nerdexam
Amazon

PAS-C01 · Question #101

A global retail company wants to move its SAP application to AWS. Currently, the company's SAProuter is in the DMZ in the company's own data center. The company wants to keep a similar architecture in

The correct answer is A. Launch the instance that the SAProuter software is installed on into a public subnet of the VPC.. When you set up an SAP environment on AWS, you need to set up an SAP Solution Manager system and SAProuter with a connection to the SAP support network. When you set up the SAProuter and SAP support network connection, follow these guidelines: - Launch the instance that the SAPro

Design of SAP Workloads on AWS

Question

A global retail company wants to move its SAP application to AWS. Currently, the company's SAProuter is in the DMZ in the company's own data center. The company wants to keep a similar architecture in the AWS Cloud. What is the MOST secure solution that meets these requirements?

Options

  • ALaunch the instance that the SAProuter software is installed on into a public subnet of the VPC.
  • BLaunch the instance that the SAProuter software is installed on into a private subnet of the VPC.
  • CLaunch the instance that the SAProuter software is installed on into a public subnet of the VPC.
  • DLaunch the instance that the SAProuter software is installed on into a public subnet of the VPC.

How the community answered

(43 responses)
  • A
    74% (32)
  • B
    7% (3)
  • C
    16% (7)
  • D
    2% (1)

Explanation

When you set up an SAP environment on AWS, you need to set up an SAP Solution Manager system and SAProuter with a connection to the SAP support network. When you set up the SAProuter and SAP support network connection, follow these guidelines: - Launch the instance that the SAProuter software is installed on into a public subnet of the VPC. Assign the instance an Elastic IP address. - Create a specific security group for the SAProuter instance with the necessary rules to allow the required inbound and outbound access to the SAP support network. - Use the Secure Network Communications (SNC. type of internet connection. The SAP all-on-AWS architecture diagram provides an illustration of this architecture. In VPC security groups, it is possible to specify allow rules, but not deny rules.

Topics

#SAProuter#AWS Networking#DMZ Architecture#Security Best Practices

Community Discussion

No community discussion yet for this question.

Full PAS-C01 Practice