PAS-C01 AWS Certified: SAP on AWS - Specialty Question and Answers

C is correct because installing, configuring and running the AWS Data Provider for SAP on each instance in the landscape is required to provide specific performance metrics that are needed by SAP support. D is correct because protecting all production instances by using Amazon EC2 automatic recovery is required to ensure high availability and fault tolerance for SAP systems. F is correct because deploying the SAP landscape on an AWS account that has either an AWS Business Support plan or an AWS Enterprise Support plan is required to ensure full support of SAP on AWS. The other options are not relevant or necessary for ensuring full support of SAP on AWS. References: https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/security.html https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/high-availability.html https://docs.aws.amazon.com/whitepapers/latest/sap-on-aws-technical-deployment-guide/support.html

By using the selective data transition approach with DMLT, the enterprise would only need to migrate the data that is needed to the final ERP system, reducing the cost and effort required for the migration. Additionally, re-architecting the enterprise's initial system to SAP S/4HANA and changing the platform to AWS would allow the enterprise to take advantage of the scalability and cost savings of the cloud, while still consolidating all three ERP systems into a single SAP S/4HANA system.

This solution uses SAP HANA system replication to replicate the data between the source system and the target AWS system for SAP S/4HANA and SAP BW/4HANA. This will minimize the downtime as the data is replicated in real-time, and once the replication is completed, the company can switch over to the target system with minimal disruption to the business. Additionally, this solution uses SAP Software Provisioning Manager to perform a system export/import for SAP Solution Manager. This will allow the company to migrate the system settings and configurations from the source system to the target system, reducing the time and effort required to reconfigure the system after the migration. Finally, the company can reinstall SAP Web Dispatcher on AWS with the necessary configuration and change the operating system from SUSE Linux Enterprise Server to Red Hat Enterprise Linux.

The company can meet its requirement by modifying the network access control lists (ACLs) that are associated with all public subnets in the VPC to deny access from the offending IP address block. This would deny access to the VPC from all the IP addresses that are attempting port scans, and would be effective for the next 24 hours.

Security groups are associated with individual instances, it would be more time-consuming to update all instances security groups and it's not scalable. AWS Identity and Access Management (IAM) is mainly used to manage user access to AWS resources and it's not appropriate for this use case. Configuring the firewall on the operating system of the EC2 instances would be less effective as it does not provide a centralized and scalable solution for managing access control across all subnets in the VPC.

Top of Form