Exam AWS Certified SAP on AWS - Specialty PAS-C01 topic 1 question 110 discussion

Exam question from Amazon's AWS Certified SAP on AWS - Specialty PAS-C01

Question #: 110
Topic #: 1

[All AWS Certified SAP on AWS - Specialty PAS-C01 Questions]

A company is preparing a greenfield deployment of SAP S/4HANA on AWS. The company wants to ensure that this new SAP S/4HANA landscape is fully supported by SAP. The company's SAP solutions architect needs to set up a new SAProuter connection directly to SAP from the company's landscape within the VPC.

Which combination of steps must the SAP solutions architect take to accomplish this goal? (Choose three.)

A. Launch the instance that the SAProuter software will be installed on into a private subnet of the VPC. Assign the instance an Elastic IP address.
B. Launch the instance that the SAProuter software will be installed on into a public subnet of the VPC. Assign the VPC an Elastic IP address.
C. Launch the instance that the SAProuter software will be installed on into a public subnet of the VPAssign the instance an overlay IP address.
D. Create a specific security group for the SAProuter instance. Configure rules to allow the required inbound and outbound access to the SAP support network. Include a rule that allows inbound traffic to TCP port 3299.
E. Create a specific security group for the SAProuter instance. Configure rules to allow the required inbound and outbound access to the SAP support network. Include a rule that denies inbound traffic to TCP port 3299.
F. Use a Secure Network Communication (SNC) internet connection.

Show Suggested Answer

Suggested Answer: BDF 🗳️

by odre90 at Dec. 8, 2023, 7:49 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

awsmonster

1 year, 5 months ago

Selected Answer: BDF

BDF as documented in the links provided by LocalHero and banbu556

upvoted 1 times

...

acethetest1000

1 year, 5 months ago

Selected Answer: BDF

SNC for secure communication.

upvoted 1 times

...

LocalHero

1 year, 5 months ago

BDF. This is a reason. https://docs.aws.amazon.com/ja_jp/sap/latest/general/overview-router-solman.html

upvoted 3 times

...

Demianwholovesjudo

1 year, 6 months ago

Selected Answer: BDF

For the SAProuter instance, create and configure a specific SAProuter security group, which only allows the required inbound and outbound access to the SAP support network. This should be limited to a specific IP address that SAP gives you to connect to, along with TCP port 3299. Launch the instance that the SAProuter software will be installed on into a public subnet of the VPC and assign it an Elastic IP address. Secure Network Communication (SNC

upvoted 1 times

...