Courseiva

CCNA Sap Operations Questions

75 of 460 questions · Page 3/7 · Sap Operations topic · Answers revealed

Practice these questionsExam hubAll questions
151
MCQhard

Refer to the exhibit. An IAM policy is attached to a role used by an EC2 instance running SAP. The instance is unable to start or stop other EC2 instances. What is the most likely cause?

A.The policy does not allow `ec2:RebootInstances` which is required to start instances.
B.The policy does not include `iam:PassRole` permission.
C.The policy does not include `ec2:DescribeInstances` for instances in other regions.
D.The policy resource ARN specifies a specific region (us-east-1), but the instances are in a different region.
AnswerD

The resource ARN 'arn:aws:ec2:us-east-1:123456789012:instance/*' restricts the policy to instances in us-east-1 only.

Why this answer

The policy allows `ec2:StartInstances` and `ec2:StopInstances` on all resources (`"Resource": "*"`), so it should work. However, the condition is missing. The issue could be that the policy does not include the `ec2:DescribeInstanceStatus` action needed to check status before starting/stopping. But the question says it cannot start/stop; the policy seems correct. Actually, the most likely cause is that the role does not have permission to pass the instance profile (iam:PassRole) if the instance uses an instance profile, but that is not shown. Alternatively, the policy is missing `ec2:DescribeInstances` which is needed for the AWS CLI to list instances? But it is included. Let's think: The policy allows start/stop on all resources, so it should work. Possibly the issue is that the EC2 instance has an instance profile that the role cannot pass. But the question says the policy is attached to the role; the role is used by the instance. The policy looks correct. However, the exhibit might be missing the `ec2:DescribeInstanceStatus` action, but that is not required for start/stop. I'll choose option C: The policy does not include `ec2:DescribeInstances` for the specific instances? No, it's there. Actually, the correct answer is that the policy does not include `ec2:DescribeInstances` for the instances? It does. Hmm. Let's look at the options: A) The policy does not allow `ec2:StartInstances` on specific instance IDs. B) The policy does not include `ec2:DescribeInstances` for the instances. C) The policy does not include `ec2:RebootInstances`. D) The policy does not allow `s3:GetObject` on the backup bucket. None of these are correct. I need to adjust the exhibit to make the question work. Let me modify the exhibit to include a condition that restricts the resource to only certain instances. For example:

```

{

"Version": "2012-10-17",

"Statement": [

{

"Effect": "Allow",

"Action": [

"ec2:DescribeInstances",

"ec2:StartInstances",

"ec2:StopInstances",

"ec2:RebootInstances"

],

"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*"

},

{

"Effect": "Allow",

"Action": [

"s3:GetObject",

"s3:PutObject"

],

"Resource": "arn:aws:s3:::sap-backup-bucket/*"

}

]

}

```

Then the question: The instance is unable to start or stop instances in another region. Why? Because the resource ARN specifies us-east-1, but the instances are in eu-west-1. That is plausible. I'll use that.

Practice this question →
152
MCQhard

A company runs SAP on AWS and wants to monitor operating system metrics such as memory usage, disk space, and process status using Amazon CloudWatch. Which agent configuration is required on the SAP application and database servers to send these metrics to CloudWatch?

A.AWS X-Ray Daemon
B.EC2 Launch Agent
C.Amazon CloudWatch Agent
D.AWS Systems Manager Agent
AnswerC

CloudWatch Agent collects OS-level metrics.

Why this answer

The Amazon CloudWatch Agent can be installed on EC2 instances to collect operating system-level metrics such as memory usage, disk space, and process status and send them to CloudWatch. Option A is incorrect because the AWS X-Ray Daemon is used for distributed tracing, not metric collection. Option B is incorrect because the EC2 Launch Agent is used to run startup scripts, not to collect metrics.

Option D is incorrect because the AWS Systems Manager Agent is used for management and patching, not for sending custom metrics to CloudWatch.

Practice this question →
153
MCQeasy

A company wants to automate the start and stop of SAP EC2 instances during non-business hours to reduce costs. Which AWS service is best suited for this task?

A.AWS Auto Scaling
B.Amazon CloudWatch Events
C.AWS Instance Scheduler
D.AWS Systems Manager
AnswerC

Instance Scheduler is designed specifically for scheduled start/stop.

Why this answer

(AWS Instance Scheduler) is correct because it is a dedicated solution to automate instance start/stop on a schedule. Option A (AWS Auto Scaling) is for scaling based on demand, not scheduling. Option B (Amazon CloudWatch Events) can trigger Lambda but requires custom code.

Option D (AWS Systems Manager) can run commands but is not purpose-built for scheduling.

Practice this question →
154
Multi-Selectmedium

An SAP system administrator needs to monitor the CPU and memory utilization of SAP EC2 instances. Which TWO AWS services can be used to collect and visualize these metrics? (Choose TWO.)

Select 2 answers
A.AWS Trusted Advisor
B.Amazon CloudWatch
C.AWS CloudTrail
D.Amazon Managed Service for Prometheus
E.AWS Config
AnswersB, D

CloudWatch can collect CPU and memory metrics via the CloudWatch Agent.

Why this answer

The correct answers are B (Amazon CloudWatch) and D (Amazon Managed Service for Prometheus). Amazon CloudWatch can collect CPU and memory metrics from EC2 instances using the CloudWatch agent, and Amazon Managed Service for Prometheus can scrape and store metrics from those instances. Option A is incorrect because AWS Trusted Advisor provides best-practice checks, not granular metrics.

Option C is incorrect because AWS CloudTrail records API activity. Option E is incorrect because AWS Config tracks configuration changes.

Practice this question →
155
Multi-Selecthard

A company is running SAP ERP on AWS with a multi-AZ deployment using Amazon EFS for shared transport directories. The system administrator notices that the SAP transport directory mounted via EFS is experiencing high latency during peak hours. The EFS file system is using the Standard storage class. Which combination of steps should the administrator take to reduce latency? (Choose TWO.)

Select 2 answers
A.Use EFS Bursting Throughput mode.
B.Move the EFS file system to the One Zone storage class.
C.Change the storage class to EFS Standard-IA.
D.Enable provisioned throughput on the EFS file system.
E.Switch the EFS performance mode to Max I/O.
AnswersB, E

One Zone reduces latency when all clients are in the same AZ.

Why this answer

Moving the EFS file system to the One Zone storage class places the data in the same Availability Zone as the EC2 instances, reducing network latency for the SAP transport directory. Option E is correct because switching the performance mode to Max I/O increases the parallel processing capability of the file system, which reduces latency during peak hours. Option A is incorrect because Bursting Throughput mode is the default and does not specifically address high latency; it provides a baseline throughput with bursting credits.

Option C is incorrect because Standard-IA is an infrequent access storage class with higher retrieval latencies, unsuitable for a continuously used transport directory. Option D is incorrect because provisioned throughput increases throughput capacity but does not directly reduce latency; Max I/O performance mode is the intended solution for latency reduction.

Practice this question →
156
Multi-Selecthard

Which THREE steps should be taken to monitor the performance of an SAP HANA database on AWS? (Choose 3).

Select 3 answers
A.Install the CloudWatch agent on the EC2 instance to collect memory and disk metrics.
B.Set up AWS Direct Connect to monitor network latency.
C.Enable AWS CloudTrail to track all API calls to the HANA database.
D.Monitor EBS volume queue length and IOPS using CloudWatch.
E.Configure CloudWatch alarms for SAP HANA metrics like CPU and memory usage.
AnswersA, D, E

The agent collects OS-level performance data.

Why this answer

The correct steps to monitor SAP HANA performance on AWS include: A) installing the CloudWatch agent on the EC2 instance to collect OS-level memory and disk metrics; D) monitoring EBS volume queue length and IOPS using CloudWatch to detect storage bottlenecks; and E) configuring CloudWatch alarms for SAP HANA-specific metrics such as CPU and memory usage to get alerts on performance issues. Option B is incorrect because AWS Direct Connect is a network connectivity service, not a monitoring tool. Option C is incorrect because AWS CloudTrail tracks API calls for auditing, not performance metrics.

Practice this question →
157
MCQhard

Refer to the exhibit. An administrator has run a query to check the backup status of an SAP HANA database. The output shows that the backup on January 17 failed. What is the most appropriate next step?

A.Restore the database from the last successful backup to ensure data integrity.
B.Investigate the backup logs for the failed backup to identify the cause.
C.Immediately restart the failed backup from the catalog.
D.Ignore the failure because subsequent backups are successful.
AnswerB

Understanding the root cause is essential before taking further action.

Why this answer

A failed backup requires investigation to determine the root cause before taking any corrective action. Checking the backup logs will provide details on why the backup failed, such as insufficient permissions, disk space issues, or configuration errors. Option A is incorrect because restoring the database is premature without diagnosing the failure.

Option C is incorrect because restarting the backup without investigation may lead to the same failure. Option D is incorrect because ignoring the failure could allow a recurring issue to affect future backups.

Practice this question →
158
MCQhard

A company runs SAP on AWS and needs to implement a disaster recovery (DR) strategy with a Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours. The primary site is in us-east-1 and the DR site in us-west-2. The SAP HANA database is 5 TB. Which approach meets these requirements cost-effectively?

A.Use Amazon S3 cross-region replication to copy database backups every 15 minutes.
B.Use AWS Database Migration Service (DMS) for ongoing replication to a HANA instance in us-west-2.
C.Take EBS snapshots of the data volume every 15 minutes and copy them to us-west-2.
D.Configure HANA System Replication in async mode between the primary and DR instances over AWS Direct Connect.
AnswerD

Async replication meets RPO and RTO with fast takeover.

Why this answer

(HANA System Replication with async mode over AWS Direct Connect) is correct because it enables continuous data replication with a low RPO (asynchronous replication can be sub-minute), and the RTO can be within 2 hours by failing over to the DR instance. It is cost-effective as it uses existing HANA licenses and compute/storage resources. Option A (S3 cross-region replication of backups) may achieve the RPO, but restoring from backups typically exceeds the 2-hour RTO.

Option B (AWS DMS) is not designed for SAP HANA replication; it is intended for homogeneous or heterogeneous database migrations. Option C (EBS snapshots every 15 minutes) may not consistently meet the RPO due to snapshot creation time and the time required to copy snapshots across regions, and RTO is high because the volume must be created and attached before recovery.

Practice this question →
159
MCQhard

An SAP administrator notices that the SAP application server is failing health checks in the Elastic Load Balancer (ELB) target group. The application server runs on an EC2 instance behind an Application Load Balancer. The health check path is /sap/public/ping. What is the most likely cause of the failure?

A.SAProuter is blocking the health check requests
B.The health check path is incorrectly configured in the target group
C.The EC2 instance security group does not allow inbound traffic from the ELB
D.The SAP application (e.g., disp+work) is not running on the instance
AnswerD

If the SAP application (disp+work) is not running, it cannot respond to the health check, causing the ELB to mark it unhealthy.

Why this answer

If the SAP application (disp+work) is not running, it cannot respond to the health check, causing the ELB to mark it unhealthy. Option A is incorrect because SAProuter does not block health check requests; it routes connections to the SAP system. Option B is incorrect because the health check path is correctly configured as /sap/public/ping, which is the standard SAP health check endpoint.

Option C is incorrect because security groups not allowing inbound traffic from ELB would cause connection timeout, not a health check failure on a specific path.

Practice this question →
160
MCQmedium

Refer to the exhibit. An SAP administrator runs the AWS CLI command to retrieve the DatabaseConnections metric for an RDS for SAP ASE instance. The output shows a Sum statistic over 5-minute periods. What is the average number of connections per minute during this hour?

A.545
B.10
C.50
D.52
AnswerB

Total connections sum = 545, total minutes = 55, average = 9.9 ≈ 10.

Why this answer

The Sum statistic over each 5-minute period is the total number of connections during that period. To get average per minute, divide each sum by 5. However, the question asks for the average number of connections per minute over the entire hour.

The sum of all datapoints is 45+48+52+50+47+49+51+53+50+48+52 = 545. There are 11 datapoints, each covering 5 minutes, so total minutes = 11*5 = 55 minutes (but actually from 00:05 to 00:55 inclusive, that's 11 periods * 5 = 55 minutes). The total connections sum = 545.

Average connections per minute = 545 / 55 ≈ 9.9. But the options are whole numbers: 10, 50, 52, 545. 10 is closest. Correct answer is 10.

Practice this question →
161
MCQmedium

An SAP system is deployed across multiple Availability Zones using an Application Load Balancer. The operations team wants to perform a blue/green deployment of a new SAP application version with zero downtime. Which AWS service should be used?

A.AWS Elastic Beanstalk
B.AWS CloudFormation
C.AWS CodeDeploy
D.AWS OpsWorks
AnswerA

Elastic Beanstalk supports blue/green deployments with environment swapping.

Why this answer

AWS Elastic Beanstalk supports blue/green deployments. Option B (CloudFormation) is for infrastructure management. Option C (CodeDeploy) can do blue/green but is more complex and less integrated for SAP.

Option D (OpsWorks) is for Chef/Puppet management.

Practice this question →
162
Multi-Selectmedium

An SAP administrator is setting up monitoring for SAP HANA using Amazon CloudWatch. Which TWO metrics are available from the SAP HANA CloudWatch integration?

Select 2 answers
A.Number of SQL Queries per Second
B.Number of Active Connections
C.Average Response Time
D.Memory Usage
E.Disk Usage
AnswersD, E

Available as a standard metric, such as hana_memory_used_percent.

Why this answer

The SAP HANA CloudWatch integration provides metrics related to resource utilization, including Memory Usage and Disk Usage. Metrics such as Number of SQL Queries per Second, Number of Active Connections, and Average Response Time are not directly available from the standard integration and require additional custom monitoring solutions.

Practice this question →
163
MCQmedium

An SAP administrator notices that the SAP HANA database is experiencing high I/O latency. The database is running on an EC2 instance with EBS volumes. What is the MOST effective initial step to diagnose the I/O bottleneck?

A.Check the EBS volume queue length in CloudWatch
B.Increase the size of the EBS volumes
C.Switch to instance store volumes
D.Enable detailed monitoring on the EC2 instance
AnswerA

High queue length indicates the volume is overwhelmed, leading to latency.

Why this answer

The first step to diagnose the I/O bottleneck is to check the EBS volume queue length metric in CloudWatch. A high queue length indicates that the volume is saturated and I/O requests are waiting. Option B is incorrect because simply increasing volume size may raise baseline performance but does not directly diagnose the bottleneck and could be wasteful.

Option C is incorrect because switching to instance store volumes is not a diagnostic step and may not be suitable for persistent data. Option D is incorrect because enabling detailed monitoring provides more granular metrics but does not directly indicate I/O saturation; the queue length metric is the key diagnostic.

Practice this question →
164
Multi-Selecthard

A company runs SAP NetWeaver on AWS and uses a Network Load Balancer (NLB) to distribute traffic to multiple application servers. The operations team notices that the NLB is not properly routing traffic to healthy targets. Which three steps should the team take to diagnose the issue? (Choose THREE.)

Select 3 answers
A.Confirm that the target instances are registered in the target group and are in the Available state.
B.Check the security group rules on the target instances to ensure they allow traffic from the NLB's subnet.
C.Verify that the health check settings on the NLB target group are correct (e.g., ping path, port, protocol).
D.Enable cross-zone load balancing on the NLB.
E.Review the CloudWatch metrics for the NLB to see if there are any anomalies.
AnswersA, B, C

Unregistered or stopped instances will not receive traffic.

Why this answer

Target instances must be registered in the target group and in the Available state for traffic to be routed to them. Option B is correct: Security group rules on target instances must allow traffic from the NLB's subnet for health checks and client traffic. Option C is correct: Health check settings (ping path, port, protocol) must be correctly configured so the NLB can determine target health.

Option D is wrong: Cross-zone load balancing distributes traffic across all enabled Availability Zones but does not fix routing to healthy targets. Option E is wrong: CloudWatch metrics can show anomalies but are not a primary diagnostic step for routing to healthy targets; they are more useful for monitoring after initial configuration.

Practice this question →
165
Multi-Selectmedium

A company runs SAP on AWS and wants to automate the monitoring of SAP system health. Which TWO AWS services can be used together to achieve this? (Choose TWO.)

Select 2 answers
A.AWS Config
B.Amazon EC2 Auto Scaling
C.AWS Lambda
D.Amazon CloudWatch
E.Amazon Simple Queue Service (SQS)
AnswersC, D

AWS Lambda can run code in response to CloudWatch metrics, enabling automated actions based on SAP system health.

Why this answer

Options C (AWS Lambda) and D (Amazon CloudWatch) are correct. CloudWatch can collect custom metrics from SAP systems, and Lambda can process and act on those metrics to automate monitoring. Option A (AWS Config) is for compliance and configuration tracking, not monitoring.

Option B (EC2 Auto Scaling) is for scaling instances, not monitoring. Option E (SQS) is a message queue service, not used for monitoring.

Practice this question →
166
MCQeasy

The operations team deploys the CloudFormation template above. After the stack creation completes, the EC2 instance is launched but the SAP application is not running. What is the most likely reason?

A.The UserData script only installs httpd, not the SAP application
B.The security group does not allow inbound traffic to the SAP application port
C.The instance type is not suitable for SAP applications
D.The AMI ID is incorrect
AnswerA

UserData does not install SAP, so it is not running.

Why this answer

The UserData script installs httpd (Apache), not the SAP application. The template does not include any steps to install or start the SAP application. The security group is referenced but not shown; it is likely correct.

The instance type is appropriate for SAP. The AMI ID is valid.

Practice this question →
167
MCQeasy

An SAP Basis administrator needs to monitor the CPU utilization of all EC2 instances running SAP applications. The team wants to receive alerts when CPU utilization exceeds 80% for 5 consecutive minutes. Which AWS service should be used to set up this monitoring and alerting?

A.Amazon CloudWatch
B.AWS Trusted Advisor
C.AWS CloudTrail
D.AWS Config
AnswerA

CloudWatch can monitor CPU utilization and trigger alarms based on thresholds.

Why this answer

Amazon CloudWatch is the correct service because it can collect CPU utilization metrics from EC2 instances and trigger alarms when the metric exceeds a threshold (e.g., 80% for 5 consecutive minutes). AWS Trusted Advisor provides best-practice recommendations but cannot create custom metric alarms. AWS CloudTrail is for auditing API calls, not monitoring performance metrics.

AWS Config tracks resource configuration changes, not real-time performance metrics.

Practice this question →
168
MCQmedium

A company runs SAP on AWS and has configured automated snapshots of EBS volumes for backup. The operations team discovers that the snapshots are not being deleted after the retention period. Which action should be taken to ensure snapshots are automatically deleted?

A.Set an S3 Lifecycle policy on the snapshots.
B.Use Amazon Data Lifecycle Manager to create a snapshot lifecycle policy.
C.Create a CloudWatch Events rule to invoke a Lambda function for deletion.
D.Configure retention policy directly on the EBS volume.
AnswerB

Correct. Amazon Data Lifecycle Manager (DLM) provides managed lifecycle policies to automatically create and delete EBS snapshots based on retention rules.

Why this answer

Amazon Data Lifecycle Manager (DLM) allows you to create automated lifecycle policies for EBS snapshots, including automatic deletion after a retention period. Option A is incorrect because S3 Lifecycle policies do not apply to EBS snapshots; EBS snapshots are stored in S3 but are managed separately. Option C is incorrect because while possible, using CloudWatch Events and Lambda is not the recommended managed solution; DLM is purpose-built for this task.

Option D is incorrect because there is no native retention policy on EBS volumes; retention is handled through snapshot lifecycle policies.

Practice this question →
169
MCQhard

An SAP system on AWS is experiencing high latency between the application and database tiers. Both tiers are in the same VPC but in different Availability Zones. What is the most effective way to reduce latency?

A.Move both tiers into the same Availability Zone.
B.Add an Application Load Balancer between tiers.
C.Increase the bandwidth of the EC2 instances.
D.Enable AWS Direct Connect.
AnswerA

Same AZ reduces network distance and latency.

Why this answer

Placing both tiers in the same Availability Zone eliminates cross-AZ data transfer latency. AWS data transfer between AZs incurs additional latency compared to within the same AZ. Option B (adding an Application Load Balancer) would add network hops and potentially increase latency.

Option C (increasing bandwidth) does not reduce latency; bandwidth affects throughput, not latency. Option D (AWS Direct Connect) is used for on-premises connectivity, not for communication within AWS.

Practice this question →
170
MCQmedium

A company runs SAP S/4HANA on AWS. The system uses an SAP HANA database with a single EC2 instance. The operations team needs to implement a disaster recovery (DR) strategy with a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 1 hour. The DR site is in a different AWS Region. The team currently takes daily EBS snapshots and sends them to the DR region using AWS Backup cross-region copy. However, the RPO is not met because snapshots are only taken daily. Which combination of actions should the team take to meet the RPO and RTO?

A.Increase the frequency of EBS snapshots to every hour and use cross-region copy. Also, pre-warm the DR instance by restoring the latest snapshot.
B.Use AWS CloudEndure Disaster Recovery to replicate the entire EC2 instance to the DR region.
C.Set up HANA System Replication (HSR) between the primary and DR regions. In the DR region, maintain a standby HANA instance in sync. Use automated failover scripts.
D.Use Amazon EBS multi-region replication for the HANA data volumes.
AnswerC

HSR provides low RPO (seconds to minutes) and with a pre-provisioned standby, RTO can be under 1 hour.

Why this answer

HANA System Replication (HSR) provides near-continuous data replication, meeting the 15-minute RPO. In the DR region, maintaining a standby HANA instance in sync and using automated failover scripts can achieve the 1-hour RTO. Option A is wrong because increasing EBS snapshot frequency to every hour still does not meet the 15-minute RPO (snapshots are not continuous) and RTO may be longer due to restore time.

Option B is wrong because CloudEndure Disaster Recovery is designed for server-level replication but is not optimized for HANA; it may not ensure database consistency and could impact performance. Option D is wrong because Amazon EBS multi-region replication does not guarantee database consistency for a running SAP HANA database.

Practice this question →
171
MCQeasy

An SAP administrator needs to apply an OS-level security patch to all EC2 instances in an SAP landscape. The administrator wants to automate this process and track compliance. Which AWS service should be used?

A.AWS Systems Manager Patch Manager
B.AWS CodeDeploy
C.AWS OpsWorks
D.AWS Elastic Beanstalk
AnswerA

Patch Manager automates OS patching and provides compliance reporting.

Why this answer

AWS Systems Manager Patch Manager automates OS patching and tracks compliance. Elastic Beanstalk is for application deployments. OpsWorks is for configuration management.

CodeDeploy is for application code. Patch Manager is the correct service for OS patches.

Practice this question →
172
MCQmedium

An SAP system is running on AWS with a Multi-AZ RDS for SAP HANA database. The operations team notices that the database failover test takes longer than expected. What is the most likely cause of the prolonged failover time?

A.The VPC does not have DNS resolution enabled
B.The application caches the DNS name of the database
C.The RDS instance uses General Purpose SSD storage
D.The database instance size is too small
AnswerB

DNS caching can cause the application to continue using the old endpoint, delaying failover completion.

Why this answer

Multi-AZ failover involves DNS propagation. If the application caches the DNS resolution, it may continue to point to the old primary, causing delays until the cache expires. Database instance size, storage type, and VPC configuration do not directly affect failover time.

Practice this question →
173
MCQmedium

A company runs SAP on AWS and notices that the SAP application performance degrades during peak hours. The system uses a db.r5.4xlarge RDS for SAP HANA database. Which AWS service should be used to analyze the database performance metrics and identify bottlenecks?

A.AWS X-Ray
B.AWS CloudTrail
C.Amazon CloudWatch Logs
D.Amazon RDS Performance Insights
AnswerD

Amazon RDS Performance Insights provides an interactive dashboard that visualizes database load and helps identify performance bottlenecks.

Why this answer

Amazon RDS Performance Insights is the correct service because it provides a performance dashboard with detailed database metrics, allowing you to identify bottlenecks such as high CPU, memory, or I/O usage. AWS X-Ray is used for tracing requests across microservices, not for database performance analysis. AWS CloudTrail logs API calls for auditing, not performance metrics.

Amazon CloudWatch Logs is for storing and monitoring log files, not for real-time database performance analysis.

Practice this question →
174
MCQeasy

A company wants to automate the backup of SAP HANA databases running on AWS. Which combination of AWS services is suitable for this task?

A.AWS Backup and the SAP HANA Backint agent
B.Amazon EBS snapshots and AWS Lambda
C.Amazon S3 and Amazon Glacier
D.Amazon CloudWatch Events and AWS Lambda
AnswerA

AWS Backup automates backups and Backint ensures HANA consistency.

Why this answer

AWS Backup integrates with the SAP HANA Backint agent to automate HANA-specific backups, ensuring consistency and managing backup lifecycle. Option B is wrong because EBS snapshots alone cannot guarantee HANA database consistency. Option C is wrong because S3 and Glacier are storage services, not automation or backup orchestration.

Option D is wrong because CloudWatch Events and Lambda can trigger actions but do not provide native HANA backup functionality.

Practice this question →
175
MCQhard

An SAP application server repeatedly logs the error: "SQL statement not parsed before execution." The database is an Oracle RDS instance. What is the most likely cause of this error?

A.The SAP application server is misconfigured.
B.The database connection is not properly established, or the session is in a bad state.
C.There is a network connectivity issue between the application server and the database.
D.The Oracle database is out of memory.
AnswerB

The error 'no statement parsed' typically occurs when a SQL statement is executed without a valid parse call, often due to connection issues.

Why this answer

The error about a SQL statement not being parsed before execution typically indicates a problem with the database connection or session state, which aligns with option B. Option A (misconfigured application server) would not directly cause this specific error. Option C (network connectivity) would manifest as timeout or connection failure, not a parsing error.

Option D (out of memory) would cause different errors like ORA-04031. Therefore, the most likely cause is that the database connection is not properly established or the session is in a bad state.

Practice this question →
176
Multi-Selectmedium

A company is running SAP on AWS and wants to implement a centralized logging solution for all SAP components. The solution must be scalable and cost-effective. Which TWO services should the company use? (Choose TWO.)

Select 2 answers
A.Amazon Athena
B.Amazon Kinesis Data Firehose
C.Amazon CloudWatch Logs
D.Amazon Elastic File System (EFS)
E.Amazon Simple Storage Service (S3)
AnswersC, E

CloudWatch Logs can ingest and store log data from various sources.

Why this answer

The correct answers are C and E. Amazon CloudWatch Logs can collect logs from EC2 instances and AWS services, centralizing real-time log data. Amazon S3 provides cost-effective long-term storage for archived logs.

A is incorrect because Amazon Athena is a query service for data in S3, not a logging service. B is incorrect because Kinesis Data Firehose is for real-time streaming, but the question asks for a scalable and cost-effective centralized logging solution, and CloudWatch Logs plus S3 is simpler and more cost-effective. D is incorrect because EFS is a file system, not suitable for log aggregation.

Practice this question →
177
MCQeasy

A company runs SAP HANA on AWS and wants to monitor the system for potential performance issues. Which metrics should be monitored to detect memory pressure?

A.Network throughput
B.SAP HANA memory usage (from SAP HANA metrics)
C.CPU utilization
D.EBS volume queue length
AnswerB

Direct measure of memory consumption in the HANA database.

Why this answer

SAP HANA memory usage directly indicates memory pressure, as memory pressure occurs when the HANA database consumes too much memory. Option A is incorrect because network throughput does not measure memory usage. Option C is incorrect because CPU utilization measures processor load, not memory.

Option D is incorrect because EBS volume queue length indicates storage I/O latency, not memory pressure.

Practice this question →
178
MCQhard

An SAP system running on AWS uses a shared file system via Amazon EFS. Recently, the file system has become slow. The administrator suspects that the burst credits are exhausted. What metric should the administrator check in Amazon CloudWatch to confirm this?

A.PermittedThroughput
B.BurstCreditBalance
C.Throughput
D.PercentIOLimit
AnswerB

This metric shows the number of burst credits remaining.

Why this answer

EFS has a BurstCreditBalance metric that tracks available burst credits. When exhausted, throughput drops. PercentIOLimit is not a valid metric.

Throughput is the actual throughput, not credit balance. PermittedThroughput is not a metric.

Practice this question →
179
MCQhard

An SAP system on AWS is experiencing high CPU utilization on the database server. The operations team suspects a specific query is causing the issue. Which combination of AWS services should be used to identify the query?

A.Amazon CloudWatch Metrics and AWS X-Ray
B.Amazon RDS Performance Insights and CloudWatch Logs
C.AWS CloudTrail and Amazon Athena
D.VPC Flow Logs and Amazon GuardDuty
AnswerB

Performance Insights identifies top queries consuming CPU.

Why this answer

Amazon RDS Performance Insights and CloudWatch Logs. Amazon RDS Performance Insights provides database performance analysis and identifies the top queries by load, allowing you to pinpoint the specific query causing high CPU utilization. CloudWatch Logs can be used to correlate query patterns with system metrics.

Option A is incorrect because CloudWatch Metrics shows CPU utilization but does not identify specific queries; AWS X-Ray is for tracing application requests, not database queries. Option C is incorrect because CloudTrail logs API calls to AWS services, not database queries. Option D is incorrect because VPC Flow Logs capture network traffic metadata, not database query details.

Practice this question →
180
MCQeasy

A company runs SAP HANA on AWS. The operations team needs to automate the creation of AMI backups for the HANA database server. Which AWS service should they use to schedule and manage these backups?

A.Amazon S3 Lifecycle policies
B.AWS Backup
C.AWS Systems Manager
D.Amazon CloudWatch Events
AnswerB

AWS Backup is a managed service for scheduling and managing backups, including AMIs.

Why this answer

AWS Backup (option B) is the correct service for scheduling and managing AMI backups for SAP HANA on AWS. Option A (Amazon S3 Lifecycle policies) manages object lifecycles in S3, not AMI creation. Option C (AWS Systems Manager) can automate operational tasks but is not specialized for backup scheduling; AWS Backup provides a centralized backup solution.

Option D (Amazon CloudWatch Events) can trigger actions based on events but is not a backup service.

Practice this question →
181
MCQhard

A company runs SAP on AWS using an SAP HANA multi-node cluster. The operations team needs to apply an OS-level security patch that requires a reboot. How can they minimize downtime?

A.Use AWS Systems Manager Run Command to apply the patch without reboot.
B.Reboot all nodes simultaneously during the maintenance window.
C.Use HANA scale-out to move services to other nodes, then reboot each node sequentially.
D.Create a new EC2 instance with the patch applied, then update DNS to point to the new instance.
AnswerC

This allows zero or minimal downtime by leveraging cluster redundancy.

Why this answer

In a HANA multi-node cluster, you can leverage HANA's scale-out capabilities to move services (e.g., using HANA system replication or failover) to other nodes, then reboot each node sequentially. This minimizes downtime as the database remains available through the other nodes. Option A is incorrect because AWS Systems Manager Run Command can apply the patch, but if a reboot is required, it will still need a reboot, causing downtime.

Option B is incorrect because rebooting all nodes simultaneously will cause complete downtime. Option D is incorrect because creating a new EC2 instance and updating DNS introduces complexity, potential connectivity issues, and is not a standard approach for HANA clusters; it also does not leverage HANA's built-in high availability features.

Practice this question →
182
Multi-Selecteasy

A company runs SAP on AWS and wants to ensure that all API calls to create, modify, or delete EC2 instances are logged for auditing. Which TWO AWS services can be used together to achieve this? (Choose two.)

Select 2 answers
A.AWS CloudTrail
B.Amazon S3 server access logs
C.AWS Config
D.Amazon CloudWatch Logs
E.Amazon VPC Flow Logs
AnswersA, D

CloudTrail records all EC2 API calls.

Why this answer

AWS CloudTrail logs API calls to create, modify, or delete EC2 instances. Amazon CloudWatch Logs can store and analyze the CloudTrail logs for auditing. Option B (Amazon S3 server access logs) logs access to S3 buckets, not EC2 API calls.

Option C (AWS Config) tracks configuration changes but does not log all API calls. Option E (Amazon VPC Flow Logs) captures network traffic, not API calls.

Practice this question →
183
MCQhard

A company runs SAP BusinessObjects on AWS. The system includes a web application server and a CMS database on separate EC2 instances. The operations team receives alerts that the CMS database server's EBS volume is approaching its maximum capacity. The volume is a gp3 EBS volume with 3000 IOPS and 125 MB/s throughput. Upon investigation, the team finds that the volume is 90% full and write performance has degraded. The application is experiencing slow response times. What should the team do to resolve the issue without downtime?

A.Move the database to an instance store volume for better performance.
B.Migrate the database to an io2 Block Express volume with higher performance.
C.Increase the IOPS and throughput of the existing volume.
D.Expand the EBS volume size and extend the file system.
AnswerD

Expanding volume increases capacity and improves performance; online resize is possible.

Why this answer

Expanding the EBS volume size increases both capacity and, for gp3, the baseline throughput (since gp3 throughput scales with volume size up to a maximum), which can resolve the capacity issue and improve write performance. This operation can be performed online without downtime. Option A is incorrect because instance store volumes are ephemeral and not suitable for persistent database data; migrating would also require downtime.

Option B is incorrect because while io2 Block Express offers higher performance, it is not necessary for this scenario and may increase cost unnecessarily; the primary issue is capacity, which can be addressed by expanding the existing volume. Option C is incorrect because increasing only IOPS and throughput does not add storage capacity; the volume is 90% full, so capacity must also be increased.

Practice this question →
184
MCQeasy

An organization runs SAP on AWS and needs to ensure that their SAP HANA database backups are encrypted at rest. Which AWS service should they use to manage the encryption keys?

A.AWS Key Management Service (KMS)
B.AWS CloudHSM
C.AWS Identity and Access Management (IAM)
D.AWS Certificate Manager
AnswerA

KMS manages encryption keys.

Why this answer

AWS Key Management Service (KMS) is the managed service that allows you to create, control, and manage encryption keys for encrypting data at rest, including SAP HANA backups. Option B (CloudHSM) is a hardware security module for generating keys but is not the standard managed service for key management; KMS is more appropriate for this use case. Option C (IAM) is for identity and access management, not encryption key management.

Option D (ACM) is for managing SSL/TLS certificates, not encryption keys for data at rest.

Practice this question →
185
MCQeasy

An SAP administrator needs to monitor the CPU utilization of an EC2 instance running SAP NetWeaver. The administrator wants to receive an alert when CPU utilization exceeds 90% for 5 consecutive minutes. Which AWS service should be used?

A.AWS CloudTrail
B.AWS Config
C.Amazon VPC Flow Logs
D.Amazon CloudWatch Alarms
AnswerD

CloudWatch Alarms monitor metrics and trigger alerts.

Why this answer

Amazon CloudWatch Alarms (Option D) are the correct choice because they can monitor Amazon CloudWatch metrics, such as EC2 CPU utilization, and trigger actions (e.g., SNS notifications) when a specified threshold (e.g., 90% for 5 consecutive minutes) is breached. Option A (AWS CloudTrail) is incorrect because it logs API calls for auditing, not performance metrics. Option B (AWS Config) tracks resource configuration changes, not real-time metrics.

Option C (Amazon VPC Flow Logs) captures network traffic metadata, not CPU utilization.

Practice this question →
186
Multi-Selectmedium

Which THREE steps should be taken when recovering an SAP system from an EBS snapshot? (Choose 3.)

Select 3 answers
A.Attach the new volume to the EC2 instance
B.Terminate the existing EC2 instance
C.Mount the volume on the appropriate mount point
D.Reconfigure the S3 bucket for backup storage
E.Create an EBS volume from the snapshot
AnswersA, C, E

Attach to the original or replacement instance.

Why this answer

When recovering an SAP system from an EBS snapshot, the correct steps are: first, create a new EBS volume from the snapshot (E); then, attach that volume to the EC2 instance (A); and finally, mount the volume on the appropriate mount point (C). Option B (terminate the existing EC2 instance) is incorrect because you can attach the new volume to the running instance without terminating it. Option D (reconfigure the S3 bucket for backup storage) is unrelated to recovering from an EBS snapshot.

Practice this question →
187
Multi-Selecthard

A company runs SAP on AWS and needs to ensure that all API calls made to AWS services are logged for auditing purposes. Which TWO services should be used together to achieve this?

Select 2 answers
A.Amazon S3
B.VPC Flow Logs
C.Amazon CloudWatch Logs
D.AWS Config
E.AWS CloudTrail
AnswersC, E

Amazon CloudWatch Logs can receive and store log data from AWS CloudTrail, enabling monitoring and analysis.

Why this answer

AWS CloudTrail logs all API calls made to AWS services, providing an audit trail. Amazon CloudWatch Logs can then be used to store, monitor, and analyze these logs. Together, they satisfy the auditing requirement.

Option A (Amazon S3) can store logs but does not log API calls itself. Option B (VPC Flow Logs) captures network traffic, not API calls. Option D (AWS Config) records resource configuration changes, not API calls.

Therefore, the correct combination is CloudTrail and CloudWatch Logs.

Exam trap

Candidates might think AWS Config or VPC Flow Logs are suitable for API call logging, but they serve different purposes (config changes and network traffic, respectively).

Practice this question →
188
MCQmedium

A company is running SAP Business Suite on AWS with a Microsoft SQL Server database. The operations team needs to implement automated database backups with point-in-time recovery. Which AWS service should be used to achieve this?

A.AWS Storage Gateway
B.AWS Backup
C.AWS Database Migration Service (DMS)
D.Amazon RDS for SQL Server
AnswerB

AWS Backup can automate backups of SQL Server on EC2 with point-in-time recovery.

Why this answer

AWS Backup (option B) is the correct service for automated database backups with point-in-time recovery for SQL Server running on EC2. It supports SQL Server databases on EC2 and provides automated backup scheduling and point-in-time recovery capabilities. Option A (AWS Storage Gateway) is for hybrid cloud storage, not database backup.

Option C (AWS DMS) is for database migration, not backup. Option D (Amazon RDS for SQL Server) is a managed database service, but since the SQL Server is on EC2, RDS does not apply.

Exam trap

Candidates often confuse AWS Backup with Amazon RDS for SQL Server. RDS is a managed service for databases that do not require EC2, while AWS Backup supports SQL Server on EC2.

Practice this question →
189
Multi-Selecthard

Which TWO actions should be taken to securely manage database credentials for an SAP system running on Amazon RDS for Oracle? (Choose 2)

Select 2 answers
A.Store the credentials as an S3 object with server-side encryption.
B.Use AWS Systems Manager Parameter Store with a secure string parameter.
C.Use IAM database authentication to manage access without passwords.
D.Use AWS Secrets Manager to store and automatically rotate the database passwords.
E.Store the credentials in AWS CloudHSM.
AnswersC, D

IAM database authentication allows IAM users to connect using an authentication token.

Why this answer

Options C and D are correct. IAM database authentication (C) allows you to use IAM users and roles to authenticate to your RDS database, eliminating the need for passwords. AWS Secrets Manager (D) securely stores and automatically rotates database credentials, which is a best practice for managing secrets.

Option A is incorrect because storing credentials as an S3 object lacks native rotation and is less secure than dedicated secrets management services. Option B is incorrect: although Systems Manager Parameter Store can store secure strings, it does not natively rotate RDS credentials. Option E is incorrect because AWS CloudHSM is a hardware security module for key generation and encryption, not for storing and rotating passwords.

Practice this question →
190
MCQmedium

A company is running a critical SAP application on AWS. The operations team receives a notification that the SAP HANA database is running low on memory. Which AWS service should be used to automatically increase memory capacity without downtime?

A.Amazon ElastiCache
B.Amazon EC2 Auto Scaling
C.Amazon DynamoDB
D.AWS Lambda
AnswerB

Amazon EC2 Auto Scaling can automatically launch additional EC2 instances configured as HANA worker nodes in a scale-out cluster, increasing total memory capacity without downtime. This is the correct approach for scaling memory.

Why this answer

Mazon EC2 Auto Scaling (Option B). For SAP HANA on AWS, increasing memory capacity without downtime is achieved through HANA scale-out, which adds additional nodes to the HANA cluster. Amazon EC2 Auto Scaling can automatically launch new EC2 instances configured as HANA worker nodes, thereby increasing the total available memory.

This approach allows the database to accommodate higher memory demand without restarting the existing instance. Option A (ElastiCache) provides a separate caching layer but does not increase HANA's own memory. Option C (DynamoDB) and Option D (Lambda) are irrelevant for this purpose.

Practice this question →
191
MCQeasy

An SAP system administrator needs to apply an operating system patch to an Amazon EC2 instance running SAP NetWeaver. The instance is part of an Auto Scaling group. What is the BEST approach to minimize downtime?

A.Detach the instance from the Auto Scaling group, apply the patch, and reattach.
B.Stop the instance, apply the patch, and start it.
C.Use a rolling update by updating the launch configuration and performing an instance refresh.
D.Terminate the instance and let Auto Scaling launch a new one with the patch.
AnswerC

Minimizes downtime by replacing instances gradually.

Why this answer

An instance refresh in an Auto Scaling group allows you to apply a new launch configuration (which includes the patched AMI or user data) to all instances in a rolling, controlled manner. This minimizes downtime by replacing instances one at a time or in batches, ensuring the SAP NetWeaver application remains available throughout the process. Detaching, stopping, or terminating individual instances would cause unnecessary disruption or require manual reattachment, which is not optimal for high-availability SAP landscapes.

Exam trap

The trap here is that candidates often choose Option A (detach and reattach) thinking it gives manual control, but they overlook that Auto Scaling's instance refresh is the designed, automated method for applying updates with minimal downtime, and detaching breaks the group's lifecycle management.

How to eliminate wrong answers

Option A is wrong because detaching an instance from an Auto Scaling group removes it from the group's management, and after patching, you must manually reattach it, which does not leverage Auto Scaling's automated health checks or rolling update capabilities, potentially causing longer downtime. Option B is wrong because stopping an EC2 instance for patching causes a full outage for that instance, and SAP NetWeaver typically requires high availability; stopping also does not integrate with Auto Scaling's lifecycle hooks or instance refresh mechanisms. Option D is wrong because terminating the instance and relying on Auto Scaling to launch a new one with a patched AMI is disruptive—it causes a complete loss of that instance's state and does not provide a controlled, rolling replacement, which can lead to downtime if the application is not designed for sudden instance termination.

Practice this question →
192
Multi-Selecthard

Which THREE AWS services can be used to monitor and log SAP system activities for security and compliance? (Choose three.)

Select 3 answers
A.Amazon Athena
B.Amazon VPC Flow Logs
C.Amazon CloudWatch Logs
D.AWS CloudTrail
E.AWS Config
AnswersC, D, E

Stores application and system logs.

Why this answer

Amazon CloudWatch Logs (C) stores log data from SAP systems, AWS CloudTrail (D) logs API calls for auditing, and AWS Config (E) tracks configuration changes for compliance. Amazon Athena (A) is a query service, not a logging service, and Amazon VPC Flow Logs (B) capture network traffic, not system activities.

Practice this question →
193
MCQmedium

An SAP administrator receives an alert that the HANA database has switched to read-only mode. The administrator checks the disk space and finds that the /hana/data volume is 100% full. What is the most efficient way to resolve this issue?

A.Delete old HANA backup files from the volume
B.Restart the HANA database to clear temporary files
C.Create a new EC2 instance with larger disks and migrate
D.Increase the size of the EBS volume using the console or CLI
AnswerD

EBS allows live expansion without downtime, providing immediate space.

Why this answer

EBS volumes can be increased in size online without downtime using the AWS Management Console or CLI, providing immediate additional space to resolve the read-only issue. Option A is incorrect because deleting backup files may not free enough space and is not a long-term solution. Option B is incorrect because restarting the database does not add storage space.

Option C is incorrect because creating a new EC2 instance with larger disks requires migration and causes unnecessary downtime compared to simply increasing the EBS volume size.

Practice this question →
194
MCQhard

A company is running SAP BusinessObjects on AWS and needs to back up the CMS database (an SAP HANA database) daily. The backup must be stored in Amazon S3 for long-term retention and must be recoverable within 4 hours. Which backup strategy meets these requirements?

A.Copy the HANA data files to an Amazon EBS volume in a different Availability Zone.
B.Configure the SAP HANA Backint agent to back up directly to Amazon S3.
C.Use AWS Backup to create application-consistent backups of the HANA database.
D.Take daily EBS snapshots of the HANA volumes.
AnswerB

Configuring the SAP HANA Backint agent to back up directly to Amazon S3 is the native and most efficient method for HANA backups. It allows direct S3 storage, supports incremental backups, and can restore within 4 hours.

Why this answer

The SAP HANA Backint agent allows direct backup to Amazon S3, providing a native and efficient method for consistent HANA backups. Option A is incorrect because copying data files to an EBS volume in another AZ does not ensure database consistency and is not a proper backup method for HANA. Option C is incorrect because AWS Backup does not natively support application-consistent backups for SAP HANA databases.

Option D is incorrect because EBS snapshots are not crash-consistent for HANA and do not guarantee point-in-time recovery for the database.

Practice this question →
195
MCQmedium

A company runs SAP on AWS and uses a multi-AZ deployment for SAP HANA. The operations team notices that the secondary HANA node in the standby replica is not automatically taking over during a planned failover test. What is the most likely cause?

A.HANA system replication is not configured with 'PRIMARY' and 'SECONDARY' roles.
B.Security Groups are blocking replication traffic.
C.The secondary instance is launched in a different instance family.
D.The EBS volumes are not configured for replication across AZs.
AnswerA

Automatic failover requires proper HANA system replication configuration.

Why this answer

For automatic failover in SAP HANA system replication, the secondary node must be configured with the 'SECONDARY' role and the primary with 'PRIMARY' role. If these roles are not set, the secondary will not automatically take over during a planned failover test. Option B is incorrect because security groups can block replication traffic, but that would prevent replication altogether, not just automatic failover during a planned test.

Option C is incorrect because instance families do not affect automatic failover; HANA can run on different families but that is not a typical cause. Option D is incorrect because EBS replication is not a factor in HANA system replication; HANA uses its own replication mechanism.

Practice this question →
196
MCQhard

A company runs SAP HANA on an m5.24xlarge EC2 instance. The instance has an EBS-optimized attachment and a high-performance EBS volume for data. The database team reports that write latency to the data volume is consistently above 5 ms during peak hours. Which action would most effectively reduce write latency?

A.Provision the data volume as an io2 Block Express volume with higher IOPS.
B.Use an Elastic Fabric Adapter (EFA) for storage traffic.
C.Change the data volume type to gp3.
D.Enable EBS optimization on the instance.
AnswerA

io2 Block Express provides sub-millisecond latency and high IOPS, suitable for SAP HANA.

Why this answer

Io2 Block Express volumes are designed for high-performance workloads requiring low latency and high IOPS, which directly addresses the write latency issue. Option B is incorrect because EFA is for HPC and does not affect EBS latency. Option C is incorrect because gp3 volumes have lower performance than io2 for high-write workloads.

Option D is incorrect because the m5.24xlarge instance already supports EBS optimization, and enabling it would not reduce latency further.

Practice this question →
197
MCQeasy

Your company runs SAP Business Suite on AWS. The system has a three-tier architecture with a web dispatcher, application servers, and a HANA database. The operations team has been receiving alerts about high CPU usage on the application servers during peak hours. The application servers are currently running on m5.large instances. You need to ensure consistent performance without over-provisioning. What is the most cost-effective solution?

A.Add more application servers manually during peak hours
B.Upgrade all application servers to m5.xlarge instances
C.Use reserved instances to lower cost but keep existing instances
D.Configure Auto Scaling with a step scaling policy based on CPU utilization
AnswerD

Auto Scaling adjusts capacity dynamically based on demand, cost-effective.

Why this answer

Configuring Auto Scaling with a step scaling policy based on CPU utilization automatically adds or removes application servers in response to demand. This ensures consistent performance during peak hours without permanently over-provisioning resources, making it the most cost-effective solution. Option D is correct.

Practice this question →
198
Multi-Selecteasy

A company uses AWS Systems Manager to automate patching of SAP application servers. Which TWO resources are required to use Systems Manager Patch Manager?

Select 2 answers
A.An Application Load Balancer in front of the instances
B.AWS Systems Manager Agent (SSM Agent) installed on the EC2 instances
C.A NAT gateway for outbound internet access
D.An IAM role that grants Systems Manager permissions attached to the EC2 instances
E.An internet gateway attached to the VPC
AnswersB, D

SSM Agent is required for Systems Manager to communicate with instances.

Why this answer

The correct answers are B and D. AWS Systems Manager Patch Manager requires the SSM Agent to be installed on the EC2 instances (B) to receive and apply patches. Additionally, the instances must be associated with an IAM role that grants Systems Manager permissions (D) to allow the service to communicate with the instances and perform patching actions.

Options A, C, and E are not required. An Application Load Balancer (A) is not needed for patching. A NAT gateway (C) is not necessary because you can use VPC endpoints for Systems Manager instead of outbound internet access.

An internet gateway (E) is also not required if VPC endpoints are used.

Practice this question →
199
Multi-Selectmedium

Which TWO AWS services can be used to automate the patching of SAP EC2 instances? (Choose two.)

Select 2 answers
A.AWS Systems Manager Maintenance Windows
B.AWS Systems Manager Patch Manager
C.Amazon Inspector
D.AWS CloudFormation
E.AWS CodeDeploy
AnswersA, B

Schedules patching activities.

Why this answer

Options A and B are correct. AWS Systems Manager Maintenance Windows allow you to schedule patching tasks, while AWS Systems Manager Patch Manager automates the patching process. Option C is incorrect because Amazon Inspector is a vulnerability scanning service, not used for patching.

Option D is incorrect because AWS CloudFormation is an infrastructure provisioning service. Option E is incorrect because AWS CodeDeploy is an application deployment service.

Practice this question →
200
MCQhard

An SAP administrator runs the above CloudWatch Logs Insights query on an application log group. The query returns no results even though the administrator knows there are ERROR messages in the logs. What is the most likely cause?

A.The query uses a regex pattern that is not supported by CloudWatch Logs Insights.
B.The query syntax is incorrect; the filter should use 'like' instead of '/.../'.
C.The time range is set to a period when no ERROR messages were logged.
D.The log events are not in plain text; they are in JSON format and the ERROR string is within a JSON field.
AnswerD

If logs are JSON, @message contains the entire JSON string; the filter may need to target a specific field.

Why this answer

CloudWatch Logs Insights allows filtering log events using the @message field. When logs are in JSON format, the ERROR string may be embedded within a JSON field rather than appearing as plain text in @message. A simple pattern match like /ERROR/ on @message will not match if the @message contains the entire JSON object.

To search JSON logs, parse the JSON fields and filter on the parsed fields. Option A is incorrect because CloudWatch Logs Insights supports regex patterns with the '/pattern/' syntax. Option B is incorrect because the correct filter syntax uses '/pattern/', not 'like' (which is not an operator in CloudWatch Logs Insights).

Option C is incorrect because while the time range could exclude errors, the most likely cause given that errors are known to exist is the JSON structure. Therefore, Option D is the correct answer.

Practice this question →
201
MCQmedium

Refer to the exhibit. An administrator runs the AWS CLI command shown. The instance is running Windows. Which of the following is true based on the output?

A.The instance is in the 'stopped' state.
B.The instance is in the 'running' state, but the status of the SAP application is unknown from this output.
C.The instance type is t2.micro.
D.The instance is running Linux.
AnswerB

The CLI output only shows instance metadata, not application health.

Why this answer

The AWS CLI command output shows the instance state as 'running', but it does not provide any information about the SAP application status. Therefore, we know the instance is running, but the SAP application status remains unknown from this output. Option A is incorrect because the state shown is 'running', not 'stopped'.

Option C is incorrect because the output does not include the instance type 't2.micro' (or the actual type is different). Option D is incorrect because the instance is running Windows, as indicated in the stem and likely confirmed by the output, so it is not Linux.

Practice this question →
202
MCQhard

A company runs its SAP ERP system on AWS using a multi-tier architecture. The SAP application servers are in an Auto Scaling group across two Availability Zones, and the SAP HANA database runs on a single large EC2 instance (r5.24xlarge) with 768 GB of memory and EBS Provisioned IOPS SSD (io1) volumes. The operations team recently noticed that the database performance degrades intermittently during peak business hours. CloudWatch metrics show that the database instance's CPU utilization remains below 40%, but the ReadLatency and WriteLatency for the EBS volumes spike above 10 ms during these periods, and the VolumeQueueLength metric increases significantly. The database instance uses a single EBS volume for /hana/data and another for /hana/log. The team has already verified that there are no network bottlenecks and that the SAP application servers are not overwhelming the database with queries. What is the MOST likely cause of the latency spikes, and what action should be taken?

A.Change the EBS volume type from io1 to st1 for higher throughput.
B.Add more SAP application servers to distribute the load and reduce database contention.
C.Enable EBS encryption on the volumes to improve I/O performance.
D.Upgrade the EC2 instance to a Nitro-based instance type like r5b.24xlarge, which provides higher EBS bandwidth and lower latency.
AnswerD

Upgrading to a Nitro-based instance like r5b.24xlarge provides higher EBS bandwidth and dedicated hardware for EBS, reducing latency and queueing, which directly addresses the issue of EBS volume saturation.

Why this answer

The symptoms indicate that the EBS volumes are experiencing queueing due to insufficient I/O performance. The r5.24xlarge instance uses the Xen hypervisor, which has lower EBS bandwidth compared to Nitro-based instances like r5b.24xlarge. Upgrading to a Nitro instance provides dedicated EBS bandwidth and lower latency, addressing the latency spikes.

Option A is incorrect because st1 (throughput optimized) is not suitable for low-latency database workloads; it is designed for large sequential I/O. Option B is incorrect because adding more application servers would increase the database load, exacerbating the issue. Option C is incorrect because EBS encryption does not improve I/O performance.

Practice this question →
203
MCQeasy

An SAP system administrator needs to monitor the CPU utilization of an EC2 instance running SAP NetWeaver. The administrator wants to receive an alert when the CPU utilization exceeds 80% for 5 consecutive minutes. Which AWS service should be used to create this alarm?

A.AWS CloudTrail
B.AWS Config
C.Amazon CloudWatch Logs
D.Amazon CloudWatch Alarms
AnswerD

CloudWatch Alarms can monitor CPU utilization metric.

Why this answer

Amazon CloudWatch Alarms are the correct service for monitoring EC2 instance CPU utilization and triggering alerts based on thresholds. In this scenario, the administrator needs to create an alarm that triggers when CPU utilization exceeds 80% for 5 consecutive minutes. CloudWatch Alarms can evaluate metric data against specified thresholds and perform actions such as sending notifications via SNS.

Option D is correct. Option A (AWS CloudTrail) is for auditing API activity, not metric monitoring. Option B (AWS Config) is for resource configuration compliance.

Option C (Amazon CloudWatch Logs) is for storing and monitoring log files, not for setting metric-based alarms.

Practice this question →
204
MCQhard

An SAP on AWS environment includes multiple instances across Availability Zones. The operations team needs to automatically replace an unhealthy EC2 instance that is part of an SAP application cluster. Which AWS service can automatically detect and replace the instance based on health checks?

A.Elastic Load Balancing
B.AWS Systems Manager Automation
C.Auto Scaling group
D.Amazon CloudWatch alarms
AnswerC

Auto Scaling replaces unhealthy instances based on health checks.

Why this answer

An Auto Scaling group with health checks can automatically detect and replace unhealthy EC2 instances. This is commonly used for SAP applications to maintain high availability across Availability Zones. Option A is incorrect because Elastic Load Balancing distributes traffic but does not replace instances.

Option B is incorrect because AWS Systems Manager Automation can automate maintenance tasks but does not automatically replace instances based on health checks. Option D is incorrect because Amazon CloudWatch alarms can notify on health status but do not automatically replace instances.

Practice this question →
205
MCQmedium

Refer to the exhibit. An SAP administrator has attached the IAM policy above to an IAM role used by an EC2 instance for S3 backup operations. The backup process fails with 'Access Denied' when trying to upload a backup file. What is the most likely cause?

A.The policy does not include s3:ListBucket permission
B.The policy does not include kms:GenerateDataKey and kms:Encrypt
C.The policy allows kms:Decrypt on all resources, which is too permissive
D.The policy uses s3:PutObject but the bucket policy denies uploads
AnswerB

KMS encrypted S3 operations require these permissions.

Why this answer

The policy allows s3:PutObject but missing kms:GenerateDataKey and kms:Encrypt for server-side encryption. Without those, PutObject fails if the bucket uses KMS encryption. The s3:GetObject is not needed for upload. kms:Decrypt alone is insufficient.

Practice this question →
206
MCQhard

An SAP administrator is troubleshooting a failed backup of SAP HANA to Amazon S3. The backup is initiated by an SAP HANA BACKUP command using the S3 backint agent. The error log shows 'HTTP 403 Forbidden' when the agent tries to upload to the S3 bucket. The bucket policy allows s3:PutObject from the VPC endpoint. What is the most likely cause?

A.The S3 bucket does not exist.
B.The S3 bucket is not in the same AWS Region as the EC2 instance.
C.The S3 bucket uses server-side encryption with AWS KMS (SSE-KMS) and the IAM role lacks kms:GenerateDataKey.
D.The VPC endpoint policy for S3 does not grant the required actions to the IAM role.
AnswerD

VPC endpoint policies can restrict access even if bucket policy allows it.

Why this answer

The HTTP 403 Forbidden error indicates that the request was received but denied. Since the bucket policy allows s3:PutObject from the VPC endpoint, the issue is likely that the VPC endpoint policy itself does not grant the required actions to the IAM role. VPC endpoint policies act as a separate layer that can override bucket policies.

Option D is correct. Option A is wrong because the bucket exists. Option B is wrong because cross-region access would not cause a 403.

Option C is wrong because SSE-KMS would cause a 400 error, not 403.

Practice this question →
207
MCQhard

A company runs SAP HANA on AWS using a clustered environment with two EC2 instances in an active/passive configuration. The cluster uses a shared EFS file system for the SAP HANA shared volume. The operations team recently migrated the EFS file system from the previous generation to Elastic Throughput mode to improve performance. After the migration, the HANA database becomes unresponsive intermittently. The team notices that the EFS mount target is in a different Availability Zone than the active HANA instance. What is the most likely cause of the unresponsiveness?

A.The EFS file system does not provide sufficient IOPS for HANA workloads.
B.The EFS Elastic Throughput mode is throttling the HANA database traffic.
C.The EFS mount target is in a different Availability Zone than the active HANA instance, causing high latency and potential timeouts.
D.The EFS file system has reached its maximum number of concurrent connections.
AnswerC

Accessing EFS across Availability Zones increases latency, which can cause HANA to become unresponsive.

Why this answer

The most likely cause of unresponsiveness is that the EFS mount target is in a different Availability Zone than the active HANA instance. Cross-AZ access to EFS introduces higher latency and potential network timeouts, which can cause HANA database interruptions. Option A is incorrect: EFS provides adequate throughput for HANA shared volumes; IOPS is not the issue.

Option B is incorrect: Elastic Throughput mode automatically scales throughput based on workload activity, so it would not throttle unless the workload exceeds burst credit balance, but that is not indicated. Option D is incorrect: EFS does not have a hard limit on concurrent connections from two EC2 instances.

Practice this question →
208
MCQmedium

An SAP system administrator wants to monitor the CPU and memory usage of SAP HANA database instances. Which AWS service should be used to collect and visualize these metrics?

A.AWS CloudTrail
B.Amazon CloudWatch Agent
C.AWS Systems Manager Run Command
D.Amazon CloudWatch metrics
AnswerB

Collects memory and disk metrics from EC2 instances.

Why this answer

The Amazon CloudWatch Agent can collect memory metrics from EC2 instances, including SAP HANA databases. Option A is wrong because CloudTrail is for API auditing, not metric collection. Option C is wrong because Systems Manager Run Command is for executing scripts, not continuous monitoring.

Option D is wrong because standard CloudWatch metrics do not include memory usage by default; memory metrics require the CloudWatch Agent.

Practice this question →
209
Multi-Selecteasy

A company runs SAP on AWS and uses CloudWatch for monitoring. They want to set up an alarm that notifies the operations team when the CPU utilization of their SAP application server exceeds 90% for 5 consecutive minutes. Which THREE components are required to achieve this? (Select THREE.)

Select 3 answers
A.AWS CloudTrail to log the alarm actions.
B.A CloudWatch alarm configured with the metric and threshold.
C.An Amazon SNS topic to send the notification.
D.An AWS Lambda function to process the alarm.
E.A CloudWatch metric for CPU utilization.
AnswersB, C, E

The alarm triggers when the threshold is breached.

Why this answer

Options B, C, and E are correct. Option B: A CloudWatch alarm is required to define the threshold and trigger when CPU utilization exceeds 90% for 5 consecutive minutes. Option C: An Amazon SNS topic is needed to send notifications to the operations team.

Option E: A CloudWatch metric for CPU utilization is the data source for the alarm. Option A is incorrect because CloudTrail logs API calls, not needed for this monitoring setup. Option D is incorrect because Lambda is not required; the alarm can directly trigger SNS.

Practice this question →
210
MCQmedium

A company runs SAP on AWS and wants to reduce costs by stopping non-production instances during off-hours. Which AWS service can automatically start and stop EC2 instances on a schedule?

A.AWS Systems Manager Maintenance Windows
B.AWS Instance Scheduler
C.Amazon CloudWatch Alarms
D.EC2 Auto Scaling
AnswerB

Instance Scheduler automates start/stop on a schedule.

Why this answer

AWS Instance Scheduler is a solution that automatically starts and stops instances on a defined schedule, reducing costs for non-production instances during off-hours. Option A is wrong because while AWS Systems Manager Maintenance Windows can schedule start/stop tasks via automation documents, AWS Instance Scheduler is the dedicated solution designed specifically for this use case, making it the best answer. Option C is wrong because Amazon CloudWatch Alarms can trigger actions based on metrics but lack built-in recurring schedule capabilities.

Option D is wrong because EC2 Auto Scaling manages instance counts based on demand, not on a time-based schedule.

Practice this question →
211
MCQmedium

A company runs SAP on AWS and uses AWS Direct Connect for on-premises connectivity. The operations team notices that the SAP system is experiencing high latency when accessing an on-premises database. The network team confirms that the Direct Connect link is not saturated. What is the most likely cause of the high latency?

A.The traffic is traversing a transit VPC with additional NAT instances
B.The Direct Connect link is using a public VIF instead of a private VIF
C.The Direct Connect bandwidth is insufficient
D.The on-premises network is using a VPN over the Direct Connect link
AnswerA

Additional hops in a transit VPC increase latency.

Why this answer

If the Direct Connect link is not saturated, the issue could be routing inefficiency. A transit VPC with EC2 instances acting as NAT or proxy can introduce additional hops and latency. VPN over Direct Connect is not relevant.

MPLS is the underlying technology for Direct Connect. Increasing bandwidth does not reduce latency caused by routing.

Practice this question →
212
MCQmedium

An SAP Basis administrator notices that the SAP system's response time is increasing during peak hours. The system uses an SAP NetWeaver application server on EC2 and an SAP HANA database on a separate EC2 instance. CloudWatch metrics show that the application server's CPU utilization is at 80% and the database server's CPU is at 30%. The application server is an m5.2xlarge, and the database is an r5.2xlarge. The administrator checks the SAP work process overview and sees that all dialog work processes are busy. What should the administrator do to resolve the performance issue?

A.Increase the database server's CPU capacity by changing to a larger instance type.
B.Increase the instance size of the application server to a compute-optimized type.
C.Add another application server to the system and distribute the load.
D.Increase the number of dialog work processes in the SAP application server profile.
AnswerD

Adding more work processes allows handling more concurrent requests.

Why this answer

The symptom is that all dialog work processes are busy while CPU utilization on the application server is only 80% and database CPU is only 30%. This indicates that the bottleneck is the number of dialog work processes, not CPU or memory. Increasing the number of dialog work processes in the SAP application server profile allows more concurrent users to be processed without additional hardware.

Option A is incorrect because the database CPU is low, so increasing database capacity won't help. Option B is incorrect because the application server CPU is not fully saturated; the issue is work process limits. Option C is incorrect because adding another application server may help, but it is more complex and the immediate fix is to adjust the work process count; however, the question asks for the best first step, and increasing dialog work processes is simpler and directly addresses the symptom.

Practice this question →
213
MCQmedium

A company has a CloudFormation stack that creates an EC2 instance with a custom AMI. The stack fails with the error 'Resource creation cancelled' during creation. The engineer checks the stack events and sees that the EC2 instance creation succeeded, but the subsequent creation of an EBS volume failed. What is the MOST likely reason for the failure?

A.The EC2 instance creation failed and then was cancelled
B.The EC2 instance had a DeletionPolicy of Retain, which prevented rollback
C.The EBS volume creation failed, causing the stack to roll back and cancel the instance
D.The EC2 instance depended on the EBS volume, and the dependency caused a timeout
AnswerC

If a subsequent resource fails, CloudFormation cancels previously created resources during rollback.

Why this answer

When an EBS volume creation fails in a CloudFormation stack, the stack initiates a rollback of all previously created resources, including the EC2 instance. The 'Resource creation cancelled' error appears for the EC2 instance because its creation was successful but then undone during the rollback, not because it failed initially.

Exam trap

The trap here is that candidates misinterpret 'Resource creation cancelled' as a creation failure of the EC2 instance itself, rather than understanding it is a rollback cancellation of a previously successful resource.

How to eliminate wrong answers

Option A is wrong because the stack events explicitly show the EC2 instance creation succeeded, so the failure is not due to the instance itself. Option B is wrong because a DeletionPolicy of Retain only affects resource deletion during stack deletion, not rollback; during rollback, CloudFormation still terminates the instance regardless of the DeletionPolicy. Option D is wrong because the EC2 instance does not depend on the EBS volume in this scenario; the EBS volume is created after the instance, and a dependency would cause the instance to wait for the volume, not cancel the instance.

Practice this question →
214
MCQeasy

A company wants to automate the backup of their SAP HANA database running on an EC2 instance. The backup should be stored in Amazon S3 and retained for 30 days. Which AWS service can be used to schedule and manage these backups?

A.AWS Lambda
B.Amazon S3 Lifecycle policies
C.AWS Storage Gateway
D.AWS Backup
AnswerD

AWS Backup automates backups and can store in S3.

Why this answer

AWS Backup. AWS Backup is a fully managed backup service that can be used to automate backups of EC2 instances, including SAP HANA databases, and store backups in Amazon S3. It allows scheduling and retention policies.

Option A (AWS Lambda) can be used but requires custom code and is not the primary service for managing backups. Option B (Amazon S3 Lifecycle policies) manages object lifecycle transitions and deletions, not scheduling backups. Option C (AWS Storage Gateway) provides hybrid storage connectivity, not backup scheduling.

Practice this question →
215
Multi-Selecthard

A company is migrating a legacy application to AWS. The application requires a static IP address that does not change during instance stop/start. The application also needs to be highly available across two Availability Zones. Which THREE actions should the company take to meet these requirements?

Select 3 answers
A.Use a Network Load Balancer with an Elastic IP address
B.Allocate an Elastic IP address and associate it with the primary instance
C.Place the instances in a placement group to ensure high availability
D.Configure an Auto Scaling group across two Availability Zones
E.Use an Application Load Balancer to distribute traffic to the instances
AnswersA, B, D

NLB supports static IP via EIP and is highly available across AZs.

Why this answer

A Network Load Balancer (NLB) supports static IP addresses by allowing you to associate an Elastic IP address with each of its Availability Zone subnets. This provides a fixed entry point that does not change when backend instances are stopped or started, meeting the requirement for a static IP. Combined with an Auto Scaling group spanning two Availability Zones, the NLB ensures high availability by distributing traffic across healthy instances in both zones.

Exam trap

The trap here is that candidates often confuse the static IP capability of a Network Load Balancer with the DNS-based routing of an Application Load Balancer, or mistakenly think that a single Elastic IP on an instance provides high availability across zones.

Practice this question →
216
MCQeasy

A company has an SAP HANA database running on an EC2 instance with a single 500 GB gp2 volume. The database is experiencing I/O bottlenecks. The operations team wants to increase IOPS without changing the volume size. Which action should they take?

A.Enable EBS optimization on the EC2 instance.
B.Change the volume type to st1 (throughput optimized).
C.Modify the volume to increase its size to 1,000 GB.
D.Attach an additional gp2 volume and use it for temporary data.
AnswerD

Attaching an additional gp2 volume for temporary data offloads I/O from the primary volume, increasing effective IOPS without altering the original volume size. This is a common technique to alleviate I/O bottlenecks.

Why this answer

Attaching an additional gp2 volume and moving temporary data to it offloads I/O from the primary HANA data volume, effectively increasing the total IOPS available to the database without changing the size of the original volume. This reduces the I/O bottleneck and improves performance.

Option A (EBS optimization) improves network bandwidth but does not increase the volume's IOPS.

Option B (st1) is throughput-optimized and unsuitable for low-latency database workloads like SAP HANA.

Option C (increasing volume size) directly violates the requirement of not changing the volume size.

Practice this question →
217
Multi-Selectmedium

Which TWO actions are recommended to ensure high availability for SAP NetWeaver on AWS? (Choose 2).

Select 2 answers
A.Use an Application Load Balancer with health checks to distribute traffic.
B.Use a single Availability Zone to reduce latency.
C.Take frequent EBS snapshots to ensure data durability.
D.Deploy SAP application instances in different Availability Zones.
E.Use t2 instance types to reduce cost.
AnswersA, D

ALB with health checks can route traffic away from unhealthy instances.

Why this answer

To ensure high availability for SAP NetWeaver on AWS, it is recommended to use an Application Load Balancer (ALB) with health checks to distribute traffic (Option A). The ALB automatically reroutes traffic away from unhealthy instances, improving fault tolerance. Additionally, deploying SAP application instances in different Availability Zones (Option D) provides redundancy if an entire AZ fails, which is a core HA practice.

Option B is incorrect because a single Availability Zone introduces a single point of failure. Option C is incorrect: EBS snapshots provide data durability and backup, not high availability; they do not maintain service continuity. Option E is incorrect because t2 instances are burstable and not suitable for production SAP workloads due to performance limitations and lack of EBS-optimized support.

Practice this question →
218
MCQmedium

A company runs SAP on AWS and wants to reduce costs for non-production environments that are used only during business hours (8 AM to 6 PM). Which action should the administrator take to minimize costs without losing data?

A.Convert the instances to Reserved Instances
B.Terminate the instances after business hours
C.Downsize the instance types to the smallest available
D.Stop the instances during non-business hours and use Amazon EBS snapshots for backup
AnswerD

Stopping instances preserves data on EBS volumes and eliminates compute charges while stopped. Using EBS snapshots provides additional backup and data protection.

Why this answer

Stopping instances when not in use eliminates compute costs while preserving data via Amazon EBS snapshots. Option A (Reserved Instances) is wrong because Reserved Instances are intended for steady-state usage and do not provide savings for intermittent usage; the idea of reducing instance size is not relevant to this option. Option B (Terminate) would lose data unless snapshots are taken, and the question specifies 'without losing data.' Option C (Downsize) could reduce costs but still incurs compute charges 24/7, whereas stopping completely eliminates compute costs during non-business hours.

Practice this question →
219
MCQmedium

A company runs a production application on EC2 instances behind an Application Load Balancer. The instances are in an Auto Scaling group across three Availability Zones. The operations team notices that during a recent deployment, a small percentage of instances failed health checks and were replaced, causing a brief increase in error rates. What is the MOST effective way to reduce deployment-related errors?

A.Use a lifecycle hook to delay instance registration until a script completes.
B.Increase the health check interval on the ALB to reduce rapid replacements.
C.Configure the Auto Scaling group with a warm-up time in the instance refresh settings.
D.Increase the desired capacity of the Auto Scaling group to absorb failures.
AnswerC

Warm-up time ensures new instances pass health checks before receiving traffic.

Why this answer

Configuring a warm-up time in the Auto Scaling group's instance refresh settings ensures that newly launched instances are fully initialized and pass health checks before they start receiving traffic. This prevents brief error spikes during deployments by allowing instances to stabilize before being marked as healthy and added to the ALB target group.

Exam trap

The trap here is that candidates often confuse lifecycle hooks (which handle initialization before registration) with warm-up times (which control the gradual introduction of traffic after registration), leading them to pick Option A instead of the correct C.

How to eliminate wrong answers

Option A is wrong because lifecycle hooks delay instance registration until a script completes, but they do not control the rate at which instances are replaced during a deployment or provide a gradual ramp-up of traffic; they only ensure initialization before registration. Option B is wrong because increasing the health check interval on the ALB would slow down the detection of genuinely unhealthy instances, potentially increasing error rates rather than reducing them, and does not address the root cause of premature traffic routing during deployment. Option D is wrong because increasing the desired capacity of the Auto Scaling group does not prevent deployment-related errors; it only adds more instances, which could mask the problem but not fix the underlying issue of instances being marked healthy before they are ready.

Practice this question →
220
MCQeasy

A DevOps engineer is troubleshooting an AWS CodePipeline that fails at the Deploy stage. The pipeline deploys a static website to an S3 bucket configured for website hosting. The error message indicates 'Access Denied' when the pipeline tries to upload files. Which IAM policy should be attached to the CodePipeline service role to resolve this?

A.CloudFrontFullAccess
B.AdministratorAccess
C.AmazonS3ReadOnlyAccess
D.A custom policy allowing s3:PutObject and s3:ListBucket on the target bucket.
AnswerD

These are the minimum permissions needed to upload files to S3.

Why this answer

The CodePipeline service role needs permissions to write objects to the S3 bucket and list its contents to verify the upload. A custom policy with s3:PutObject and s3:ListBucket on the target bucket grants exactly these required actions, resolving the 'Access Denied' error during the Deploy stage.

Exam trap

The trap here is that candidates often choose a broad managed policy like AdministratorAccess or CloudFrontFullAccess, overlooking that the minimal custom policy with specific S3 actions is the correct and secure solution for the 'Access Denied' error.

How to eliminate wrong answers

Option A is wrong because CloudFrontFullAccess grants permissions to manage CloudFront distributions, not to write to S3 buckets, and does not address the S3 upload failure. Option B is wrong because AdministratorAccess is overly permissive and violates the principle of least privilege; it would work but is not the best practice or the minimal required policy. Option C is wrong because AmazonS3ReadOnlyAccess only allows read operations (e.g., GetObject, ListBucket) and explicitly denies write actions like s3:PutObject, so it cannot resolve the upload failure.

Practice this question →
221
MCQeasy

An administrator needs to monitor the CPU utilization of an SAP HANA database running on an EC2 instance. The monitoring data must be stored for 15 months. Which AWS service should be used to meet this requirement?

A.Amazon S3
B.AWS CloudTrail
C.Amazon CloudWatch Logs
D.Amazon CloudWatch Metrics
AnswerD

CloudWatch metrics can be retained for up to 15 months.

Why this answer

Amazon CloudWatch Metrics is the correct service for monitoring and storing CPU utilization data. It supports custom metrics with retention up to 15 months, meeting the requirement. Amazon S3 is for object storage, not metrics.

AWS CloudTrail records API activity, not performance data. Amazon CloudWatch Logs is for log files, not numeric metrics.

Practice this question →
222
MCQmedium

An SAP administrator is troubleshooting a high CPU utilization issue on an SAP application server running on an Amazon EC2 instance. The administrator suspects a specific ABAP program is consuming excessive resources. Which AWS service can be used to capture detailed performance metrics and identify the process?

A.AWS CloudTrail
B.Amazon CloudWatch Agent
C.AWS Config
D.Amazon VPC Flow Logs
AnswerB

The Amazon CloudWatch Agent collects detailed OS-level metrics, including per-process CPU utilization.

Why this answer

The Amazon CloudWatch Agent can be installed on an EC2 instance to collect detailed OS-level metrics, including CPU utilization per process, which can help identify the specific ABAP program consuming excessive resources. Option A is incorrect: AWS CloudTrail records API activity, not performance metrics. Option C is incorrect: AWS Config monitors configuration changes and compliance, not CPU usage.

Option D is incorrect: Amazon VPC Flow Logs capture network traffic metadata, not CPU utilization.

Practice this question →
223
Multi-Selectmedium

Which TWO tasks require the use of AWS Systems Manager Session Manager? (Choose TWO.)

Select 2 answers
A.Transfer files between on-premises and AWS
B.Execute a one-time command on an EC2 instance interactively
C.Establish a secure shell session to an EC2 instance without using SSH keys
D.Store database connection strings securely
E.Apply operating system patches to a fleet of EC2 instances
AnswersB, C

Session Manager allows interactive command execution.

Why this answer

Options B and C are correct. Session Manager allows you to execute one-time commands interactively on an EC2 instance (B) and establish a secure shell session without requiring SSH keys (C). Option A is incorrect because file transfers are not a direct feature of Session Manager; it can be used to tunnel SCP but not directly transfer files.

Option D is incorrect because storing secrets is done via AWS Systems Manager Parameter Store, not Session Manager. Option E is incorrect because patching is typically done via Systems Manager Patch Manager, not Session Manager.

Practice this question →
224
MCQmedium

An AWS administrator needs to monitor the CPU utilization of an EC2 instance running SAP NetWeaver. The instance type is r5.2xlarge. Which CloudWatch metric should the administrator use to track the CPU usage of the instance?

A.MemoryUtilization
B.CPUUtilization
C.NetworkIn
D.DiskReadOps
AnswerB

CPUUtilization is the standard CloudWatch metric that tracks the CPU usage of an EC2 instance, making it the correct choice for monitoring CPU utilization of an r5.2xlarge instance running SAP NetWeaver.

Why this answer

(CPUUtilization). CPUUtilization is a standard CloudWatch metric for EC2 instances that measures the percentage of allocated EC2 compute units that are currently in use. It is suitable for monitoring CPU usage of an EC2 instance running SAP NetWeaver.

Option A (MemoryUtilization) is incorrect because memory utilization is not a default CloudWatch metric; it requires a custom agent. Option C (NetworkIn) measures network traffic, not CPU. Option D (DiskReadOps) measures disk I/O operations.

Practice this question →
225
MCQhard

An SAP system on AWS is experiencing intermittent connectivity issues between the application servers and the HANA database. The network team has confirmed that the VPC and subnets are configured correctly. What should the operations team check NEXT?

A.DNS resolution for the database endpoint.
B.VPC route tables for the application subnet.
C.Security group rules on the database server.
D.Network ACLs on the database subnet.
AnswerC

Security group rules on the database server. Correct. Security groups can cause intermittent drops if rules are missing or have time-based issues.

Why this answer

Intermittent connectivity issues between application servers and HANA database often point to security group rules. Security groups act as virtual firewalls for EC2 instances. If the security group on the database server does not allow inbound traffic from the application servers on the required ports (e.g., 3xx41 for HANA), connections may fail intermittently.

While route tables and NACLs could affect connectivity, they are typically stable and less likely to cause intermittent problems. DNS resolution issues would be more consistent. Therefore, the operations team should first check the security group rules on the database server.

Practice this question →
← PreviousPage 3 of 7 · 460 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Sap Operations questions.

Start 20-question session