AWS Certified SAP on AWS – Specialty (PAS-C01) — Question 108

A company is preparing a greenfield deployment of SAP S/4HANA on AWS. The company wants to ensure that this new SAP S/4HANA landscape is fully supported by SAP. The company's SAP solutions architect needs to set up a new SAProuter connection directly to SAP from the company's landscape within the VPC.

Which combination of steps must the SAP solutions architect take to accomplish this goal? (Choose three.)

Answer options

• A. Launch the instance that the SAProuter software will be installed on into a private subnet of the VPC. Assign the instance an Elastic IP address.
• B. Launch the instance that the SAProuter software will be installed on into a public subnet of the VPC. Assign the VPC an Elastic IP address.
• C. Launch the instance that the SAProuter software will be installed on into a public subnet of the VPAssign the instance an overlay IP address.
• D. Create a specific security group for the SAProuter instance. Configure rules to allow the required inbound and outbound access to the SAP support network. Include a rule that allows inbound traffic to TCP port 3299.
• E. Create a specific security group for the SAProuter instance. Configure rules to allow the required inbound and outbound access to the SAP support network. Include a rule that denies inbound traffic to TCP port 3299.
• F. Use a Secure Network Communication (SNC) internet connection.

Correct answer: B, D, F

Explanation

Option B is correct as the SAProuter instance must be in a public subnet for direct access to SAP. Option D is necessary to ensure the correct security configurations are in place for the SAP support network. Option F is essential for secure communication with SAP. Options A, C, and E do not meet the requirements for proper public access and security configurations.