PAS-C01 Online Practice Questions and Answers

A company is planning to move all its SAP applications to Amazon EC2 instances in a VPC Recently the company signed a multiyear contract with a payroll software-as-a-service (SaaS) provider integration with the payroll SaaS solution is available only through public web APIs.

Corporate security guidelines state that all outbound traffic must be validated against an allow list. The payroll SaaS provider provides only fully qualified domain name (FQDN) addresses and no IP addresses or IP address ranges Currently, an on-premises firewall appliance filters FQDNs. The company needs to connect an SAP Process Orchestration (SAP PO) system to the payroll SaaS provider.

What must the company do on AWS to meet these requirements?

A. Add an outbound rule to the security group of the SAP PO system to allow the FODN of the payroll SaaS provider and deny all other outbound traffic

B. Add an outbound rule to the network ACL of the subnet that contains the SAP PO system to allow the FQDN of the payroll SaaS provider and deny all other outbound traffic

C. Add an AWS WAF web ACL to the VPC Add an outbound rule to allow the SAP PO system to connect to the FQDN of the payroll SaaS provider

D. Add an AWS Network Firewall firewall to the VPC Add an outbound rule to allow the SAP PO system to connect to the FQDN of the payroll SaaS provider

A company is running its SAP applications on Oracle Database Oracle Database is hosted on physical servers that are running SUSE Linux Enterprise Server Because of compliance requirements the company cannot install any additional software on its on premises database servers. The company needs to migrate the SAP landscape to AWS and must continue to use Oracle Database.

Which migration solution should the company use to meet these requirements?

A. AWS Server Migration Service (AWS SMS)

B. AWS Application Migration Service (CloudEndure Migration)

C. SAP Software Update Manager (SUM) Database Migration Option (DMO) with System Move

D. Oracle Database replication with Oracle Data Guard

A data analysis company has two SAP landscapes that consist of sandbox development QA, pre-production and production servers. One landscape is on Windows and the other landscape is on Red Hat Enterprise Linux. The servers reside in a room m a building that other tenants share.

An SAP solutions architect proposes to migrate the SAP applications to AWS The SAP solutions architect wants to move the production backups to AWS and wants to make the backups highly available to restore >n case of unavailability of an on-premises server.

Which solution will meet these requirements MOST cost-effectively?

A. Take a backup of the production servers Implement an AWS Storage Gateway Volume Gateway Create file shares by using the Storage Gateway Volume Gateway Copy the backup files to the file shares through NFS and 9MB.

B. Take a backup of the production servers Send those backups to tape drives implement an AWS Storage Gateway Tape Gateway Send the backups to Amazon S3 Standard- Infrequent Access (S3 Standard-IA) through the S3 console Move the backups immediately to S3 Glacier Deep Archive

C. Implement a third-party tool to take images of the SAP application servers and database server Take regular snapshots at 1-hour intervals send the snapshots to Amazon S3 Glacier directly through the S3 Glacier console Store the same images in different S3 buckets in different AWS Regions

D. Take a backup of the production servers Implement an Amazon S3 File Gateway Create file shares by using the S3 File Gateway Copy the backup files lo the file shares through NFS and SMB Map backup files directly to Amazon S3 Configure an S3 Lifecycle policy to send the backup files to S3 Glacier based on the company's data retention policy

A company is running its SAP workload on AWS The company's security team has implemented the following requirements

1.

All Amazon EC2 instances for SAP must be SAP certified instance types

2.

Encryption must be enabled for all Amazon S3 buckets and Amazon Elastic Block Store (Amazon EBS) volumes

3.

AWS CloudTrail must be activated

4.

SAP system parameters must be compliant with business rules

5.

Detailed monitoring must be enabled for all instances

The company wants to develop an automated process to review the systems for compliance with the security team's requirements. The process also must provide notification about any deviation from these standards

Which solution will meet these requirements''

A. Use AWS AppConfig to model configuration data in an AWS Systems Manager Automation runbook Schedule this Systems Manager Automation runbook to monitor for compliance with all the requirements integrate AWS AppConfig with Amazon CloudWatch for notification purposes

B. Use AWS Config managed rules to monitor for compliance with all the requirements Use Amazon EventBridge (Amazon CloudWatch Events) and Amazon Simple Notification Service (Amazon SNS) for email notification when a resource is flagged as noncompliant

C. Use AWS Trusted Advisor to monitor for compliance with all the requirements Use Trusted Advisor preferences for email notification when a resource is flagged as noncompliant

D. Use AWS Config managed rules to monitor for compliance with the requirements except for the SAP system parameters Create AWS Config custom rules to validate the SAP system parameters Use Amazon EventBridge (Amazon CloudWatch Events) and Amazon Simple Notification Sen/ice (Amazon SNS) for email notification when a resource is flagged as noncompliant

A company wants 10 implement SAP HANAonAWS with the Multi-AZ deployment option by using AWS Launch Wizard for SAP The solution will use SUSE Linux Enterprise High Availability Extension for the high availability deployment An SAP solutions architect must ensure that all the prerequisites are met The SAP solutions architect also must ensure that the user inputs to start the guided deployment of Launch Wizard are valid.

Which combination of steps should the SAP solutions architect take to meet these requirements? (Select TWO)

A. Before starting the Launch Wizard deployment create the underlying Amazon Elastic Block Store (Amazon EBS) volume types to use for SAP HANA data and log volumes based on the performance requirements

B. Use a value for the PaceMakerTag parameter that is not used by any other Amazon EC2 instances in the AWS Region where the system is being deployed

C. Ensure that the virtual hostname for the SAP HANA database that is used for the SUSE Linux Enterprise High Availability Extension configuration is not used in any other deployed accounts

D. Ensure that the Virtual Address parameter is outside the VPC CIDR and is not being used in the route table that is associated with the subnets where primary and secondary SAP HANA instances will be deployed

E. Before starting the Launch Wizard deployment set up the SUSE Linux Enterprise High Availability Extension network configuration and security group

A company plans to migrate its SAP NetWeaver deployment to AWS. The deployment runs on a Microsoft SQL Server database. The company plans to change the source database from SQL Server to SAP HANA as part of this process.

Which migration tools or methods should an SAP solutions architect use to meet these requirements'' (Select TWO. )

A. SAP HANA classical migration

B. SAP HANA system replication

C. SAP Software Update Manager (SUM) Database Migration Option (DMO) with System Move

D. SAP HANA backup and restore

E. SAP homogeneous system copy

A global retail company is running its SAP landscape on AWS Recently the company made changes to its SAP Web Dispatcher architecture The company added an additional SAP Web Dispatcher for high availability with an Application Load Balancer (ALB) to balance the load between the two SAP Web Dispatchers

When users try to access SAP through the ALB the system is reachable However the SAP backend system is showing an error message An investigation reveals that the issue is related to SAP session handling and distribution of requests . The company confirmed that the system was working as expected with one SAP Web Dispatcher. The company replicated the configuration of that SAP Web Dispatcher to the new SAP Web Dispatcher

How can the company resolve the error?

A. Maintain persistence by using session cookies Enable session stickiness (session affinity) on the SAP Web Dispatchers by setting the wdisp/HTTP/esid_support parameter to True

B. Maintain persistence by using session cookies Enable session stickiness (session affinity) on the ALB

C. Turn on host-based routing on the ALB to route traffic between the SAP Web Dispatchers D. Turn on URL-based routing on the ALB to route traffic to the application based on URL

A company is planning to migrate its on-premises SAP application to AWS. The application runs on VMware vSphere The SAP ERP Central Component (SAP ECC) server runs on an IBM Db2 database that is 2 TB m size The company wants to migrate the database to SAP HANA

Which migration strategy will meet these requirements'?

A. Use AWS Application Migration Service (CloudEndure Migration)

B. Use SAP Software Update Manager (SUM) Database Migration Option (DMO) with System Move

C. Use AWS Server Migration Service (AWS SMS)

D. Use AWS Database Migration Service (AWS DMS)

A company is moving to the AWS Cloud gradually. The company has multiple SAP landscapes on VMware The company already has sandbox development and QA systems on AWS The company's production system is still running on

premises. The company has 2 months to cut over the entre landscape to the AWS Cloud The company has adopted a hybrid architecture for the next 2 months and needs to synchronize its shared file systems between the landscapes These shared file systems include trans directory mounts, /software directory mounts, and third-party integration mounts in the on-premises landscape the company has NFS mounts between the servers On the AWS infrastructure side the company is using Amazon Elastic File System (Amazon EFS) to share the common files

An SAP solutions architect needs to design a solution to schedule transfer of these shared files bidirectional^ four times each day. The data transfer must be encrypted Which solution will meet these requirements?

A. Write an rsync script Schedule the script through cron for four times each day in the on- premises VMware servers to transfer the data from on premises to AWS

B. Install an AWS DataSync agent on the on-premises VMware platform Use the DataSync endpoint to synchronize between the on-premises NFS server and Amazon EFS on AWS

C. Order an AWS Snowcone device Use the Snowcone device to transfer data between the on-premises servers and AWS

D. Set up a separate AWS Direct Connect connection for synchronization between the on- premises servers and AWS

A company has deployed SAP workloads on AWS The AWS Data Provider for SAP is installed on the Amazon EC2 instance where the SAP application is running An SAP solutions architect has attached an IAM role to the EC2 instance with the following policy.

The AWS Data Provider for SAP is not returning any metrics to the SAP application. Which change should the SAP solutions architect make to the 1AM permissions to resolve this issued.

A. Add the cloudwatch ListMetrics action to the policy statement with Sid AWSDataProvider1.

B. Add the cloudwatch GetMetricStatrstics action to the policy statement with Sid AWSDataProvider1

C. Add the cloudwatch GetMetricStream action (o the policy statement with Sid AWSDataProvider

D. Add the cloudwatch DescribeAlarmsForMetric action to the policy statement with Sid AWSDataProvider