Introduction
The AWS Certified: SAP on AWS – Specialty examination validates advanced technical skills and experience to design, implement, migrate, and operate SAP workloads optimally on AWS.

This examination validates an individual’s ability to perform the following tasks:
 Design an SAP solution that runs in the AWS Cloud in adherence with the AWS Well-Architected Framework
 Design an SAP solution that runs in the AWS Cloud in adherence with SAP certification and support requirements
 Implement new SAP workloads on AWS
 Migrate existing SAP workloads to AWS
 Operate SAP workloads on AWS

Target candidate description
The target candidate possesses the knowledge, skills, experience, and competence to design, implement, migrate, and operate SAP workloads on AWS.
This person likely has 5 or more years of SAP experience and 1 or more years of experience in working with SAP on AWS.

Recommended AWS knowledge:
 High availability/disaster recovery
 Core AWS infrastructure services
 AWS migration tools
 AWS global infrastructure
 Security best practices
 Multi-account scenarios and multi-Region scenarios
 Operations and management services and tools
 AWS transfer services Recommended SAP knowledge and other IT knowledge:
 SAP Basis and SAP NetWeaver administration
 SAP supported databases (including SAP HANA)
 SAP supported operating systems (Linux and Windows)
 SAP migration and installation tools
 Sizing
 Identity management

response:
Has two or more correct responses out of five or more response options Select one or more responses that best complete the statement or answer the question. Distractors, or incorrect answers, are response options that a candidate with incomplete knowledge or skill might choose.
Distractors are generally plausible responses that match the content area.

Unanswered questions are scored as incorrect; there is no penalty for guessing. The exam includes 50 questions that affect your score.

Unscored content
The exam includes 15 unscored questions that do not affect your score. AWS collects information about candidate performance on these unscored questions to evaluate these questions for future use as scored questions. These unscored questions are not identified on the exam.

Exam results
The AWS Certified: SAP on AWS – Specialty (PAS-C01) exam is a pass or fail exam. The exam is scored against a minimum standard established by AWS professionals who follow certification industry best practices and guidelines.

Your results for the exam are reported as a scaled score of 100–1,000. The minimum passing score is 750.
Your score shows how you performed on the exam as a whole and whether or not you passed. Scaled scoring models help equate scores across multiple exam forms that might have slightly different difficulty levels.

Your score report could contain a table of classifications of your performance at each section level. This information is intended to provide general feedback about your exam performance. The exam uses a compensatory scoring model, which means that you do not need to achieve a passing score in each section. You need to pass only the overall exam.

Each section of the exam has a specific weighting, so some sections have more questions than other sections have. The table contains general information that highlights your strengths and weaknesses. Use caution when interpreting section-level feedback.

Content outline
This exam guide includes weightings, test domains, and task statements for the exam. It is not a comprehensive listing of the content on the exam. However, additional context for each of the task statements is available to help guide your preparation for the exam. The following table lists the main content domains and their weightings. The table precedes the complete exam content outline, which includes the additional context. The percentage in each domain represents only scored content.

Examkingdom Amazon PAS-C01 Exam pdf, Certkingdom Amazon PAS-C01 Exam PDF

Best Amazon PAS-C01 Certification, Amazon PAS-C01 Q&A PDF Training at Certkingdom.com

Domain 1: Design of SAP workloads on AWS 30%
Domain 2: Implementation of SAP workloads on AWS 24%
Domain 3: Migration of SAP workloads to AWS 26%
Domain 4: Operation and maintenance of SAP workloads on AWS 20%
TOTAL 100%

Domain 1: Design of SAP workloads on AWS
1.1 Design the AWS account structure and connectivity patterns for SAP workloads on AWS.

 Knowledge of:
o AWS global infrastructure
o Account strategy for SAP workloads
o VPC patterns for SAP workloads
o SAP connectivity strategies (for example, AWS Direct Connect, AWS VPN, SAProuter, SAP GUI, Amazon AppStream)

 Skills in:
o Evaluating the use of a single AWS account versus the use of multiple AWS accounts
o Evaluating the use of a single VPC versus the use of multiple VPCs, including user restrictions with VPC sharing
o Evaluating on-premises, co-location, and cloud integration connectivity options
o Defining AWS Regions and Availability Zones based on network and latency requirements
o Designing connectivity options between different AWS accounts and different VPCs

1.2 Design a secure solution for hosting SAP workloads on AWS.
 Knowledge of:
o AWS Identity and Access Management (IAM)
o Route tables, security groups, and network ACLs
o Encryption options for data at rest and data in transit
o AWS service endpoints

 Skills in:
o Defining IAM users and roles for SAP workloads on AWS
o Defining inbound and outbound network flows by using security group rules and network ACL rules
o Troubleshooting traffic flow by using AWS native tools
o Defining the encryption strategy for data at rest and data in transit
o Defining service endpoints for service integrations

1.3 Define optimized and cost-effective infrastructure solutions for SAP workloads on AWS.
 Knowledge of:
o Certified operating system releases for SAP
o Certified database release versions for SAP
o Certified block storage solutions for SAP
o Certified instance types
o Best practices to define shared storage solutions
o AWS pricing models
o SAP transport strategy

 Skills in:
o Defining SAP certified solutions on AWS based on operating system, database, and SAP combinations
o Selecting the optimal instance family for SAP workloads
o Defining instance sizing based on SAP Application Performance Standard (SAPS) performance measurements, database sizing tools, and SAP Early Watch Alert (EWA) reports
o Defining the right storage selection for SAP workloads
o Defining shared storage solutions for SAP file systems
o Evaluating AWS pricing models
o Evaluating a shared solution versus a dedicated solution for database licensing
o Evaluating dedicated hardware solution benefits (for example, SAP certified Nitro based EC2 instance)

1.4 Design highly resilient solutions for SAP workloads on AWS.
 Knowledge of:
o High-availability solution options for SAP workloads on AWS
o Disaster recovery solution options for SAP workloads on AWS

 Skills in:
o Defining the optimal architecture by considering operating system, database, and application cluster requirements
o Designing single and distributed SAP solutions on AWS infrastructure
o Designing highly available solutions for SAP systems based on availability requirements
o Designing disaster recovery solutions for SAP systems based on recovery time objective (RTO) and recovery point objective (RPO) requirements
o Defining the optimal architecture by considering scale-up and scale-out options
o Evaluating instance placement options for availability improvement

Domain 2: Implementation of SAP workloads on AWS

2.1 Deploy databases for SAP workloads on AWS.
 Knowledge of:
o Administration of operating systems (for example, Linux, Windows)
o File system layout of databases
o AWS network concepts
o Database administration and security

 Skills in:
o Installing database systems
o Installing database clients

2.2 Deploy SAP applications on AWS.
 Knowledge of:
o Administration of operating systems (for example, Linux, Windows)
o File system layout of SAP applications
o AWS network concepts
o SAP Basis and SAP security

 Skills in:
o Installing SAP applications
o Configuring SAP applications

2.3 Configure high availability for SAP workloads.
 Knowledge of:
o AWS global infrastructure
o Administration of operating systems and databases
o SAP certified high-availability solutions on AWS
o AWS networking concepts (for example, Amazon Route 53, overlay IP addresses, routing methods)
o High-availability cluster concepts

 Skills in:
o Evaluating SAP certified high-availability solutions
o Configuring a highly available cluster between ABAP SAP Central Services (ASCS) and Enqueue Replication Server (ERS) nodes
o Configuring a highly available cluster between database nodes
o Performing cluster failover tests

2.4 Configure the disaster recovery setup for SAP workloads.
 Knowledge of:
o AWS global infrastructure
o Administration of operating systems and databases
o AWS networking concepts (for example, Route 53, routing methods)
o RTO and RPO
o Disaster recovery scenarios (for example, backup and restore, pilot light, warm standby, multi-site)
o Disaster recovery solutions on AWS

 Skills in:
o Configuring disaster recovery solutions
o Configuring database replication
o Performing disaster recovery testing

2.5 Automate deployments of SAP workloads.
 Knowledge of:
o Infrastructure as code (IaC) (for example, AWS CloudFormation)
o Configuration management tools (for example, AWS Systems Manager)
o AWS Launch Wizard for SAP
o DevOps tools

 Skills in:
o Automating infrastructure deployments by using IaC
o Automating SAP application installations
o Automating SAP deployments by using Launch Wizard
o Using configuration management tools

2.6 Validate AWS infrastructure for hosting SAP workloads.
 Knowledge of:
o Administration of operating systems (for example, Linux, Windows)
o Database file system layout
o AWS network concepts
o Database administration and security
o Performance baseline for SAP

 Skills in:
o Performing tests with the HANA Hardware and Cloud Measurement Tools (HCMT)
o Reviewing instance families and sizes
o Validating dedicated hardware solution benefits (for example, SAP certified Nitro based EC2 instance)
o Performing license checks for infrastructure for SAP workloads on AWS
o Performing storage checks by using the flexible I/O tester (FIO) and the dd command
o Performing network latency tests
o Validating infrastructure (for example, Well-Architected Review, SAP OSS Notes, certified operating systems, relational database management system combinations)

Domain 3: Migration of SAP workloads to AWS
3.1 Determine the optimal migration approach for SAP workloads to AWS.
 Knowledge of:
o Homogeneous migration process and heterogeneous migration process
o Target SAP environment architecture (operating system, database, and application)
o SAP interfaces and integration
o Data migration tools
o Data transfer options
o DNS and AWS networking services (for example, Direct Connect, Site-to-Site VPN, Route 53)
o AWS storage services (for example, Amazon Elastic File System [Amazon EFS], Amazon FSx, Amazon S3)
o AWS compute services (for example, Amazon EC2)
o AWS directory services specific to SAP workloads on Windows

 Skills in:
o Creating a technical migration and cutover plan
o Determining the suitable tools and methodologies for cloud migration
o Evaluating the compatibility for target SAP environments on AWS

3.2 Perform a homogeneous migration of SAP workloads to AWS.
 Knowledge of:
o Migration process methodologies for homogeneous migration (for example, backup and restore, database replication, block level replication)
o AWS data transfer services (for example, AWS Snowball, AWS DataSync, S3 Transfer Acceleration)
o DNS and AWS networking services (for example, Direct Connect, Site-to-Site VPN, Route 53)
o AWS storage services (for example, Amazon EFS, Amazon FSx, Amazon S3)
o AWS compute services (for example, Amazon EC2)

 Skills in:
o Using SAP and database-specific migration tools (for example, backup and restore, database replication)
o Using AWS native tools for migrations (for example, AWS Server Migration Service [AWS SMS], AWS Application Migration Service [CloudEndure Migration])

3.3 Perform a heterogeneous migration of SAP workloads to AWS.
 Knowledge of:
o Migration process methodologies for heterogeneous migration (for example, SAP export/import with Software Provisioning Manager (SWPM), Software Update Manager –
Database Migration Option (SUM-DMO) with System Move, third-party vendor tools)
o AWS data transfer services (for example, Snowball, DataSync, S3 Transfer Acceleration)
o Migration from anyDB to SAP HANA
o DNS and AWS networking services (for example, Direct Connect, Site-to-Site VPN, Route 53, DNS)
o AWS storage services (for example, Amazon EFS, Amazon FSx, Amazon S3)
o AWS compute services (for example, Amazon EC2)

 Skills in:
o Using SAP and database-specific migration tools (for example, export/import, SWPM, SUM-DMO)
o Using AWS native tools for migrations (for example, AWS SMS, AWS Application Migration Service [CloudEndure Migration])

3.4 Optimize the migration of SAP workloads.
 Knowledge of:
o Migration process methodologies
o Data transfer optimization
o Network optimization
o AWS networking services (for example, Direct Connect, Site-to-Site VPN, Route 53)
o AWS storage services (for example, Amazon EFS, Amazon FSx, Amazon S3)
o AWS compute services (for example, Amazon EC2)
o AWS automation tools (for example, Launch Wizard, CloudFormation, Systems Manager)

 Skills in:
o Deploying target SAP environments in an automated way
o Fine-tuning data transfer
o Architecting for migration acceleration

Domain 4: Operation and maintenance of SAP workloads on AWS

4.1 Monitor the underlying infrastructure of SAP environments on AWS for performance, availability, and security.
 Knowledge of:
o Performance monitoring of AWS services for SAP
o Availability monitoring of AWS services for SAP

 Skills in:
o Configuring custom metrics and alarms for SAP (for example, Amazon CloudWatch)
o Configuring alarm notifications and invoking actions (for example, Amazon Simple Notification Service [Amazon SNS])
o Installing and updating AWS Data Provider for SAP
o Monitoring API calls for accounts (for example, AWS CloudTrail)
o Monitoring and invoking responses for alerts (for example, Amazon GuardDuty)

4.2 Manage the data protection of SAP applications by using AWS native services.
 Knowledge of:
o RTO and RPO
o Backup and recovery strategies for SAP databases and applications
o Protection of data at rest and data in transit (for example, data encryption)
o Network traffic logging, monitoring, threat detection, and analytics
o IAM

 Skills in:
o Configuring and managing backup and restore of SAP databases by using database native tools and AWS Backint Agent for databases
o Managing S3 Lifecycle policies
o Configuring and managing Amazon Elastic Block Store (Amazon EBS) snapshots and Amazon Machine Images (AMIs)
o Automating backup of SAP components on AWS (for example, AWS Backup, AWS Storage Gateway)
o Configuring encryption for AWS storage and backup services and tools
o Creating and managing accounts, users, groups, access policies, and roles in IAM
o Implementing detective controls (for example, CloudTrail, CloudWatch, GuardDuty)

4.3 Perform routine and proactive maintenance activities for SAP applications on AWS.
 Knowledge of:
o Patch management of different operating systems, SAP applications, and databases
o Downtime management of SAP systems on AWS
o Basics of Linux and Windows clustering
o Architectures and administration for high availability and disaster recovery

 Skills in:
o Configuring and automating patching by using Systems Manager Patch Manager
o Managing downtime schedules by using Systems Manager maintenance windows
o Defining maintenance actions by using Systems Manager documents
o Restoring data from AWS sources (for example, EBS snapshots, AMIs)
o Operating and maintaining high-availability architectures (for example, application failovers, database failovers)
o Maintaining a disaster recovery landscape and performing disaster recovery drills
o Performing operations as code (for example, CloudFormation, Systems Manager, AWS Lambda)

4.4 Review and optimize the architecture of SAP environments on AWS on a regular basis.
 Knowledge of:
o AWS cost and usage monitoring tools (for example, AWS Trusted Advisor, AWS Pricing Calculator)
o Storage configurations and utilization monitoring for SAP workloads on AWS
o EC2 instance sizing for SAP applications and databases

 Skills in:
o Performing SAP capacity planning and reconfiguring AWS services
o Monitoring cost and usage with AWS tools (for example, Cost Explorer, AWS Budgets)

Which key tools, technologies, and concepts might be covered on the exam?
The following is a non-exhaustive list of the tools and technologies that could appear on the exam. This list is subject to change and is provided to help you understand the general scope of services, features, or technologies on the exam. The general tools and technologies in this list appear in no particular order.

AWS services are grouped according to their primary functions. While some of these technologies will likely be covered more than others on the exam, the order and placement of them in this list is no indication of relative weight or importance:

AWS services and features
Application Integration:
 Amazon Simple Notification Service (Amazon SNS)
 AWS Step Functions

Compute:
 Amazon EC2
 Amazon EC2 Auto Scaling
 AWS Lambda

Containers:
 Amazon Elastic Container Service (Amazon ECS)
 Amazon Elastic Kubernetes Service (Amazon EKS)

Cost Management:
 AWS Budgets
 AWS Cost and Usage Report
 Cost Explorer
 Reserved Instance reporting
 Savings Plans

Database:
 Amazon RDS (solution-specific and version-specific)

Developer Tools:
 AWS Cloud Development Kit (AWS CDK)
 AWS tools and SDKs

End User Computing:
 Amazon AppStream 2.0
 Amazon WorkSpaces

Management and Governance:
 AWS CLI
 AWS CloudFormation
 AWS CloudTrail
 Amazon CloudWatch
 AWS Compute Optimizer
 AWS Config
 AWS License Manager
 AWS Management Console
 AWS Personal Health Dashboard
 AWS Systems Manager
 AWS Trusted Advisor

Migration and Transfer:
 AWS Application Migration Service (CloudEndure Migration)
 AWS DataSync
 Migration Evaluator (formerly TSO Logic)
 AWS Server Migration Service (AWS SMS)
 AWS Snow Family
 AWS Transfer Family

Networking and Content Delivery:
 Amazon API Gateway
 Amazon CloudFront
 AWS Direct Connect
 AWS Global Accelerator
 Elastic Load Balancing
 AWS PrivateLink
 Amazon Route 53
 AWS Transit Gateway
 Amazon VPC

SAP on AWS Specific:
 AWS Backint Agent
 AWS Launch Wizard Security, Identity, and Compliance:
 Amazon GuardDuty
 AWS Identity and Access Management (IAM)
 AWS Key Management Service (AWS KMS)
 AWS Security Hub
 AWS Shield
 AWS Single Sign-On
 AWS WAF

Storage:
 AWS Backup
 CloudEndure Disaster Recovery
 Amazon Elastic Block Store (Amazon EBS)
 Amazon Elastic File System (Amazon EFS)
 Amazon FSx for Windows File Server
 Amazon S3
 Amazon S3 Glacier
 AWS Snow Family
 AWS Storage Gateway

Out-of-scope AWS services and features
The following is a non-exhaustive list of AWS services and features that are not covered on the exam. These services and features do not represent every AWS offering that is excluded from the exam content.
Services or features that are entirely unrelated to the target job roles for the exam are excluded from this list because they are assumed to be irrelevant.
Out-of-scope AWS services and features include the following:

Analytics:
 All services

Augmented Reality (AR) and Virtual Reality (VR):
 Amazon Sumerian

Blockchain:
 Amazon Managed Blockchain
 Amazon Quantum Ledger Database (Amazon QLDB)

Game Tech:
 All services

Internet of Things:
 All services

Machine Learning:
 All services

Management and Governance:
 AWS Console Mobile Application
 AWS OpsWorks

Media Services:
 All services

Quantum Technologies:
 All services

Robotics:
 AWS RoboMaker

Satellite:
 AWS Ground Station

Security, Identity, and Compliance:
 AWS CloudHSM
 Amazon Macie

Serverless:
 AWS AppSync
 Amazon DynamoDB
 AWS Fargate
 Amazon Simple Queue Service (Amazon SQS)
 

---

QUESTION 1
A global enterprise is running SAP ERP Central Component (SAP ECC) workloads on Oracle in an onpremises environment. The enterprise plans to migrate to SAP S 4HANA on AWS.
The enterprise recently acquired two other companies One of the acquired companies is running SAP ECC on Oracle as its ERP system The other acquired company is running an ERP system that is not from SAP The enterprise wants to consolidate the three ERP systems into one ERP system on SAP S 4HANA on AWS Not all the data from the acquired companies needs to be migrated to the final ERP
system The enterprise needs to complete this migration with a solution that minimizes cost and maximizes operational efficiency.
Which solution will meet these requirements?

A. Perform a lift-and-shift migration of all the systems to AWS Migrate the ERP system that is not from SAP to SAP ECC Convert all three systems to SAP SHANA by using SAP Software Update Manager (SUM) Database Migration Option (DMO) Consolidate all three SAP S4HANA systems into a final SAP &4HANAsystem Decommission the other systems
B. Perform a lift-and-shift migration of an the systems to AWS Migrate the enterprise’s initial system to SAP HANA, and then perform a conversion to SAP SHANA Consolidate the two systems from the acquired companies with this SAP S4HANA system by using the Selective Data Transition approach with SAP Data Management and Landscape Transformation (DMLT)
C. Use SAP Software Update Manager (SUM) Database Migration Option (DMO) with System Move to re-architect the enterprise initial system to SAP S’4HANA and to change the platform to AWS Consolidate the two systems from the acquired companies with this SAP S 4HANA system by using the Selective Data Transition approach with SAP Data Management and Landscape Transformation (DMLT)
D. Use SAP Software Update Manager (SUM) Database Migration Option (DMO) with System Move to re-architect all the systems to SAP SHANA and to change the platform to AWS Consolidate all three SAP S-4HANA systems two a final SAP SHANA system Decommission the other systems

Answer: A

---

QUESTION 2
A global retail company is running its SAP landscape on AWS Recently the company made changes to its SAP Web Dispatcher architecture The company added an additional SAP Web Dispatcher for high availability with an Application Load Balancer (ALB) to balance the load between the two SAP Web Dispatchers When users try to access SAP through the ALB the system is reachable However the SAP backend system is showing an error message An investigation reveals that the issue is related to SAP session handling and distribution of requests . The company confirmed that the system was working as
expected with one SAP Web Dispatcher. The company replicated the configuration of that SAP Web Dispatcher to the new SAP Web Dispatcher
How can the company resolve the error?

A. Maintain persistence by using session cookies Enable session stickiness (session affinity) on the SAP Web Dispatchers by setting the wdisp/HTTP/esid_support parameter to True
B. Maintain persistence by using session cookies Enable session stickiness (session affinity) on the ALB
C. Turn on host-based routing on the ALB to route traffic between the SAP Web Dispatchers
D. Turn on URL-based routing on the ALB to route traffic to the application based on URL

Answer: C

---

QUESTION 3
A company hosts its SAP NetWeaver workload on SAP HANA m the AWS Cloud The SAP NetWeaver application is protected by a cluster solution that uses Red Hat Enterprise Linux High Availability Add- On The duster solution uses an overlay IP address to ensure that the high availability cluster is still accessible during failover scenarios.
An SAP solutions architect needs to facilitate the network connection to this overlay IP address from multiple locations These locations include more than 25 VPCs other AWS Regions and the onpremises environment The company already has set up an AWS Direct Connect connection between the on-premises environment and AWS.
What should the SAP solutions architect do to meet these requirements in the MOST scalable manner?

A. Use VPC peering between the VPCs to route traffic between them
B. Use AWS Transit Gateway to connect the VPCs and on-premises networks together
C. Use a Network Load Balancer to route connections to various targets within VPCs
D. Deploy a Direct Connect gateway to connect the Direct Connect connection over a private VIF to one or more VPCs in any accounts

Answer: D

---

QUESTION 4
A company is implementing SAP HANA on AWS According 10 the company’s security policy SAP backups must be encrypted Only authorized team members can have the ability to decrypt the SAP backups
What is the MOST operationally efficient solution that meets these requirements?

A. Configure AWS Backint Agent for SAP HANA to create SAP backups in an Amazon S3 bucket After a backup is created encrypt the backup by using client-side encryption Share the encryption key with authorized team members only
B. Configure AWS Backint Agent for SAP HANA to use AWS Key Management Service (AWS KMS) for SAP backups Create a key policy to grant decryption permission to authorized team members only
C. Configure AWS Storage Gateway to transfer SAP backups from a file system to an Amazon S3 bucket Use an S3 bucket policy to grant decryption permission to authorized team members only
D. Configure AWS Backint Agent for SAP HANA to use AWS Key Management Service (AWS KMS) for SAP backups Grant object ACL decryption permission to authorized team members only

Answer: C

---

QUESTION 5
A data analysis company has two SAP landscapes that consist of sandbox development QA, preproduction and production servers. One landscape is on Windows and the other landscape is on Red Hat Enterprise Linux. The servers reside in a room m a building that other tenants share.
An SAP solutions architect proposes to migrate the SAP applications to AWS The SAP solutions architect wants to move the production backups to AWS and wants to make the backups highly available to restore >n case of unavailability of an on-premises server.
Which solution will meet these requirements MOST cost-effectively?

A. Take a backup of the production servers Implement an AWS Storage Gateway Volume Gateway Create file shares by using the Storage Gateway Volume Gateway Copy the backup files to the file shares through NFS and 9MB.
B. Take a backup of the production servers Send those backups to tape drives implement an AWS Storage Gateway Tape Gateway Send the backups to Amazon S3 Standard-Infrequent Access (S3 Standard-IA) through the S3 console Move the backups immediately to S3 Glacier Deep Archive
C. Implement a third-party tool to take images of the SAP application servers and database server Take regular snapshots at 1-hour intervals send the snapshots to Amazon S3 Glacier directly through the S3 Glacier console Store the same images in different S3 buckets in different AWS Regions
D. Take a backup of the production servers Implement an Amazon S3 File Gateway Create file shares by using the S3 File Gateway Copy the backup files lo the file shares through NFS and SMB Map backup files directly to Amazon S3 Configure an S3 Lifecycle policy to send the backup files to S3 Glacier based on the company’s data retention policy

Answer: C