Free AWS Certified: SAP on AWS – Specialty Exam PAS-C01 Exam Practice Test

A company is migrating its SAP workloads to AWS The company's IT team installs a highly available SAP S.4HANA system that uses the SAP HANA system replication cluster package on SUSE Linux Enterprise Server The IT team deploys the system by using cluster nodes m different Availability Zones within the same AWS Region.After the initial launch of the SAP application the application is accessible However after failover the IT team cannot access the application even though the system is up and running on the secondary node After investigation an SAP solutions architect discovers that the virtual IP address has not been used correctlyWhich combination of steps should the SAP solutions architect take to resolve this problem? (Select TWO.)

• Use an overlay IP address as a secondary IP address with the primary node of the cluster
• Choose an overlay IP address within the VPC CiDR block that corresponds with the secondary node of the cluster
• Use an overlay IP address as a virtual IP address
• Choose an overlay IP address within the VPC CIDR block that corresponds with the primary node of the cluster
• Choose an overlay IP address outside the VPC CiDR block that hosts the application and the database

A company is starting a new project to implement an SAP landscape with multiple accounts that belong to multiple teams in the us-east-2 Region. These teams include procurement finance sales and human resources An SAP solutions architect has started designing this new landscape and the AWS account structuresThe company wants to use automation as much as possible The company also wants to secure the environment implement federated access to accounts centralize logging and establish cross-account security audits in addition the company's management team needs to receive a top-level summary of policies that are applied to the AWS accounts.What should the SAP solutions architect do to meet these requirements?

• Use AWS CloudFormation StackSets to apply SCPs to multiple accounts in multiple Regions. Use an Amazon CloudWatch dashboard to check the applied policies in the accounts
• Use an AWS Elastic Beanstalk blue green deployment to create 1AM policies and apply them to multiple accounts together Use an Amazon CloudWatch dashboard to check the applied policies in the accounts
• Implement guardrails by using AWS CodeDeploy and AWS CodePipeline to deploy SCPs into each account Use the CodePipeline deployment dashboard to check the applied policies in the accounts
• Apply SCPs through AWS Control Tower Use the AWS Control Tower integrated dashboard to check the applied policies in the accounts

A company's basis administrator is planning to deploy SAP on AWS m Linux. The basis administrator must set up the proper storage to store SAP HANAdata and log volumes. Which storage options should the basis administrator choose to meet these requirements? (Select TWO.)

• Amazon Elastic Block Store (Amazon EBS) Throughput Optimized HDD (st1)
• Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS SSD (io1, k>2)
• Amazon S3
• Amazon Elastic File System (Amazon EFS>
• Amazon Elastic Block Store (Amazon EBS) General Purpose SSD (gp2 gp3)

A company has an SAP Business One system that runs on SUSE Linux Enterprise Server 12 SP3. The company wants to migrate the system to AWS An SAP solutions architect selects a homogeneous migration strategy that uses AWS Application Migration Service (CloudEndure Migration)After the server migration process is finished the SAP solutions architect launches an Amazon EC2 test instance from the R5 instance family. After a few minutes the EC2 console reports that the test instance has failed an instance status check Network connections to the instance are refusedHow can the SAP solutions architect solve this problem?

• Reboot the instance to initiate instance migration to another host
• Request an instance limit increase for the AWS Region where the test instance is being launched
• Create a ticket for AWS Support that documents the test server instance ID Wait for AWS to update the host of the R5 instance
• Install the missing drivers on the source system Wait for the completion of migration synchronization Launch the test instance again

A company is planning to migrate its on-premises SAP applications to AWS. The applications are based on Windows operating systems A file share stores the transport directories and third party application data on the network attached storage of the company's on-premises data center. The company's plan is to lift and shift the SAP applications and the file share to AWS. The company must follow AWS best practices for the migrationWhich AWS service should the company use to host the transport directories and third-party application data on AWS?

• Amazon Elastic Block Store (Amazon EBS)
• AWS Storage Gateway
• Amazon Elastic File System (Amazon EFS)
• Amazon FSx for Windows File Server

A company runs its SAP ERP 6 0 EHP 8 system on SAP HANAon AWS The system is deployed on an r4 I6xlarge Amazon EC2 instance with default tenancy. The company needs to migrate the SAP HANA database to an x2gd/.6xiarge High Memory instance After an operations engineer changes the instance type and starts the instance the AWS Management Console shows a failed instance status checkWhat is the cause of this problem?

• The operations engineer missed the network configuration step during the post-migration activities
• The operations engineer missed the Amazon CloudWatch configuration step during the post-migration activities.
• The operations engineer did not install Elastic Network Adapter (ENA) drivers before changing the instance type
• The operations engineer did not create a new AMI from the original instance and did not launch a new instance with dedicated tenancy from the AMI

A company hosts multiple SAP applications on Amazon EC2 instances in a VPC While monitoring the environment the company notices that multiple port scans are attempting to connect to SAP portals inside the VPC. These port scans are originating from the same IP address block. The company must deny access to the VPC from all the offending IP addresses for the next 24 hours.Which solution win meet this requirement?

• Modify network ACLs that are associated with all public subnets in the VPC to deny access from the IP address block
• Add a rule in the security group of the EC2 instances to deny access from the IP address block
• Create a policy in AWS identity and Access Management (1AM) to deny access from the IP address block
• Configure the firewall m the operating system of the EC2 instances to deny access from the IP address block

A company is running an SAP ERP Central Component (SAP ECC) system on an SAP HANA database that is 10 TB m size The company rs receiving notifications about long-running database backups every day The company uses AWS Backint Agent for SAP HANA (AWS Backint agent) on an Amazon EC2 instance to back up the database An SAP NetWeaver administrator needs to troubleshoot the problem and propose a solutionWhich solution will help resolve this problem'?

• Ensure mat AWS Backint agent is configured to send the backups to an Amazon S3 bucket over the internet Ensure that the EC2 instance is configured to access the internet through a NAT gateway
• Check the UploadChanneiSize parameter for AWS Backint agent increase this value in the aws-backint-agent-config yaml configuration file based on the EC2 instance type and storage configurations
• Check the MaximumConcurrentFilesForRestore parameter tor AWS Backint agent Increase the parameter from 5 to 10 by using the aws-backint-agent-config yaml configuration file
• Ensure that the backups are compressed if necessary configure AWS Backint agent to compress the backups and send them to an Amazon S3 bucket

A company is planning to move to AWS. The company wants to set up sandbox and test environments on AWS to perform proofs of concept (POCs) Development and production environments will remain on premises until the POCs are completed.At the company's on-premises location SAProuter is installed on the same server as SAP Solution Manager. The company uses SAP Solution Manager to monitor the entire landscape The company uses SAP router to connect to SAP Support The on-premises SAP Solution Manager instance must monitor the performance and server metrics of the newly created POC systems on AWS. The existing SAP router must be able to report any issues to SAPWhat should an SAP solutions architect do to set up this hybrid infrastructure MOST cost-effectively''

• Install a new SAP Solution Manager instance and a new SAP router instance m the AWS environment Connect the POC systems to these new instances Use these new instances m parallel with the on-premises SAP Solution Manager instance and the on-premises SAP router instance
• Install a new SAP Solution Manager instance and a new SAP router instance in the AWS environment install the Amazon CloudWatch agent on all on-premises instances Push the monitoring data to the new SAP Solution Manager instance Connect ail on-premises systems and POC systems on AWS to the new SAP Solution Manager instance and the new SAP router instance Remove the on-premises SAP Solution Manager instance and the on-premises SAP router instance Use the new instances on AWS
• Use AWS Site-to-Site VPN to connect the on-premises network to the AWS environment Connect the POC systems on AWS to the on-premises SAP Solution Manager instance and the on-premises SAP router instance
• Add the POC systems on AWS to the existing SAP Transport Management System that is configured m the on-premises SAP systems

A company is using a multi-account strategy for SAP HANA and SAP BW 4HANA instances across development QA and production systems m the same AWS Region Each system is hosted m its own VPC The company needs to establish cross-VPC communication between the SAP systems.The company might add more SAP systems m the future. The company must create connectivity across the SAP systems and hundreds of AWS accounts. The solution must maximize scalability and reliability.Which solution will meet these requirements?

• Create an AWS Transit Gateway in a central networking account Attach the transit gateway to the AWS accounts Set up routing and a network ACL to establish communication
• Set up VPC peering between the accounts Configure routing in each VPC to use the VPC peering links
• Create a transit VPC that uses the hub-and-spoke model set up routing to use the transit VPC for communication between the SAP systems
• Create a VPC link for each SAP system Use the VPC links to connect the SAP systems