P-ADMSEC-731 試験問題を無料オンラインアクセス

Which of the following statements regarding UME roles and J2EE security roles are true?

• A.UME roles are based on actions.xml files.
• B.J2EE security roles can be created using the UME console.
• C.SAP recommends using UME roles instead of J2EE security roles.
• D.J2EE security roles are based on permissions.
• E.UME roles can be administered using Visual Administrator.

A customer uses an LDAP (Lightweight Directory Access Protocol ) enabled directory server. To simplify
the administration of SAP users, Central User Administration (CUA) was introduced. Now there are plans
to synchronize the LDAP enabled directory server with the CUA. Which of the following statements are
true? Note: There are 2 correct answers to this question.

• A.The SAP user field: BNAME is already a standard for most of the LDAP enabled directory server.
  Therefore the field mappings can be easily customized.
• B.A SAPROUTER must be used to establish the proper connection between the SAP CUA and the LDAP
  provider.
• C.The communication between LDAP and the CUA is based on PI 7.1. Therefore, SAP specific PI
  adapter ports must be open in the firewall environment.
• D.A prerequisite for the communication between the CUA and the LDAP enabled directory server is to
  open the LDAP(s) port in the firewall environment, if a firewall is used.
• E.The synchronization of fields can be controlled via a mapping transaction in SAP ABAP.

Which of the following statements regarding systems based on SAP NetWeaver AS 7.0 double stack are
correct? Note: There are 2 correct answers to this question.

• A.In double stack scenarios, you need a Java stack for each ABAP client since SAPJ2EE engines always
  point to a single client only.
• B.In ECC 6.0 you should store the transactional data in the Java stack to segregate it.
• C.It is recommended to install the Java stack in a separate database.
• D.The Java stack can be assigned to the CUA (Central User Administration) master client via the JCO
  (Java connector) adapter engine.
• E.Since SAP NetWeaver AS 7.0, the logon parameters are synchronized.

Which of the following statements regarding time-dependent assignment of authorization profiles to a
user master record are true?
Note: There are 2 correct answers to this question.

• A.To activate a time-dependent assignment of an activity profile to a user master record you can regularly
  plan the report: pfcg_time_dependency.
• B.To be able to assign time-dependent activity profiles to user master records you have to activate the
  user workflow engine using transaction: PFCG.
• C.To be able to assign time-dependent activity profiles to user master records using transaction:
  PFCG, the validity period of the corresponding role must include the current date.
• D.To activate a time-dependent assignment of an activity profile to a user master record, SAP
  recommends entering generated profiles directly into the user master record (SU01).

Which of the following is a characteristic of the Segregation of Duties (SOD) principle?
Note: There are 2 correct answers to this question.

• A.Enforcing the SOD principle means that individuals are capable of performing the tasks for different
  roles, rather than depending on just one individual.
• B.The SOD principle is a preventive control.
• C.The SOD principle is a detective control.
• D.Enforcing the SOD principle means that no single individual can carry out a critical task that could
  prove to be corruptive to the company.