Exam AWS Certified SAP on AWS - Specialty PAS-C01 topic 1 question 99 discussion

Exam question from Amazon's AWS Certified SAP on AWS - Specialty PAS-C01

Question #: 99
Topic #: 1

[All AWS Certified SAP on AWS - Specialty PAS-C01 Questions]

A company recently implemented an architecture in which all the systems and components of the company's SAP environment are hosted on AWS. Front-end users connect from the corporate data center. SAP application servers and database servers are hosted in a private subnet.

The company has the following requirements:

• Ensure that the instances in the private subnet can connect to the internet and other AWS services.
• Prevent instances from receiving inbound traffic that is initiated by someone on the inter-net.
• For SAP support, allow a remote connection between the company's network and SAP. Ensure that access is available to the production environment as needed.

Which solution will meet these requirements?

A. Use a NAT gateway to ensure connectivity between the instances in the private subnet and other AWS services. Deploy SAProuter in a public subnet. Assign a public IP address that is reachable from the internet.
B. Use NAT instances to ensure connectivity between the instances in the private subnet and other AWS services. Deploy SAProuter in the private subnet with an Elastic IP address that is reachable from the internet.
C. Use a bastion host to ensure connectivity between the instances in the private subnet and other AWS services. Set up an AWS Direct Connect connection between the SAP support network and the AWS Region where the architecture is implemented.
D. Use an internet gateway to ensure connectivity between the instances in the private subnet and other AWS services. Deploy SAProuter in a public subnet. Assign a public IP address that is reachable from the internet.

Show Suggested Answer

Suggested Answer: A 🗳️

by tonatiuhop at July 27, 2023, 11:11 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

G4Exams

1 year, 8 months ago

Selected Answer: A

A Natgateway

upvoted 3 times

...

zzw890827

1 year, 10 months ago

Selected Answer: A

Ensure that the instances in the private subnet can connect to the internet and other AWS services. This is typically achieved using NAT. Moreover, SAProuter is an SAP application that is used to secure network communication between SAP systems and external networks. Deploying SAProuter in the appropriate location can facilitate this requirement.

upvoted 3 times

...

kaishin0527

1 year, 10 months ago

Selected Answer: A

A: This configuration enables instances in the private subnet to connect to the internet and other AWS services. The SAProuter in a public subnet can be accessed from the internet for SAP support purposes. However, the NAT Gateway prevents instances from receiving inbound traffic that is initiated by someone on the internet, meeting the company's security requirement.

upvoted 4 times

...

tonatiuhop

1 year, 10 months ago

Selected Answer: D

D https://docs.aws.amazon.com/sap/latest/sap-hana/hana-ops-support.html

upvoted 1 times

...