SAP SAP Application Associate C_AUDSEC_731 Questions & Answers

• Question 21:

  Which of the following are benefits of using Security Optimization Self Service? Note: There are 2 correct answers to this question.

  A. It requires no license key for configuration.

  B. It updates an SAP system against intruders.

  C. It automatically implements security recommendations.

  D. It allows customized authorization checks.

  Correct Answer: AD

• Question 22:

  Which of the following must be available before you can perform Security Optimization Service checks for SAP vulnerability risks?

  A. SAP Solution Manager

  B. SAP ERP Central Component

  C. SAP NetWeaver Business Warehouse

  D. SAP NetWeaver Portal

  Correct Answer: A

• Question 23:

  Which of the following authorization objects must you assign to a user in SAP Solution Manager and in the SAP managed system to make sure that a trusted Remote Function Call connection is established?

  A. S_RFC

  B. S_RFC_TT

  C. S_RFC_SHLP

  D. S_RFCACL

  Correct Answer: D

• Question 24:

  What check must you carry out to analyze system data with Security Optimization Self Service?

  A. The SAP Solution Manager system has the latest support plug-ins installed.

  B. The system is connected to SAP Solution Manager.

  C. SAP Solution Manager is connected to the Security Optimization Service.

  D. The system landscape is registered with the Security Optimization Service.

  Correct Answer: B

• Question 25:

  In an SAP NetWeaver AS ABAP system, which security notes have the highest priority?

  Note: There are 2 correct answers to this question.

  A. Notes shown by transaction ABAP Note Assistant (SNOTE)

  B. Notes shown in Customer

  C. Notes marked by the Early Watch Alert in red

  D. Notes shown by RSECNOTE

  Correct Answer: CD

• Question 26:

  Which of the following is a characteristic of the physical layer of the OSI model?

  A. It passes data from one node to another and performs error detection.

  B. It enables program-to-program communication.

  C. It places data on the network media and takes the data off the network.

  D. It ensures end-to-end integrity of data transmission.

  Correct Answer: C

• Question 27:

  You have to configure Secure Network Communication (SNC) to secure connections between two SAP

  NetWeaver AS ABAP servers.

  Which profile parameters can you set for the trust manager?

  Note: There are 2 correct answers to this question.

  A. sec/libsapsecu

  B. snc/identity/as

  C. snc/data_protection/use

  D. snc/data_protection/max

  Correct Answer: AB

• Question 28:

  Which of the following communication paths can be protected by Secure Network Communication (SNC)? Note: There are 2 correct answers to this question.

  A. SAProuter to an external Remote Function Call

  B. SAP system application server to a database

  C. SAP GUI for Windows to an SAP system application server

  D. SAP system application server to an external Remote Function Call

  Correct Answer: CD

• Question 29:

  You are configuring an SAP NetWeaver AS ABAP system to allow authentication with x.509 client certificates issued by SAP NetWeaver single sign-on (SSO). When you test the connection with the standard SAP GUI, the system unexpectedly asks you for a password.

  How can you avoid the additional logon in the standard SAP GUI?

  A. Create a new SAP logon entry using the SNC name.

  B. Set the parameter icm/server_port_2 with string VCLIENT = 2.

  C. Map the client certificate of the user ID to the SAP NetWeaver AS ABAP user master record.

  D. Import the User CA root certificate from the Secure Login Server.

  Correct Answer: A

• Question 30:

  For which of the following does a secure logon using Kerberos support single sign-on and encryption? Note: There are 2 correct answers to this question.

  A. SAP GUI for Windows

  B. Browser access to SAP AS Java

  C. SAP GUI for Java for non-Windows clients

  D. Browser access to SAP AS ABAP

  Correct Answer: AB