SAP Certified Technology Professional - System Security with SAP NetWeaver 7.31 - P-ADMSEC-731 Exam Practice Test

A. ITIL (IT Infrastructure Library) represents a universally applicable framework for optimum handling of
processes in IT management.

B. The focus of CobiT (Control Objectives for Information and Related Technology) is on auditors, not on
IT management and IT end users.

C. SOX (Sarbanes-Oxley Act) is a binding regulation for companies traded at the US stock market.

A. Message authorization

B. Message integrity

C. Message confidentiality

D. Message severity

E. Message authentication

A. default Trace.trc

B. server.log

C. security.log

D. applications.log

A. If you terminate the SSL connection at the load balancer, security for the back-end connection must be
obtained using the network.

B. If you terminate the SSL connection during the load balancer session, cookies cannot be used for
persistence.

C. Using end-to-end SSL you must use the client IP address for session persistence.

D. Using end-to-end SSL, the back-end server does not support user authentication using client
certificates.

A. Since SAP NetWeaver AS 7.0, the logon parameters are synchronized.

B. It is recommended to install the Java stack in a separate database.

C. The Java stack can be assigned to the CUA (Central User Administration) master client via the JCO
(Java connector) adapter engine.

D. In double stack scenarios, you need a Java stack for each ABAP client since SAPJ2EE engines always
point to a single client only.

E. In ECC 6.0 you should store the transactional data in the Java stack to segregate it.

A. Business roles can represent the business task of an employee.

B. Business roles are known in the identity store as well as in the connected backend systems.

C. Technical roles are known in the identity store as well as in the connected backend systems.

D. Roles can be set up in hierarchies in the identity store.

E. Business roles are system specific and will be uploaded from the backend systems.

A. A portal role can contain services (such as transactions, reports or BSP applications) from different
SAP systems.

B. To avoid duplicate work, it is possible to exchange role information between the portal and an AS
ABAP based system.

C. The portal provides central authorization maintenance.

D. To transfer roles from the backend system to the portal, you first transfer the matching menu elements
from the portal to the SAP (ABAP) system.

E. From SAP ECC 6.0 you can transfer authorization profiles to the enterprise portal to control
authorization checks in the backend system.

A. Logon data

B. Address

C. Roles

D. Groups

E. Systems