Amazon PAS-C01 Exam Questions Instant Access

Question 1

A company has an SAP environment that runs on AWS. The company wants to enhance security by restricting Amazon EC2 Instance Metadata Service (IMDS) to IMDSv2 only. The company's current configuration option supports both iMDSvi and iM0Sv2. The security enhancement must not create an SAP outage.

What should the company do before it applies the security enhancement on EC2 instances that are running the SAP environment?

AEnsure that the SAP kernel versions are 7.45 or later

BEnsure that the EC2 instances are Nitro based

CEnsure that the AWS Data Provider for SAP is installed on each EC2 instance

DStop the EC2 instances

Answer : A

A is correct because ensuring that the SAP kernel versions are 7.45 or later is required to support IMDSv2 only. SAP kernel versions below 7.45 do not support IMDSv2 and will fail to start if IMDSv1 is disabled. The other options are not relevant for the security enhancement and may create an SAP outage. Reference: https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/security.html https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html

Question 2

A company needs to implement high availability for its SAP S 4HANA system on AWS The company will use a SUSE Linux Enterprise Server clustering solution in private subnets across two Availability Zones An SAP solutions architect must ensure that the solution can route traffic to the active SAP instance m this clustered configuration.

What should the SAP solutions architect do to meet these requirements?

AImplement the SAP cluster solution by using a secondary private IP address Reassign the secondary private IP address from one network interface to another network interface in the event of any failure that affects the primary instance.

BImplement the SAP cluster solution by using an Elastic IP address Mask the failure of an instance or software by rapidly remapping the address to another instance in the account

CImplement the SAP duster solution by using a public IP address Use this public IP address for communication between the instances and the internet

Dimplement the SAP duster solution by using an overlay IP address that is outside the CIDR block of the VPC Use overlay IP address routing to dynamically update the route table to point to the active node and provide external access by using a Network Load Balancer or AWS Transit Gateway.

Answer : D

https://docs.aws.amazon.com/sap/latest/sap-netweaver/cluster-configuration-prereqs-sap-netweaver-ha.html#enable-cluster-instances-overlay-ip-sap-netweaver-ha

Question 3

A company has deployed its SAP applications into multiple Availability Zones in the same AWS Region To accommodate storage of media files database table export and import and files dropped by third-party tools the company has mounted Amazon Elastic File System (Amazon EFS) file systems between the SAP instances The company needs to retrieve the files quickly for installations updates and system refreshes

Over time the EFS file systems have grown exponentially to multiple terabytes An SAP solutions architect must optimize storage cost for the tiles that are stored in Amazon EFS.

Which solution will meet this requirement with the LEAST administrative overhead?

AScan the files manually to identify unnecessary files Delete the unnecessary files

BMove the files to Amazon S3 Glacier Deep Archive

CApply a lifecycle policy on the files in Amazon EFS to move the files to EFS Standard-Infrequent Access (Standard-IA)

DMove the files to Amazon S3 Glacier Apply an S3 Glacier vault lock policy to the files

Answer : C

Apply a lifecycle policy on the files in Amazon EFS to move the files to EFS Standard-Infrequent Access (Standard-IA) is the solution that will meet this requirement with the least administrative overhead. This solution allows you to automatically move files that have not been accessed for a certain period of time to a lower-cost storage class, reducing storage costs without the need for manual intervention.

C is correct because applying a lifecycle policy on files in Amazon EFS to move files to EFS Standard-Infrequent Access (Standard-IA) reduces storage cost for files that are rarely accessed. This solution allows you to automatically move files that have not been accessed for a certain period of time to a lower-cost storage class, reducing storage costs without the need for manual intervention. Reference: https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/cost-optimization.html https://docs.aws.amazon.com/efs/latest/ug/lifecycle-management-efs.html

Question 4

A company that has SAP workloads on premises plans to migrate an SAP environment to AWS. The company is new to AWS and has no poor setup. The company has the following requirements

- The application server and database server must be placed in isolated network configurations

* SAP systems must be accessible to the on-premises end users over the internet

* The cost of communications between the application server and the database server must be minimized

Which combination of steps should an SAP solutions architect take to meet these requirements? (Select TWO.)

AConfigure a Network Load Balancer for incoming connections from end users

BSet up an AWS Site-to-Site VPN connection between the company's on-premises network and AWS

CSeparate the application server and the database server by using different VPCs

DSeparate the application server and the database server by using different subnets and network security groups within the same VPC

ESet up an AWS Direct Connect connection with a private VIF between the company's on-premises network and AWS

Answer : B, D

B is correct because AWS Site-to-Site VPN allows the company to securely connect their on-premises network to AWS over the internet. D is correct because separating the application server and the database server by using different subnets and network security groups within the same VPC provides network isolation and minimizes the cost of communication between them. Reference: https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/networking.html

Question 5

A company is planning to move its on-premises SAP HANA database to AWS. The company needs to migrate this environment to AWS as quickly as possible An SAP solutions architect will use AWS Launch Wizard for SAP to deploy this SAP HANA workload.

Which combination of steps should the SAP solutions architect follow to start the deployment of this workload on AWS? (Select THREE.)

ADownload the SAP HANA software

BDownload the AWS CloudFormation template for the SAP HANA deployment

CDownload and extract the SAP HANA software upload the SAP HANA software to an FTP server that Launch Wizard can access

DUpload the unextracted SAP HANA software to an Amazon S3 destination bucket Follow the S3 file path syntax for the software in accordance with Launch Wizard recommendations

EBring the operating system AMI by using the Bring. Your Own Image (BYOI) model or purchase the subscription for the operating system AMI from AWS Marketplace

FCreate the SAP file system by using Amazon Elastic Block Store (Amazon EBS) before the deployment

Answer : A, D, E

https://docs.aws.amazon.com/launchwizard/latest/userguide/launch-wizard-sap-setting-up.html https://docs.aws.amazon.com/launchwizard/latest/userguide/launch-wizard-sap-structure.html

Question 6

A financial services company is implementing SAP core banking on AWS. The company must not allow any system information to traverse the public internet. The company needs to implement secure monitoring of its SAP ERP Central Component (SAP ECO system to check for performance issues and faults in its application. The solution must maximize security and must be supported by SAP and AWS.

How should be company integrate AWS metrics with its SAP system to meet these requirements?

ASet up SAP Solution Manager to call Amazon CoudWatch and Amazon EC2 endpoints with REST-based calls to populate SAPOSCOL details Use SAP transaction ST06N to monitor CPU and memory utilization on each EC2 instance

BInstall the AWS Data Provider for SAP on the Amazon EC2 instances that host SAP Allow access to the Amazon CloudWatch and EC2 endpoints through a NAT gateway Create an IAM policy that allows the ec2 Describeinstances action the cloudwatch.GetMetricStatistics action and the ec2 DescribeVolumes action for all EC2 resources.

CInstall the AWS Data Provider for SAP on the Amazon EC2 instances that host SAP Create VPC endpoints for Amazon CloudWatch and Amazon EC2 Allow access through these endpoints Create an IAM policy that allows the ec2 Describe instances action the cloudwatch GetMemcStatistics action and the ec2 DescribeVolumes action for all EC2 resources.

Dinstall the AWS data Provider for SAP on the Amazon EC2 instances that host SAP Create VPC endpoints for Amazon CloudWatch and Amazon EC2 Allow access through these endpoints Create an IAM policy that allows all actions for all EC2 resources.

Answer : C

VPC endpoints to ensure that traffic to and from the CloudWatch and EC2 services stays within the VPC. Additionally, an IAM policy is created to grant access to only the necessary actions, such as DescribeInstances and GetMetricStatistics, for all EC2 resources. This approach will provide secure monitoring of the SAP system while maximizing security and ensuring support from both SAP and AWS.

https://docs.aws.amazon.com/sap/latest/general/data-provider-req.html#vpc-endpoints

Question 7

A company has deployed SAP HANA m the AWS Cloud. The company needs its SAP HAN A database to be highly available An SAP solutions architect has deployed the SAP HANA database in separate Availability Zones in a single AWS Region SUSE Linux Enterprise High Availability Extension is configured with an overlay IP address. The overlay IP resource agent has the following IAM policy:

During a test of failover the SAP solutions architect finds that the overlay IP address does not change to the secondary Availability Zone Which change should the SAP solutions architect make in the policy statement for Sid oip1 to dx this error1?

AChange the Action element to ec2 CreateRoute

BChange the Action element to ec2 ReplaceRoute

CChange the Action element to ec2 ReplaceRouteTableAssociation

DChange the Action element to ec2 ReplaceTransrtGatewayRoute

Answer : B

https://docs.aws.amazon.com/sap/latest/sap-hana/sap-hana-on-aws-cluster-configuration-prerequisites.html

Amazon AWS Certified: SAP on AWS - Specialty PAS-C01 Exam Questions