Online Access Free P_ADMSEC_731 Exam Questions

Which of the following statements about control mechanisms in SAP systems (for example, SAP ECC)
are true? Note: There are 2 correct answers to this question.

• A.To switch on table logging completely, you have to set the tp parameter: REC_CLIENT.
• B.By default the transport strategy is workflow-controlled.
• C.By default the quality assurance approval procedure is switched on.
• D.It is possible to automatically create program versions in a productive system.

Which of the following statements regarding authorization maintenance using transaction: PFCG are true?
Note: There are 2 correct answers to this question.

• A.For authorizations with the status: "changed", the Profile Generator cannot create a connection
  between the object entry and the menu.
• B.SAP recommends merging authorizations in the background.
• C.The status: "Old" for authorizations indicates that all field values in the subordinate levels of the
  hierarchy are still current and that no new authorizations have been added.
• D.SAP recommends assigning organizational level values directly in the authorization structure.

Which of the following statements regarding SAP GRC Access Controls (formerly known as Virsa Suite)
are correct?
Note: There are 2 correct answers to this question.

• A.The Compliant User Provisioning tool runs in the Java stack.
• B.The Enterprise Role Management tool is able to control SoD violations dynamically.
• C.The Risk Analysis and remediation tool is especially valuable to control SoD violations in the Java
  stack.
• D.The mitigation tool allows you to administer SoD violations in the ABAP stack.
• E.Since NetWeaver AS 7.0 you have to set the parameter:
  login/no_automatic_user_sapstar as a prerequisite to activate: Superuser privilege management.

Which of the following statements about SAP Logon Tickets are true? Note: There are 2 correct answers
to this question.

• A.Set the parameter: login/create_sso2_ticket = 2 if the application public key for the server has been
  signed by a CA.
• B.An Access Control List (ACL) is used to ensure that the tickets are only accepted from explicit
  ticket-issuing servers.
• C.The ticket issuing system does not need a PSE (Personal Security Environment).
• D.With the aid of web server filters, non-SAP components do not have to verify SAP Logon Tickets.

Which of the following statements regarding systems based on SAP NetWeaver AS 7.0 double stack are
correct? Note: There are 2 correct answers to this question.

• A.Since SAP NetWeaver AS 7.0, the logon parameters are synchronized.
• B.The Java stack can be assigned to the CUA (Central User Administration) master client via the JCO
  (Java connector) adapter engine.
• C.It is recommended to install the Java stack in a separate database.
• D.In ECC 6.0 you should store the transactional data in the Java stack to segregate it.
• E.In double stack scenarios, you need a Java stack for each ABAP client since SAPJ2EE engines always
  point to a single client only.