[Apr-2023] P_SECAUTH_21 Questions - Truly Beneficial For Your SAP Exam
Download SAP P_SECAUTH_21 Sample Questions
NEW QUESTION 20
What does the SAP Security Optimization Service provide? Note: There are 2 correct answers to this question.
- A. Results containing the list of patches that have to be applied.
- B. Analysis of the network configuration
- C. Configuration checks of SAP systems
- D. Analysis of the security vulnerabilities within an SAP landscape
Answer: A,C
NEW QUESTION 21
While performing an audit of changes to the system and client change options for your production SAP S/4HANA environment, you receive the following message in transaction SCC4. "No logs found for selected period" How can you correct the problem.
- A. Maintain parameter log-mode with value normal SAP HANA
- B. Maintain parameter rsau/enable with value 1
- C. Maintain parameter rdisp/TRACE with value 3
- D. Maintain parameter rec/client with value ALL
Answer: D
NEW QUESTION 22
Where does SAP HANA store the values for the default Password Policy parameter? Note: there are 2 correct answers to this question.
- A. indexserver.ini
- B. global.ini
- C. attributes.ini
- D. nameservice.ini
Answer: A,D
NEW QUESTION 23
Which SAP tool provides functions to support Data Destruction, Business Rules Maintenance, and Processing of Audit Areas?
- A. SAP Information Lifecycle Management
- B. SAP Information Retrieval Framework
- C. SAP Business Rule Framework Plus
- D. SAP Data Controller Rule Framework
Answer: D
NEW QUESTION 24
You want to check the custom ABAP codes in your system for security vulnerabilities and you want to use the Code Vulnerability Analyzer (CVA) for carrying out these extended security checks. What needs to be done for this purpose? Note: There are 2 correct answers to this question.
- A. Run CVA from the ABAP Trace
- B. Run CVA from the ABAP Test Cockpit
- C. Execute program RSLIN_SEC_LICENSE_SETUP
- D. Execute transaction ST12 to start the analysis
Answer: A,B
NEW QUESTION 25
What is the default authentication mechanism in the SAP Cloud Platform?
- A. SAML
- B. SAP Logon Tickets
- C. Kerberos
- D. X 509 Certificates
Answer: A
NEW QUESTION 26
Which basis transaction provides an optimized user interface for evaluating authorization checks only?
- A. ABAP_TRACE
- B. STAUTHTRACE
- C. ST01
- D. RSECADMIN
Answer: B
NEW QUESTION 27
A security consultant has activated a trace via ST01 and is analyzing the authorization error with Return Code 12. What does the Return Code 12 signify?
- A. "No authorizations and does NOT have authorization object in their buffer"
- B. "No authorizations but does have authorization object in their buffer"
- C. "Objects not contained in User Buffer"
- D. "Too many parameters for authorization checks"
Answer: A
NEW QUESTION 28
In your system, you have a program which calls transaction A. Users with access to this program can still execute transaction A without explicit authorizations given to this transaction. How do you prevent the access of users to the transaction A from within the program?
- A. Maintain SE93 with authorization objects for transact on A.
- B. Make sure you do NOT assign transact on A to the authorization object S_TCODE in the role that you assign to the unauthorized users.
- C. Ensure that transact on A is NOT assigned into the same program authorization group
- D. Maintain the check indicator in table TCDCOUPLES
Answer: A
NEW QUESTION 29
You want to configure SNC in a newly-installed AS ABAP based SAP system. Besides running SNCWIZARD, what else do you need to perform for this scenario?
Note: There are 2 correct answers to this question
- A. Set the parameters using sapgenpse
- B. Enable encrypted HTTP service
- C. Restart the SAP system
- D. Manage the PSE
Answer: C,D
NEW QUESTION 30
How does the SAP SSO wizard (transaction SNCWIZARD) simplify the SNC configuration process?
- A. It creates the SNC_LIB environment variable in OS user profile
- B. It restarts the SAP application server for all profile changes to take effect
- C. It set the profile parameters for SAP SNC in the default profile
- D. It sets the profile parameter for SAP SNC in the instance profile
Answer: C
NEW QUESTION 31
How can you protect a table containing sensitive data using the authorization object S_TABU_DIS?
- A. The tables containing sensitive data must be associated with table groups in table TBRG.
- B. The tables containing sensitive data must be named using the authorization object S_TA BU_NAM for all responsible administrator employees. The fields DICBERCLS of the object S_TABU_DIS can
- C. The field DICBERCLS of the authorization object must enumerate all table names of the tables containing sensitive data.
- D. Authorization table groups containing tables with sensitive data must be defined in table TDDAT and these must be omitted for all employees who do not need access to these tables
Answer: D
Explanation:
then be filled with *.
NEW QUESTION 32
You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fiori front-end system (central hub). What transactions do you have to use to map a back-end system to one of those roles?
- A. PFCG
- B. SEGW
- C. /IWFND/MAINT_SERVICE
- D. /UI2/GW_SYS_ALIAS
Answer: C
NEW QUESTION 33
Where can we store the Security Audit Log events? Note: There are 2 correct answers to this question.
- A. In the SAP Solution Manager system
- B. In a central fi e system
- C. In the database table RSAU_BUF_DATA
- D. In the file system of the application servers
Answer: A,D
NEW QUESTION 34
What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note: There are 2 correct answers to this question
- A. The Logon ticket is not domain restricted
- B. The Logon ticket is sued for user-to-system communication
- C. The Logon ticket is always set to client 000
- D. The Logon ticket session is held in the working memory
Answer: A,B
NEW QUESTION 35
How can you describe static and dynamic assignments? Note: There are 2 correct answers to this question
- A. Dynamic assignments are based on attribute values
- B. Static assignments are set up via the Cloud Cockpit
- C. Dynamic assignments are based on scope values
- D. Static assignments occur at runtime
Answer: A,B
NEW QUESTION 36
What are characteristics only valid for the MDC high isolation mode?
- A. All internal database communication is secured using SNC
- B. Every tenant has its own set of OS users
- C. Every tenant has its own set of database users
- D. Every tenant has its own set of database users belonging to the same sapsys group
Answer: B
NEW QUESTION 37
Which data source needs to be integrated into SAP Identity Management via the Virtual Directory Server (VOS)?
- A. AS Java
- B. LDAP
- C. AS ABAP
- D. SAP HCM
Answer: B
NEW QUESTION 38
You are using the SAP Web Dispatcher for load-balancing purposes. Which actions are performed by the SAP Web Dispatcher in this scenario? Note: There are 2 correct answers to this question.
- A. Decrypts the HTTPS request and then selects the server
- B. Authenticates the user's credentials
- C. Uses SAP logon groups to determine which requests are directed to which server
- D. Checks current state of the message server
Answer: C,D
NEW QUESTION 39
An end user has indicated that they are getting an authorization error when attempting to call a Transaction Code (TCD). However, the TCD exists in the User Manu. What could be the issue and where would you check?
- A. This user is blocked from calling the TCD; check in SM01
- B. The TCD is assigned to the user via multiples roles; check in PFCG
- C. An entry in table USRBF prevents them from calling the TCD; check SE16
- D. Additional authorization checks are required for the TC; check in SE93
Answer: D
NEW QUESTION 40
Which type of systems can be found in the Identify Provisioning Service landscape? Note: There are 2 correct answers to this question
- A. Source
- B. Identify Provider
- C. Service Provider
- D. Proxy
Answer: A,B
NEW QUESTION 41
Why do you use table logging in AS ABAP?
- A. To log changes in customizing tables
- B. To log changes in master data
- C. To log changes in table technical settings
- D. To log changes in application data
Answer: A
NEW QUESTION 42
Which features do SAP HANA SQL-based analytic privileges offer compared to classic XML-based ones? Note: there are 2 correct answers to this question.
- A. Control of read-only SAP HANA procedures
- B. Transportable
- C. Complex filtering
- D. Control of read-only access to SQL views
Answer: A,B
NEW QUESTION 43
What are characteristic of the SAP_INTERNAL_HANA_SUPPORT catalog role? Note: there are 2 correct answers to this question.
- A. It has full access to all metadata
- B. System privileges can be granted to the role
- C. Object privileges can be granted to the role
- D. No role can be granted to it
Answer: B,D
NEW QUESTION 44
......
Truly Beneficial For Your SAP Exam: https://examtorrent.dumpsactual.com/P_SECAUTH_21-actualtests-dumps.html
