P-ADMSEC-731 Exam Training Practice Tests (SAP Certified Technology Professional - System Security with SAP NetWeaver 7.31)]

Question 1

Which of the following statements regarding systems based on SAP NetWeaver AS 7.0 double stack are
correct? Note: There are 2 correct answers to this question.

A. In double stack scenarios, you need a Java stack for each ABAP client since SAPJ2EE engines always
point to a single client only. B. In ECC 6.0 you should store the transactional data in the Java stack to segregate it. C. Since SAP NetWeaver AS 7.0, the logon parameters are synchronized. D. The Java stack can be assigned to the CUA (Central User Administration) master client via the JCO
(Java connector) adapter engine. E. It is recommended to install the Java stack in a separate database.

Correct Answer: A,E

Question 2

Which of the following statements regarding the authorization concept in SAP systems (for example, SAP
Solution Manager) are true?
Note: There are 2 correct answers to this question.

A. The users SAP* and DDIC should be copied and afterwards deleted to protect anonymous logons. B. The maximum number of user sessions is set using the parameter "login/max_user_mode" and cannot
be greater than 9. C. The ABAP standard role: SAP_J2EE_ADMIN provides full access to the AS Java. D. Java security roles can be assigned to ABAP roles using Java groups. E. Users defined in SAP systems automatically receive the required authorizations for the database level
and the operating system level.

Correct Answer: C,D

Question 3

Which of the following statements about the control table for the Session Manager / Profile Generator
(SSM_CUST) and the profile parameters are true?
Note: There are 3 correct answers to this question.

A. By using parameter: ENABLE_Java you can activate the display of the AS Java in transaction:SMICM. B. By using parameter: DELETE_DOUBLE_TCODES you can avoid double transaction codes while
maintaining roles with PFCG. C. By using parameter: SAP_MENU_OFF you can deactivate the display of the SAP menu on the Easy
Access Screen. D. To be able to use the role maintenance tool (PFCG), you have to set the profile
parameter:auth/no_check_in_some_cases to "Y". E. By using parameter: CONDENSE_MENU_PFCG you can avoid redundancies while maintaining roles
with PFCG.

Correct Answer: C,D,E

Question 4

Which tool does not allow the creation of users in SAP NetWeaver AS Java?

A. Config tool B. SAP NetWeaver Administrator C. SAP NetWeaver Identity Management D. Visual Administrator E. telnet

Correct Answer: A

Question 5

Which of the following interoperability profiles addresses transport security, Simple Object Access
Protocol (SOAP) messaging security, and other security considerations?

A. Message security profile B. Authorization security profile C. Basic security profile D. Authentication security profile

Correct Answer: C

Question 6

You want to install SAP Web Dispatcher for your system. Your SAP Web Dispatcher should run in a
demilitarized zone (DMZ). Which of the following statements are true about ports on the internal DMZ
firewall? Note: There are 2 correct answers to this question.

A. In an AS Java scenario you must open the Java dispatcher port. B. In an AS ABAP+Java scenario you must open the Java and the ABAP Dispatcher port. C. In an AS ABAP scenario you must open the ABAP dispatcher port. D. In an AS Java scenario you must open the ICM (Internet Communication Manager) port. E. In an AS ABAP+Java scenario you must open the ICM port.

Correct Answer: A,E

Question 7

Which of the following statements regarding regulations is false? Note: There are 2 correct answers to
this question.

A. SOX (Sarbanes-Oxley Act) is a binding regulation for companies traded at the US stock market. B. ITIL (IT Infrastructure Library) represents a universally applicable framework for optimum handling of
processes in IT management. C. The focus of CobiT (Control Objectives for Information and Related Technology) is on auditors, not on
IT management and IT end users.

Correct Answer: A,B

Question 8

Which of the following statements regarding table access in SAP systems (for example, SAP ECC) are
true? Note: There are 2 correct answers to this question.

A. Table access can be controlled using table: TDDAT. B. Tables can be only accessed via transaction: SM30 if a maintenance dialog was created before. C. Tables marked as current settings (SOBJ) can be changed although the client settings do not allow
changes to this client in a productive system. D. With transaction: SE16N you can only display the content of tables.

Correct Answer: B,C

SAP Certified Technology Professional - System Security with SAP NetWeaver 7.31 - P-ADMSEC-731 Exam Practice Test