SAP P_ADMSEC_731 問題集

質問 1：
Where should the synchronization of user data between an AS ABAP based system and a directory
server be started?
A. The synchronization should be started from the directory server regardless of the direction of the
synchronization.
B. The synchronization should be started from the SAP system, regardless of the direction of the
synchronization.
C. The location from which the synchronization is started can be customized using transaction LDAP
(Lightweight Directory Access Protocol).
D. The location from which the synchronization is started can be maintained using the profile parameter
ldap/sync_start.
正解：B

質問 2：
Which of the following authentication mechanisms are available for SAP NetWeaver AS Java?
Note: There are 3 correct answers to this question.
A. SAP Logon Tickets for Single Sign-On
B. Web Dynpro for Single Sign-On
C. Security session IDs for Single Sign-On between applications
D. SAML Assertions for Single Sign-On
E. Kerberos Authentication for Single Sign-On
正解：A,C,D

質問 3：
Which of the following statements about the control table for the Session Manager / Profile Generator
(SSM_CUST) and the profile parameters are true?
Note: There are 3 correct answers to this question.
A. By using parameter: ENABLE_Java you can activate the display of the AS Java in transaction:SMICM.
B. By using parameter: DELETE_DOUBLE_TCODES you can avoid double transaction codes while
maintaining roles with PFCG.
C. By using parameter: CONDENSE_MENU_PFCG you can avoid redundancies while maintaining roles
with PFCG.
D. To be able to use the role maintenance tool (PFCG), you have to set the profile
parameter:auth/no_check_in_some_cases to "Y".
E. By using parameter: SAP_MENU_OFF you can deactivate the display of the SAP menu on the Easy
Access Screen.
正解：C,D,E

質問 4：
You have created a user in SAP NetWeaver AS Java. In which log file can you find the user information?
A. default Trace.trc
B. security.log
C. applications.log
D. server.log
正解：B

質問 5：
Which of the following statements regarding the SAP Web Dispatcher are true? Note: There are 2 correct
answers to this question.
A. It provides End-to-End SSL (Secure Socket Layer).
B. It can be administered with the Webadmin tool.
C. Each SAP Web Dispatcher can only serve one SAP backend system.
D. It can be administered with Visual Administrator.
正解：A,B

質問 6：
Which of the following methods allows you to establish a secure connection between the Software
Deployment Manager (SDM) and its remote GUI?
A. Virtual private network (VPN).
B. IPSec.
C. HTTPS tunneling.
D. Secure Socket Layer (SSL).
正解：A

質問 7：
Which of the following statements about LDAP (Lightweight Directory Access Protocol) is correct?
Note: There are 2 correct answers to this question.
A. The LDAP Connector is called using Java functions and communicates with the directory server using
the Lightweight Directory Access Protocol.
B. The LDAP Connector is a software component that controls the access requests from the SAP System
to a directory server.
C. The connection with the directory server can be created with various methods, such as simple binding
(user ID and password) or anonymously (guest account with no password).
正解：B,C

質問 8：
Which of the following statements regarding data sources, ABAP roles, UME (User Management Engine)
groups and Java security roles are correct?
Note: There are 2 correct answers to this question.
A. In a SAP NetWeaver AS ABAP+Java 7.0 installation ABAP composite roles appear as UME groups.
B. Since SAP NetWeaver 7.0, the AS ABAP is the default data source for AS ABAP and Java
installations.
C. You can assign Java security roles to UME groups using the SAP GUI for Java.
D. You can assign UME groups to ABAP roles using transaction PFCG.
E. In a single SAP NetWeaver AS Java 7.0 the Java database must be the data source.
正解：A,B