A company hosts multiple SAP applications on Amazon EC2 instances in a VPC While monitoring the environment the company notices that multiple port scans are attempting to connect to SAP portals inside the VPC. These port scans are originating from the same IP address block. The company must deny access to the VPC from all the offending IP addresses for the next 24 hours.
Which solution win meet this requirement?
A. Modify network ACLs that are associated with all public subnets in the VPC to deny access from the IP address block
B. Add a rule in the security group of the EC2 instances to deny access from the IP address block
C. Create a policy in AWS identity and Access Management (1AM) to deny access from the IP address block
D. Configure the firewall m the operating system of the EC2 instances to deny access from the IP address block
A company that has SAP workloads on premises plans to migrate an SAP environment to AWS. The company is new to AWS and has no poor setup. The company has the following requirements
1.
The application server and database server must be placed in isolated network configurations
2.
SAP systems must be accessible to the on-premises end users over the internet
3.
The cost of communications between the application server and the database server must be minimized Which combination of steps should an SAP solutions architect take to meet these requirements? (Select TWO.)
A. Configure a Network Load Balancer for incoming connections from end users
B. Set up an AWS Site-to-Site VPN connection between the company's on-premises network and AWS
C. Separate the application server and the database server by using different VPCs
D. Separate the application server and the database server by using different subnets and network security groups within the same VPC
E. Set up an AWS Direct Connect connection with a private VIF between the company's on-premises network and AWS
A company is moving to the AWS Cloud gradually. The company has multiple SAP landscapes on VMware The company already has sandbox development and QA systems on AWS The company's production system is still running on
premises. The company has 2 months to cut over the entre landscape to the AWS Cloud The company has adopted a hybrid architecture for the next 2 months and needs to synchronize its shared file systems between the landscapes These shared file systems include trans directory mounts, /software directory mounts, and third-party integration mounts in the on-premises landscape the company has NFS mounts between the servers On the AWS infrastructure side the company is using Amazon Elastic File System (Amazon EFS) to share the common files
An SAP solutions architect needs to design a solution to schedule transfer of these shared files bidirectional^ four times each day. The data transfer must be encrypted Which solution will meet these requirements?
A. Write an rsync script Schedule the script through cron for four times each day in the on- premises VMware servers to transfer the data from on premises to AWS
B. Install an AWS DataSync agent on the on-premises VMware platform Use the DataSync endpoint to synchronize between the on-premises NFS server and Amazon EFS on AWS
C. Order an AWS Snowcone device Use the Snowcone device to transfer data between the on-premises servers and AWS
D. Set up a separate AWS Direct Connect connection for synchronization between the on- premises servers and AWS
A company is planning to migrate its on-premises SAP application to AWS. The application runs on VMware vSphere The SAP ERP Central Component (SAP ECC) server runs on an IBM Db2 database that is 2 TB m size The company wants to migrate the database to SAP HANA
Which migration strategy will meet these requirements'?
A. Use AWS Application Migration Service (CloudEndure Migration)
B. Use SAP Software Update Manager (SUM) Database Migration Option (DMO) with System Move
C. Use AWS Server Migration Service (AWS SMS)
D. Use AWS Database Migration Service (AWS DMS)
A company is running an SAP HANA database on AWS The company is running AWS Backint Agent for SAP HANA(AWS Backint agent) on an Amazon EC2 instance AWS Back agent is configured to back up to an Amazon S3 bucket The backups are failing with an AccessDeniod error m the AWS Backint agent log file.
What should an SAP basis administrator do to resolve this error?
A. Assign execute permissions at the operating system level for the AWS Backint agent binary and for AWS Backint agent
B. Assign an 1AM role to an EC2 instance Attach a policy to the IAM role to grant access to the target S3 bucket
C. Assign the correct Region ID for the S3BucketAwsRegion parameter in AWS Backint agent for the SAP HANA configuration file
D. Assign the value for the Enable Tagging parameter in AWS Backint agent for the SAP HANA configuration file
A global retail company is running its SAP landscape on AWS Recently the company made changes to its SAP Web Dispatcher architecture The company added an additional SAP Web Dispatcher for high availability with an Application Load Balancer (ALB) to balance the load between the two SAP Web Dispatchers
When users try to access SAP through the ALB the system is reachable However the SAP backend system is showing an error message An investigation reveals that the issue is related to SAP session handling and distribution of requests . The company confirmed that the system was working as expected with one SAP Web Dispatcher. The company replicated the configuration of that SAP Web Dispatcher to the new SAP Web Dispatcher
How can the company resolve the error?
A. Maintain persistence by using session cookies Enable session stickiness (session affinity) on the SAP Web Dispatchers by setting the wdisp/HTTP/esid_support parameter to True
B. Maintain persistence by using session cookies Enable session stickiness (session affinity) on the ALB
C. Turn on host-based routing on the ALB to route traffic between the SAP Web Dispatchers D. Turn on URL-based routing on the ALB to route traffic to the application based on URL
A company plans to migrate its SAP NetWeaver deployment to AWS. The deployment runs on a Microsoft SQL Server database. The company plans to change the source database from SQL Server to SAP HANA as part of this process.
Which migration tools or methods should an SAP solutions architect use to meet these requirements'' (Select TWO. )
A. SAP HANA classical migration
B. SAP HANA system replication
C. SAP Software Update Manager (SUM) Database Migration Option (DMO) with System Move
D. SAP HANA backup and restore
E. SAP homogeneous system copy
A company is planning to migrate its on-premises SAP ERP Central Component (SAP ECC) system on SAP HANA to AWS Each month the system experiences two peaks in usage. The first peak is on the 21st day of the month when the company runs payroll. The second peak is on the last day of the month when the company processes and exports credit data Both peak workloads are of high importance and cannot be rescheduled
The current SAP ECC system has six application servers an of a similar size. During normal operation outside of peak usage four application servers would suffice
Which purchasing option will meet the company's requirements MOST cost-effectively on AWS?
A. Four Reserved Instances and two Spot Instances
B. Six On-Demand Instances
C. Six Reserved Instances
D. Four Reserved Instances and two On-Demand Instances
A company is migrating its SAP workloads to AWS The company's IT team installs a highly available SAP S.4HANA system that uses the SAP HANA system replication cluster package on SUSE Linux Enterprise Server The IT team deploys the system by using cluster nodes m different Availability Zones within the same AWS Region.
After the initial launch of the SAP application the application is accessible However after failover the IT team cannot access the application even though the system is up and running on the secondary node After investigation an SAP solutions architect discovers that the virtual IP address has not been used correctly
Which combination of steps should the SAP solutions architect take to resolve this problem? (Select TWO.)
A. Use an overlay IP address as a secondary IP address with the primary node of the cluster
B. Choose an overlay IP address within the VPC CiDR block that corresponds with the secondary node of the cluster
C. Use an overlay IP address as a virtual IP address
D. Choose an overlay IP address within the VPC CIDR block that corresponds with the primary node of the cluster
E. Choose an overlay IP address outside the VPC CiDR block that hosts the application and the database
A company has deployed a highly available SAP NetWeaver system on SAP HANA into a VPC The system is distributed across multiple Availability Zones within a single AWS Region SAP NetWeaver is running on SUSE Linux Enterprise Server for SAP SUSE Linux Enterprise High Availability Extension is configured to protect SAP ASCS and ERS instances and uses the overlay IP address concept The SAP shared dies sapmnt and . usrsap. trans are hosted on an Amazon Elastic File System (Amazon EFS) tile system
The company needs a solution that uses already-existing private connectivity to the VPC. The SAP NetWeaver system must be accessible through the SAP GUI client tool.
Which solutions will meet these requirements? (Select TWO)
A. Deploy an Application Load Balancer Configure the overlay IP address as a target
B. Deploy a Network Load Balancer Configure the overlay IP address as a target
C. Use an Amazon Route 53 private zone Create an A record that has the overlay IP address as a target
D. Use AWS Transit Gateway Configure the overlay IP address as a static route in the transit gateway route table Specify the VPC as a target
E. Use a NAT gateway Configure the overlay IP address as a target
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your PAS-C01 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.