Discuss Amazon PAS-C01 Exam Topic 3 Question 58

A company wants 10 migrate its SAP ERP landscape to AWS The company will use a highly available distributed deployment for the new architecture Clients will access SAP systems from a local data center through an AWS Site-to-Site VPN connection that is already in place An SAP solutions architect needs to design the network access to the SAP production environment

Which configuration approaches will meet these requirements? (Select TWO.)

AFor the ASCS instance configure an overlay IP address that is within the production VPC ClDR range Create an AWS Transit Gateway Attach me VPN to the transit gateway Use the transit gateway to route the communications between the local data center and the production VPC Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance

BFor the ASCS instance configure an overlay IP address that is outside the production VPC ClDR range Create an AWS Transit Gateway Attach the VPN to the transit gateway Use the transit gateway to route the communications between the local data center and the production VPC Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance

CFor the ASCS instance configure an overlay IP address that is within the production VPC ClDR range Create a target group that points to the overlay IP address Create a Network Load Balancer and register the target group Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance

DFor the ASCS instance configure an overlay IP address that is outside the production VPC ClDR range Create a target group that points to the overlay IP address Create a Network Load Balancer, and register the target group Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance

EFor the ASCS instance configure an overlay IP address that is outside the production VPC ClDR range Create a target group that points to the overlay IP address Create an Application Load Balancer and register the target group Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance.

Suggested Answer: B, D

Option B is correct because it uses AWS Direct Connect gateway with multiple Direct Connect connections that use a link aggregation group (LAG) between the on-premises data center and AWS. This provides high availability and redundancy for the network connection, as well as increased bandwidth and lower latency. It also allows the use of an overlay IP address that is outside the production VPC CIDR range for the ASCS instance, which is recommended by SAP for high availability.

Option D is correct because it uses two redundant AWS Site-to-Site VPN connections for connectivity between the on-premises data center and AWS. This provides a backup connection in case one of the VPN connections fails. It also allows the use of an overlay IP address that is outside the production VPC CIDR range for the ASCS instance, which is recommended by SAP for high availability.

Option A is incorrect because it uses an overlay IP address that is within the production VPC CIDR range for the ASCS instance, which is not recommended by SAP for high availability. It also uses only one AWS Direct Connect connection, which does not provide redundancy or load balancing for the network connection.

Option C is incorrect because it uses Amazon Elastic File System (Amazon EFS) file system storage between the on-premises data center and AWS, which is not a network configuration for data transfer. It also uses an Application Load Balancer, which does not support TCP protocol for the ASCS instance.

Option E is incorrect because it uses an Application Load Balancer, which does not support TCP protocol for the ASCS instance. It also uses a target group that points to the overlay IP address, which is not necessary for the network access to the ASCS instance.

https://docs.aws.amazon.com/sap/latest/sap-hana/sap-oip-configuration-steps-for-network-load-balancer.html

https://blogs.sap.com/2021/07/26/step-by-step-how-to-cluster-sap-ascs-and-ers-on-windows-in-aws-using-wsfc-with-sios-datakeeper/

https://access.redhat.com/articles/3916511

Get Premium PAS-C01 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

34 comments · newest first

Kattie 10 months ago

I’m not sure about D, seems like it could complicate things unnecessarily.

Omer 10 months ago

Wait, why would you want the overlay IP outside the VPC? That sounds risky.

Wai 10 months ago

Option A seems solid, using the overlay IP within the VPC range is smart.

Helaine 11 months ago

I think B is better, having the overlay IP outside the range makes more sense.

Sanjuana 11 months ago

Definitely going with A and C for this setup.

An 11 months ago

I think options with overlay IPs outside the VPC range might complicate routing, but I can't recall the exact implications.

Zack 11 months ago

This question feels similar to one we practiced about load balancers and target groups. I wonder if the Network Load Balancer is the right choice here.

Leonora 11 months ago

I'm not entirely sure, but I think using a Transit Gateway is crucial for managing the VPN connections effectively.

Avery 12 months ago

I remember we discussed the importance of using an overlay IP address within the production VPC range for better routing efficiency.

Leontine 12 months ago

I think I've got a good handle on this. The key is properly configuring the overlay IP address and the static route on the production VPC to ensure the traffic is routed correctly to the ASCS instance. I'll double-check my work, but I feel confident I can select the right answers.

Margot 12 months ago

Based on the requirements, it looks like options A and B are the best choices. Using a transit gateway to route the communications between the local data center and the production VPC, and configuring the overlay IP address accordingly, seems like the most robust solution.

Raymon 1 year ago

I'm a bit confused about the overlay IP address and how that fits into the overall architecture. I'll need to review the options carefully to make sure I select the right configuration approaches.

Tyra 1 year ago

Okay, let me think this through. We need to design the network access to the SAP production environment, and the company is using a highly available distributed deployment on AWS. The key seems to be configuring the overlay IP address and the static route on the production VPC.

Sharen 1 year ago

This question seems straightforward, but I want to make sure I understand the requirements correctly before I start answering.

Chara 1 year ago

Options A and B definitely look the most promising. I wonder if the exam will try to trip us up with the other choices, though. Better double-check my work!

Danica 1 year ago

I'm torn between A and B. Configuring the overlay IP address outside the VPC CIDR range seems like it might be a bit tricky, but it could work.

Staci 1 year ago

↳ replying to Danica

B) For the ASCS instance configure an overlay IP address that is outside the production VPC CIDR range Create an AWS Transit Gateway Attach the VPN to the transit gateway Use the transit gateway to route the communications between the local data center and the production VPC Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance

Timothy 1 year ago

↳ replying to Danica

A) For the ASCS instance configure an overlay IP address that is within the production VPC CIDR range Create an AWS Transit Gateway Attach the VPN to the transit gateway Use the transit gateway to route the communications between the local data center and the production VPC Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance

Janella 1 year ago

↳ replying to Danica

User 2

Madelyn 1 year ago

↳ replying to Danica

User 1

Tennie 1 year ago

I'm pretty sure the correct answers are A and B. Those options use the Transit Gateway, which is the key to meeting the high availability requirement.

Emily 1 year ago

I prefer option E. Using an Application Load Balancer can provide better load balancing for the SAP systems.

Rodolfo 1 year ago

Haha, this question is like a treasure hunt! Gotta find the right combination of networking magic to make it work.

Adria 1 year ago

↳ replying to Rodolfo

Adria 1 year ago

↳ replying to Rodolfo

Margarita 1 year ago

I agree with Rolland. Using a Transit Gateway and static routes seems like a good approach.

Rolland 1 year ago

I think options A and B could meet the requirements.

Marylou 1 year ago

Okay, let's see here... I think options A and B are the way to go. Using a Transit Gateway to route the traffic seems like the most reliable approach.

Denny 1 year ago

↳ replying to Marylou

Transit Gateway can help ensure smooth communication between the local data center and the production VPC.

Luther 1 year ago

↳ replying to Marylou

Yeah, it definitely seems like the most reliable option for this scenario.

Domingo 1 year ago

↳ replying to Marylou

I agree, using a Transit Gateway for routing is a solid choice.

Graciela 1 year ago

Hmm, this question seems to cover a lot of AWS networking concepts. I'm going to need to think this through carefully.

Timothy 1 year ago

↳ replying to Graciela

B) For the ASCS instance configure an overlay IP address that is outside the production VPC ClDR range Create an AWS Transit Gateway Attach the VPN to the transit gateway Use the transit gateway to route the communications between the local data center and the production VPC Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance

Martha 1 year ago

↳ replying to Graciela

A) For the ASCS instance configure an overlay IP address that is within the production VPC ClDR range Create an AWS Transit Gateway Attach me VPN to the transit gateway Use the transit gateway to route the communications between the local data center and the production VPC Create a static route on the production VPC to route traffic that is directed to the overlay IP address to the ASCS instance

Amazon PAS-C01 Exam - Topic 3 Question 58 Discussion