Amazon AWS Certified: SAP on AWS - Specialty - PAS-C01 시험문제 [2026]

문제1
A global retail company has SAP Fiori embedded with SAP S/4HANA Finance application servers that run in a private subnet in a dedicated SAP VPC on AWS. The database tier runs on SAP HANA, which resides in the same private subnet. The company has deployed a Network Load Balancer (NLB) in a public subnet. The company has configured the NLB to send user traffic from outside the AWS network to the SAP application servers directly.
An SAP solutions architect needs to expose the user interface (UI) layer's web services for remote access through a public internet web application. The application will handle cross- domain requests such as URL redirecting, filtering, and rewriting. The whole architecture will be distributed across multiple Availability Zones with hot standby for SAP HANA database components and SAP application components. The existing NLB will work as is. During failover, the NLB will redirect user traffic to the secondary Availability Zone after SAP is installed and running.
How can the SAP solutions architect securely implement a connection between the UI layer's web services and the SAP application?

A. Install a third-party tool that can consume web services and the objects that contain business logic.

B. Install an SAP Web Dispatcher with no public IP address in the same private subnet as the SAP application.
Configure the SAP Web Dispatcher to accept only HTTPS requests from the NLB.
Allow the SAP Web Dispatcher IP address in the security group rule of the backend SAP application.

C. Install an SAP Web Dispatcher in the public subnet.Configure the SAP Web Dispatcher to accept only HTTPS requests from the NLB.Install SAP.Allow the SAP Web Dispatcher IP address in the security group rule of the backend SAP application.

D. Use the NLB and Amazon Route 53 to send the encrypted traffic from the internet directly to the SAP Fiori application that is installed in the private subnet.

정답: C

설명: (KoreaDumps 회원만 볼 수 있음)

문제2
A company is planning to migrate its SAP workloads to AWS. The company will use two VPCs.
One VPC will be for production systems, and one VPC will be for non-production systems. The company will host the non-production systems and the primary node of all the production systems in the same Availability Zone.
What is the MOST cost-effective way to establish a connection between the production systems and the non-production systems?

A. Set up an AWS Direct Connect connection between the two VPCs. Add the appropriate routes in the subnet route tables.

B. Establish a VPC peering connection between the two VPCs. Add the appropriate routes in the subnet route tables.

C. Create an internet gateway in each VPUse an AWS Site-to-Site VPN connection between the two VPCs. Add the appropriate routes in the subnet route tables.

D. Create an AWS Transit Gateway. Attach the VPCs to the transit gateway. Add the appropriate routes in the subnet route tables.

정답: B

설명: (KoreaDumps 회원만 볼 수 있음)

문제3
A global retail company wants to move its SAP application to AWS. Currently, the company's SAProuter is in the DMZ in the company's own data center. The company wants to keep a similar architecture in the AWS Cloud.
What is the MOST secure solution that meets these requirements?

A. Launch the instance that the SAProuter software is installed on into a public subnet of the VPC.
Assign the instance an Elastic IP address.
Use the Secure Network Communications (SNC) type of internet connection.
Create a specific security group for the SAProuter instance.
Include rules to allow the required inbound and outbound access to the SAP support network.

B. Launch the instance that the SAProuter software is installed on into a private subnet of the VPC.
Assign the instance an Elastic IP address.
Do not allow any inbound or outbound access to the SAP support network over the internet.

C. Launch the instance that the SAProuter software is installed on into a public subnet of the VPC.
Assign the instance an Elastic IP address.
Use the Secure Network Communications (SNC) type of internet connection.
Create a specific security group for the SAProuter instance.
Include rules to block all inbound and outbound access to the SAP support network.

D. Launch the instance that the SAProuter software is installed on into a public subnet of the VPC.
Assign the instance an Elastic IP address.
Use an unencrypted internet connection.
Create a specific security group for the SAProuter instance.
Include rules to allow all inbound and outbound access to the SAP support network.

정답: A

설명: (KoreaDumps 회원만 볼 수 있음)

문제4
A company is implementing SAP HANA on AWS. According to the company's security policy, SAP backups must be encrypted. Only authorized team members can have the ability to decrypt the SAP backups.
What is the MOST operationally efficient solution that meets these requirements?

A. Configure AWS Backint Agent for SAP HANA to use AWS Key Management Service (AWS KMS) for SAP backups. Grant object ACL decryption permission to authorized team members only.

B. Configure AWS Backint Agent for SAP HANA to use AWS Key Management Service (AWS KMS) for SAP backups. Create a key policy to grant decryption permission to authorized team members only.

C. Configure AWS Storage Gateway to transfer SAP backups from a file system to an Amazon S3 bucket. Use an S3 bucket policy to grant decryption permission to authorized team members only.

D. Configure AWS Backint Agent for SAP HANA to create SAP backups in an Amazon S3 bucket.
After a backup is created, encrypt the backup by using client-side encryption. Share the encryption key with authorized team members only.

정답: B

설명: (KoreaDumps 회원만 볼 수 있음)

문제5
An SAP engineer is configuring AWS Backint Agent for SAP HANA (AWS Backint agent) for an SAP HANA database that is running on an Amazon EC2 instance. After the configuration, the backups fail. During investigation, the SAP engineer notices that the AWS Backint agent logs contain numerous AccessDenied messages.
Which actions should the SAP engineer take to resolve this issue? (Choose two.)

A. Update the EC2 role permissions to allow S3 bucket access.

B. Install AWS Systems Manager Agent (SSM Agent) correctly by using the sudo command.

C. Verify that the configuration file has the correct formatting of the S3BucketOwnerAccountID.

D. Add the execute permission to the AWS Backint agent binary.

E. Install the correct version of Python for AWS Backint agent.

정답: A,C

설명: (KoreaDumps 회원만 볼 수 있음)

문제6
A company runs core business processes on SAP. The company plans to migrate its SAP workloads to AWS.
Which combination of prerequisite steps must the company take to receive integrated support for SAP on AWS? (Choose three.)

A. Enable Amazon EC2 termination protection.

B. Use Reserved Instances for all Amazon EC2 instances that run SAP.

C. Configure and run the AWS Data Provider for SAP agent.

D. Enable Amazon CloudWatch detailed monitoring.

E. Purchase an AWS Business Support plan or an AWS Enterprise Support plan.

F. Purchase an AWS Developer Support plan or an AWS Enterprise Support plan.

정답: C,D,E

문제7
A company is running its on-premises SAP ERP Central Component (SAP ECC) system on an Oracle database on Oracle Enterprise Linux. The database is 1 TB in size and uses 27,000 IOPS for its peak performance Multiple SSD volumes are striped to store Oracle data files in separate sapdata directories to gain the required IOPS.
The company is planning to move this workload to AWS. The company chooses high I/O bandwidth instances with a Nitro hypervisor to host the target database instance. Downtime is not a constraint for the migration. The company needs an Amazon Elastic Block Store (Amazon EBS) storage layout that optimizes cost for the migration.
How should the company reorganize the Oracle data files to meet these requirements?

A. Reorganize the Oracle data files into ten 100 GB General Purpose SSD (gp3) EBS volumes.

B. Reorganize the Oracle data files into a striped volume of three 3 TB General Purpose SSD (gp2) EBS volumes.

C. Reorganize the Oracle data files into one 1 TB General Purpose SSD (gp3) EBS volume with
27,000 provisioned IOPS.

D. Reorganize the Oracle data files into one 9 TB General Purpose SSD (gp2) EBS volume.

정답: B

설명: (KoreaDumps 회원만 볼 수 있음)

문제8
A company is planning to migrate its on-premises production SAP HANA system to AWS. The company uses a SUSE Linux Enterprise High Availability Extension two-node cluster to protect the system against failure. The company wants to use the same solution to provide high availability for the landscape on AWS.
Which combination of prerequisites must the company fulfill to meet this requirement? (Choose two.)

A. On the cluster, configure an Elastic IP address that is outside the VPC CIDR range to access the active instance.

B. Use instance tags to identify the instances in the cluster.

C. On the cluster, configure an Elastic IP address that is within the VPC CIDR range to access the active instance.

D. On the cluster, configure an overlay IP address that is outside the VPC CIDR range to access the active instance.

E. On the cluster, configure an overlay IP address that is within the VPC CIDR range to access the active instance.

정답: B,D

설명: (KoreaDumps 회원만 볼 수 있음)

문제9
A company has an SAP Business One system that runs on SUSE Linux Enterprise Server 12 SP3. The company wants to migrate the system to AWS. An SAP solutions architect selects a homogeneous migration strategy that uses AWS Application Migration Service (CloudEndure Migration).
After the server migration process is finished, the SAP solutions architect launches an Amazon EC2 test instance from the R5 instance family. After a few minutes, the EC2 console reports that the test instance has failed an instance status check. Network connections to the instance are refused.
How can the SAP solutions architect solve this problem?

A. Install the missing drivers on the source system. Wait for the completion of migration synchronization. Launch the test instance again.

B. Request an instance limit increase for the AWS Region where the test instance is being launched.

C. Reboot the instance to initiate instance migration to another host.

D. Create a ticket for AWS Support that documents the test server instance ID. Wait for AWS to update the host of the R5 instance.

정답: A

최신Amazon AWS Certified: SAP on AWS - Specialty - PAS-C01무료샘플문제

KoreaDumps의 제품으로 GO GO GO !

자격증의 중요성:

KoreaDumps 제품의 가치:

무료샘플 받아보기:

완벽한 서비스 제공: