SAP P_ADMSEC_731 Actual Free Exam Questions & Community Discussion

Exam Code/Number: P_ADMSEC_731
Exam Name/Title: SAP Certified Technology Professional - System Security with SAP NetWeaver 7.31
Certification Provider: SAP
Corresponding Certification: SAP Certified Technology Professional

Exam Questions: 80
Updated On: Oct 08, 2026

Question #17

Which of the following statements regarding data sources, ABAP roles, UME (User Management Engine)
groups and Java security roles are correct?
Note: There are 2 correct answers to this question.

A. You can assign Java security roles to UME groups using the SAP GUI for Java.

B. In a single SAP NetWeaver AS Java 7.0 the Java database must be the data source.

C. You can assign UME groups to ABAP roles using transaction PFCG.

D. In a SAP NetWeaver AS ABAP+Java 7.0 installation ABAP composite roles appear as UME groups.

E. Since SAP NetWeaver 7.0, the AS ABAP is the default data source for AS ABAP and Java
installations.

Discussion 0

Correct Answer: D,E Vote an answer

Question #18

Which of the following statements regarding business roles and technical roles in the SAP NetWeaver
Identity Management are true?
Note: There are 2 correct answers to this question.

A. Roles can be set up in hierarchies in the identity store.

B. Technical roles are known in the identity store as well as in the connected backend systems.

C. Business roles are system specific and will be uploaded from the backend systems.

D. Business roles can represent the business task of an employee.

E. Business roles are known in the identity store as well as in the connected backend systems.

Discussion 0

Correct Answer: B,D Vote an answer

Question #19

Which of the following statements regarding declarative and programmatic authentications are true? Note:
There are 3 correct answers to this question.

A. Components running on the SAP NetWeaver AS Java using programmatic authentication authenticate
directly against the UME using the UME API.

B. Declarative authentication introduces the concept of authentication schemes.

C. Declarative and programmatic authentication use the same technology.

D. The authentication scheme references a login module stack.

E. The EJB (Enterprise Java Bean) container handles authentication using declarative authentication.

Discussion 0

Correct Answer: A,C,D Vote an answer

Question #20

What are the main objectives of the Security Audit Log? Note: There are 2 correct answers to this
question.

A. To record security-related changes to the SAP System environment, for example changes to user
master records.

B. To record information that may be an indication for system problems, for example database read errors,
rollbacks.

C. To record information that enables the reconstruction of a series of events, for example successful or
unsuccessful transaction starts.

D. To record all changes to tables down to field level, for example changes to financial data tables.

Discussion 0

Correct Answer: A,C Vote an answer

Question #21

Which statements are correct about the functionality of SAP NetWeaver Identity Management?
Note: There are 3 correct answers to this question.

A. It complements and ties into the CAF (Composite Application Framework).

B. It enables efficient and secure management of identity information.

C. It complements integrated SAP NetWeaver security frameworks.

D. It supports both SAP-only and heterogeneous system landscapes.

Discussion 0

Correct Answer: B,C,D Vote an answer

Question #22

Which of the following statements regarding the authorization concept in SAP systems (for example, SAP
Solution Manager) are true?
Note: There are 2 correct answers to this question.

A. Users defined in SAP systems automatically receive the required authorizations for the database level
and the operating system level.

B. Java security roles can be assigned to ABAP roles using Java groups.

C. The maximum number of user sessions is set using the parameter "login/max_user_mode" and cannot
be greater than 9.

D. The ABAP standard role: SAP_J2EE_ADMIN provides full access to the AS Java.

E. The users SAP* and DDIC should be copied and afterwards deleted to protect anonymous logons.

Discussion 0

Correct Answer: B,D Vote an answer

Question #23

Which of the following statements regarding time-dependent assignment of authorization profiles to a
user master record are true?
Note: There are 2 correct answers to this question.

A. To activate a time-dependent assignment of an activity profile to a user master record you can regularly
plan the report: pfcg_time_dependency.

B. To be able to assign time-dependent activity profiles to user master records using transaction:
PFCG, the validity period of the corresponding role must include the current date.

C. To be able to assign time-dependent activity profiles to user master records you have to activate the
user workflow engine using transaction: PFCG.

D. To activate a time-dependent assignment of an activity profile to a user master record, SAP
recommends entering generated profiles directly into the user master record (SU01).

Discussion 0

Correct Answer: A,B Vote an answer

Question #24

Which of the following systems does the identity lifecycle management scenario of SAP NetWeaver
Identity Management comprise?
Note: There are 3 correct answers to this question.

A. SAP NetWeaver Identity Center.

B. SAP NetWeaver AS Java & Portal, SAP NetWeaver AS ABAP

C. SAP MDM (Master Data Management).

D. SAP HCM (Human Capital Management)

Discussion 0

Correct Answer: A,B,D Vote an answer

Download Free SAP P_ADMSEC_731 Demo

Simply submit your e-mail address below to get started with our free demo of your SAP P_ADMSEC_731 exam.