In which scenario would you use Read Access Logging (RAL) to determine the information?

Question

Options

• AIf a business user accessed a business partner's personal data
• BIf the authorizations for a business user
• CIf a business user has restrictions when accessing data in an application
• DIf a business user accessed data in a custom field of an application

• A
  94% (16)
• C
  6% (1)

Explanation

Read Access Logging (RAL) is an SAP tool designed specifically to audit when users read sensitive personal data - making option A correct because tracking whether a business user accessed a business partner's personal data (names, addresses, contact info) is precisely the privacy compliance scenario RAL was built for.

Option B is wrong because checking a user's authorizations (what they're allowed to do) is handled by authorization management tools like SUIM or role/profile analysis - RAL records what was actually read, not what permissions exist. Option C is similarly misdirected: data access restrictions are enforced and inspected through authorization objects and checks, not through a logging tool. Option D is a close distractor, but accessing data in a custom field doesn't inherently involve personal data - RAL's purpose is tied to personal/sensitive data protection, not general field-level access tracking.

Memory tip: Think of RAL as a "privacy audit trail" - whenever the question involves who looked at someone's personal information, RAL is the answer. If the question is about permissions, roles, or restrictions, think authorization tools instead.

No community discussion yet for this question.