Amazon Amazon Certifications PAS-C01 Questions & Answers

• Question 1:

  A company is running SAP S/4HANA on AWS. The company has deployed its current database infrastructure on a u-12tb1.112xlarge Amazon EC2 instance that uses default tenancy and SUSE Linux Enterprise Server for SAP 15 SP1. The company must scale its SAP HANA database to an instance with more RAM. An SAP solutions architect needs to migrate the database to a u-18tb1.metal High Memory instance.

  How can the SAP solutions architect meet this requirement?

  A. Use the AWS Management Console to stop the current instance. Change the instance type to u-18tb1.metal. Start the instance.

  B. Use the AWS CLI to stop the current instance. Change the instance type to u-18tb1.metal. Start the instance.

  C. Use the AWS CLI to stop the current instance. Create an AMI from the current instance. Use the new AMI to launch a new u-18tb1.metal instance with host tenancy.

  D. Use the AWS Management Console to stop the current instance. Create an AMI from the current instance. Use the new AMI to launch a new u-18tb1.metal instance with dedicated tenancy.

  Correct Answer: B

• Question 2:

  A company is hosting its SAP workloads on AWS An SAP solutions architect is designing high availability architecture for the company's production SAP S4HANA and SAP BW- 4HANA workloads

  These workloads have the following requirements.

  1.

  Redundant SAP application servers that consist of a primary application server (PAS) and an additional application server (AAS)

  2.

  ASCS and ERS instances that use a failover cluster

  3.

  Database high availability with a primary DB Instance and a secondary OB instance

  How should the SAP solutions architect design the architecture to meet these requirements?

  A. Deploy ASCS and ERS cluster nodes in different subnets within the same Availability Zone Deploy the PAS instance and AAS instance in different subnets within the same Availability Zone Deploy the primary DB instance and secondary DB instance m different subnets within the same Availability Zone Deploy all the components in the same VPC

  B. Deploy ASCS and ERS duster nodes m different subnets within the same Availability Zone Deploy the PAS instance and AAS instance in different subnets within the same Availably Zone Deploy the primary DB instance and secondary DB instance m different subnets within the same Availability Zone Deploy the ASCS instance PAS instance and primary DB instance in one VPC Deploy the ERS instance AAS instance and secondary DB instance in a different VPC

  C. Deploy ASCS and ERS cluster nodes in different subnets across two Availability Zones Deploy the PAS instance and AAS instance m different subnets across two Availability Zones Deploy the primary DB instance and secondary DB instance in different subnets across two Availability Zones Deploy all the components m the same VPC

  D. Deploy ASCS and ERS cluster nodes in different subnets across two Availability Zones Deploy the PAS instance and AAS instance m different subnets across two Availability Zones Deploy the primary DB instance and secondary DB instance in different subnets across two Availability Zones Deploy the ASCS instance PAS instance and primary DB instance in one VPC Deploy the ERS instance AAS instance and secondary DB instance in a different VPC

  Correct Answer: B

• Question 3:

  A global enterprise is running SAP ERP Central Component (SAP ECC) workloads on Oracle in an on-premises environment. The enterprise plans to migrate to SAP S 4HANA on AWS. The enterprise recently acquired two other companies One of the acquired companies is running SAP ECC on Oracle as its ERP system The other acquired company is running an ERP system that is not from SAP The enterprise wants to consolidate the three ERP systems into one ERP system on SAP S 4HANA on AWS Not all the data from the acquired companies needs to be migrated to the final ERP system

  The enterprise needs to complete this migration with a solution that minimizes cost and maximizes operational efficiency.

  Which solution will meet these requirements?

  A. Perform a lift-and-shift migration of all the systems to AWS Migrate the ERP system that is not from SAP to SAP ECC Convert all three systems to SAP S/4HANA by using SAP Software Update Manager (SUM) Database Migration Option (DMO) Consolidate all three SAP S4HANA systems into a final SAP and4HANAsystem Decommission the other systems

  B. Perform a lift-and-shift migration of an the systems to AWS Migrate the enterprise's initial system to SAP HANA, and then perform a conversion to SAP S/4HANA Consolidate the two systems from the acquired companies with this SAP S4HANA system by using the Selective Data Transition approach with SAP Data Management and Landscape Transformation (DMLT)

  C. Use SAP Software Update Manager (SUM) Database Migration Option (DMO) with System Move to re-architect the enterprise initial system to SAP S'4HANA and to change the platform to AWS Consolidate the two systems from the acquired companies with this SAP S 4HANA system by using the Selective Data Transition approach with SAP Data Management and Landscape Transformation (DMLT)

  D. Use SAP Software Update Manager (SUM) Database Migration Option (DMO) with System Move to re-architect all the systems to SAP S/4HANA and to change the platform to AWS Consolidate all three SAP S-4HANA systems two a final SAP S/4HANA system Decommission the other systems

  Correct Answer: A

• Question 4:

  A company is implementing SAP HANA on AWS According 10 the company's security policy SAP backups must be encrypted Only authorized team members can have the ability to decrypt the SAP backups What is the MOST operationally efficient solution that meets these requirements?

  A. Configure AWS Backint Agent for SAP HANA to create SAP backups in an Amazon S3 bucket After a backup is created encrypt the backup by using client-side encryption Share the encryption key with authorized team members only

  B. Configure AWS Backint Agent for SAP HANA to use AWS Key Management Service (AWS KMS) for SAP backups Create a key policy to grant decryption permission to authorized team members only

  C. Configure AWS Storage Gateway to transfer SAP backups from a file system to an Amazon S3 bucket Use an S3 bucket policy to grant decryption permission to authorized team members only

  D. Configure AWS Backint Agent for SAP HANA to use AWS Key Management Service (AWS KMS) for SAP backups Grant object ACL decryption permission to authorized team members only

  Correct Answer: C

• Question 5:

  A company has deployed SAP workloads on AWS The AWS Data Provider for SAP is installed on the Amazon EC2 instance where the SAP application is running An SAP solutions architect has attached an IAM role to the EC2 instance with the following policy.

  

  The AWS Data Provider for SAP is not returning any metrics to the SAP application. Which change should the SAP solutions architect make to the 1AM permissions to resolve this issued.

  A. Add the cloudwatch ListMetrics action to the policy statement with Sid AWSDataProvider1.

  B. Add the cloudwatch GetMetricStatrstics action to the policy statement with Sid AWSDataProvider1

  C. Add the cloudwatch GetMetricStream action (o the policy statement with Sid AWSDataProvider

  D. Add the cloudwatch DescribeAlarmsForMetric action to the policy statement with Sid AWSDataProvider

  Correct Answer: A

• Question 6:

  A company wants 10 migrate its SAP ERP landscape to AWS The company will use a highly available distributed deployment for the new architecture Clients will access SAP systems from a local data center through an AWS Site-to-Site VPN connection that is already in place An SAP solutions architect needs to design the network access to the SAP production environment

  Which configuration approaches will meet these requirements? (Select TWO.)

  A. For the ASCS instance configure an overlay IP address that is within the production VPC ClDR range Create an AWS Transit Gateway Attach me VPN to the transit gateway Use the transit gateway to route the communications between the local data center and the production VPC Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance

  B. For the ASCS instance configure an overlay IP address that is outside the production VPC ClDR range Create an AWS Transit Gateway Attach the VPN to the transit gateway Use the transit gateway to route the communications between the local data center and the production VPC Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance

  C. For the ASCS instance configure an overlay IP address that is within the production VPC ClDR range Create a target group that points to the overlay IP address Create a Network Load Balancer and register the target group Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance

  D. For the ASCS instance configure an overlay IP address that is outside the production VPC ClDR range Create a target group that points to the overlay IP address Create a Network Load Balancer, and register the target group Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance

  E. For the ASCS instance configure an overlay IP address that is outside the production VPC ClDR range Create a target group that points to the overlay IP address Create an Application Load Balancer and register the target group Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance.

  Correct Answer: AB

• Question 7:

  A company is running SAP ERP Central Component (SAP ECC) with a Microsoft SQL Server database on AWS A solutions architect must attach an additional 1 TB Amazon Elastic Block Store (Amazon EBS) volume. The company needs to write the SQL Server database backups to this EBS volume before moving the database backups to Amazon S3 for long-term storage.

  Which EBS volume type will meet these requirements MOST cost-effectively?

  A. Throughput Optimized HDD (st1)

  B. Provisioned IOPS SSD (io3)

  C. General Purpose SSD (gp3)

  D. Cold HDD (sc1)

  Correct Answer: B

• Question 8:

  A company hosts its SAP NetWeaver workload on SAP HANA m the AWS Cloud The SAP NetWeaver application is protected by a cluster solution that uses Red Hat Enterprise Linux High Availability Add-On The duster solution uses an overlay IP address to ensure that the high availability cluster is still accessible during failover scenarios. An SAP solutions architect needs to facilitate the network connection to this overlay IP address from multiple locations These locations include more than 25 VPCs other AWS Regions and the on-premises environment The company already has set up an AWS Direct Connect connection between the on-premises environment and AWS. What should the SAP solutions architect do to meet these requirements in the MOST scalable manner?

  A. Use VPC peering between the VPCs to route traffic between them

  B. Use AWS Transit Gateway to connect the VPCs and on-premises networks together

  C. Use a Network Load Balancer to route connections to various targets within VPCs

  D. Deploy a Direct Connect gateway to connect the Direct Connect connection over a private VIF to one or more VPCs in any accounts

  Correct Answer: D

• Question 9:

  An SAP solutions architect is leading the SAP basis team for a company. The company's SAP landscape includes SAP HANA database instances for the following systems sandbox development quality assurance test {QAT} system performance test (SPT) and production. The sandbox development and OAT systems are running on Amazon EC2 On-Demand Instances. The SPT and production systems are running on EC2 Reserved Instances All the EC2 instances are using Provisioned IOPS SSO (K)2) Amazon Elastic Block Store (Amazon EBS) volumes.

  The entire development learn is in the same time zone and works from 8 AM to 6 PM. The sandbox system is for research and testing that are not critical. The SPT and production systems are business critical The company runs load-testing jobs and stress-testing jobs on the QAT systems overnight to reduce testing duration. The company wants to optimize infrastructure cost for the existing AWS resources.

  How can the SAP solutions architect meet these requirements with the LEAST amount of administrative effort?

  A. Use a Spot Fleet instead of the Reserved Instances and On-Demand Instances

  B. Use Amazon EventBridge (Amazon CloudWatch Events) and Amazon CloudWatch alarms to stop the development and sandbox EC2 instances from 7 PM every night to 7 AM the next day

  C. Make the SAP basis team available 24 hours a day 7 days a week to use the AWS CLi to stop and start the development and sandbox EC2 instances manually

  D. Change the EBS volume type to Throughput Optimized HDD (sti) for the /hana/data and nana, log file systems for the production and non-production SAP HANA databases

  Correct Answer: D

• Question 10:

  A company is planning to migrate its SAP workloads to AWS. The company will use two VPCs One VPC will be for production systems and one VPC will be for non-production systems. The company will host the non-production systems and the primary node of all the production systems in the same Availability Zone.

  What is the MOST cost-effective way to establish a connection between me production systems and the non-production systems?

  A. Create an AWS Transit Gateway Attach the VPCs to the transit gateway Add the appropriate routes m the subnet route tables

  B. Establish a VPC peering connection between the two VPCs Add the appropriate routes in the subnet route tables

  C. Create an internet gateway in each VPC Use an AWS Site-to-Site VPN connection between the two VPCs Add the appropriate routes in the subnet route tables

  D. Set up an AWS Direct Connect connection between the two VPCs Add the appropriate routes in the subnet route tables

  Correct Answer: D