Online Access Free P-ADMSEC-731 Exam Questions

Which of the following statements regarding Change Documents in SAP Systems is correct?

• A.Business data objects are changed frequently. Change documents are automatically used for business
  objects in SAP Systems.
• B.SAP Systems do not automatically use change documents for business objects. You have to activate
  the change document for the object using transaction SCD0.
• C.SAP Systems do not automatically use change documents for business objects. To be able to activate
  a change document for an object, you have to insert the appropriate calls in the corresponding programs.

Which of the following statements regarding the ICM (Internet Communication Manager) are true?
Note: There are 2 correct answers to this question.

• A.Through the internet communication framework (SICF) the ICM controls access to ABAP objects like
  BSPs.
• B.The ICM server cache utilizes the UFO cache to prevent denial of service attacks.
• C.To deactivate the ports of the ICM you have to adapt the corresponding parameters in the instance
  profile.
• D.One ICM per system controls the access to the corresponding objects (like BSPs) in AS ABAP.
• E.Since the ICM is an integral part of each ABAP instance, classical ABAP dynpros can be accessed via
  http(s).

Which of the following statements regarding time-dependent assignment of authorization profiles to a
user master record are true?
Note: There are 2 correct answers to this question.

• A.To be able to assign time-dependent activity profiles to user master records using transaction:
  PFCG, the validity period of the corresponding role must include the current date.
• B.To activate a time-dependent assignment of an activity profile to a user master record you can regularly
  plan the report: pfcg_time_dependency.
• C.To be able to assign time-dependent activity profiles to user master records you have to activate the
  user workflow engine using transaction: PFCG.
• D.To activate a time-dependent assignment of an activity profile to a user master record, SAP
  recommends entering generated profiles directly into the user master record (SU01).

Which of the following statements regarding the authorization concept in SAP systems (for example, SAP
Solution Manager) are true?
Note: There are 2 correct answers to this question.

• A.Java security roles can be assigned to ABAP roles using Java groups.
• B.The users SAP* and DDIC should be copied and afterwards deleted to protect anonymous logons.
• C.The ABAP standard role: SAP_J2EE_ADMIN provides full access to the AS Java.
• D.The maximum number of user sessions is set using the parameter "login/max_user_mode" and cannot
  be greater than 9.
• E.Users defined in SAP systems automatically receive the required authorizations for the database level
  and the operating system level.

A customer uses an LDAP (Lightweight Directory Access Protocol ) enabled directory server. To simplify
the administration of SAP users, Central User Administration (CUA) was introduced. Now there are plans
to synchronize the LDAP enabled directory server with the CUA. Which of the following statements are
true? Note: There are 2 correct answers to this question.

• A.The synchronization of fields can be controlled via a mapping transaction in SAP ABAP.
• B.A prerequisite for the communication between the CUA and the LDAP enabled directory server is to
  open the LDAP(s) port in the firewall environment, if a firewall is used.
• C.The SAP user field: BNAME is already a standard for most of the LDAP enabled directory server.
  Therefore the field mappings can be easily customized.
• D.A SAPROUTER must be used to establish the proper connection between the SAP CUA and the LDAP
  provider.
• E.The communication between LDAP and the CUA is based on PI 7.1. Therefore, SAP specific PI
  adapter ports must be open in the firewall environment.