PAS-C01 · Question #34
A financial services company is implementing SAP core banking on AWS. The company must not allow any system information to traverse the public internet. The company needs to implement secure monitorin
The correct answer is C. Install the AWS Data Provider for SAP on the Amazon EC2 instances that host SAP. Create VPC. The AWS Data Provider for SAP is the SAP- and AWS-supported mechanism for feeding EC2 infrastructure metrics (CPU, memory, disk I/O, network) into SAP monitoring tools. By default, it communicates with AWS service endpoints (CloudWatch, EC2 metadata service) over the internet. To
Question
A financial services company is implementing SAP core banking on AWS. The company must not allow any system information to traverse the public internet. The company needs to implement secure monitoring of its SAP ERP Central Component (SAP ECC) system to check for performance issues and faults in its application. The solution must maximize security and must be supported by SAP and AWS. How should the company integrate AWS metrics with its SAP system to meet these requirements?
Options
- ASet up SAP Solution Manager to call Amazon CloudWatch and Amazon EC2 endpoints with
- BInstall the AWS Data Provider for SAP on the Amazon EC2 instances that host SAP. Allow access
- CInstall the AWS Data Provider for SAP on the Amazon EC2 instances that host SAP. Create VPC
- DInstall the AWS Data Provider for SAP on the Amazon EC2 instances that host SAP. Create VPC
How the community answered
(42 responses)- A5% (2)
- B7% (3)
- C71% (30)
- D17% (7)
Explanation
The AWS Data Provider for SAP is the SAP- and AWS-supported mechanism for feeding EC2 infrastructure metrics (CPU, memory, disk I/O, network) into SAP monitoring tools. By default, it communicates with AWS service endpoints (CloudWatch, EC2 metadata service) over the internet. To prevent any data from traversing the public internet, you create VPC interface endpoints (AWS PrivateLink) for the required AWS services (CloudWatch and EC2). All traffic then flows entirely within the AWS private network, satisfying the security requirement. Option A (SAP Solution Manager calling AWS endpoints publicly) routes traffic over the internet. Option B allows public internet access, violating the requirement. Option D may describe a different, less complete configuration. Option C is the correct combination: Data Provider for SAP installed on EC2 instances plus VPC endpoints to keep all traffic private.
Topics
Community Discussion
No community discussion yet for this question.