A.The SOD principle is a detective control.

B.Enforcing the SOD principle means that no single individual can carry out a critical task that could
prove to be corruptive to the company.

C.The SOD principle is a preventive control.

D.Enforcing the SOD principle means that individuals are capable of performing the tasks for different
roles, rather than depending on just one individual.

A.Central

B.Fixed

C.Global

D.Redistribution

E.Local

A.To be able to use the role maintenance tool (PFCG), you have to set the profile
parameter:auth/no_check_in_some_cases to "Y".

B.By using parameter: SAP_MENU_OFF you can deactivate the display of the SAP menu on the Easy
Access Screen.

C.By using parameter: CONDENSE_MENU_PFCG you can avoid redundancies while maintaining roles
with PFCG.

D.By using parameter: ENABLE_Java you can activate the display of the AS Java in transaction:SMICM.

E.By using parameter: DELETE_DOUBLE_TCODES you can avoid double transaction codes while
maintaining roles with PFCG.

A.The maximum number of user sessions is set using the parameter "login/max_user_mode" and cannot
be greater than 9.

B.Java security roles can be assigned to ABAP roles using Java groups.

C.The users SAP* and DDIC should be copied and afterwards deleted to protect anonymous logons.

D.The ABAP standard role: SAP_J2EE_ADMIN provides full access to the AS Java.

E.Users defined in SAP systems automatically receive the required authorizations for the database level
and the operating system level.

A.The most powerful portal role is the sap_all_admin_role.

B.Portal objects can be protected using authorization objects, organizational levels and Access Control
Lists (ACLs).

C.Portal objects can be protected using an authorization concept called "dedicated content
administration".

D.Content that was assigned to a user using a portal role can be accessed via the portal logon for this
user, regardless of the ACL (Access Control List) setting.

E.Portal applications are protected by security zones which can be assigned to a user/group or role.