PAS-C01 · Question #101
A global retail company wants to move its SAP application to AWS. Currently, the company's SAProuter is in the DMZ in the company's own data center. The company wants to keep a similar architecture in
The correct answer is A. Launch the instance that the SAProuter software is installed on into a public subnet of the VPC.. When you set up an SAP environment on AWS, you need to set up an SAP Solution Manager system and SAProuter with a connection to the SAP support network. When you set up the SAProuter and SAP support network connection, follow these guidelines: - Launch the instance that the SAPro
Question
A global retail company wants to move its SAP application to AWS. Currently, the company's SAProuter is in the DMZ in the company's own data center. The company wants to keep a similar architecture in the AWS Cloud. What is the MOST secure solution that meets these requirements?
Options
- ALaunch the instance that the SAProuter software is installed on into a public subnet of the VPC.
- BLaunch the instance that the SAProuter software is installed on into a private subnet of the VPC.
- CLaunch the instance that the SAProuter software is installed on into a public subnet of the VPC.
- DLaunch the instance that the SAProuter software is installed on into a public subnet of the VPC.
How the community answered
(43 responses)- A74% (32)
- B7% (3)
- C16% (7)
- D2% (1)
Explanation
When you set up an SAP environment on AWS, you need to set up an SAP Solution Manager system and SAProuter with a connection to the SAP support network. When you set up the SAProuter and SAP support network connection, follow these guidelines: - Launch the instance that the SAProuter software is installed on into a public subnet of the VPC. Assign the instance an Elastic IP address. - Create a specific security group for the SAProuter instance with the necessary rules to allow the required inbound and outbound access to the SAP support network. - Use the Secure Network Communications (SNC. type of internet connection. The SAP all-on-AWS architecture diagram provides an illustration of this architecture. In VPC security groups, it is possible to specify allow rules, but not deny rules.
Topics
Community Discussion
No community discussion yet for this question.