nerdexam
Amazon

PAS-C01 · Question #118

A company wants to migrate its SAP ERP landscape to AWS. The company will use a highly available distributed deployment for the new architecture. Clients will access SAP systems from a local data cent

The correct answer is B. For the ASCS instance, configure an overlay IP address that is outside the production VPC CIDR D. For the ASCS instance, configure an overlay IP address that is outside the production VPC CIDR. For SAP high-availability clusters on AWS, the overlay IP address used for the ASCS (ABAP Central Services) instance must be outside the production VPC CIDR range. This is a fundamental AWS networking requirement for the cluster failover mechanism: when a failover occurs, the Pac

Design of SAP Workloads on AWS

Question

A company wants to migrate its SAP ERP landscape to AWS. The company will use a highly available distributed deployment for the new architecture. Clients will access SAP systems from a local data center through an AWS Site-to-Site VPN connection that is already in place. An SAP solutions architect needs to design the network access to the SAP production environment. Which configuration approaches will meet these requirements? (Choose two.)

Options

  • AFor the ASCS instance, configure an overlay IP address that is within the production VPC CIDR
  • BFor the ASCS instance, configure an overlay IP address that is outside the production VPC CIDR
  • CFor the ASCS instance, configure an overlay IP address that is within the production VPC CIDR
  • DFor the ASCS instance, configure an overlay IP address that is outside the production VPC CIDR
  • EFor the ASCS instance, configure an overlay IP address that is outside the production VPC CIDR

How the community answered

(35 responses)
  • A
    23% (8)
  • B
    60% (21)
  • C
    11% (4)
  • E
    6% (2)

Explanation

For SAP high-availability clusters on AWS, the overlay IP address used for the ASCS (ABAP Central Services) instance must be outside the production VPC CIDR range. This is a fundamental AWS networking requirement for the cluster failover mechanism: when a failover occurs, the Pacemaker resource agent updates the VPC route table to redirect traffic for the overlay IP to the current active node. If the overlay IP were within the VPC CIDR, AWS's native routing would interfere with this process and prevent correct failover routing. Options B and D both specify an overlay IP outside the VPC CIDR, satisfying this requirement, while differing in another configuration detail (not fully visible in the truncated options). Options A, C, and E specify overlay IPs within the VPC CIDR, which would cause the same type of clustering failure described in Question 2.

Topics

#SAP High Availability (HA)#Network Design#Overlay IP#Hybrid Cloud Networking

Community Discussion

No community discussion yet for this question.

Full PAS-C01 Practice