50 AWS Certified SAP on AWS - Specialty Practice Questions: Question Bank 2025

An SAP NetWeaver ASCS and ERS pair is deployed on Amazon EC2. The operations team needs a highly available virtual IP for the ASCS instance that can move automatically during failover. Which AWS-recommended approach should be used?

A customer is designing an SAP HANA system on AWS and needs to ensure fast recovery from an Availability Zone failure while keeping the primary and secondary systems isolated. Which design best meets these requirements?

An SAP application team needs to store SAP installation media and transport files in a durable, centralized repository accessible from multiple EC2 instances across subnets. The solution should minimize administrative overhead. What should the team use?

A company is migrating SAP application servers to AWS. They want to restrict administrative access so that engineers can connect to EC2 instances without opening inbound SSH from the internet. What is the BEST approach?

An SAP HANA production system uses Amazon EBS volumes. The team wants point-in-time backup capability with minimal impact to the database and the ability to copy backups to another AWS Region for disaster recovery. Which approach best meets these requirements?

During an SAP migration, the network team must ensure private connectivity between the on-premises data center and the AWS VPC for SAP systems, with consistent throughput and low latency. Which connectivity option is MOST appropriate?

A company is implementing SAP on AWS with multiple AWS accounts (shared services, dev/test, prod). They want centralized DNS for SAP hostnames and the ability for VPCs in different accounts to resolve those names privately. Which solution should they choose?

After migrating SAP application servers to AWS, users intermittently experience slow response times. Metrics show the EC2 instances are not CPU constrained, but there are frequent bursts of EBS latency on the application server file system used for /usr/sap and transport directories. Which change is MOST likely to stabilize performance?

A company must migrate a 30 TB SAP HANA database to AWS with minimal downtime. The source system is on-premises, and the network link is limited. The target is SAP HANA on Amazon EC2. Which approach is MOST appropriate to meet minimal downtime requirements?

An enterprise runs SAP workloads across multiple VPCs and requires deep network visibility and threat detection for east-west traffic, including the ability to retain flow records centrally for analysis and incident response. Which architecture best meets these requirements on AWS?

An operations team needs to collect and centralize SAP HANA host OS logs (syslog/messages) and SAP application logs from multiple EC2 instances into a single searchable location with minimal administrative overhead. Which solution is the BEST fit?

A company is designing an AWS network for an SAP landscape. The security team requires that SAP application servers must not have direct inbound access from the internet. Administrators should still be able to connect for maintenance using a controlled access point. Which design best meets this requirement?

An SAP Basis team wants to rotate database credentials used by SAP applications and prevent storing passwords in plain text on EC2 instances. Which AWS service should they use to centrally store and rotate these secrets?

A company runs SAP on AWS with separate DEV, QA, and PROD accounts. They need to allow a central team to query configuration and operational health across accounts (e.g., EC2 instance status, CloudWatch metrics, and AWS Config compliance) while keeping application teams isolated. Which approach is MOST appropriate?

An SAP workload requires very low-latency, high-throughput shared file storage for SAP global directories and interfaces. Multiple SAP application servers in different Availability Zones must access the same file system, and the solution must be highly available. Which storage option is BEST?

A company is migrating a large SAP system to AWS. They need to transfer many terabytes of data from an on-premises data center to Amazon S3 quickly and reliably, but network bandwidth is limited and inconsistent. Which approach is MOST appropriate?

An SAP HANA system on EC2 uses multiple EBS volumes for data and log. During peak batch processing, the team observes intermittent I/O latency spikes affecting HANA performance. They want a change that provides more predictable I/O performance without changing the database. What should they do?

A company needs to implement automated OS patching for a fleet of SAP application servers on EC2. Patching must occur in maintenance windows, provide compliance reporting, and avoid custom scripts wherever possible. Which solution is BEST?

A company is designing a highly available SAP NetWeaver ASCS/ERS pair on AWS. The architecture requires a shared file system for SAPMNT and global directories, and automatic failover between nodes in different Availability Zones. Which combination is MOST appropriate?

A company uses SAP HANA System Replication (HSR) between two AWS Regions for disaster recovery. They want to minimize recovery time and ensure that application servers can reconnect to the correct primary database endpoint after a failover. Which design is MOST appropriate?

An SAP NetWeaver ABAP application server on Amazon EC2 must access an Amazon S3 bucket for document storage. The security team requires that no long-term AWS access keys be stored on the EC2 instance. Which approach meets this requirement?

An SAP application requires predictable low-latency shared file access for /sapmnt and transport directories across multiple application servers. Which AWS storage option is most appropriate?

A customer wants to migrate an SAP system to AWS with minimal downtime. They plan to use a backup/restore approach and need a place to stage the exported backup files before importing them on AWS. Which AWS service is the MOST common staging target for this purpose?

An SAP workload uses an active/passive high availability setup across two Availability Zones. The application uses a virtual hostname that must move to the currently active node during failover. Which AWS feature is typically used to support this requirement in a VPC?

A company is migrating an SAP HANA database to AWS. They want to use AWS Backup to manage backups. The team attempts to add the HANA data volumes to an AWS Backup plan but notices the backups are crash-consistent and not application-consistent. What should they implement to get application-consistent backups for SAP HANA on Amazon EC2?

During an SAP migration, a customer needs to move several terabytes of SAP file system data (interfaces, archives, and exports) to AWS. Network bandwidth is limited, and the transfer must be encrypted and resilient to intermittent connectivity. Which solution is MOST appropriate?

An SAP landscape uses multiple VPCs (dev, test, prod) connected to an on-premises network. The company wants centralized connectivity management, scalable routing, and simplified attachment of new VPCs without complex peering meshes. Which AWS service best meets these requirements?

A production SAP HANA system on EC2 shows intermittent spikes in I/O latency and occasional stalls during peak load. The data and log volumes are on Amazon EBS. The team observes that the EBS queue length is frequently high and that the instance is not CPU-bound. Which action is the BEST first step to improve storage performance predictability?

A company is designing a disaster recovery (DR) strategy for SAP ASCS/ERS and database components across Regions. The business requires automated recovery with low RTO and controlled network failover. Which design best meets these requirements on AWS?

A customer uses SAP kernel cryptographic libraries and requires end-to-end encryption for SAP application traffic within a VPC, including between SAP application servers and the database. They also must prove that encryption is enforced and auditable. Which approach is MOST appropriate?

An SAP Basis team must allow only corporate office IP ranges to administer SAP systems on Amazon EC2 using SAP GUI and SSH. The team wants a managed, scalable approach without deploying and maintaining additional bastion hosts. Which solution best meets these requirements?

A company is designing networking for a new SAP landscape on AWS. Security requires that SAP application servers and databases are not directly reachable from the internet, but the SAP Web Dispatcher must be publicly accessible. Which design best meets these requirements?

An operations team needs a reliable way to patch Amazon EC2 instances running SAP application servers on a monthly schedule. They want to orchestrate patching across multiple instances and capture compliance status centrally. Which AWS service is most appropriate?

A company uses SAP on AWS and wants to ensure that all EBS volumes attached to SAP database instances are encrypted. They also want to prevent future creation of unencrypted volumes. Which approach best meets these requirements?

A customer is migrating an SAP NetWeaver system from on premises to AWS. They want to minimize downtime and need to keep the database in sync until cutover. The database is supported by AWS Database Migration Service (AWS DMS). What is the MOST appropriate migration approach?

An SAP HANA database on Amazon EC2 experiences intermittent write latency spikes. The instance uses multiple EBS volumes in a RAID 0 configuration for the data volume. CloudWatch metrics show that one EBS volume frequently hits its IOPS limit while others do not. What is the BEST next step to mitigate the issue?

A company is implementing a highly available SAP ASCS/ERS pair on AWS. They need a shared filesystem for /sapmnt that supports POSIX permissions and can be mounted concurrently by multiple Amazon EC2 instances across multiple Availability Zones. Which solution is MOST appropriate?

During a migration rehearsal, an SAP application server in AWS cannot reach an on-premises SAP router used for connectivity to a partner. The VPC has a site-to-site VPN to on premises, and routing appears correct. The on-premises network team states they only allow traffic from a specific on-premises NAT IP. What is the MOST likely issue and fix?

A company runs SAP HANA on Amazon EC2 with a multi-terabyte dataset. Backups are written to Amazon S3. The security team requires that backups be protected from accidental deletion and from alteration by compromised credentials for a defined retention period. Which solution BEST meets this requirement?

A global enterprise needs to design SAP systems on AWS with the ability to fail over to a secondary Region for disaster recovery. The primary Region hosts SAP application servers and an SAP HANA database on Amazon EC2. The company requires consistent, repeatable infrastructure provisioning in both Regions and wants to reduce configuration drift over time. Which approach is BEST?

An SAP operations team wants a near-real-time view of underlying AWS infrastructure health that could impact SAP application performance (for example, host-level issues and EBS performance). They want an AWS-native approach without installing additional agents on SAP instances. Which solution best meets this requirement?

A company is designing an SAP application tier on Amazon EC2 in private subnets. Administrators must download SAP kernel patches from a vendor site on the internet, but the SAP instances must not accept any inbound connections from the internet. Which architecture should the company use?

An SAP Basis team wants to centrally manage OS patching schedules and execute patching on SAP application servers across multiple AWS accounts and Regions. They also want to ensure patch compliance reporting. Which AWS service is best suited for this requirement?

A company is migrating an SAP NetWeaver system to AWS. The database will run on Amazon EC2, and the company requires encryption in transit between SAP application servers and the database without changing SAP application code. Which approach best meets the requirement?

An SAP system running on Amazon EC2 uses Amazon EFS for /sapmnt. Users intermittently report slow access to /sapmnt during peak hours. CloudWatch shows high EFS client throughput and increased latency. The company wants to improve performance with minimal application change. What should they do?

A company must migrate a 40 TB SAP database from on premises to AWS. Network connectivity is limited and the migration window is strict. The company wants a service that can securely transfer large datasets to AWS and then load the data into Amazon S3 for further processing. Which option is most appropriate?

An organization wants to enforce that all SAP EC2 instances are launched with required tags (for example, SystemID, Environment, CostCenter) and must use encrypted EBS volumes. The organization wants preventive controls at account level. Which solution best meets these requirements?

A company is troubleshooting intermittent SAP dialog response time spikes on an SAP application server fleet in an Auto Scaling group. CPU is low, but Amazon CloudWatch shows periodic bursts of high network latency to an on-premises integration endpoint over a VPN. What is the MOST likely AWS-side improvement to stabilize performance?

A company runs an SAP ASCS/SCS cluster on Amazon EC2. They require automatic failover and must ensure that the SAP enqueue replication state is preserved across failures. They also need a shared filesystem for SAP global directories. Which architecture is the MOST appropriate on AWS?

A company uses AWS DMS to migrate an SAP database to Amazon EC2. After the full load completes, the ongoing replication (CDC) lags behind and fails intermittently. The source database team reports that archive logs are being deleted before DMS can read them. What action should the company take to resolve this issue with the LEAST operational risk?