DB) and SAP release/database version are critical because they determine the availability and compatibility of migration tools (e.g., SUM, DMO, SWPM). Option A (total cost) is a business consideration, not a technical factor for method selection.

Option B (backup frequency) relates to operational planning, not method choice. Option D (number of SAP users) affects sizing but not the migration method itself.

Exam trap

Candidates may confuse business factors (cost, users) with technical prerequisites. Remember: migration method depends on platform and version compatibility, not on user count or backup schedules.

Practice this question →

292

MCQmedium

A company is migrating a Windows-based .NET application to AWS. The application currently uses Active Directory for authentication. Which AWS service should they use to maintain a similar authentication experience?

A.AWS Directory Service for Microsoft Active Directory

B.AWS Directory Service Simple AD

C.AWS Identity and Access Management (IAM)

D.Amazon Cognito

AnswerA

Provides managed AD compatible with Windows apps.

Why this answer

AWS Directory Service for Microsoft Active Directory provides a managed Microsoft Active Directory in the AWS cloud, allowing the application to authenticate against Active Directory without changes. Option A is correct. Option B (Simple AD) is a Samba-based directory, not fully compatible with all .NET AD features.

Option C (IAM) manages access to AWS resources, not application authentication. Option D (Cognito) is for external user pools, not enterprise AD integration.

Practice this question →

293

MCQmedium

A retail company is migrating its SAP ERP system from on-premises to AWS. The system includes an SAP HANA database (2 TB) and an SAP NetWeaver application server. The migration strategy is to use SAP HANA System Replication (HSR) to replicate the database to an EC2 instance running SAP HANA, then perform a takeover. The application server will be migrated using AWS Application Migration Service (MGN). The network connection is AWS Direct Connect with 1 Gbps bandwidth. During a test migration, the HSR replication is working, but the application server replication through MGN is taking much longer than expected. The MGN console shows that the data replication progress is stuck at 45% for several hours. The source server is a physical server with a 500 GB disk, 75% utilized. Which action is most likely to resolve the issue?

A.Increase the disk queue depth on the source server or add additional disks to improve I/O performance.

B.Convert the source disks to dynamic disks to improve replication speed.

C.Increase the staging area size in the MGN replication settings.

D.Increase the Direct Connect bandwidth to 10 Gbps.

AnswerA

Increasing the disk queue depth (option A) can improve I/O performance and resolve the stall, as the MGN data replication process is stuck at 45% due to a source disk I/O bottleneck.

Why this answer

The MGN data replication process is stuck at 45%, indicating a source disk I/O bottleneck. This often occurs when the source server's disk queue depth is insufficient to keep up with the rate of change. Increasing the disk queue depth (option A) can improve I/O performance and resolve the stall.

Option B is incorrect because converting to dynamic disks does not address I/O throughput; MGN works with static disks. Option C is incorrect because increasing the staging area size would not help if the issue is I/O; the staging area is used for caching changes, but the problem is the source disk cannot read/write fast enough. Option D is incorrect because increasing Direct Connect bandwidth would not affect source I/O performance; the bottleneck is local to the source server.

Practice this question →

294

MCQmedium

A company is migrating on-premises servers to AWS. After migrating, the administrator runs the AWS CLI command shown in the exhibit. The company wants to ensure that all EC2 instances are in the 'running' state. Which action should the administrator take?

A.Run aws ec2 start-instances --instance-ids i-1a2b3c4d5e6f7g8h

B.Run aws ec2 stop-instances --instance-ids i-0a1b2c3d4e5f6g7h

C.Run aws ec2 reboot-instances --instance-ids i-2a3b4c5d6e7f8g9h

D.Run aws ec2 terminate-instances --instance-ids i-2a3b4c5d6e7f8g9h

AnswerA

Starts the stopped instance.

Why this answer

The instance with ID i-1a2b3c4d5e6f7g8h is in a stopped state. To transition it to the 'running' state, the administrator should use the start-instances command. Option A is correct because it starts the stopped instance.

Option B (stop-instances) would stop running instances, which is not the desired action. Option C (reboot-instances) would reboot a running instance, but this instance is stopped. Option D (terminate-instances) would permanently delete the instance, which is not the goal.

Practice this question →

295

MCQeasy

A company is migrating an SAP BusinessObjects environment to AWS. The migration must ensure that the legacy reporting system remains accessible during the transition. Which AWS service can help facilitate this by allowing the company to redirect traffic gradually?

A.Amazon CloudFront

B.Elastic Load Balancer (ELB)

C.AWS Global Accelerator

D.Amazon Route53 with weighted routing policies

AnswerD

Weighted routing allows gradual redirection of traffic.

Why this answer

Amazon Route53 with weighted routing policies can gradually shift traffic from on-premises to AWS by assigning weights to DNS records. Option A (Amazon CloudFront) is a content delivery network, not for traffic shifting. Option B (Elastic Load Balancer) distributes traffic within AWS, not for gradual migration.

Option C (AWS Global Accelerator) improves performance but does not provide weighted routing. Option D (Amazon Route53 with weighted routing policies) is correct because it allows incremental traffic redirection during migration.

Practice this question →

296

MCQhard

A financial services company is migrating its SAP HANA-based system from on-premises to AWS. The system is critical and must have a recovery point objective (RPO) of less than 1 minute and recovery time objective (RTO) of less than 15 minutes. The migration strategy is to use SAP HANA System Replication (HSR) in synchronous mode to an EC2 instance in the same region, then perform a takeover. However, during the test, the HSR replication latency is consistently above 100 ms, which prevents synchronous replication from working. The network between on-premises and AWS uses AWS Direct Connect with 1 Gbps bandwidth, and the physical distance is about 50 miles. Which action should the administrator take to achieve the RPO/RTO requirements?

A.Deploy the target EC2 instance in an AWS Local Zone closer to the on-premises data center.

B.Use a Site-to-Site VPN instead of Direct Connect.

C.Use asynchronous HSR mode instead of synchronous.

D.Increase the Direct Connect bandwidth to 10 Gbps.

AnswerA

Local Zones reduce physical distance and latency.

Why this answer

Synchronous HSR over long distance is challenging due to latency. Option A is correct because AWS Local Zones reduce latency by placing the target closer to on-premises. Option B is wrong because using a Site-to-Site VPN adds more latency compared to Direct Connect.

Option C is wrong because asynchronous mode does not meet the RPO of less than 1 minute. Option D is wrong because increasing bandwidth to 10 Gbps does not reduce latency; the issue is distance, not bandwidth.

Practice this question →

297

MCQhard

A company is migrating a critical SAP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS) and Enqueue Replication Server (ERS). Which AWS service can be used to manage the virtual IP address required for the SAP high availability setup?

A.AWS Transit Gateway

B.Elastic Load Balancer (ELB)

C.Amazon Route 53 Application Recovery Controller

D.AWS Global Accelerator

AnswerB

Elastic Load Balancer (specifically Network Load Balancer) provides a static IP address that can be used as the virtual IP for SAP HA, supporting health checks and failover routing.

Why this answer

For SAP high availability on AWS, the virtual IP (VIP) for ASCS/ERS is typically managed using a Network Load Balancer (NLB), which provides a static IP address that can be used as the VIP. NLB supports health checks and automatic failover between active and passive instances. Amazon Route 53 Application Recovery Controller is designed for multi-region recovery and DNS-level failover, not for managing a VIP within a single region.

AWS Transit Gateway handles network connectivity between VPCs, and AWS Global Accelerator provides static IPs for global traffic optimization, not for SAP HA VIP management.

Practice this question →

298

MCQmedium

A company is migrating an SAP system to AWS and wants to use AWS Systems Manager for patching. The SAP application server is running Windows. What is a prerequisite for Systems Manager to manage the instance?

A.Install the AWS Systems Manager Agent (SSM Agent) on the instance

B.Install the Amazon CloudWatch agent on the instance

C.Enable AWS Config on the instance

D.Assign a public IP address to the instance

AnswerA

SSM Agent is required for Systems Manager to manage the instance.

Why this answer

AWS Systems Manager requires the SSM Agent to be installed and running on managed instances to perform patching and other management operations. The SSM Agent processes Systems Manager requests, executes run commands, and reports instance state back to the Systems Manager service. Without the agent, the instance cannot communicate with the Systems Manager endpoint or receive patching instructions.

Exam trap

The trap here is that candidates often confuse the SSM Agent with the CloudWatch agent or assume a public IP is necessary for AWS management, but Systems Manager can manage instances in private subnets using VPC endpoints or a managed instance gateway.

How to eliminate wrong answers

Option B is wrong because the Amazon CloudWatch agent is used for collecting metrics and logs, not for Systems Manager patching operations; patching relies on the SSM Agent. Option C is wrong because AWS Config is a service for resource inventory and compliance auditing, not a prerequisite for Systems Manager instance management; it does not install any agent on the instance. Option D is wrong because a public IP address is not required; Systems Manager can manage instances in private subnets using VPC endpoints (AWS Systems Manager VPC endpoints) or through a managed instance gateway.

Practice this question →

299

MCQeasy

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database is 2 TB and has a 4-hour maintenance window. Which AWS service should be used to minimize downtime during the migration?

A.AWS Database Migration Service (DMS)

B.AWS Server Migration Service (SMS)

C.AWS Application Migration Service (MGN)

D.AWS DataSync

AnswerA

DMS supports continuous replication to minimize downtime.

Why this answer

AWS Database Migration Service (DMS) supports ongoing replication with minimal downtime by using change data capture (CDC) to synchronize source and target databases continuously. Option B, AWS Server Migration Service (SMS), is designed for migrating entire server volumes, not databases. Option C, AWS Application Migration Service (MGN), automates server migration but is not optimized for database replication.

Option D, AWS DataSync, is for transferring large file sets to or from AWS storage services, not for live database replication.

Practice this question →

300

MCQhard

A company is migrating an SAP ERP system to AWS and needs to ensure that the SAP application servers can scale automatically based on CPU utilization. Which AWS service should be used to achieve this?

A.AWS Elastic Load Balancing (ELB)

B.AWS Lambda

C.AWS CloudFormation

D.AWS Auto Scaling

AnswerD

Auto Scaling can launch/terminate instances based on CloudWatch alarms.

Why this answer

AWS Auto Scaling can automatically adjust the number of EC2 instances based on CloudWatch alarms for CPU utilization, making it suitable for scaling SAP application servers. Option A is wrong because Elastic Load Balancing distributes traffic but does not scale instances. Option B is wrong because AWS Lambda is for serverless compute, not for running SAP application servers.

Option C is wrong because AWS CloudFormation is an infrastructure-as-code service, not for automatic scaling.

Practice this question →

← PreviousPage 4 of 5 · 339 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Sap Migration questions.

Start 20-question session