Amazon PAS-C01 Exam Questions Instant Access

Question 1

A company wants to migrate its on-premises servers to AWS. These servers include SAP ERP Central Component (SAP ECC) on Oracle Database. The company is running SAP ECC application servers and Oracle Database servers on AIX. The company must migrate the SAP workloads to AWS with minimal changes.

Which solution will meet these requirements?

APerform a heterogeneous migration for SAP on AWS Specify the SAP ECC application servers to run on SUSE Linux Enterprise Server Specify Oracle Database to run on Oracle Enterprise Linux on a Dedicated Host

BPerform a homogeneous migration for SAP on AWS Specify the SAP ECC application servers and Oracle Database to run on AIX

CPerform a heterogeneous migration for SAP on AWS Specify the SAP ECC application servers and Oracle Database to run on Oracle Enterprise Linux.

DPerform a heterogeneous migration for SAP on AWS Specify the SAP ECC application servers and Oracle Database to run on Windows.

Answer : C

Question 2

A company hosts an SAP HANA database on an Amazon EC2 instance in the us-easi-1 Region. The company needs to implement a disaster recovery (DR) site in the us-west-1 Region. The company needs a cost-optimized solution that offers a guaranteed capacity reservation an RPO of less than 30 minutes and an RTO of less than 30 minutes.

When solution will meet these requirements?

ADeploy a single EC2 instance to support the secondary database in us-west with additional storage Use this secondary database instance to support QA and production Configure the primary SAP HANA database in us-east-1 to constantly replicate the data to the secondary SAP HANA database in us-west-t by using SAP HANA system replication with preload off During DR shut down the QA SAP HANA instance and restart the production services at the secondary site

BDeploy a secondary staging server on an EC2 instance in us-west-1 Use CloudEndure Disaster Recovery to replicate changes at the database level from us-east-1 to the secondary staging server on an ongoing basis During DR, initiate cutover increase the size of the secondary EC2 instance to match the primary EC2 instance and start the secondary EC2 instance

CSet up the primary SAP HANA database in us-east-1 to constantly replicate the data to a secondary SAP HANA database in us-west-1 by using SAP HANA system replication with preload on Keep the secondary SAP HANA instance as a hot standby that is ready to take over in case of failure

DCreate an SAP HANA database AMI by using Amazon Elastic Block Store (Amazon EBS) snapshots Replicate the database and log backup files from a primary Amazon S3 bucket in us-east-1 to a secondary S3 bucket m us-west-1 During DR launch the EC2 instance in us-west-1 based on AMIs that are replicated Update host information Download database and log backups from the secondary S3 bucket Perform a point-in-time recovery

Answer : A

A is correct because deploying a single EC2 instance to support the secondary database in us-west-1 with additional storage is cost-optimized and offers a guaranteed capacity reservation. Configuring the primary SAP HANA database in us-east-1 to constantly replicate the data to the secondary SAP HANA database in us-west-1 by using SAP HANA system replication with preload off provides an RPO of less than 30 minutes. During DR, shutting down the QA SAP HANA instance and restarting the production services at the secondary site provides an RTO of less than 30 minutes. Reference: https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/disaster-recovery.html https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/sap-hana.html

Question 3

A company is hosting its SAP workloads on AWS An SAP solutions architect is designing high availability architecture for the company's production SAP S4HANA and SAP BW-4HANA workloads These workloads have the following requirements.

* Redundant SAP application servers that consist of a primary application server (PAS) and an additional application server (AAS)

* ASCS and ERS instances that use a failover cluster

* Database high availability with a primary DB Instance and a secondary OB instance

How should the SAP solutions architect design the architecture to meet these requirements?

ADeploy ASCS and ERS cluster nodes in different subnets within the same Availability Zone Deploy the PAS instance and AAS instance in different subnets within the same Availability Zone Deploy the primary DB instance and secondary DB instance m different subnets within the same Availability Zone Deploy all the components in the same VPC

BDeploy ASCS and ERS duster nodes m different subnets within the same Availability Zone Deploy the PAS instance and AAS instance in different subnets within the same Availably Zone Deploy the primary DB instance and secondary DB instance m different subnets within the same Availability Zone Deploy the ASCS instance PAS instance and primary DB instance in one VPC Deploy the ERS instance AAS instance and secondary DB instance in a different VPC

CDeploy ASCS and ERS cluster nodes in different subnets across two Availability Zones Deploy the PAS instance and AAS instance m different subnets across two Availability Zones Deploy the primary DB instance and secondary DB instance in different subnets across two Availability Zones Deploy all the components in the same VPC

DDeploy ASCS and ERS cluster nodes in different subnets across two Availability Zones Deploy the PAS instance and AAS instance m different subnets across two Availability Zones Deploy the primary DB instance and secondary DB instance in different subnets across two Availability Zones Deploy the ASCS instance PAS instance and primary DB instance in one VPC Deploy the ERS instance AAS instance and secondary DB instance in a different VPC

Answer : C

This solution would ensure that the ASCS and ERS instances are deployed in different subnets across different Availability Zones, providing redundancy for the failover cluster. The PAS and AAS instances are also deployed in different subnets across different Availability Zones, providing redundancy for the application servers. The primary and secondary DB instances are also deployed in different subnets across different Availability Zones, providing redundancy for the database. Additionally, all the components are deployed in the same VPC, which will minimize the cost of communication between the application server and the database server.

C is correct because deploying ASCS and ERS cluster nodes, PAS and AAS instances, and primary and secondary DB instances in different subnets across two Availability Zones provides high availability and fault tolerance for the SAP workloads. Deploying all the components in the same VPC allows for low-latency communication between them. Reference: https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/high-availability.html https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/vpc-design.html

Question 4

A company is running an SAP HANA database on AWS The company is running AWS Backint Agent for SAP HANA(AWS Backint agent) on an Amazon EC2 instance AWS Back agent is configured to back up to an Amazon S3 bucket The backups are failing with an Access Denied error m the AWS Backint agent log file.

What should an SAP basis administrator do to resolve this error?

AAssign execute permissions at the operating system level for the AWS Backint agent binary and for AWS Backint agent

BAssign an IAM role to an EC2 instance Attach a policy to the IAM role to grant access to the target S3 bucket

CAssign the correct Region ID for the S3BucketAwsRegion parameter in AWS Backint agent for the SAP HANA configuration file

DAssign the value for the Enable Tagging parameter in AWS Backint agent for the SAP HANA configuration file

Answer : B

The error message 'AccessDenied' usually indicates that the AWS Backint agent does not have the necessary permissions to access the target S3 bucket. To resolve this error, an SAP basis administrator should assign an IAM role to the EC2 instance that is running the AWS Backint agent. Then, the administrator should attach a policy to the IAM role that grants the necessary permissions to access the target S3 bucket. This will allow the AWS Backint agent to access the S3 bucket and complete the backups successfully.

Question 5

A company is running SAP ERP Central Component (SAP ECC) with a Microsoft SQL Server database on AWS A solutions architect must attach an additional 1 TB Amazon Elastic Block Store (Amazon EBS) volume. The company needs to write the SQL Server database backups to this EBS volume before moving the database backups to Amazon S3 for long-term storage.

Which EBS volume type will meet these requirements MOST cost-effectively?

AThroughput Optimized HDD (st1)

BProvisioned IOPS SSD (io3)

CGeneral Purpose SSD (gp3)

DCold HDD (sc1)

Answer : A

'For SQL Server database backup, you can use one of the following methods: SQL native tools to take backup on disk: Backup requires high throughput compared to IOPS. We recommend using Throughput Optimized HDD (st1) which provides maximum throughput of 500 MB/s per volume.'

Question 6

A company wants to implement SAP HANAonAWS with the Multi-AZ deployment option by using AWS Launch Wizard for SAP The solution will use SUSE Linux Enterprise High Availability Extension for the high availability deployment An SAP solutions architect must ensure that all the prerequisites are met The SAP solutions architect also must ensure that the user inputs to start the guided deployment of Launch Wizard are valid.

Which combination of steps should the SAP solutions architect take to meet these requirements? (Select TWO)

ABefore starting the Launch Wizard deployment create the underlying Amazon Elastic Block Store (Amazon EBS) volume types to use for SAP HANA data and log volumes based on the performance requirements

BUse a value for the PaceMakerTag parameter that is not used by any other Amazon EC2 instances in the AWS Region where the system is being deployed

CEnsure that the virtual hostname for the SAP HANA database that is used for the SUSE Linux Enterprise High Availability Extension configuration is not used in any other deployed accounts

DEnsure that the Virtual Address parameter is outside the VPC CIDR and is not being used in the route table that is associated with the subnets where primary and secondary SAP HANA instances will be deployed

EBefore starting the Launch Wizard deployment set up the SUSE Linux Enterprise High Availability Extension network configuration and security group

Answer : B, D

In the document 'SAP HANA on the AWS Cloud Quick Start Reference Deployment' (ARCHIVED) at the below URL, page 25, under 'Requirements for Multi-AZ, Single-Node HA Scenarios,' you will find the following

https://links.imagerelay.com/cdn/3404/ql/8327da608b7341f4ac2216c503116387/SAP-hana-on-AWS-cloud.pdf

####

SLES HAE and RHEL High Availability agents require that the Pacemaker tag and the overlay IP address you provide by setting deployment parameters can be uniquely identified. Therefore, you need to ensure the following:

-- The value you provide for the PaceMakerTag parameter isn't being used by any other EC2 instances in your account, in the AWS Region where you are deploying the Quick Start.

-- The IP address you provide for the VirtualIPAddress parameter is outside the VPC CIDR and isn't being used in the route table associated with the subnets where primary and secondary HANA instances will be deployed.

####

Question 7

A company is implementing SAP HANA on AWS According 10 the company's security policy SAP backups must be encrypted Only authorized team members can have the ability to decrypt the SAP backups

What is the MOST operationally efficient solution that meets these requirements?

AConfigure AWS Backint Agent for SAP HANA to create SAP backups in an Amazon S3 bucket After a backup is created encrypt the backup by using client-side encryption Share the encryption key with authorized team members only

BConfigure AWS Backint Agent for SAP HANA to use AWS Key Management Service (AWS KMS) for SAP backups Create a key policy to grant decryption permission to authorized team members only

CConfigure AWS Storage Gateway to transfer SAP backups from a file system to an Amazon S3 bucket Use an S3 bucket policy to grant decryption permission to authorized team members only

DConfigure AWS Backint Agent for SAP HANA to use AWS Key Management Service (AWS KMS) for SAP backups Grant object ACL decryption permission to authorized team members only

Answer : B

This is the most operationally efficient solution that meets the company's security policy requirements. AWS KMS is a service that enables you to create and manage encryption keys that are used to encrypt and decrypt data. By configuring AWS Backup Agent for SAP HANA to use AWS KMS for SAP backups, the company can ensure that the backups are encrypted at rest and that only authorized team members have the ability to decrypt them. The key policy allows the company to define which team members are authorized to access the key, so that it can be used to decrypt the backup. This approach is operationally efficient because it does not require the company to manually encrypt and decrypt backups, and it enables the company to manage access to the encryption key through IAM policies, without the need for sharing encryption keys.

Amazon AWS Certified: SAP on AWS - Specialty PAS-C01 Exam Questions