P-ADMSEC-731 by SAP Valid Free Exam Practice Test

Question 1

Which of the following statements regarding business roles and technical roles in the SAP NetWeaver
Identity Management are true?
Note: There are 2 correct answers to this question.

A. Business roles can represent the business task of an employee. B. Business roles are system specific and will be uploaded from the backend systems. C. Technical roles are known in the identity store as well as in the connected backend systems. D. Roles can be set up in hierarchies in the identity store. E. Business roles are known in the identity store as well as in the connected backend systems.

Correct Answer: A,C

Question 2

Which of the following statements about security of RFC connections are true? Note: There are 2 correct
answers to this question.

A. The trusted relationship authorization object: S_RFCACL is part of the profile: SAP_ALL. B. You can define which authorizations are required in the RFC destination for the corresponding RFC
connection with the field "Authorizations in Destinations" (SM59). C. In SAP NetWeaver AS 7.0 you should secure RFC connections using the secinfo and the reginfo file. D. No passwords are transmitted through the network within trusted relationships.

Correct Answer: C,D

Question 3

Which of the following statements regarding cryptographic tools are true? Note: There are 3 correct
answers to this question.

A. SAPSECULIB is not necessary in order to generate a system PSE during installation. B. When you install the SAP Cryptographic Library, it replaces the SAP Security Library (SAPSECULIB). C. The Personal Security Environment (PSE) contains certificates of trusted Certification Authorities. D. The SAPSECULIB provides digital envelopes. E. Only one SNC (Secure Network Communication) product can be used with one application server at a
time.

Correct Answer: B,C,E

Question 4

The Central User Administration (CUA) allows you to maintain some of the following centrally, for all
clients connected to the CUA. What can be maintained centrally? Note: There are 2 correct answers to
this question.

A. User logon permissions to clients B. Lock status of users C. Initial and changed passwords D. Replication of authorization profiles E. Complete definitions of "User Roles"

Correct Answer: A,B

Question 5

Which of the following support services can you directly access via the SAP Service Marketplace
(http://service.sap.com)?
Please choose the correct answer.

A. System access to SAP hosted solutions B. Execute the SAP remote installation service C. Online conferencing with experts on demand D. Download SAP upgrade guides

Correct Answer: D

Question 6

Which statements regarding SAP user management are true? Note: There are 3 correct answers to this
question.

A. A user with the user type "Communication" cannot log on to the system by using the SAP GUI. B. The parameter login/min_password_specials deactivates the forbidden password content of table:
USR40. C. In SAP NetWeaver AS ABAP 7.0 the parameter: login/no_automatic_user_sapstar (value: 1) is set by
default. D. Using parameter login/password_compliance_to_current_policy you can control whether the password
used complies with the current password rules. E. To provide users with authorizations within transaction: PFCG, you have to assign roles to users and
assign the profiles using transaction: SU01.

Correct Answer: A,C,D

Question 7

When you use the Central User Administration (CUA), when will your changes to user data become
effective in the child systems? Please also consider the options that the Application Link Enabling
technology (ALE) offers.
Note: There are 2 correct answers to this question.

A. The changes can be replicated by selecting the button "Distribute all data" in transaction SCUA. B. The IDocs that transport the changes to the user master data in the child systems can be collected and
transferred at a later time, triggered by a background job. C. Changes are replicated immediately. D. The changes can be replicated by the background job "CUA_Distribute" in the central system. E. The data for CUA will be replicated to the child systems every 60 minutes if no other
setting/configuration overrides this default value.

Correct Answer: B,C

Question 8

Which of the following statements about the tool "Risk Analysis and Remediation" (formerly known as
Virsa Compliance Calibrator) are true?
Note: There are 3 correct answers to this question.

A. Authorization objects are uploaded from the SAP backend systems. B. Custom real time agents (RTAs) can be built by the customer. C. Every SAP System that needs to be connected must have logon groups (SMLT) defined. D. The tool is deployed with the deploy tool for SAP GRC solutions (GDT). E. The SLD (system landscape directory) is not required for connecting to SAP Backend systems ABAP
stack.

Correct Answer: A,B,C

SAP Certified Technology Professional - System Security with SAP NetWeaver 7.31 - P-ADMSEC-731 Exam Practice Test