SAP P_ADMSEC_731 Actual Free Exam Questions & Community Discussion

Exam Code/Number: P_ADMSEC_731
Exam Name/Title: SAP Certified Technology Professional - System Security with SAP NetWeaver 7.31
Certification Provider: SAP
Corresponding Certification: SAP Certified Technology Professional

Exam Questions: 80
Updated On: Sep 29, 2026

Question #1

Which of the following statements regarding SAP GRC Access Controls (formerly known as Virsa Suite)
are correct?
Note: There are 2 correct answers to this question.

A. The Risk Analysis and remediation tool is especially valuable to control SoD violations in the Java
stack.

B. The mitigation tool allows you to administer SoD violations in the ABAP stack.

C. The Enterprise Role Management tool is able to control SoD violations dynamically.

D. The Compliant User Provisioning tool runs in the Java stack.

E. Since NetWeaver AS 7.0 you have to set the parameter:
login/no_automatic_user_sapstar as a prerequisite to activate: Superuser privilege management.

Discussion 0

Correct Answer: C,D Vote an answer

Question #2

Which of the following statements about SAP Logon Tickets are true? Note: There are 2 correct answers
to this question.

A. Set the parameter: login/create_sso2_ticket = 2 if the application public key for the server has been
signed by a CA.

B. The ticket issuing system does not need a PSE (Personal Security Environment).

C. With the aid of web server filters, non-SAP components do not have to verify SAP Logon Tickets.

D. An Access Control List (ACL) is used to ensure that the tickets are only accepted from explicit
ticket-issuing servers.

Discussion 0

Correct Answer: C,D Vote an answer

Question #3

The Central User Administration (CUA) allows you to maintain some of the following centrally, for all
clients connected to the CUA. What can be maintained centrally? Note: There are 2 correct answers to
this question.

A. Complete definitions of "User Roles"

B. Replication of authorization profiles

C. Lock status of users

D. Initial and changed passwords

E. User logon permissions to clients

Discussion 0

Correct Answer: C,E Vote an answer

Question #4

Which of the following statements about the tool "Risk Analysis and Remediation" (formerly known as
Virsa Compliance Calibrator) are true?
Note: There are 3 correct answers to this question.

A. Custom real time agents (RTAs) can be built by the customer.

B. Every SAP System that needs to be connected must have logon groups (SMLT) defined.

C. The tool is deployed with the deploy tool for SAP GRC solutions (GDT).

D. Authorization objects are uploaded from the SAP backend systems.

E. The SLD (system landscape directory) is not required for connecting to SAP Backend systems ABAP
stack.

Discussion 0

Correct Answer: A,B,D Vote an answer

Question #5

You want to install SAP Web Dispatcher for your system. Your SAP Web Dispatcher should run in a
demilitarized zone (DMZ). Which of the following statements are true about ports on the internal DMZ
firewall? Note: There are 2 correct answers to this question.

A. In an AS ABAP scenario you must open the ABAP dispatcher port.

B. In an AS Java scenario you must open the Java dispatcher port.

C. In an AS Java scenario you must open the ICM (Internet Communication Manager) port.

D. In an AS ABAP+Java scenario you must open the Java and the ABAP Dispatcher port.

E. In an AS ABAP+Java scenario you must open the ICM port.

Discussion 0

Correct Answer: B,E Vote an answer

Question #6

Web Services (WS) Security describes enhancements to Simple Object Access Protocol (SOAP)
messaging. Which of the following does not apply to WS Security?

A. Message severity

B. Message confidentiality

C. Message authentication

D. Message authorization

E. Message integrity

Discussion 0

Correct Answer: D Vote an answer

Question #7

Which of the following statements regarding SSO and SAP Logon Tickets are true? Note: There are 3
correct answers to this question.

A. Users have the same user ID and password in all of the systems they access using SAP Logon
Tickets.

B. The cookie is stored in the temporary folder of the local GUI.

C. The end users' Web browsers accept cookies (SAP GUI not in use).

D. The SSO ticket is issued after successful login to the SAP NetWeaver AS Java.

E. The clocks for the accepting systems are synchronized with the ticket-issuing system.

Discussion 0

Correct Answer: C,D,E Vote an answer

Question #8

A customer uses an LDAP (Lightweight Directory Access Protocol ) enabled directory server. To simplify
the administration of SAP users, Central User Administration (CUA) was introduced. Now there are plans
to synchronize the LDAP enabled directory server with the CUA. Which of the following statements are
true? Note: There are 2 correct answers to this question.

A. The communication between LDAP and the CUA is based on PI 7.1. Therefore, SAP specific PI
adapter ports must be open in the firewall environment.

B. A prerequisite for the communication between the CUA and the LDAP enabled directory server is to
open the LDAP(s) port in the firewall environment, if a firewall is used.

C. The synchronization of fields can be controlled via a mapping transaction in SAP ABAP.

D. A SAPROUTER must be used to establish the proper connection between the SAP CUA and the LDAP
provider.

E. The SAP user field: BNAME is already a standard for most of the LDAP enabled directory server.
Therefore the field mappings can be easily customized.

Discussion 0

Correct Answer: B,C Vote an answer

Download Free SAP P_ADMSEC_731 Demo

Simply submit your e-mail address below to get started with our free demo of your SAP P_ADMSEC_731 exam.