AWS Certified SAP on AWS - Specialty PAS-C01 Exam Questions and Answers - Page 10 of 10

The latest AWS Certified SAP on AWS – Specialty PAS-C01 certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the AWS Certified SAP on AWS – Specialty PAS-C01 exam and earn AWS Certified SAP on AWS – Specialty PAS-C01 certification.

Question 91

Exam Question

A company’s basis administrator is planning to deploy SAP on AWS m Linux. The basis administrator must set up the proper storage to store SAP HANAdata and log volumes.

Which storage options should the basis administrator choose to meet these requirements? (Select TWO.)

A. Amazon Elastic Block Store (Amazon EBS) General Purpose SSD (gp2 gp3)

B. Amazon Elastic File System (Amazon EFS>

C. Amazon Elastic Block Store (Amazon EBS) Throughput Optimized HDD (st1)

D. Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS SSD (io1, k>2)

E. Amazon S3

Correct Answer

B. Amazon Elastic File System (Amazon EFS>

E. Amazon S3

Question 92

Exam Question

An SAP specialist is budding an SAP environment The SAP environment contains Amazon EC2 instances that fun in a private subnet in a VPC. The VPC includes a NAT gateway.

The SAP specialist is selling up IBM Db2 high availability disaster recovery for the SAP duster. After configuration of overlay IP address routing traffic is not routing to the database EC2 instances.

What should the SAP specialist do to resolve this issue?

A. Open a security group tor SAP ports »o allow traffic on port 443

B. Create route table entries to allow traffic from the database EC2 instances to the NAT gateway

C. Turn off the source destination check for the database EC2 instances

D. Create an IAM role that has permission to access network traffic Associate the role with the database EC2 instances

Correct Answer

B. Create route table entries to allow traffic from the database EC2 instances to the NAT gateway

Question 93

Exam Question

An SAP engineer has deployed an SAP S 4HANA system on an Amazon EC2 instance mat runs Linux. The SAP license key has been installed After a white the newly installed SAP instance presents an error that indicates that the SAP license key is not valid because the SAP system’s hardware key changed. There have been no changes to the EC2 instance or its configuration.

Which solution will permanently resolve this issue?

A. Set the SUC_HW_VERSlON Linux environment variable

B. Perform SAP kernel patching

C. Apply a new SAP license that uses a new hardware key Install the new key

D. Reboot the EC2 instance

Correct Answer

C. Apply a new SAP license that uses a new hardware key Install the new key

Question 94

Exam Question

A company has deployed its SAP applications into multiple Availability Zones in the same AWS Region To accommodate storage of media files database table export and import and files dropped by third-party tools the company has mounted Amazon Elastic File System (Amazon EFS) file systems between the SAP instances The company needs to retrieve the files quickly for installations updates and system refreshes Over time the EFS file systems have grown exponentially to multiple terabytes An SAP solutions architect must optimize storage cost for the tiles that are stored in Amazon EFS.

Which solution will meet this requirement with the LEAST administrative overhead?

A. Scan the files manually to identify unnecessary files Delete the unnecessary files

B. Move the files to Amazon S3 Glacier Deep Archive

C. Apply a lifecycle policy on the files in Amazon EFS to move the files to EFS Standard-Infrequent Access (Standard-IA)

D. Move the files to Amazon S3 Glacier Apply an S3 Glacier vault lock policy to the files

Correct Answer

C. Apply a lifecycle policy on the files in Amazon EFS to move the files to EFS Standard-Infrequent Access (Standard-IA)

Explanation

Apply a lifecycle policy on the files in Amazon EFS to move the files to EFS Standard-Infrequent Access (Standard-IA) is the solution that will meet this requirement with the least administrative overhead. This solution allows you to automatically move files that have not been accessed for a certain period of time to a lower-cost storage class, reducing storage costs without the need for manual intervention.

Question 95

Exam Question

A company is hosting an SAP HANA database on AWS. The company is automating operational tasks including backup and system refreshes. The company wants to use SAP HANA Studio to perform data backup of an SAP HANA tenant database to a backint interface. The SAP HANA database is running in multi-tenant database container (MDO mode. The company receives the following error message during an attempt to perform the backup.

What should an SAP solutions architect do to resolve this issue?

A. Add the SAP HANA system to SAP HANA Studio Select multiple container mode and then try to initiate the backup again

B. Verify the installation steps Create symbolic links (symlinks)

C. Set the execute permission for AWS Backint agent binary aws-backint-agent and for the launcher script aws-backint-agent-launcher sh in the installation directory

D. Ensure that the cataiog_backup_using_backint SAP HANA parameter is set to true Ensure that the data_backup_parameter_file and log_backup_parameter_file parameters have the correct path location in the global ini file

Correct Answer

Question 96

Exam Question

A company wants to migrate its on-premises servers to AWS. These servers include SAP ERP Central Component (SAP ECC) on Oracle Database. The company is running SAP ECC application servers and Oracle Database servers on AIX. The company must migrate the SAP workloads to AWS with minimal changes.

Which solution will meet these requirements?

A. Perform a heterogeneous migration for SAP on AWS Specify the SAP ECC application servers to run on SUSE Linux Enterprise Server Specify Oracle Database to run on Oracle Enterprise Linux on a Dedicated Host

B. Perform a homogeneous migration for SAP on AWS Specify the SAP ECC application servers and Oracle Database to run on AIX

C. Perform a heterogeneous migration for SAP on AWS Specify the SAP ECC application servers and Oracle Database to run on Oracle Enterprise Linux.

D. Perform a heterogeneous migration for SAP on AWS Specify the SAP ECC application servers and Oracle Database to run on Windows.

Correct Answer

Question 97

Exam Question

A company is implementing SAP HANA on AWS According 10 the company’s security policy SAP backups must be encrypted Only authorized team members can have the ability to decrypt the SAP backups.

What is the MOST operationally efficient solution that meets these requirements?

A. Configure AWS Storage Gateway to transfer SAP backups from a file system to an Amazon S3 bucket Use an S3 bucket policy to grant decryption permission to authorized team members only

B. Configure AWS Backint Agent for SAP HANA to use AWS Key Management Service (AWS KMS) for SAP backups Grant object ACL decryption permission to authorized team members only

C. Configure AWS Backint Agent for SAP HANA to create SAP backups in an Amazon S3 bucket After a backup is created encrypt the backup by using client-side encryption Share the encryption key with authorized team members only

D. Configure AWS Backint Agent for SAP HANA to use AWS Key Management Service (AWS KMS) for SAP backups Create a key policy to grant decryption permission to authorized team members only

Correct Answer

D. Configure AWS Backint Agent for SAP HANA to use AWS Key Management Service (AWS KMS) for SAP backups Create a key policy to grant decryption permission to authorized team members only

Explanation

This is the most operationally efficient solution that meets the company’s security policy requirements. AWS KMS is a service that enables you to create and manage encryption keys that are used to encrypt and decrypt data. By configuring AWS Backup Agent for SAP HANA to use AWS KMS for SAP backups, the company can ensure that the backups are encrypted at rest and that only authorized team members have the ability to decrypt them. The key policy allows the company to define which team members are authorized to access the key, so that it can be used to decrypt the backup. This approach is operationally efficient because it does not require the company to manually encrypt and decrypt backups, and it enables the company to manage access to the encryption key through IAM policies, without the need for sharing encryption keys.

Question 98

Exam Question

A company is migrating its SAP workloads to AWS The company’s IT team installs a highly available SAP S.4HANA system that uses the SAP HANA system replication cluster package on SUSE Linux Enterprise Server. The IT team deploys the system by using cluster nodes m different Availability Zones within the same AWS Region.

After the initial launch of the SAP application the application is accessible However after failover the IT team cannot access the application even though the system is up and running on the secondary node After investigation an SAP solutions architect discovers that the virtual IP address has not been used correctly.

Which combination of steps should the SAP solutions architect take to resolve this problem? (Select TWO.)

A. Use an overlay IP address as a secondary IP address with the primary node of the cluster

B. Choose an overlay IP address within the VPC CiDR block that corresponds with the secondary node of the cluster

C. Use an overlay IP address as a virtual IP address

D. Choose an overlay IP address within the VPC CIDR block that corresponds with the primary node of the cluster

E. Choose an overlay IP address outside the VPC CiDR block that hosts the application and the database

Correct Answer

A. Use an overlay IP address as a secondary IP address with the primary node of the cluster

D. Choose an overlay IP address within the VPC CIDR block that corresponds with the primary node of the cluster

Question 99

Exam Question

A company wants to improve the RPO and RTO for its SAP disaster recovery (DR) solution by running the DR solution on AWS The company is running SAP ERP Central Component (SAP ECO on SAP HANA The company has set an RPO of 15 minutes and an RTO of 4 hours.

The production SAP HANA database is running on a physical appliance that has x86 architecture. The appliance has 1 TB of memory and the SAP HANA global allocation limit is set to 768 GB. The SAP application servers are running as VMs on VMware and they store data on an NFS file system The company does not want to change any existing SAP HANA parameters that are related to data and log backup for its on-premises systems.

What should an SAP solutions architect do to meet the DR objectives MOST cost-effectively?

A. For the SAP HANA database change the log backup frequency to 5 minutes Move the data and log backups to Amazon S3 by using the AWS CLI or AWS DataSync

Launch the SAP HANA database For the SAP application servers, export the VMs as AMis by using the VM import/Export feature from AWS For NFS file shares/sapmnt and usr-sap/trans/ establish real-time synchronization from DataSync to Amazon Elastic File System (Amazon EFS)

B. For the SAP HANA database change the log backup frequency to 5 minutes Move the data and log backups to Amazon S3 by using AWS Storage Gateway File Gateway For the SAP application servers export the VMs as AMIs by using the VM Import’Export feature from AWS For NFS file shares /sapmnt and ‘usr saplrans establish realtime synchronization from AWS DataSync to Amazon Elastic Foe System (Amazon EFS)

C. For the SAP HANA database SAP application servers and NFS Me shares use CloudEndure Disaster Recovery to replicate the data continuously from on premises to AWS Use CloudEndure Disaster Recovery to launch target instances in the event of a disaster

D. For the SAP HANA database use a smaller SAP certified Amazon EC2 instance Use SAP HANA system replication with ASYNC replication mode to replicate the data continuously from on premises to AWS For the SAP application servers use CloudEndure Disaster Recovery for continuous data replication For NFS file shares sapmnt and .’uv-sap’trans. establish real-time synchronization from AWS DataSync to Amazon Elastic File System (Amazon EFS)

Correct Answer

Question 100

Exam Question

A company needs to implement high availability for its SAP S 4HANA system on AWS The company will use a SUSE Linux Enterprise Server clustering solution in private subnets across two Availability Zones An SAP solutions architect must ensure that the solution can route traffic to the active SAP instance m this clustered configuration.

What should the SAP solutions architect do to meet these requirements?

A. Implement the SAP cluster solution by using a secondary private IP address Reassign the secondary private IP address from one network interface to another network interface in the event of any failure that affects the primary instance.

B. Implement the SAP cluster solution by using an Elastic IP address Mask the failure of an instance or software by rapidly remapping the address to another instance in the account

C. Implement the SAP duster solution by using a public IP address Use this public IP address for communication between the instances and the internet

D. Implement the SAP duster solution by using an overlay IP address that is outside the CIDR block of the VPC Use overlay IP address routing to dynamically update the route table to point to the active node and provide external access by using a Network Load Balancer or AWS Transit Gateway.

Correct Answer

Question 101

Exam Question

A global retail company has SAP Fiori embedded with SAP S/4HANA Finance application servers that run in a private subnet in a dedicated SAP VPC on AWS. The database tier runs on SAP HANA, which resides in the same private subnet. The company has deployed a Network Load Balancer (NLB) in a public subnet.
The company has configured the NLB to send user traffic from outside the AWS network to the SAP application servers directly. An SAP solutions architect needs to expose the user interface (UI) layer’s web services for remote access through a public internet web application.

The application will handle cross-domain requests such as URL redirecting, filtering, and rewriting. The whole architecture will be distributed across multiple Availability Zones with hot standby for SAP HANA database components and SAP application components. The existing NLB will work as is. During failover, the NLB will redirect user traffic to the secondary Availability Zone after SAP is installed and running.

How can the SAP solutions architect securely implement a connection between the UI layer’s web services and the SAP application?

A. Install an SAP Web Dispatcher in the public subnet. Configure the SAP Web Dispatcher to accept only HTTPS requests from the NLB. Install SAP. Allow the SAP Web Dispatcher IP address in the security group rule of the backend SAP application.

B. Use the NLB and Amazon Route 53 to send the encrypted traffic from the internet directly to the SAP Fiori application that is installed in the private subnet.

C. Install an SAP Web Dispatcher with no public IP address in the same private subnet as the SAP application. Configure the SAP Web Dispatcher to accept only HTTPS requests from the NLB. Allow the SAP Web Dispatcher IP address in the security group rule of the backend SAP application.

D. Install a third-party tool that can consume web services and the objects that contain business logic.

Correct Answer

Question 102

Exam Question

An SAP technical architect is working on a high availability setup of an SAP application that is running on an SAP HANA database in the AWS Cloud. Primary and secondary SAP HANA databases are running in separate private subnets in different Availability Zones within an AWS Region. The clustering solution is using SUSE Linux Enterprise High Availability Extension.

The VPC CIDR range where these SAP systems are hosted is 10.0.0.0/16. The overlay IP address that is assigned for the ASCS/ERS cluster is 10.9.9.9. The overlay IP address that is assigned for the SAP HANA cluster is 10.0.9.9. SAP HANA system replication is configured, but the cluster solution for the SAP HANA database is not working.

What should the SAP technical architect do to resolve this issue?

A. Determine whether the SAP HANA instances have an assigned public IP address. If they do not have an assigned public IP address, assign a public IP address and try again.

B. Use a different overlay IP address that is outside the VPC CIDR range for the SAP HANA cluster.

C. Change the VPC CIDR range to 10.0.0.0/8 to accommodate the overlay IP address assignment.

D. Configure SAP HANA system replication after the cluster setup is complete.

Correct Answer

B. Use a different overlay IP address that is outside the VPC CIDR range for the SAP HANA cluster.