Exam AWS Certified SAP on AWS - Specialty PAS-C01 topic 1 question 40 discussion

Exam question from Amazon's AWS Certified SAP on AWS - Specialty PAS-C01

Question #: 40
Topic #: 1

[All AWS Certified SAP on AWS - Specialty PAS-C01 Questions]

A company has an SAP environment that runs on AWS. The company wants to enhance security by restricting Amazon EC2 Instance Metadata Service (IMDS) to IMDSv2 only. The company’s current configuration option supports both IMDSv1 and IMDSv2. The security enhancement must not create an SAP outage.
What should the company do before it applies the security enhancement on EC2 instances that are running the SAP environment?

A. Ensure that the SAP kernel versions are 7.45 or later.
B. Ensure that the EC2 instances are Nitro based.
C. Ensure that the AWS Data Provider for SAP is installed on each EC2 instance.
D. Stop the EC2 instances.

Show Suggested Answer

Suggested Answer: B 🗳️

by kk8s at Jan. 31, 2023, 2:21 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

anttan

Highly Voted 2 years, 3 months ago

Answer is A. Before applying the security enhancement on EC2 instances running the SAP environment to restrict IMDS to IMDSv2 only, the company should ensure that the SAP kernel versions are 7.45 or later. This is because kernel version 7.45 and later supports the IMDSv2 protocol, while earlier versions only support IMDSv1. If the company applies the security enhancement before upgrading to kernel version 7.45 or later, it could result in an SAP outage or other issues.

upvoted 6 times

...

awsmonster

Most Recent 1 year, 4 months ago

Selected Answer: C

Agreed with geoakes !

upvoted 1 times

...

geoakes

1 year, 4 months ago

Selected Answer: C

Why C: https://aws.amazon.com/about-aws/whats-new/2021/05/aws-data-provider-sap-version-4-0-now-available/ Not A or B, since this is a 'SAP environment that runs on AWS' already Not D as that is downtime

upvoted 2 times

...

kaishin0527

1 year, 10 months ago

Selected Answer: B

B: IMDSv2 is only fully supported on Nitro-based instances. If you need to enforce IMDSv2 on an instance, you must ensure that the instance is Nitro-based. These instances are designed to provide enhanced security, networking, and performance.

upvoted 3 times

...

[Removed]

1 year, 10 months ago

Selected Answer: C

Voting C

upvoted 2 times

...

easytoo

1 year, 11 months ago

b-b-b-b-b-b

upvoted 1 times

...

mawsman

2 years ago

Selected Answer: A

The company's current infrastructure already supports both v1 and v2 - meaning instances are already nitro - as per anttan's comments the kernel needs to be 7.45 to update without outages

upvoted 1 times