Webclass 139: How can you detect ghost users in your system?

Would it be considered a potential case of corruption, if the daughter of your main client’s purchasing director is a member of staff in your organization?

Yes

Correct Incorrect Correct answer

No

Correct Incorrect Correct answer

Q2. What is the main idea around detecting ghost employees?

Look for gaps between payroll data sets and other HR/ Personnel related data sets

Correct Incorrect Correct answer

Look for unusually high salaries

Correct Incorrect Correct answer

Q3. Why might we not put the payroll data set into Isolation Forest to check for ghost employees?

Because isolation forest identifies unusual records compared to the rest of the data set, whereas a ghost employee has an unusual set of records

Correct Incorrect Correct answer

Because isolation forest identifies unusual sets of records, whereas we need to identify an individual unusual record

Correct Incorrect Correct answer

Q4. Would the PBI anomaly detection chart help us to better detect Ghost employees?

No

Correct Incorrect Correct answer

Yes

Correct Incorrect Correct answer

Q5. Which is a KPI that we could use for detecting Ghost employees?

% Holiday hours versus work hours

Correct Incorrect Correct answer

The value of the salary in a particular month

Correct Incorrect Correct answer

Q6. What might determine if Isolation Forest + Decision Tree/ Random forest would be a useful approach compared to rule-based analytics?

If we have a very large database of employees and we can compute multiple KPIs on those data sets

Correct Incorrect Correct answer

If the employee database is not very big

Correct Incorrect Correct answer

Q7. Why would we prefer a data model over a LEFT JOIN between the HR master data and the payroll transactional data?

Because if we do a LEFT JOIN then we will get a cartesian product which will make our total values incorrect

Correct Incorrect Correct answer

Because if we do a LEFT JOIN then we will not duplicate out all of the values for each employee as we should do

Correct Incorrect Correct answer

Q8. If you use Active Director logs, what might you need to do before you can use them in your dashboard?

Concatenate all the files into one file and then do the mapping between the Active Directory user ID and the SAP user ID

Correct Incorrect Correct answer

Connect Active Directory directly to your SAP system

Correct Incorrect Correct answer

Q9. If you see that half of your employees were found to not be in the building access log, what should you conclude?

That the building access log dataset is not complete or is not sufficient, or that you should filter on the employee group before testing

Correct Incorrect Correct answer

That there is major fraud going on in the entity

Correct Incorrect Correct answer

Q10. Which SAP table might provide us with time login events (if it is set-up in the system)

TEVEN

Correct Incorrect Correct answer

USR21

Correct Incorrect Correct answer

Q11. Which table shows us the last time that someone logged in to the SAP system

USR02

Correct Incorrect Correct answer

USR21

Correct Incorrect Correct answer

Q12. Why can we not directly join the Actions table to the Organization table based solely on the personnel number?

Because an employee can have an action and change organization at different date periods

Correct Incorrect Correct answer

Because we need to do the join based on the personnel number and the beginning and ending date fields

Correct Incorrect Correct answer

Q13. Which table in SAP shows us the social insurance payments

PA0013

Correct Incorrect Correct answer

PA2001

Correct Incorrect Correct answer

Q14. Which tables in SAP show us the absences

PA2001 and PTREQ_ATTABSDATA

Correct Incorrect Correct answer

PA000 and PA0001

Correct Incorrect Correct answer

WC139 – How can you detect ghost users in your system?

Quizzes

Participants 13

Webclass 139: How can you detect ghost users in your system?

admin June 9, 2026

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question