Amazon PAS-C01 Exam Questions Instant Access

Question 1

A company runs its SAP ERP 6 0 EHP 8 system on SAP HANAon AWS The system is deployed on an r4 I6xlarge Amazon EC2 instance with default tenancy. The company needs to migrate the SAP HANA database to an x2gd/.6xiarge High Memory instance After an operations engineer changes the instance type and starts the instance the AWS Management Console shows a failed instance status check

What is the cause of this problem?

AThe operations engineer missed the network configuration step during the post-migration activities

BThe operations engineer missed the Amazon CloudWatch configuration step during the post-migration activities.

CThe operations engineer did not install Elastic Network Adapter (ENA) drivers before changing the instance type

DThe operations engineer did not create a new AMI from the original instance and did not launch a new instance with dedicated tenancy from the AMI

Answer : C

The Elastic Network Adapter (ENA) is a software-based network interface that provides high-performance network connectivity and is required for instances with higher network performance requirements. If the ENA drivers are not installed before changing the instance type, the instance will not be able to communicate with the network, resulting in a failed instance status check.

C is correct because installing Elastic Network Adapter (ENA) drivers before changing the instance type is required to support High Memory instances. ENA drivers provide enhanced networking capabilities for EC2 instances. The other options are not relevant or necessary for migrating SAP HANA database to a High Memory instance. Reference: https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/amazon-ec2.html https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/enhanced-networking.html

Question 2

A company wants to migrate its SAP landscape from on premises to AWS

What are the MINIMUM requirements that the company must meet to ensure full support of SAP on AWS? (Select THREE.)

AEnable detailed monitoring for Amazon CloudWatch on each instance in the landscape

BDeploy the infrastructure by using SAP Cloud Appliance Library

CInstall configure and run the AWS Data Provider for SAP on each instance m the landscape

DProtect all production instances by using Amazon EC2 automatic recovery

EDeploy the infrastructure for the SAP landscape by using AWS Launch Wizard for SAP

FDeploy the SAP landscape on an AWS account that has either an AWS Business Support plan or an AWS Enterprise Support plan

Answer : C, D, F

C is correct because installing, configuring and running the AWS Data Provider for SAP on each instance in the landscape is required to provide specific performance metrics that are needed by SAP support. D is correct because protecting all production instances by using Amazon EC2 automatic recovery is required to ensure high availability and fault tolerance for SAP systems. F is correct because deploying the SAP landscape on an AWS account that has either an AWS Business Support plan or an AWS Enterprise Support plan is required to ensure full support of SAP on AWS. The other options are not relevant or necessary for ensuring full support of SAP on AWS. Reference: https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/security.html https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/high-availability.html https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/support.html

Question 3

A company is planning to move to AWS. The company wants to set up sandbox and test environments on AWS to perform proofs of concept (POCs) Development and production environments will remain on premises until the POCs are completed.

At the company's on-premises location SAProuter is installed on the same server as SAP Solution Manager. The company uses SAP Solution Manager to monitor the entire landscape The company uses SAP router to connect to SAP Support The on-premises SAP Solution Manager instance must monitor the performance and server metrics of the newly created POC systems on AWS. The existing SAP router must be able to report any issues to SAP

What should an SAP solutions architect do to set up this hybrid infrastructure MOST cost-effectively'?

AInstall a new SAP Solution Manager instance and a new SAP router instance m the AWS environment Connect the POC systems to these new instances Use these new instances m parallel with the on-premises SAP Solution Manager instance and the on-premises SAP router instance

BInstall a new SAP Solution Manager instance and a new SAP router instance in the AWS environment install the Amazon CloudWatch agent on all on-premises instances Push the monitoring data to the new SAP Solution Manager instance Connect ail on-premises systems and POC systems on AWS to the new SAP Solution Manager instance and the new SAP router instance Remove the on-premises SAP Solution Manager instance and the on-premises SAP router instance Use the new instances on AWS

CUse AWS Site-to-Site VPN to connect the on-premises network to the AWS environment Connect the POC systems on AWS to the on-premises SAP Solution Manager instance and the on-premises SAP router instance

DAdd the POC systems on AWS to the existing SAP Transport Management System that is configured m the on-premises SAP systems

Answer : C

It allows to use the existing on-premises SAP Solution Manager and SAP router instances to monitor and report issues from the POC systems on AWS, thus minimizing the additional infrastructure costs. Also this approach allows to use the VPN to establish a secure connection between the on-premises network and the AWS environment, thus ensuring that the monitoring data is transmitted securely. Option D can also be used to manage the transport of the customizing objects and support packages between the on-premises systems and the POC systems on AWS.

https://docs.aws.amazon.com/sap/latest/general/overview-sap-planning.html#figure-4

Question 4

A company is using a multi-account strategy for SAP HANA and SAP BW 4HANA instances across development QA and production systems m the same AWS Region Each system is hosted m its own VPC The company needs to establish cross-VPC communication between the SAP systems.

The company might add more SAP systems m the future. The company must create connectivity across the SAP systems and hundreds of AWS accounts. The solution must maximize scalability and reliability.

Which solution will meet these requirements?

ACreate an AWS Transit Gateway in a central networking account Attach the transit gateway to the AWS accounts Set up routing and a network ACL to establish communication

BSet up VPC peering between the accounts Configure routing in each VPC to use the VPC peering links

CCreate a transit VPC that uses the hub-and-spoke model set up routing to use the transit VPC for communication between the SAP systems

DCreate a VPC link for each SAP system Use the VPC links to connect the SAP systems

Answer : A

Create an AWS Transit Gateway in a central networking account and attach the transit gateway to the AWS accounts. This solution will meet the requirements as it will maximize scalability and reliability and provide connectivity between the SAP systems and hundreds of AWS accounts. Additionally, as more SAP systems might be added in the future, this solution will also be able to handle the increased load.

Question 5

An SAP technology consultant needs to scale up a primary application server (PAS) instance The PAS currently runs on a c5a.xlarge Amazon EC2 instance The SAP technology consultant needs to change the instance type to c5a 2xlarge

How can the SAP technology consultant meet this requirement?

AStop the complete SAP system Stop the EC2 instance Use the AWS Management Console or the AWS CLI to change the instance type Start the EC2 instance Start the complete SAP system

BWhile SAP is running use the AWS Management Console or the AWS CLI to change the instance type without stopping the EC2 instance

CStop the complete SAP system Terminate the EC2 instance Use the AWS Management Console or the AWS CLI to change the instance type Start the EC2 instance Start the complete SAP system

DWhile SAP is running log in to the EC2 instance. Run the following AWS CLI command: aws ec2 modify-instance-attribute --instance-id <INSTANCEID>
--instance-type ''{\''Value\'': |''c5a.2xlarge1\''}''.

Answer : A

A is correct because stopping the complete SAP system and the EC2 instance is required to change the instance type to a larger size. Using the AWS Management Console or the AWS CLI to change the instance type is the easiest and fastest way to do so. Starting the EC2 instance and the complete SAP system will resume the normal operation. The other options are not correct or feasible for scaling up the PAS instance. Reference: https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/amazon-ec2.html https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-resize.html

Question 6

A company is running its SAP workload on AWS The company's security team has implemented the following requirements

* All Amazon EC2 instances for SAP must be SAP certified instance types

- Encryption must be enabled for all Amazon S3 buckets and Amazon Elastic Block Store (Amazon EBS) volumes

* AWS CloudTrail must be activated

* SAP system parameters must be compliant with business rules

* Detailed monitoring must be enabled for all instances

The company wants to develop an automated process to review the systems for compliance with the security team's requirements. The process also must provide notification about any deviation from these standards

Which solution will meet these requirements?

AUse AWS AppConfig to model configuration data in an AWS Systems Manager Automation runbook Schedule this Systems Manager Automation runbook to monitor for compliance with all the requirements integrate AWS AppConfig with Amazon CloudWatch for notification purposes

BUse AWS Config managed rules to monitor for compliance with all the requirements Use Amazon EventBridge (Amazon CloudWatch Events) and Amazon Simple Notification Service (Amazon SNS) for email notification when a resource is flagged as noncompliant

CUse AWS Trusted Advisor to monitor for compliance with all the requirements Use Trusted Advisor preferences for email notification when a resource is flagged as noncompliant

DUse AWS Config managed rules to monitor for compliance with the requirements except for the SAP system parameters Create AWS Config custom rules to validate the SAP system parameters Use Amazon EventBridge (Amazon CloudWatch Events) and Amazon Simple Notification Sen/ice (Amazon SNS) for email notification when a resource is flagged as noncompliant

Answer : D

https://aws.amazon.com/blogs/awsforsap/audit-your-sap-systems-with-aws-config-part-i/ https://aws.amazon.com/blogs/awsforsap/audit-your-sap-systems-with-aws-config-part-ii/

Question 7

A financial services company is implementing SAP core banking on AWS. The company must not allow any system information to traverse the public internet. The company needs to implement secure monitoring of its SAP ERP Central Component (SAP ECO system to check for performance issues and faults in its application. The solution must maximize security and must be supported by SAP and AWS.

How should be company integrate AWS metrics with its SAP system to meet these requirements?

ASet up SAP Solution Manager to call Amazon CoudWatch and Amazon EC2 endpoints with REST-based calls to populate SAPOSCOL details Use SAP transaction ST06N to monitor CPU and memory utilization on each EC2 instance

BInstall the AWS Data Provider for SAP on the Amazon EC2 instances that host SAP Allow access to the Amazon CloudWatch and EC2 endpoints through a NAT gateway Create an IAM policy that allows the ec2 Describeinstances action the cloudwatch.GetMetricStatistics action and the ec2 DescribeVolumes action for all EC2 resources.

CInstall the AWS Data Provider for SAP on the Amazon EC2 instances that host SAP Create VPC endpoints for Amazon CloudWatch and Amazon EC2 Allow access through these endpoints Create an IAM policy that allows the ec2 Describe instances action the cloudwatch GetMemcStatistics action and the ec2 DescribeVolumes action for all EC2 resources.

Dinstall the AWS data Provider for SAP on the Amazon EC2 instances that host SAP Create VPC endpoints for Amazon CloudWatch and Amazon EC2 Allow access through these endpoints Create an IAM policy that allows all actions for all EC2 resources.

Answer : C

VPC endpoints to ensure that traffic to and from the CloudWatch and EC2 services stays within the VPC. Additionally, an IAM policy is created to grant access to only the necessary actions, such as DescribeInstances and GetMetricStatistics, for all EC2 resources. This approach will provide secure monitoring of the SAP system while maximizing security and ensuring support from both SAP and AWS.

https://docs.aws.amazon.com/sap/latest/general/data-provider-req.html#vpc-endpoints

Amazon AWS Certified: SAP on AWS - Specialty PAS-C01 Exam Questions