Courseiva

CCNA Sap Operations Questions

75 of 460 questions · Page 4/7 · Sap Operations topic · Answers revealed

Practice these questionsExam hubAll questions
226
MCQeasy

A company is migrating its SAP landscape to AWS and wants to automate the deployment of SAP applications using infrastructure as code. Which AWS service should the company use to define and provision the AWS infrastructure?

A.AWS Elastic Beanstalk
B.AWS CloudFormation
C.AWS CodeDeploy
D.AWS OpsWorks
AnswerB

CloudFormation enables infrastructure as code.

Why this answer

AWS CloudFormation allows defining and provisioning AWS infrastructure as code. Option A (Elastic Beanstalk) is wrong because it is a platform-as-a-service (PaaS) for deploying web applications, not for defining infrastructure. Option C (CodeDeploy) is wrong because it automates code deployments to running instances, not infrastructure provisioning.

Option D (OpsWorks) is wrong because it is a configuration management service using Chef/Puppet, not a general-purpose IaC tool.

Practice this question →
227
MCQmedium

An operations team manages an SAP ERP system on AWS that uses a single EC2 instance for the SAP central services (SCS) and multiple instances for application servers. The system is running in a VPC with both public and private subnets. The team notices that the SCS instance is unreachable from the application servers after a maintenance window where network ACLs were updated. The application servers are in private subnets, and the SCS instance is in a public subnet. The team has verified that the security groups allow the required traffic. Which step should the team take to resolve the connectivity issue?

A.Review the network ACL rules for both the public and private subnets.
B.Verify that the route tables have a route to the internet gateway.
C.Assign an Elastic IP to the SCS instance.
D.Check the security group rules on the application servers.
AnswerA

Network ACLs can block traffic if misconfigured.

Why this answer

The issue is that after maintenance, network ACLs were updated, causing connectivity loss between the SCS instance (public subnet) and application servers (private subnets). Network ACLs are stateless and control traffic at the subnet level. Since security groups are already verified, the likely cause is the NACL rules.

Option A is correct because reviewing NACL rules for both subnets will identify missing inbound/outbound rules. Option B is incorrect because route tables to the internet gateway affect internet-bound traffic, not internal VPC traffic. Option C is incorrect because Elastic IPs are for internet access, not internal connectivity.

Option D is incorrect because security groups were confirmed to allow traffic, so the issue is at the NACL level.

Practice this question →
228
Multi-Selectmedium

Which TWO AWS services can be used to automate the startup and shutdown of SAP application servers based on a schedule to reduce costs? (Select TWO.)

Select 2 answers
A.Amazon CloudWatch Events
B.AWS CodePipeline
C.AWS Instance Scheduler
D.Amazon EC2 Auto Scaling
E.AWS Systems Manager Maintenance Windows
AnswersC, E

Instance Scheduler is a solution to start/stop instances on a schedule.

Why this answer

AWS Instance Scheduler (option C) is a solution that automatically starts and stops EC2 instances based on a schedule, reducing costs for non-production SAP systems. AWS Systems Manager Maintenance Windows (option E) can be configured to stop and start instances during scheduled maintenance windows, enabling automated start/stop. Option A (CloudWatch Events) can trigger actions via Lambda but does not natively schedule instance start/stop.

Option B (CodePipeline) is for CI/CD, not scheduling. Option D (Auto Scaling) adjusts capacity based on demand, not schedule-based start/stop of specific instances.

Practice this question →
229
MCQmedium

A company has deployed SAP on AWS with a shared file system using Amazon EFS for the /sapmnt directory. The EFS file system is mounted on all SAP application servers. Recently, users reported that the SAP system is slow when accessing reports that are stored as PDF files in the /sapmnt directory. The operations team checks the CloudWatch metrics and finds that the EFS file system's PercentIOLimit metric is consistently at 100% during peak hours. The file system is using the General Purpose performance mode. The team also notices that the BurstCreditBalance is decreasing over time. What action should be taken to resolve this performance issue?

A.Enable EFS lifecycle management to move infrequently accessed files to Infrequent Access storage class.
B.Increase the size of the EFS file system to improve performance.
C.Increase the burst credit balance by enabling throughput mode.
D.Switch the EFS performance mode to Max I/O to get higher throughput.
AnswerB

Correct. Increasing the file system size increases baseline throughput (50 MiB/s per TB) and burst credit accumulation, directly addressing the performance issue.

Why this answer

Increasing the size of the EFS file system increases the baseline throughput (which scales at 50 MiB/s per TB of storage) and also increases the rate at which burst credits are earned, helping to reduce the percent I/O limit and rebuild the burst credit balance. Option A is wrong because lifecycle management only moves files to Infrequent Access, which does not improve I/O performance and may add latency. Option C is wrong because enabling Provisioned Throughput does not increase the burst credit balance; it provides a fixed throughput independent of credits, but the wording is misleading.

Option D is wrong because the EFS performance mode cannot be changed after creation; it is set when the file system is created.

Practice this question →
230
MCQmedium

A company is migrating its SAP environment to AWS. The operations team needs to ensure that all changes to the SAP infrastructure are tracked and that unauthorized changes are detected. Which AWS service should they use?

A.AWS CloudTrail
B.AWS Config
C.Amazon GuardDuty
D.AWS Trusted Advisor
AnswerB

AWS Config provides configuration history and compliance checking.

Why this answer

AWS Config records configuration changes and enables compliance monitoring, making it the right choice for tracking changes and detecting unauthorized changes. CloudTrail records API calls, not configuration state. GuardDuty is for threat detection.

Trusted Advisor provides best practice checks.

Practice this question →
231
MCQmedium

Refer to the exhibit. An operations team uses this CloudFormation template to launch SAP application servers. After deployment, the application server fails to join the SAP system. The team verified that the security group allows outbound traffic to the SAP system. What is the MOST likely cause?

A.The instance type is not specified correctly.
B.The security group ID is not properly referenced.
C.The user data script is not base64 encoded correctly.
D.The `LatestAmiId` parameter is not defined in the template.
AnswerD

!Ref LatestAmiId requires a parameter or mapping that is not defined.

Why this answer

The template uses `!Ref LatestAmiId` which does not exist as a parameter; it should be a parameter or a mapping. Option A is wrong because the instance type is parameterized. Option B is wrong because the security group is referenced correctly.

Option C is wrong because the user data script is base64 encoded correctly.

Practice this question →
232
MCQmedium

A company is running SAP HANA on a memory-optimized EC2 instance with an EBS volume for /hana/data and /hana/log. The database administrator notices that the /hana/log volume is experiencing high write latency. The current volume is a gp2 volume with 1000 GB size. Which change would most effectively reduce write latency?

A.Change the volume type to st1 (throughput optimized) for better write throughput.
B.Increase the volume size to 2000 GB to get more IOPS.
C.Enable Multi-Attach on the volume to distribute writes.
D.Ensure the EC2 instance is EBS-optimized and use a higher instance type with dedicated EBS bandwidth.
AnswerD

EBS-optimized instances provide dedicated throughput to EBS, reducing latency.

Why this answer

Using EBS-optimized instances with dedicated EBS bandwidth reduces contention and latency, improving write performance for SAP HANA log. Option A is wrong because changing to st1 is not ideal for log writes; st1 is optimized for throughput, not low latency, and has variable performance. Option B is wrong because increasing volume size increases baseline IOPS for gp2 but does not directly address write latency; latency is influenced more by burst credits and instance EBS bandwidth.

Option C is wrong because enabling Multi-Attach does not reduce latency; it allows multiple instances to attach the same volume but can introduce contention.

Practice this question →
233
MCQmedium

An SAP system uses a Network Load Balancer (NLB) to distribute traffic to SAP application servers. The application servers are in private subnets. The operations team notices that the health checks are failing for one of the application servers. The health check is configured to use TCP on port 3200. The application server's security group allows inbound traffic on port 3200 from the NLB's subnet CIDR. The network ACL allows inbound and outbound traffic on ephemeral ports. What is the most likely cause of the health check failure?

A.The security group does not allow inbound traffic from the NLB's private IP addresses.
B.The network ACL is blocking the health check traffic.
C.The SAP application is not listening on port 3200.
D.The NLB is configured to use the instance's public IP address.
AnswerC

Correct. The health check failure is isolated to one instance, and the network configuration (security group and NACL) is correct. Therefore, the most likely cause is that the SAP application on that instance is not listening on port 3200. This could be due to the application service not running, a misconfiguration, or the instance not being properly joined to the SAP system.

Why this answer

The health check failure is isolated to one instance, and the security group is configured correctly to allow traffic from the NLB's subnet CIDR on port 3200. The network ACL allows ephemeral ports. Therefore, the most likely cause is that the SAP application on that instance is not listening on port 3200.

This could be due to the application service not running, a misconfiguration, or the instance not being properly joined to the SAP system.

Exam trap

A common trap is to assume that security group rules are the issue when health checks fail, even when the security group seems correctly configured. However, if the security group allows traffic from the NLB's subnet CIDR, the problem is more likely at the application level. Remember that health check failures can also occur if the application itself is not responding on the health check port.

Practice this question →
234
MCQeasy

An SAP system on AWS is configured with a Multi-AZ deployment for high availability. During a failover test, the operations team notices that the secondary instance does not take over correctly. What is the most likely cause?

A.The SAP application layer is not configured to retry connections.
B.The CloudWatch alarm thresholds for failover are set too high.
C.The route tables or security groups do not allow traffic to the secondary instance.
D.The secondary instance's IP address is not automatically updated in DNS.
AnswerC

Network configuration errors can prevent failover from completing.

Why this answer

After a failover, the secondary instance becomes the active one, and if route tables or security groups do not permit traffic to it, clients cannot connect, causing the failover to appear ineffective. Option A is incorrect because the SAP application layer retry connections may affect user experience but not the failover mechanism itself. Option B is incorrect because CloudWatch alarms are monitoring thresholds and do not directly control failover behavior.

Option D is incorrect because in a properly configured Multi-AZ setup, IP address changes are handled automatically (e.g., via Elastic IP or DNS updates), so this is less likely to be the root cause.

Practice this question →
235
MCQeasy

A company has an SAP HANA database running on an RDS for SAP HANA instance. The operations team wants to automate the backup process and retain backups for 90 days. Which AWS service should they use?

A.RDS automated backups
B.Amazon S3 lifecycle policies
C.AWS Backup
D.AWS Storage Gateway
AnswerC

AWS Backup can schedule and retain backups for 90 days.

Why this answer

AWS Backup is the correct answer because it provides a centralized backup service that can automate and retain backups of RDS for SAP HANA instances with custom retention policies, including beyond 35 days. Options A and B are incorrect: RDS automated backups are limited to a maximum retention of 35 days, and Amazon S3 lifecycle policies manage object lifecycles, not database backups. Option D is incorrect because AWS Storage Gateway is a hybrid storage service, not a backup service for RDS.

Exam trap

Candidates may confuse RDS automated backups (which have a 35-day retention limit) with the ability to retain manual snapshots. AWS Backup can manage manual snapshots and automate their retention for longer periods.

Practice this question →
236
MCQeasy

A company is running SAP S/4HANA on AWS with an RDS for SAP HANA database. The operations team needs to perform a minor version upgrade of the database. They want to minimize downtime and ensure that the upgrade can be rolled back if needed. What should they do?

A.Take a manual snapshot before the upgrade, then perform the upgrade.
B.Enable Multi-AZ, then perform the upgrade.
C.Use the clone feature of SAP HANA to create a copy.
D.Create a read replica, promote it after the upgrade.
AnswerA

Snapshot allows restore to pre-upgrade state if needed.

Why this answer

Taking a manual snapshot before the upgrade provides a point-in-time backup that can be restored if the upgrade fails, enabling a rollback. RDS minor version upgrades are typically performed with minimal downtime (usually a few minutes). Option B is incorrect because enabling Multi-AZ does not provide a rollback mechanism; it only provides high availability during the upgrade.

Option C is incorrect because the clone feature is specific to SAP HANA native tools, not RDS; RDS for SAP HANA does not support cloning for version upgrades. Option D is incorrect because creating a read replica does not facilitate rollback of the primary instance; read replicas are used for read scaling and cannot be used to revert an upgrade on the source.

Practice this question →
237
MCQmedium

An SAP system running on AWS uses a Multi-AZ RDS for SAP ASE database. The operations team notices that the database failover took longer than expected during a recent outage. What should the team investigate to reduce failover time?

A.Increase the allocated storage for the database to improve I/O performance.
B.Ensure that the standby instance is in the same Availability Zone as the primary.
C.Check for long-running transactions that delay the failover.
D.Verify that the database is using asynchronous replication.
AnswerC

Long-running transactions can significantly increase failover time.

Why this answer

Multi-AZ failover time is primarily affected by the time required to complete in-flight transactions and apply redo logs to the standby. Long-running transactions can delay failover because they must be completed or rolled back before the standby can become the primary. Option A is incorrect because increasing storage may improve I/O performance but does not directly reduce failover time.

Option B is incorrect because the standby must be in a different Availability Zone for Multi-AZ. Option D is incorrect because Multi-AZ RDS uses synchronous replication, not asynchronous.

Exam trap

Candidates often assume that scaling storage or instance size will reduce failover time, but the primary delay is caused by long-running transactions that must complete before failover.

Practice this question →
238
Multi-Selectmedium

Which TWO actions should an SAP administrator take to ensure high availability for an SAP HANA database on AWS? (Choose two.)

Select 2 answers
A.Enable SAP HANA system replication
B.Deploy the database on a single large instance
C.Schedule regular manual snapshots
D.Use a Multi-AZ deployment for the database
E.Use a single EBS volume with high IOPS
AnswersA, D

Provides data redundancy across nodes.

Why this answer

Options A and D are correct. Enabling SAP HANA system replication provides data redundancy and automatic failover within the same region. Using a Multi-AZ deployment (e.g., with Amazon EBS multi-attach or cluster) ensures the database is available across different Availability Zones, providing automatic failover and high availability.

Option B is wrong because a single large instance is a single point of failure. Option C is wrong because manual snapshots are not automatic and do not provide high availability. Option E is wrong because a single EBS volume is a single point of failure and does not provide redundancy.

Practice this question →
239
MCQeasy

A company runs a critical SAP application on AWS. The operations team needs to monitor the system for performance issues and receive alerts when CPU utilization exceeds 80% for 5 consecutive minutes. Which AWS service should be used to set up this monitoring and alerting?

A.AWS Config
B.AWS CloudTrail
C.Amazon CloudWatch
D.AWS Health
AnswerC

CloudWatch monitors metrics and can trigger alarms based on thresholds.

Why this answer

Amazon CloudWatch can monitor CPU utilization and trigger alarms when a threshold is breached. CloudTrail is for API auditing, Config is for compliance, and AWS Health provides service health notifications.

Practice this question →
240
MCQhard

An SAP system on AWS is experiencing intermittent network connectivity issues between the application servers and the database server. Both are in the same VPC but different subnets. The security groups allow all traffic between them. What should the administrator check next?

A.Network ACL rules for the subnets
B.VPC Flow Logs to analyze dropped packets
C.Route tables to ensure proper routing
D.Security group rules for outbound traffic
AnswerA

NACLs are stateless and must allow ephemeral port return traffic.

Why this answer

Network ACLs are stateless and must allow both inbound and outbound traffic. If NACLs block return traffic, connectivity fails intermittently. VPC Flow Logs can help diagnose but are not the first check.

Route tables are typically correct within a VPC. The issue is likely at the NACL level.

Practice this question →
241
MCQmedium

A company is running SAP HANA on AWS. The system administrator notices that the SAP HANA database is frequently running out of memory, causing performance degradation. Which AWS service should the administrator use to set up memory usage alarms and automate scaling of the SAP HANA instance?

A.Amazon EC2 Auto Scaling
B.AWS Lambda
C.AWS Systems Manager
D.Amazon CloudWatch and AWS Auto Scaling
AnswerC

AWS Systems Manager can automate vertical scaling by using an Automation document that resizes the instance, triggered by CloudWatch alarms on memory metrics.

Why this answer

AWS Systems Manager. To scale a single SAP HANA instance vertically, the administrator can use CloudWatch to monitor memory usage (via custom metrics) and trigger an alarm that invokes an AWS Systems Manager Automation document. The Automation document can execute the 'modify-instance-type' step to change the EC2 instance type to one with more memory.

Option D (Amazon CloudWatch and AWS Auto Scaling) is incorrect because AWS Auto Scaling is designed for horizontal scaling (adding/removing instances) and does not natively support vertical scaling of a single instance. Option B (AWS Lambda) could be part of a custom solution but is not the primary service for setting up alarms and scaling; Lambda alone does not provide monitoring or scaling orchestration. Option A (Amazon EC2 Auto Scaling) also focuses on horizontal scaling and is not suitable for vertical scaling.

Exam trap

Candidates often assume that 'Auto Scaling' can perform vertical scaling, but AWS Auto Scaling is horizontal only. Vertical scaling of a single instance requires services like AWS Systems Manager or a custom Lambda-based solution.

Practice this question →
242
Multi-Selectmedium

Which TWO actions should an operations team take to ensure high availability for SAP HANA in a single AWS Region?

Select 2 answers
A.Create read replicas of the HANA database.
B.Deploy SAP HANA in a Multi-AZ configuration using HANA System Replication.
C.Use HANA System Replication with automatic failover.
D.Configure automated backups to Amazon S3.
E.Use a single large EC2 instance in one Availability Zone.
AnswersB, C

Multi-AZ with HSR provides failover across Availability Zones.

Why this answer

Deploying SAP HANA in a Multi-AZ configuration using HANA System Replication ensures that a replica is maintained in a different Availability Zone, providing high availability across AZs. Option C is correct because HANA System Replication with automatic failover allows the system to automatically fail over to the replica if the primary fails, minimizing downtime. Option A is incorrect because read replicas are used for scaling read operations, not for high availability.

Option D is incorrect because automated backups to Amazon S3 provide data protection but do not enable automatic failover. Option E is incorrect because a single EC2 instance in one AZ is a single point of failure and does not provide high availability.

Practice this question →
243
MCQhard

A company runs SAP on AWS using a multi-AZ deployment. The database is an SAP HANA system replicated across two Availability Zones. During a recent failure, the standby HANA instance did not take over automatically. The operations team finds that the HANA replication status was 'ERROR' before the failure. What is the most likely reason for the failed takeover?

A.The standby HANA instance had a different instance number than the primary.
B.The fencing mechanism was not configured correctly in the cluster.
C.The HANA system replication was not in sync; data was not fully replicated to the standby.
D.The network latency between the two Availability Zones was too high.
AnswerC

An error status means replication is broken; the standby cannot take over safely.

Why this answer

If the HANA system replication status is 'ERROR', automatic takeover cannot occur. The replication link must be healthy for the standby to have the latest data. Option A is wrong because a difference in instance numbers does not cause a replication status error; replication setup would fail if instance numbers mismatched.

Option B is wrong because a misconfigured fencing mechanism would not cause a replication status error; it would prevent takeover only if fencing fails. Option D is wrong because high network latency could cause replication lag but not an error status; the status error indicates a more fundamental issue.

Practice this question →
244
MCQeasy

A company is migrating an SAP system to AWS and needs to ensure high availability for the SAP Central Services (ASCS) instance. Which AWS service is best suited for this?

A.Amazon RDS Multi-AZ deployment
B.EC2 Auto Scaling group
C.Amazon Route 53 weighted routing policy
D.Amazon S3 cross-region replication
AnswerC

Correct. Amazon Route 53 weighted routing policy, combined with health checks, can route traffic to multiple ASCS instances and automatically redirect traffic from unhealthy instances, achieving high availability.

Why this answer

None of the provided options is correct for ensuring high availability for SAP ASCS. ASCS requires a cluster manager with shared file systems (e.g., Amazon EFS) and failover mechanisms (e.g., overlay IP or Elastic Network Interface repositioning), which are not represented by any of the options. The current answer, Amazon Route 53 weighted routing policy, alone does not provide true high availability for ASCS as it lacks stateful failover and shared storage coordination.

Practice this question →
245
MCQhard

An SAP administrator is troubleshooting an issue where SAP application servers are unable to connect to the SAP HANA database. The database is running on an EC2 instance in a private subnet. The application servers are in a different VPC connected via VPC peering. The security group for the database instance allows TCP port 3$15$13 from the application server security group. Which additional configuration is MOST likely required?

A.Modify the security group to allow traffic from the application server subnet CIDR.
B.Update the route tables to add a route to the database subnet.
C.Add a rule to the network ACL to allow inbound traffic on port 3$15$13.
D.Enable DNS resolution for the VPC peering connection.
AnswerD

VPC peering requires DNS resolution to be enabled for hostname resolution across VPCs.

Why this answer

VPC peering does not automatically enable DNS resolution for hostnames across peered VPCs. The application servers need to resolve the database's private DNS hostname to its private IP. By default, DNS resolution for peered VPCs is disabled.

Enabling DNS resolution on the VPC peering connection allows the application servers to resolve the database's hostname, which is essential for connectivity. Option A is incorrect as the security group already allows the port; Option B is incorrect because the route tables already handle traffic via the peering connection; Option C is incorrect because network ACLs are not the core issue—the problem is DNS resolution, not NACL rules.

Practice this question →
246
MCQeasy

A company is running SAP on AWS and needs to ensure that all changes to the SAP infrastructure are logged for audit purposes. Which AWS service should be enabled to record API calls?

A.AWS CloudTrail
B.Amazon GuardDuty
C.Amazon CloudWatch
D.AWS Config
AnswerA

CloudTrail records all API activity for auditing.

Why this answer

(AWS CloudTrail) is correct because it records all API activity in the AWS account for audit purposes. Option B (Amazon GuardDuty) detects threats. Option C (Amazon CloudWatch) monitors performance.

Option D (AWS Config) evaluates resource configurations.

Practice this question →
247
MCQeasy

A company runs SAP ERP on AWS using a Multi-AZ RDS for SAP HANA database. The operations team needs to automate the rotation of the database master password. Which AWS service should be used to securely store and rotate the password?

A.AWS Systems Manager Parameter Store
B.AWS Secrets Manager
C.AWS CloudHSM
D.AWS Identity and Access Management (IAM)
AnswerB

Secrets Manager can rotate RDS credentials automatically.

Why this answer

AWS Secrets Manager, is the correct choice because it is designed to securely store secrets and provides built-in capabilities to automatically rotate credentials for supported services like RDS. Option A (Systems Manager Parameter Store) can store secrets but does not natively support automatic rotation of RDS passwords. Option C (CloudHSM) is a hardware security module used for key management, not password rotation.

Option D (IAM) manages user permissions and policies, not database passwords.

Practice this question →
248
MCQmedium

A company runs a critical SAP HANA database on an m5.24xlarge EC2 instance. The operations team notices that the database performance degrades during peak hours. Which AWS service should be used to identify whether the instance is experiencing CPU throttling due to CPU credit exhaustion?

A.Use CloudTrail to review the EC2 instance launch configuration.
B.Use AWS Trusted Advisor to check for instance performance issues.
C.Use CloudWatch to monitor the CPUUtilization metric.
D.Use CloudWatch to monitor the CPUCreditBalance metric.
AnswerC

This is the correct metric to identify high CPU usage.

Why this answer

CloudWatch CPUUtilization measures the actual CPU usage of the EC2 instance. For m5 instances, which are dedicated performance instances, there is no CPU credit concept, so monitoring CPUCreditBalance (option D) is irrelevant. The operations team can set a CloudWatch alarm on CPUUtilization to detect when CPU usage is high during peak hours, indicating potential performance degradation.

Option A (CloudTrail) logs API calls, not performance metrics. Option B (Trusted Advisor) provides best practice recommendations but does not offer real-time CPU monitoring. Therefore, CloudWatch CPUUtilization is the appropriate service to identify CPU throttling issues.

Practice this question →
249
MCQeasy

An SAP system is experiencing high disk I/O latency. The operations team checks the Amazon CloudWatch metrics and finds that the Average Queue Length for the EBS volumes is consistently above the recommended threshold. Which action should be taken to address this issue?

A.Change the volume type to Throughput Optimized HDD (st1).
B.Increase the provisioned IOPS for the EBS volumes.
C.Enable EBS encryption to improve I/O performance.
D.Increase the volume size to improve I/O performance.
AnswerB

Higher IOPS can handle more requests, reducing queue length.

Why this answer

Increasing the provisioned IOPS for the EBS volumes directly increases the number of I/O operations the volume can handle, reducing the average queue length. Option A is incorrect because st1 volumes are optimized for throughput, not IOPS. Option C is incorrect because EBS encryption does not improve I/O performance and may introduce a slight overhead.

Option D is incorrect because increasing volume size does not directly affect queue length; for gp2 volumes, it only increases baseline IOPS indirectly via burst credits, but it is not a reliable method to reduce queue length.

Practice this question →
250
MCQmedium

An SAP system is running on an EC2 instance with an attached EBS volume for /usr/sap. The operations team notices that the volume is almost full. Which action should be taken to increase the available space without downtime?

A.Modify the EBS volume to increase its size while the instance is running, then extend the filesystem.
B.Reduce the size of the volume by modifying the volume configuration.
C.Create a new larger EBS volume, attach it to the instance, and copy the data.
D.Create a snapshot of the volume and use it to create a larger volume, then attach and mount.
AnswerA

EBS volumes can be increased online, and the filesystem can be extended without downtime.

Why this answer

You can increase the size of an EBS volume while the instance is running, then extend the filesystem. Option A is correct. Option B is wrong because snapshots are for backup, not immediate space increase.

Option C is wrong because reducing the volume size is not supported. Option D is wrong because creating a new volume and copying data requires downtime.

Practice this question →
251
Multi-Selecthard

Which THREE metrics should be monitored in Amazon CloudWatch to proactively identify performance issues in an SAP NetWeaver application server? (Choose three.)

Select 3 answers
A.S3 request metrics
B.CPUUtilization
C.Memory utilization (via CloudWatch Agent)
D.VPC Flow Logs
E.DiskQueueDepth
AnswersB, C, E

High CPU indicates performance issues.

Why this answer

The correct metrics to proactively identify performance issues in an SAP NetWeaver application server are CPUUtilization (B), Memory utilization via the CloudWatch Agent (C), and DiskQueueDepth (E). CPUUtilization indicates CPU load, Memory utilization shows memory pressure, and DiskQueueDepth reflects I/O bottlenecks. S3 request metrics (A) are for object storage, not the application server itself.

VPC Flow Logs (D) capture network traffic metadata, not performance metrics.

Practice this question →
252
MCQeasy

Your SAP on AWS environment uses a central S3 bucket to store SAP transport files. The operations team reports that transport import fails intermittently. Which AWS service can be used to monitor and alert on S3 API call failures?

A.AWS CloudTrail
B.AWS Config
C.Amazon CloudWatch Metrics
D.AWS Trusted Advisor
AnswerA

Correct. AWS CloudTrail records S3 API calls, allowing you to monitor and alert on failures.

Why this answer

CloudTrail logs all S3 API calls and can be used to monitor failures via CloudWatch Logs or EventBridge. AWS Config tracks configuration changes, not API calls. CloudWatch Metrics provides S3 metrics but is not the primary service for detailed API call monitoring.

Trusted Advisor offers best-practice checks, not real-time monitoring.

Practice this question →
253
MCQmedium

An SAP administrator notices that the SAP HANA database on an EC2 instance is running out of memory frequently. The instance type is r5.4xlarge with 128 GiB of memory. Which action should the administrator take to resolve this issue?

A.Reduce the SAP HANA buffer cache size
B.Increase swap space on the instance
C.Enable SAP HANA compression
D.Scale up to a larger instance type with more memory
AnswerD

Larger instance provides more memory.

Why this answer

Scaling up to a larger instance type, such as moving from an r5.4xlarge to an r5.8xlarge or higher, directly increases the available memory for SAP HANA, resolving the out-of-memory issue. Option A is incorrect because reducing the SAP HANA buffer cache size would degrade database performance and does not address the underlying memory shortage. Option B is incorrect because increasing swap space introduces disk-based paging, which can severely slow down HANA due to high latency, and is not a recommended solution.

Option C is incorrect because enabling SAP HANA compression can reduce memory usage for data storage but does not add memory capacity; it is a tuning measure, not a direct fix for running out of memory.

Practice this question →
254
Multi-Selecthard

An SAP system administrator is troubleshooting an issue where SAP users cannot log in to the SAP system. The administrator checks the SAP application server logs and finds that the connection to the SAP HANA database is failing with 'connection refused'. Which THREE AWS resources should be investigated to resolve the issue?

Select 3 answers
A.VPC peering connection
B.Network ACLs for the database subnet
C.Internet Gateway
D.Security group rules for the database instance
E.Route tables for the application server subnet
AnswersB, D, E

Network ACLs are stateless firewalls; misconfigured rules can block traffic.

Why this answer

Options B, D, and E are correct. Network ACLs for the database subnet must allow inbound and outbound traffic between the application server and database. Security group rules for the database instance must permit traffic from the application server's security group on the database port.

Route tables for the application server subnet must have a route to the database subnet. Option A is incorrect because a VPC peering connection is not needed unless the resources are in different VPCs. Option C is incorrect because an Internet Gateway is not required for internal communication within a VPC.

Practice this question →
255
MCQhard

A company runs a critical workload on Amazon RDS for PostgreSQL with Multi-AZ. The operations team notices that during a recent failover test, the DNS record updated in about 60 seconds. However, the application experienced a 2-minute downtime because some connections were not re-established quickly. What should the team do to reduce downtime during failover?

A.Enable automated backups with a short retention period.
B.Increase the TTL of the RDS DNS record to 300 seconds.
C.Configure the application's connection string to use the RDS endpoint with a retry mechanism.
D.Place a Network Load Balancer in front of the RDS instance.
AnswerC

Using the read replica endpoint can redirect traffic faster; retries help re-establish connections.

Why this answer

During a Multi-AZ failover, the RDS DNS record is updated to point to the standby instance. However, DNS caching at the client side can cause delays. By configuring the application to use a retry mechanism on the RDS endpoint, connections are re-established quickly after failover completes, without waiting for DNS TTL expiry.

This reduces downtime compared to approaches that rely solely on DNS propagation.

Exam trap

The trap here is that candidates often think increasing DNS TTL speeds up failover, but in reality, a higher TTL increases client-side caching delay, making downtime worse, while the correct approach is to use a retry mechanism on the RDS endpoint to bypass DNS propagation issues entirely.

How to eliminate wrong answers

Option A is wrong because enabling automated backups with a short retention period does not affect DNS resolution or connection re-establishment during failover; backups are for point-in-time recovery, not for reducing failover downtime. Option B is wrong because increasing the TTL of the RDS DNS record to 300 seconds would actually increase the time clients cache the old DNS record, making the failover downtime longer (up to 300 seconds) instead of reducing it. Option D is wrong because placing a Network Load Balancer (NLB) in front of an RDS instance is not supported; RDS does not allow an NLB to front it directly, and even if it did, the NLB would still rely on DNS or health checks that introduce similar delays.

Practice this question →
256
MCQmedium

Refer to the exhibit. An SAP HANA instance is running on an EC2 instance. The volume `/dev/sdf` is used for HANA data. The operations team needs to increase the disk size for HANA data without downtime. Which action should they take?

A.Launch a new instance with a larger volume and migrate HANA data.
B.Stop the instance, modify the volume size, and start the instance.
C.Add a new EBS volume to the instance and move HANA data to the new volume.
D.Modify the EBS volume size while the instance is running.
AnswerD

EBS volumes can be modified without detaching or stopping the instance.

Why this answer

Modifying the EBS volume size while the instance is running is supported for most volume types, allowing for a no-downtime increase. Option A is wrong because launching a new instance and migrating data would cause downtime. Option B is wrong because stopping the instance is unnecessary and would cause downtime.

Option C is wrong because adding a new volume and moving data would also require downtime for the migration.

Practice this question →
257
MCQhard

An SAP administrator needs to patch the operating system of SAP application servers that are part of an Auto Scaling group. What is the best practice to ensure that instances are updated without downtime?

A.Update the AMI used by the Auto Scaling group launch configuration and manually terminate all running instances.
B.Create a new launch configuration with an updated AMI and perform a rolling update using the Auto Scaling group.
C.Update the AMI and stop the Auto Scaling group, then start it again.
D.Install patches on each running instance using AWS Systems Manager Patch Manager.
AnswerB

Rolling update replaces instances one by one, maintaining service availability.

Why this answer

A rolling update replaces instances gradually, maintaining capacity. Option A is wrong because it does not address replacement. Option C is wrong because it causes downtime.

Option D is wrong because it does not apply to running instances.

Practice this question →
258
MCQmedium

A company runs SAP on AWS. During a maintenance window, the SAP application team needs to apply a kernel update that requires a reboot of the SAP application servers. The environment uses an Auto Scaling group for the application tier. What is the BEST approach to minimize downtime?

A.Stop all instances in the Auto Scaling group, apply the update, and start them again.
B.Detach all instances from the Auto Scaling group, apply the update, and reattach them.
C.Double the desired capacity of the Auto Scaling group, wait for new instances, then terminate old instances.
D.Terminate instances one at a time, allowing the Auto Scaling group to launch new instances with the updated configuration.
AnswerD

Terminating instances one at a time allows the Auto Scaling group to launch new instances with updated configuration, maintaining capacity and minimizing downtime.

Why this answer

The best approach to minimize downtime is to terminate instances one at a time, allowing the Auto Scaling group to launch new instances with the updated configuration. This method ensures that the desired capacity is maintained at all times, as the Auto Scaling group automatically replaces each terminated instance. Option A is wrong because stopping instances does not trigger the Auto Scaling group to launch new ones; it only suspends billing.

Option B is wrong because detaching instances removes them from the group, requiring manual reattachment and risking capacity gaps. Option C might minimize downtime but incurs additional costs by running extra instances and is not as efficient as the rolling replacement in option D.

Practice this question →
259
MCQhard

A company runs SAP S/4HANA on AWS with a three-tier architecture. The operations team receives alerts that the application server's CPU utilization is consistently above 90%. The team wants to add an additional application server to distribute the load. Which AWS service should be used to register the new instance with the SAP system's load balancer?

A.Amazon CloudFront
B.Network Load Balancer (NLB)
C.Amazon Route 53
D.Application Load Balancer (ALB)
AnswerD

Registers EC2 instances as targets.

Why this answer

(Application Load Balancer). ALB can register EC2 instances as targets and distribute incoming traffic across multiple instances, making it suitable for adding an additional application server to distribute the load. Option A (CloudFront) is a CDN service, not a load balancer.

Option B (Network Load Balancer) operates at the transport layer (TCP/UDP) and is not ideal for application-level load balancing. Option C (Route 53) is a DNS service and does not register instances directly.

Exam trap

Candidates may confuse NLB with ALB. For SAP applications using HTTP/HTTPS, ALB is appropriate.

Practice this question →
260
MCQhard

An SAP system running on AWS is experiencing high memory utilization on the application server. The team suspects a memory leak in the SAP ABAP application. Which tool or process should be used to identify the root cause?

A.Run SAP transaction STAD to analyze memory consumption per user and program.
B.Use the Linux 'top' command to identify the process consuming the most memory.
C.Use SAP HANA Studio to check memory consumption of the database.
D.Enable detailed CloudWatch memory metrics on the EC2 instance.
AnswerA

STAD provides detailed memory usage breakdown for ABAP programs.

Why this answer

SAP transaction STAD provides detailed analysis of memory consumption per user and program, allowing identification of a memory leak in the ABAP application. Option B is wrong because the Linux 'top' command shows OS-level process memory usage, but does not provide ABAP-specific memory allocation details per program or user. Option C is wrong because SAP HANA Studio is used to monitor the HANA database, not the application server memory.

Option D is wrong because CloudWatch memory metrics provide overall EC2 memory usage, not per-process or per-user ABAP memory consumption.

Practice this question →
261
Multi-Selectmedium

Which TWO AWS services can be used to monitor the performance of SAP HANA on AWS and set alarms? (Select TWO.)

Select 2 answers
A.AWS CloudTrail
B.AWS Config
C.AWS Trusted Advisor
D.Amazon CloudWatch
E.AWS Systems Manager
AnswersD, E

For monitoring and alarms.

Why this answer

Options D and E are correct. Amazon CloudWatch is used for monitoring SAP HANA on AWS and setting alarms based on metrics. AWS Systems Manager can run scripts to collect custom metrics and trigger alarms.

Option A is incorrect because CloudTrail is for API auditing, not performance monitoring. Option B is incorrect because AWS Config evaluates configuration compliance. Option C is incorrect because Trusted Advisor provides best practice checks, not real-time monitoring.

Practice this question →
262
MCQmedium

An SAP system is experiencing high CPU utilization on the application server. The administrator wants to automatically scale the EC2 instance based on CPU usage. Which AWS service should be used?

A.Elastic Load Balancing
B.AWS Auto Scaling
C.AWS Lambda
D.Amazon CloudWatch
AnswerB

Auto Scaling can add or remove EC2 instances based on CPU utilization.

Why this answer

Auto Scaling with scaling policies based on CloudWatch alarms can automatically adjust the number of instances. Option B is correct. Option A is wrong because Elastic Load Balancing distributes traffic, not scaling.

Option C is wrong because Lambda can be used but is not the primary service for EC2 scaling. Option D is wrong because CloudWatch monitors but does not scale.

Practice this question →
263
MCQeasy

A company uses an SAP HANA database on AWS. The database administrator wants to back up the database using Backint integration with AWS. Which AWS service is the recommended target for Backint backups?

A.Amazon EFS
B.Amazon EBS
C.Amazon S3 Glacier
D.Amazon S3
AnswerD

S3 is the recommended target for Backint.

Why this answer

Amazon S3 is the standard target for SAP HANA Backint backups on AWS. Backint is an SAP HANA feature that integrates directly with Amazon S3 to back up database files. Option A is incorrect because Amazon EFS is a file system service and not directly integrated with Backint.

Option B is incorrect because Amazon EBS volumes are not directly used by Backint for backups. Option C is incorrect because Amazon S3 Glacier is a cold storage service and is not directly integrated with Backint; Backint targets standard S3 buckets, not Glacier.

Practice this question →
264
MCQmedium

A company runs an SAP HANA database on an EC2 instance in a single Availability Zone. The database experiences performance degradation during peak hours. Which action should be taken to improve performance without changing the instance type?

A.Increase the provisioned IOPS on the EBS volumes
B.Enable detailed CloudWatch monitoring
C.Change the EBS volumes to gp3
D.Enable Enhanced Networking on the EC2 instance
AnswerD

Enhanced Networking reduces network latency and improves throughput, directly benefiting HANA performance.

Why this answer

Enabling Enhanced Networking on the EC2 instance reduces network latency and improves throughput, which is critical for SAP HANA performance during peak hours. Option A is wrong because increasing provisioned IOPS can help with storage performance but does not address network bottlenecks. Option B is wrong because detailed CloudWatch monitoring provides more metrics but does not directly improve performance.

Option C is wrong while gp3 volumes offer better baseline performance, switching to gp3 may not fully resolve network-related performance degradation without also enabling Enhanced Networking.

Practice this question →
265
MCQeasy

A DevOps engineer needs to automatically restart a specific service on an EC2 instance whenever the service crashes. The instance is running Amazon Linux 2. Which approach is the MOST operationally efficient?

A.Set up a CloudWatch alarm that triggers an SSM Run Command to restart the service
B.Write a cron job that checks the service status every minute and restarts it if needed
C.Configure the service as a systemd unit with Restart=on-failure
D.Use an AWS Lambda function that polls the service status and calls the EC2 reboot API
AnswerC

systemd is the native init system and handles restarts efficiently.

Why this answer

Systemd, the default init system on Amazon Linux 2, provides a built-in `Restart=` directive that can be set to `on-failure`. This instructs systemd to automatically restart the service unit when it exits with a non-zero exit code or is terminated by a signal, without requiring any external monitoring or additional infrastructure. This is the most operationally efficient approach as it leverages the native service manager functionality with zero external dependencies.

Exam trap

The trap here is that candidates often over-engineer the solution by choosing external AWS services (CloudWatch, Lambda) or traditional cron-based polling, overlooking the fact that the operating system's native service manager (systemd) already provides a simple, built-in mechanism for automatic service restart.

How to eliminate wrong answers

Option A is wrong because it introduces unnecessary complexity and latency: a CloudWatch alarm requires metric data, evaluation periods, and an SSM Run Command invocation, which is not immediate and adds operational overhead compared to a local restart mechanism. Option B is wrong because a cron job running every minute creates a polling loop that wastes CPU cycles and introduces a delay of up to 60 seconds before detecting a crash, whereas systemd reacts instantly to process termination. Option D is wrong because using a Lambda function to poll service status and call the EC2 reboot API is extremely inefficient, introduces cold start latency, requires IAM roles and network configuration, and rebooting the entire instance is a heavy-handed action when only a single service needs restarting.

Practice this question →
266
MCQmedium

A company runs SAP S/4HANA on AWS. The environment includes an SAP HANA database on an EC2 instance with multiple EBS volumes for data, log, and backup. The backup strategy uses AWS Backup to create daily snapshots of all EBS volumes. During a disaster recovery test, the team discovers that the snapshots are not crash-consistent and the database cannot be restored to a consistent state. The backup window is set to 2 AM daily. What should the team do to ensure crash-consistent backups?

A.Configure AWS Backup to create multi-volume crash-consistent snapshots for the instance.
B.Use SAP HANA backup to S3 instead of EBS snapshots for database backups.
C.Take individual EBS snapshots of each volume sequentially within the backup window.
D.Stop the EC2 instance before the backup window and start it after the snapshots complete.
AnswerA

Multi-volume snapshots ensure all volumes are snapshotted at the same point in time, providing crash consistency.

Why this answer

AWS Backup supports creating multi-volume crash-consistent snapshots, which ensures that all EBS volumes are snapshotted at the same point in time. This provides crash consistency for the SAP HANA database. Option B is incorrect because while SAP HANA backup to S3 is a valid backup method, the question specifically asks about ensuring crash-consistent EBS snapshots.

Option C is incorrect because taking individual snapshots sequentially does not guarantee cross-volume consistency. Option D is incorrect because stopping the instance causes unnecessary downtime; crash-consistent snapshots can be achieved without stopping the instance.

Practice this question →
267
Multi-Selectmedium

A company is designing a disaster recovery strategy for a critical application that runs on EC2 instances with data stored on EBS volumes. The application requires RPO of 15 minutes and RTO of 1 hour. Which TWO approaches meet these requirements?

Select 2 answers
A.Use EBS Snapshots taken every 15 minutes and copy them to the DR region
B.Use AWS Backup with a backup plan that takes cross-region backups every 15 minutes
C.Use Amazon Machine Images (AMIs) backed by EBS snapshots, taken hourly
D.Use EBS Multi-Attach volumes to allow the DR instance to access the same volumes
E.Use EBS Reboot (not Stop/Start) to move the instance to the DR region with replicated volumes
AnswersA, E

Correct. EBS Snapshots can be taken every 15 minutes and copied to another region, meeting the RPO of 15 minutes. With pre-provisioned instances, RTO under 1 hour is achievable.

Why this answer

EBS Snapshots can be taken every 15 minutes and copied across regions, enabling volume creation in the DR region with an RPO of 15 minutes and RTO under 1 hour if the EC2 instance is pre-provisioned. Using AWS Elastic Disaster Recovery (which may be referred to as 'EBS Reboot' in this context) provides continuous replication and failover, meeting the RPO/RTO requirements. Options B, C, and D are incorrect: AWS Backup has a minimum 1-hour backup interval; hourly AMIs exceed the 15-minute RPO; and EBS Multi-Attach does not support cross-region failover.

Exam trap

The PAS-C01 exam often tests the misconception that AWS Backup can support sub-hourly backup intervals, but the minimum is 1 hour, so candidates may incorrectly select Option B thinking it meets the 15-minute RPO. Additionally, candidates may overlook Option E because the term 'EBS Reboot' is ambiguous; however, this refers to AWS Elastic Disaster Recovery (formerly CloudEndure), which provides continuous replication and automated failover to meet tight RPO/RTO requirements.

Practice this question →
268
Multi-Selectmedium

A company uses AWS CloudTrail to log API calls. The security team wants to detect unauthorized attempts to modify security group rules and send real-time alerts. Which TWO AWS services should be used together to achieve this?

Select 2 answers
A.Amazon Simple Notification Service (SNS)
B.Amazon CloudWatch Events (or EventBridge)
C.AWS Lambda
D.AWS Config
E.Amazon GuardDuty
AnswersA, B

Can send alerts via email, SMS, etc.

Why this answer

Amazon CloudWatch Events (or EventBridge) can capture CloudTrail API calls related to security group modifications (e.g., AuthorizeSecurityGroupIngress, RevokeSecurityGroupEgress) and route them to an SNS topic. SNS then sends real-time alerts (e.g., email, SMS) to the security team. This combination provides event-driven, near-instantaneous notification without polling or custom code.

Exam trap

The trap here is that candidates often over-engineer by adding Lambda or GuardDuty, not realizing that CloudWatch Events (EventBridge) can directly trigger SNS for real-time alerting without additional compute or security services.

Practice this question →
269
MCQhard

An SAP HANA database on EC2 is experiencing high I/O latency. The database uses a single EBS volume for /hana/log. The volume is a gp2 volume with 1000 GB size. The administrator notices that the volume's burst balance is depleted. Which action should be taken to improve latency?

A.Change the volume type to Throughput Optimized HDD (st1)
B.Add additional gp2 volumes and stripe them in a RAID 0
C.Increase the volume size to 2000 GB to double the baseline IOPS
D.Change the volume type to Provisioned IOPS SSD (io1) with sufficient IOPS
AnswerD

io1 provides consistent IOPS without burst credits.

Why this answer

Switching to io1 provides consistent IOPS without burst balance. Option C (increasing size to 2000 GB) would double the baseline IOPS but not eliminate burst dependency. Option B (adding more volumes) may help but is more complex.

Option A (using st1) is for throughput, not low latency.

Practice this question →
270
MCQeasy

A company needs to ensure that only authorized users can access the SAP S/4HANA system running on AWS. Which AWS service can be used to manage user identities and permissions?

A.AWS Directory Service
B.AWS Organizations
C.AWS Identity and Access Management (IAM)
D.Amazon Cognito
AnswerA

Correct. AWS Directory Service can be used to extend an existing Active Directory to AWS, enabling SAP users to authenticate with their corporate credentials, thereby managing identities and access to the SAP system.

Why this answer

AWS Directory Service can integrate with on-premises Active Directory to provide a managed directory service, which allows organizations to use existing corporate credentials to access SAP S/4HANA systems running on AWS. This enables centralized user identity management and single sign-on for SAP applications. Option C (IAM) is incorrect because IAM manages access to AWS resources (e.g., EC2, S3), not user identities within SAP applications themselves.

Option B (AWS Organizations) is for managing multiple AWS accounts. Option D (Amazon Cognito) is aimed at customer-facing identity management.

Practice this question →
271
MCQmedium

An administrator needs to apply a critical OS security patch to multiple SAP application servers in an Auto Scaling group without disrupting ongoing operations. Which strategy should be used?

A.Stop all instances, apply the patch using AWS Systems Manager, then restart all instances.
B.Use AWS CloudFormation with a rolling update policy to gradually replace instances in the Auto Scaling group.
C.Use AWS Systems Manager Patch Manager to patch instances at the next maintenance window.
D.Create a new Amazon Machine Image (AMI) with the patch, update the Auto Scaling group's launch configuration, and terminate all instances.
AnswerB

Rolling update minimizes downtime by replacing instances one by one.

Why this answer

Using AWS CloudFormation with a rolling update policy allows gradual replacement of instances in the Auto Scaling group, applying the patch without downtime. Option A (stop all instances) causes downtime. Option C (Systems Manager Patch Manager) may not handle Auto Scaling gracefully and could patch instances inconsistently.

Option D (new AMI and terminate all instances) is a blue/green approach that can cause disruption if not carefully managed.

Practice this question →
272
Multi-Selectmedium

Which TWO AWS services can be used to automate the patching of SAP EC2 instances? (Choose 2)

Select 2 answers
A.AWS Systems Manager Patch Manager
B.AWS Backup
C.Amazon Inspector
D.AWS Config
E.EC2 Image Builder
AnswersA, E

Automates OS patching for EC2 instances.

Why this answer

Options A and E are correct. AWS Systems Manager Patch Manager automates OS patching directly on EC2 instances, while EC2 Image Builder creates updated AMIs with patches for SAP workloads. Options B (AWS Backup), C (Amazon Inspector), and D (AWS Config) do not automate patching: AWS Backup is for backups, Amazon Inspector scans for vulnerabilities, and AWS Config audits configuration compliance.

Practice this question →
273
MCQeasy

Refer to the exhibit. An operations team sees this log entry in CloudWatch Logs for an SAP system. What is the MOST likely cause?

A.The HANA database has crashed.
B.The SAP system user password has expired.
C.The network connection between the ABAP application server and HANA is down.
D.The ABAP program Z_MONITOR has a bug.
AnswerC

RFC communication failure typically indicates a network issue.

Why this answer

The error indicates an RFC communication failure, which is typically due to a network issue between the ABAP application server and the HANA database. Option A is wrong because there is no indication of a HANA crash. Option B is wrong because the error is about communication, not authentication (password expiry would result in a different error).

Option D is wrong because the error is not about the ABAP program itself; it is a connectivity issue.

Practice this question →
274
Multi-Selecthard

A company runs a web application on Amazon ECS with Fargate launch type. The application's memory utilization spikes periodically, causing tasks to be killed. The operations team wants to automatically scale the service based on memory usage. Which TWO steps are necessary to implement this?

Select 2 answers
A.Attach an EC2 Auto Scaling group to the ECS service to handle capacity.
B.Create an Application Auto Scaling target tracking scaling policy based on memory utilization.
C.Configure step scaling policies to add multiple tasks at once.
D.Create a CloudWatch alarm that triggers the scaling policy when memory exceeds a threshold.
E.Enable the ECS service to publish custom CloudWatch metrics for memory utilization.
AnswersB, E

Correct. Target tracking scaling policy automatically adjusts capacity to maintain the target metric value.

Why this answer

Options B and E are necessary. B: Application Auto Scaling with a target tracking scaling policy automatically adjusts the desired task count to maintain a target memory utilization, preventing OOM kills. E: The ECS service must publish custom CloudWatch metrics for memory utilization because Fargate does not publish memory metrics by default; enabling this makes the metric available for the scaling policy.

Option D is not necessary because target tracking scaling policies use the metric directly without requiring a separate CloudWatch alarm.

Exam trap

The trap here is that candidates often think a CloudWatch alarm is required to trigger scaling, but target tracking scaling policies use the metric directly without an alarm. Also, they may confuse Fargate with EC2 launch type and try to use an Auto Scaling group.

Practice this question →
275
MCQhard

A company runs SAP on AWS and uses an Application Load Balancer (ALB) to distribute traffic to a fleet of EC2 instances running SAP Web Dispatcher. The operations team notices that some instances are failing health checks intermittently. The ALB health check is configured with a 5-second interval, 2 healthy threshold, and 5 unhealthy threshold. The instances are all in the same Auto Scaling group. What is the most likely cause of the intermittent health check failures?

A.The Auto Scaling group health check grace period is too short
B.The ALB health check interval is too long
C.The health check path returns a 200 status only when the application is fully loaded
D.The health check path returns a non-200 status periodically due to a short-lived issue
AnswerD

Intermittent short-lived issues cause temporary failures; the ALB marks the instance unhealthy after multiple consecutive failures.

Why this answer

If the health check path returns a non-200 status due to a brief glitch (e.g., temporary resource exhaustion), the ALB will consider the instance unhealthy after 5 consecutive failures (25 seconds). The instances are not being replaced quickly because the Auto Scaling group health check type is likely not set to ELB, or the cooldown period delays replacement.

Practice this question →
276
MCQhard

A company runs SAP ERP on AWS using a single Availability Zone. The system includes an SAP HANA database on an EC2 instance with 2 TB of memory. The operations team plans to perform a major version upgrade of the SAP HANA database, which requires approximately 4 hours of downtime. The company's SLA allows a maximum of 2 hours of downtime. The team decides to use a blue/green deployment strategy by creating a new HANA instance in a different Availability Zone and replicating data using HANA System Replication (HSR). After setting up replication, they perform a failover to the new instance. However, the failover takes 3 hours due to the large amount of data that needs to be synchronized. What should the team do to meet the 2-hour downtime requirement?

A.Scale up the source HANA instance to a larger instance type to speed up replication.
B.Increase the network bandwidth between the two Availability Zones to 10 Gbps.
C.Use HANA System Replication with initial snapshot by taking a backup of the source, restoring on the target, and then setting up replication.
D.Use Amazon RDS for SAP HANA instead of self-managed EC2.
AnswerC

Initial snapshot reduces sync time by using a backup restore instead of full data transfer over the network.

Why this answer

Using initial snapshot with HSR reduces the initial sync time significantly because it avoids copying all data over the network. Instead, the snapshot is restored on the target and then replication catches up. Option A is wrong because increasing bandwidth may help but not enough for 2 TB of memory; the initial sync will still take hours.

Option B is wrong because multi-AZ for RDS is for RDS databases, not for self-managed HANA on EC2. Option D is wrong because scaling up the source does not help; the issue is data transfer time.

Practice this question →
277
MCQmedium

A company uses AWS Systems Manager to automate patching of SAP EC2 instances. The patching fails for some instances with the error 'SSM Agent not running'. What should the administrator do to resolve this?

A.Reboot the instances.
B.Install the Amazon CloudWatch Agent on the instances.
C.Configure a VPC endpoint for Systems Manager.
D.Verify that the SSM Agent is installed and running on the instances.
AnswerD

SSM Agent must be running for patching.

Why this answer

The error 'SSM Agent not running' indicates that the AWS Systems Manager Agent is not installed or not running on the instance. The correct action is to verify and ensure the SSM Agent is installed and running. Option A (rebooting) is incorrect because rebooting does not resolve a missing or stopped agent.

Option B (installing CloudWatch Agent) is unrelated to Systems Manager patching. Option C (configuring a VPC endpoint) addresses connectivity but not the agent status. Therefore, D is the correct answer.

Practice this question →
278
Drag & Dropmedium

Drag and drop the steps to configure an SAP Fiori front-end server on AWS behind an Application Load Balancer (ALB) into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

Fiori ALB setup requires EC2 instances, target group, ALB listener, certificate, and DNS update.

Practice this question →
279
MCQeasy

A company needs to back up its SAP HANA database running on Amazon EC2. The database is 500 GB. What is the recommended approach for backups?

A.Enable automated backups and configure the backup retention period
B.Create manual EBS snapshots of the RDS instance
C.Export the database using mysqldump and store the dump in S3
D.Use SAP HANA Studio to back up to an S3 bucket directly
AnswerD

This is the recommended approach. SAP HANA Studio can be used with the Backint agent to back up the database directly to an S3 bucket. This is a common and supported method for SAP HANA on AWS.

Why this answer

Option A (automated backups) is not applicable for EC2 instances running SAP HANA. Option B (manual EBS snapshots) can lead to inconsistent backups and is not recommended. Option C (mysqldump) is for MySQL databases, not SAP HANA.

The correct approach is to use SAP HANA Studio with the Backint agent to back up directly to an S3 bucket, which is a supported and recommended method for SAP HANA running on Amazon EC2.

Practice this question →
280
Multi-Selecthard

Which THREE metrics should an operations team monitor to detect performance issues in an SAP HANA database running on EC2?

Select 3 answers
A.CPU utilization
B.Disk I/O (read/write latency)
C.Network packets in/out
D.Memory usage
E.Swap usage
AnswersA, B, D

High CPU can indicate performance issues.

Why this answer

Options A, B, and D are correct. A: CPU utilization indicates compute pressure, which can affect HANA performance. B: Disk I/O (especially read/write latency) is critical for HANA's data persistence and log writes; high latency can degrade performance.

D: Memory usage is essential since HANA is an in-memory database; insufficient memory leads to performance issues. Option C (Network packets) is wrong because network throughput is less directly impactful for HANA performance compared to the other metrics. Option E (Swap usage) is wrong because while high swap usage can indicate severe memory pressure, HANA should not swap under normal operations; monitoring memory usage directly is more effective and a primary metric.

Swap usage is a secondary indicator that typically follows memory pressure, and is not among the top three critical performance metrics to watch.

Practice this question →
281
MCQmedium

A company runs SAP on AWS and uses a Network Load Balancer (NLB) to distribute traffic to multiple EC2 instances. The Operations team needs to ensure that the NLB only sends traffic to instances that are healthy. Which health check configuration is appropriate for TCP traffic?

A.ICMP ping
B.TCP health check on the application port
C.HTTP health check on port 80
D.HTTPS health check on port 443
AnswerB

NLB supports TCP health checks which verify that the port is open and accepting connections.

Why this answer

The correct health check for a Network Load Balancer (NLB) handling TCP traffic is a TCP health check on the application port (Option B). NLB supports TCP, HTTP, HTTPS, and TLS health checks, but for raw TCP traffic, a TCP health check directly verifies that the target port is open and responding, which is efficient and appropriate. Option A (ICMP ping) is incorrect because NLB does not support ICMP health checks.

Options C and D (HTTP/HTTPS on ports 80/443) are unnecessary for TCP traffic and require the target to run an HTTP server, which may not be the case for all TCP applications.

Practice this question →
282
MCQhard

A financial services company runs a multi-tier application on AWS. The application consists of an Application Load Balancer (ALB), a fleet of EC2 instances for the web tier, and an Amazon RDS for MySQL database for the backend. The operations team uses AWS CloudFormation to manage infrastructure. During a recent deployment, a change to the database security group caused an outage because the web tier lost connectivity to the database. The team wants to prevent similar incidents in the future. They need a solution that allows them to review and approve changes to critical resources before deployment, while still enabling rapid deployment for non-critical changes. The team uses AWS CodePipeline for CI/CD. Which approach should the team implement?

A.Use AWS Config rules to automatically remediate non-compliant changes before they are applied.
B.Use CloudFormation Change Sets in the pipeline and add a manual approval step for any change that modifies the database security group.
C.Use AWS Service Catalog to create a portfolio of approved stacks and require all deployments to use the portfolio.
D.Use AWS CloudTrail to monitor changes to the security group and trigger a rollback if unauthorized changes are detected.
AnswerB

Change Sets show the impact, and manual approval gates allow review before deployment.

Why this answer

CloudFormation Change Sets allow you to preview how proposed changes will affect your resources before execution. By integrating a manual approval step in the CodePipeline that triggers specifically when the change set modifies the database security group, the team can review and approve critical changes while allowing non-critical changes to proceed automatically. This directly addresses the requirement to prevent outages from unapproved security group modifications.

Exam trap

The trap here is that candidates often confuse reactive auditing tools (Config, CloudTrail) with proactive approval mechanisms, or they overestimate Service Catalog's ability to handle per-resource approval workflows within a single stack.

How to eliminate wrong answers

Option A is wrong because AWS Config rules are reactive — they evaluate resources after they have been deployed and can trigger auto-remediation, but they cannot prevent a change from being applied in the first place, so the outage would already occur. Option C is wrong because AWS Service Catalog enforces approved templates at deployment time but does not provide a per-change review and approval workflow for specific resource modifications within a stack; it would block all non-approved stacks, not allow rapid deployment for non-critical changes. Option D is wrong because AWS CloudTrail logs API calls after they happen, so it cannot prevent the outage; triggering a rollback after detection still means the outage has already occurred, which does not meet the requirement to prevent similar incidents.

Practice this question →
283
MCQmedium

A company runs SAP HANA on AWS and wants to implement a backup strategy using AWS Backint agent for SAP HANA. Which storage service is best suited for storing the backup files when using Backint?

A.Amazon S3 Glacier
B.Amazon EFS
C.Amazon S3
D.Amazon EBS
AnswerC

Backint is designed to use S3 as the backup target.

Why this answer

AWS Backint agent for SAP HANA is designed to stream backups directly to Amazon S3, making S3 the optimal storage service for backup files. Option B (Amazon EFS) is a file storage service not intended for Backint backups. Option A (Amazon S3 Glacier) is a cold archival storage, not suited for frequent backups.

Option D (Amazon EBS) provides block storage for EC2 instances, not the target for Backint.

Practice this question →
284
MCQmedium

A company runs a production SAP HANA database on AWS using an EC2 instance with EBS volumes. The database is experiencing high latency during peak hours. The operations team needs to identify the root cause. Which steps should the team take to diagnose the issue?

A.Migrate the EBS volumes to Provisioned IOPS SSD (io1) immediately.
B.Monitor the EBS volume queue length and latency using Amazon CloudWatch metrics.
C.Move the SAP HANA database to Amazon RDS for SAP.
D.Increase the instance size to improve performance.
AnswerB

CloudWatch metrics for EBS can identify performance bottlenecks.

Why this answer

Amazon CloudWatch provides metrics such as EBS volume queue length (depth) and average latency, which are key indicators of I/O bottlenecks. High queue depth with corresponding latency spikes suggests that the EBS volume is overwhelmed and needs adjustment (e.g., switching to Provisioned IOPS). Option A is incorrect because migrating to Provisioned IOPS without diagnosing the root cause may not solve the issue and increases cost unnecessarily.

Option C is incorrect because moving SAP HANA to Amazon RDS for SAP is not a direct solution for latency and introduces migration complexity. Option D is incorrect because increasing instance size without analyzing I/O patterns may not address the bottleneck and can also increase costs.

Practice this question →
285
MCQeasy

A company wants to automate the backup of SAP HANA database on AWS. Which AWS service is best suited for creating consistent snapshots of HANA data volumes?

A.AWS Backup
B.AWS Lambda
C.Amazon CloudWatch
D.Amazon S3
AnswerA

AWS Backup is the best choice because it natively supports SAP HANA with pre/post scripts for consistency.

Why this answer

AWS Backup is the best suited service for automating consistent snapshots of SAP HANA data volumes. It integrates with SAP HANA using pre and post scripts to ensure application-consistent backups. AWS Lambda can also be used but requires custom scripting, making it less optimal.

Amazon CloudWatch is for monitoring, and Amazon S3 is a storage service, not a backup service.

Practice this question →
286
MCQhard

A company uses AWS CloudFormation to manage infrastructure. During an update, a stack fails to roll back and is left in UPDATE_ROLLBACK_FAILED state. The stack contains a DynamoDB table and a Lambda function. The operations team needs to fix the stack with minimal disruption. What should they do?

A.Manually delete the DynamoDB table and then retry the stack update.
B.Delete the stack and recreate it from the template.
C.Use the ContinueUpdateRollback API to resume the rollback.
D.Update the stack again with a different change set to bypass the failed resource.
AnswerC

This allows CloudFormation to retry rolling back the failed resource.

Why this answer

When a CloudFormation stack is in UPDATE_ROLLBACK_FAILED state, the recommended recovery action is to use the ContinueUpdateRollback API (or the AWS Management Console equivalent). This API instructs CloudFormation to skip the resources that failed to roll back and continue rolling back the remaining resources, bringing the stack to a consistent UPDATE_ROLLBACK_COMPLETE state. This approach minimizes disruption because it does not require deleting the stack or manually intervening with the DynamoDB table or Lambda function.

Exam trap

The trap here is that candidates often assume the only way to recover from a failed rollback is to delete the stack or manually fix the resource, but AWS provides the ContinueUpdateRollback API specifically to handle this state with minimal disruption.

How to eliminate wrong answers

Option A is wrong because manually deleting the DynamoDB table will cause the stack to become orphaned and may lead to data loss; CloudFormation expects to manage the resource lifecycle, and deleting it outside of CloudFormation does not resolve the rollback failure. Option B is wrong because deleting the stack and recreating it from the template would destroy all resources, including the DynamoDB table and Lambda function, causing significant disruption and potential data loss; it is an unnecessarily destructive approach. Option D is wrong because updating the stack with a different change set while in UPDATE_ROLLBACK_FAILED state is not supported; CloudFormation requires the stack to be in a stable state (e.g., UPDATE_ROLLBACK_COMPLETE) before initiating a new update, and attempting to bypass the failed resource will result in an error.

Practice this question →
287
MCQeasy

An operations team needs to back up the SAP HANA database running on an EC2 instance. The database is 1 TB in size and the team wants to minimize backup time and cost. Which backup strategy should they use?

A.Use SAP HANA Studio to back up the database to Amazon S3
B.Use Amazon S3 lifecycle policies to move old backups to Glacier
C.Use AWS Systems Manager to run a script that copies data to S3
D.Use AWS Backup to create EBS snapshots of the attached EBS volumes
AnswerD

EBS snapshots are incremental and fast, suitable for large databases.

Why this answer

EBS snapshots provide point-in-time backups that are incremental after the first full snapshot, reducing backup time and cost. HANA Studio backup to S3 requires more manual steps and is slower. AWS Backup can be used but EBS snapshots are more direct.

S3 lifecycle policies are for object management, not database backups.

Practice this question →
288
MCQmedium

An SAP system running on AWS uses a Multi-AZ deployment with an Application Load Balancer (ALB) distributing traffic across two application servers in different Availability Zones. The ALB health checks are configured to check the /sap/public/health endpoint on each instance. Recently, the operations team noticed that one of the instances is being marked as unhealthy intermittently, causing a slight increase in response times. The instance's CPU utilization is under 40%, memory is sufficient, and the health endpoint returns a 200 OK status when tested manually. What is the most likely cause?

A.The health check endpoint is configured with the wrong path.
B.The security group for the instances does not allow inbound traffic from the ALB.
C.The health check requests are blocked by a network ACL.
D.The health check interval is too frequent or the timeout is too short.
AnswerD

This is correct because intermittent failures with low CPU and memory suggest the health check timing parameters (interval or timeout) are too aggressive, causing the ALB to mark the instance unhealthy when the endpoint response time slightly increases.

Why this answer

A health check interval that is too frequent or a timeout that is too short can cause the ALB to mark an instance as unhealthy intermittently, even when the endpoint returns 200 OK manually. The instance may occasionally respond slower than the timeout, especially under brief transient conditions. Option A is incorrect because the health check endpoint path is correct (as it returns 200 OK).

Option B is incorrect because security group rules allowing inbound traffic from the ALB are typically configured correctly; otherwise, the health check would fail consistently. Option C is incorrect because network ACLs are stateless and would affect all traffic equally, not intermittently.

Practice this question →
289
Multi-Selecthard

Which TWO AWS services can be used to automate the restart of an SAP application server when it becomes unresponsive? (Choose 2.)

Select 2 answers
A.Amazon ECS service auto-recovery
B.Amazon CloudWatch alarm with an EC2 action to recover the instance
C.AWS Systems Manager Automation document
D.EC2 Auto Scaling group with a health check
E.Amazon EventBridge with a Lambda function
AnswersB, C

Alarm can trigger instance recovery.

Why this answer

To automate the restart of an SAP application server when unresponsive, two appropriate AWS services are Amazon CloudWatch alarms with an EC2 action to recover the instance (Option B) and AWS Systems Manager Automation documents (Option C). A CloudWatch alarm can monitor a metric (e.g., StatusCheckFailed) and trigger an EC2 Recover action, which stops and starts the instance to restore service. Systems Manager Automation provides pre-defined or custom runbooks to perform automated remediation steps, including restarting services or instances.

Option A (Amazon ECS) is for container orchestration, not for EC2 instance recovery. Option D (EC2 Auto Scaling) can replace instances via health checks but is not designed to restart the same instance. Option E (Amazon EventBridge with Lambda) could be used but requires custom coding and is not a native automated restart solution like the two correct options.

Practice this question →
290
MCQeasy

A company is using AWS Systems Manager to automate patching of SAP EC2 instances. The patching fails for some instances with the error 'Unable to retrieve SSM Agent registration'. What is the MOST likely cause?

A.The patching window is too short and the instance times out.
B.The IAM role attached to the instance does not have permissions to list patches.
C.The instance does not have outbound internet access or a VPC endpoint for Systems Manager.
D.The SSM Agent is not installed because the instance is running in a container.
AnswerC

SSM requires connectivity to Systems Manager endpoints.

Why this answer

The error 'Unable to retrieve SSM Agent registration' indicates that the SSM Agent cannot communicate with the Systems Manager service. This typically occurs when the instance lacks outbound internet access or a VPC endpoint for Systems Manager. Option A is incorrect because a patching window timeout would produce a different error.

Option B is incorrect because the IAM role permissions issue would cause an access denied error, not a registration failure. Option D is incorrect because the SSM Agent runs on EC2 instances, not containers, and the error is unrelated to container environments.

Practice this question →
291
MCQhard

Refer to the exhibit. An operations team uses an EC2 instance with this IAM policy to manage EBS snapshots for SAP HANA backups. The backup script calls the DeleteSnapshot API for snapshot snap-0abcdef1234567890. What will happen?

A.The snapshot will be deleted because the Deny applies only to other snapshots.
B.The snapshot will be deleted because the Allow statement grants permission.
C.The policy is invalid and will cause an error.
D.The DeleteSnapshot API call will be denied.
AnswerD

Correct. The explicit Deny on the specific snapshot ARN ensures the DeleteSnapshot API call is denied.

Why this answer

The IAM policy evaluation logic dictates that an explicit Deny overrides any Allow. Since the policy explicitly denies DeleteSnapshot for the specific snapshot snap-0abcdef1234567890, the API call will be denied even if an Allow statement exists. Option A is incorrect because the Deny is not restricted to 'other snapshots'; it specifically targets the snapshot in question.

Option B is incorrect because the Allow does not override an explicit Deny. Option C is incorrect because the policy is syntactically valid; the explicit Deny is a legitimate policy statement.

Exam trap

A common trap is to assume that an Allow statement always grants access. In AWS IAM, an explicit Deny takes precedence over any Allow, even if the Allow appears more specific.

Practice this question →
292
MCQhard

An SAP administrator is troubleshooting an issue where an AWS Lambda function is unable to start an EC2 instance. The Lambda execution role has the IAM policy shown in the exhibit. What is the likely cause of the failure?

A.The Lambda function is not configured with the correct VPC subnet or security group to reach the EC2 instance.
B.The policy does not allow ec2:DescribeInstances.
C.The policy does not allow ec2:StartInstances.
D.The policy does not allow s3:GetObject on the specific backup object.
AnswerA

Lambda may need VPC access to start instances in a VPC, but the policy is fine.

Why this answer

The issue is likely that the Lambda function is not configured with the correct VPC subnet or security group to reach the EC2 instance. Lambda functions running in a VPC require proper networking configuration to interact with EC2 instances in the same VPC. The IAM policy shown allows ec2:StartInstances, ec2:DescribeInstances, and s3:GetObject on the specified resources, so IAM permissions are not the problem.

Option A is correct because networking misconfiguration is a common cause of such failures. Options B, C, and D are incorrect as the policy does grant the necessary permissions.

Practice this question →
293
MCQeasy

A company is running SAP on AWS and wants to automate the patching of SAP application servers. The servers are behind an Auto Scaling group. Which AWS service is BEST suited to apply OS patches without downtime?

A.AWS Config
B.AWS Systems Manager Patch Manager
C.AWS CloudFormation
D.AWS OpsWorks
AnswerB

Patch Manager automates OS patching; combined with Auto Scaling rolling updates, it minimizes downtime.

Why this answer

AWS Systems Manager Patch Manager is the best choice because it automates the patching of OS-level updates. Combined with Auto Scaling groups, you can perform rolling updates to avoid downtime. AWS Config (option A) is used for compliance and configuration auditing, not patching.

AWS CloudFormation (option C) is an infrastructure-as-code service, not a patching solution. AWS OpsWorks (option D) supports Chef and Puppet automation but is less integrated and not the primary service for OS patching.

Practice this question →
294
Multi-Selecteasy

An SAP administrator wants to automate the patching of SAP application servers. Which TWO AWS services can be used together to achieve this?

Select 2 answers
A.AWS Systems Manager Patch Manager
B.AWS Lambda
C.AWS Systems Manager Maintenance Windows
D.AWS OpsWorks
E.Amazon CloudWatch Alarms
AnswersA, C

Patch Manager automates OS patching.

Why this answer

Options A and C are correct. AWS Systems Manager Patch Manager automates the patching of instances, and AWS Systems Manager Maintenance Windows schedules when the patching occurs. Option B (AWS Lambda) is incorrect because Lambda can orchestrate patching processes but does not directly patch.

Option D (AWS OpsWorks) is incorrect as it is a configuration management service based on Chef/Puppet, not for direct patching automation. Option E (Amazon CloudWatch Alarms) is for monitoring and alerting, not patching.

Practice this question →
295
MCQhard

An SAP administrator is troubleshooting why a user cannot stop a production EC2 instance. The IAM policy attached to the user is shown in the exhibit. Which action is likely causing the failure?

A.The instance does not have the tag Environment=production.
B.There is an explicit deny statement in another policy.
C.The policy does not allow the StopInstances action.
D.The policy does not include ec2:DescribeInstances action.
AnswerA

The condition requires the tag to be exactly 'production'.

Why this answer

The IAM policy allows StopInstances only when the instance has the tag Environment=production. If the instance does not have this tag, the condition in the policy is not met, and the action is implicitly denied. Option B is not necessarily correct because there is no evidence of an explicit deny in another policy.

Option C is incorrect because the policy does allow StopInstances with the condition. Option D is incorrect because the ec2:DescribeInstances action is not required to stop an instance.

Practice this question →
296
Multi-Selecthard

A company runs SAP on AWS and uses an Application Load Balancer (ALB) to distribute traffic to a fleet of EC2 instances running SAP Web Dispatcher. The operations team needs to implement a health check that verifies the Web Dispatcher is ready to accept traffic. Which THREE configuration options should the team set for the health check? (Choose THREE.)

Select 3 answers
A.Set the unhealthy threshold to 5 consecutive failures
B.Set the health check path to /sap/wdisp/health
C.Set the health check port to 443 (HTTPS)
D.Set the health check interval to 10 seconds
E.Set the healthy threshold to 2 consecutive successes
AnswersA, B, D

This prevents premature marking of instances as unhealthy.

Why this answer

The health check should target a custom path that validates the application status, use a reasonable interval, and set a threshold for consecutive failures to mark the instance unhealthy. The healthy threshold determines how many consecutive successes are needed to mark the instance healthy. The path should be a specific endpoint like /sap/wdisp/health.

The interval and unhealthy threshold are important to detect failures quickly while avoiding flapping.

Practice this question →
297
MCQeasy

An SAP administrator needs to apply an OS security patch to all SAP application servers running on EC2 instances in an Auto Scaling group. The patch requires a reboot. What is the most efficient way to apply the patch with minimal downtime?

A.SSH into each instance and apply the patch manually
B.Create a new AMI with the patch and update the Auto Scaling group
C.Use AWS CloudFormation to update the instances
D.Use AWS Systems Manager Patch Manager with a maintenance window
AnswerD

Patch Manager automates patching and reboots with minimal disruption.

Why this answer

AWS Systems Manager Patch Manager can orchestrate patching across instances, and using a maintenance window with a reboot strategy minimizes downtime. Option A is wrong because manual patching is not efficient. Option B is wrong because creating a new AMI and updating the Auto Scaling group requires creating a new launch configuration or template and rolling out new instances, which is more effort and not the most efficient.

Option C is wrong because AWS CloudFormation is for infrastructure provisioning, not for applying OS patches.

Practice this question →
298
MCQmedium

An SAP administrator needs to implement a disaster recovery (DR) strategy for SAP HANA with an RTO of 2 hours and RPO of 15 minutes. The primary site is in us-east-1, and the DR site is in us-west-2. The system uses SAP HANA System Replication (HSR) for data replication. Which AWS service should be used to automate failover and minimize downtime?

A.AWS Elastic Disaster Recovery (AWS DRS).
B.AWS Backup with cross-region backup copies.
C.AWS CloudEndure Disaster Recovery.
D.Amazon RDS for SAP HANA.
AnswerA

AWS DRS provides continuous replication and automated failover capabilities, meeting the RTO/RPO requirements.

Why this answer

AWS Elastic Disaster Recovery (DRS) can replicate EC2 instances and automate failover, meeting the RTO and RPO requirements. Option B is wrong because AWS Backup is for backup, not real-time replication. Option C is wrong because CloudEndure is now AWS DRS.

Option D is wrong because RDS is not used for SAP HANA; it is a managed database service.

Practice this question →
299
MCQeasy

An SAP system is deployed on EC2 instances across multiple Availability Zones. Which AWS service should be used to automatically distribute incoming traffic across the SAP application servers?

A.Application Load Balancer
B.Amazon Route 53
C.Network Load Balancer
D.Amazon CloudFront
AnswerA

ALB distributes HTTP/HTTPS traffic for web-based SAP.

Why this answer

An Application Load Balancer distributes HTTP/HTTPS traffic across multiple targets in different Availability Zones. Route 53 (Option B) is a DNS service, not a load balancer. Network Load Balancer (Option C) is for TCP/UDP traffic.

CloudFront (Option D) is a CDN.

Practice this question →
300
MCQmedium

An SAP system on AWS uses a Multi-AZ RDS for SQL Server as the database. During a failover test, the application experienced a 2-minute outage. The application team wants to reduce this downtime. What should the operations team recommend?

A.Increase the DB instance size to improve failover performance.
B.Configure Multi-AZ with SQL Server Mirroring instead of Always On Availability Groups.
C.Enable automatic failover handling in the application's JDBC connection string.
D.Use Amazon RDS Proxy to manage connections.
AnswerC

Automatic failover in the connection string allows the application to reconnect quickly.

Why this answer

Enabling Multi-AZ with automatic failover in the JDBC connection string allows the application to automatically reconnect to the new primary without manual intervention. Option A is wrong because increasing instance size does not affect failover time. Option B is wrong because a different Multi-AZ configuration does not reduce failover time.

Option D is wrong because RDS Proxy is not supported for SQL Server.

Practice this question →
← PreviousPage 4 of 7 · 460 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Sap Operations questions.

Start 20-question session