Online Access Free P-ADMSEC-731 Exam Questions

A customer uses an LDAP (Lightweight Directory Access Protocol ) enabled directory server. To simplify
the administration of SAP users, Central User Administration (CUA) was introduced. Now there are plans
to synchronize the LDAP enabled directory server with the CUA. Which of the following statements are
true? Note: There are 2 correct answers to this question.

• A.The SAP user field: BNAME is already a standard for most of the LDAP enabled directory server.
  Therefore the field mappings can be easily customized.
• B.The synchronization of fields can be controlled via a mapping transaction in SAP ABAP.
• C.A prerequisite for the communication between the CUA and the LDAP enabled directory server is to
  open the LDAP(s) port in the firewall environment, if a firewall is used.
• D.A SAPROUTER must be used to establish the proper connection between the SAP CUA and the LDAP
  provider.
• E.The communication between LDAP and the CUA is based on PI 7.1. Therefore, SAP specific PI
  adapter ports must be open in the firewall environment.

What are the main objectives of the Security Audit Log? Note: There are 2 correct answers to this
question.

• A.To record information that enables the reconstruction of a series of events, for example successful or
  unsuccessful transaction starts.
• B.To record information that may be an indication for system problems, for example database read errors,
  rollbacks.
• C.To record security-related changes to the SAP System environment, for example changes to user
  master records.
• D.To record all changes to tables down to field level, for example changes to financial data tables.

Which of the following statements regarding SSO and SAP Logon Tickets are true? Note: There are 3
correct answers to this question.

• A.The SSO ticket is issued after successful login to the SAP NetWeaver AS Java.
• B.The clocks for the accepting systems are synchronized with the ticket-issuing system.
• C.Users have the same user ID and password in all of the systems they access using SAP Logon
  Tickets.
• D.The end users' Web browsers accept cookies (SAP GUI not in use).
• E.The cookie is stored in the temporary folder of the local GUI.

Which of the following considerations are important if a customer plans to use the Internet Connection
Manager (ICM) in SAP NetWeaver AS 7.0, together with Microsoft Internet Explorer?
Note: There are 2 correct answers to this question.

• A.The use of the TCP/IP ports must be agreed with the security/network department.
• B.The location of the SAP NetWeaver AS 7.0 within the network topology must be agreed with the
  network department.
• C.The SAP Gateway Port 3300 must be taken into consideration for the ICM.

Which of the following statements are true for user master records and authorization profiles in clients of
SAP systems? Note: There are 2 correct answers to this question.

• A.An authorization object can be assigned to a user master record.
• B.The name of an authorization profile can be changed using the role maintenance transaction (PFCG).
• C.It is not possible to include an authorization profile into a composite role directly.
• D.A user master record can be generated from the role maintenance transaction (PFCG).