PAS-C01 Question #114: Real Exam Question with Answer & Explanation

Question

A global retail company has SAP Fiori embedded with SAP S/4HANA Finance application servers that run in a private subnet in a dedicated SAP VPC on AWS. The database tier runs on SAP HANA, which resides in the same private subnet. The company has deployed a Network Load Balancer (NLB) in a public subnet. The company has configured the NLB to send user traffic from outside the AWS network to the SAP application servers directly. An SAP solutions architect needs to expose the user interface (UI) layer's web services for remote access through a public internet web application. The application will handle cross- domain requests such as URL redirecting, filtering, and rewriting. The whole architecture will be distributed across multiple Availability Zones with hot standby for SAP HANA database components and SAP application components. The existing NLB will work as is. During failover, the NLB will redirect user traffic to the secondary Availability Zone after SAP is installed and running. How can the SAP solutions architect securely implement a connection between the UI layer's web services and the SAP application?

Options

• AUse the NLB and Amazon Route 53 to send the encrypted traffic from the internet directly to the
• BInstall an SAP Web Dispatcher with no public IP address in the same private subnet as the SAP
• CInstall a third-party tool that can consume web services and the objects that contain business logic.
• DInstall an SAP Web Dispatcher in the public subnet.