Get Latest Mar-2023 Real P_SECAUTH_21 Exam Questions and Answers FREE [Q47-Q66]

4/5 - (1 vote)

Get Latest Mar-2023 Real P_SECAUTH_21 Exam Questions and Answers FREE

Truly Beneficial For Your SAP Exam (Updated 139 Questions)

SAP P_SECAUTH_21 Exam Description:

The “SAP Certified Technology Professional – System Security Architect” certification exam verifies that the candidate possesses the depth of knowledge required in the areas of SAP System Security and Authorization. This certificate proves that the candidate has an advanced understanding within the Technology Consultant profile and is able to apply these skills practically and provide guidance in SAP project implementations in the role of a SAP Security Architect. Furthermore, the holder of this certification is capable to review and evaluate the security level of complex on-premise, cloud and hybrid system architectures.

NO.47 The SAP HANA database has its parameters configured with its default values. How can the SAP_INTERNAL_HA NA_SUPPORT catalog role be used?

The role can be granted to another role (nested)

The role can be granted to multiple users at a time

The role can be granted only with system privileges

The role can be granted to the SYSTEM user

NO.48 User1 grants role 1 to user2. Who can revoke role 1 role from user2?

The system OBA user

The owner of role 1

Only User1

Any user with the ‘ROLE ADMIN’ database role

NO.49 To prevent session fixation and session hijacking attacks, SAP’s HTTP security session management is highly recommended. What are the characteristics of HTTP security session management? Note: There are 2 correct answers to this question.

It uses URLs containing sap-context d to identify the security session

The system is checking the logon credentials again for every request

The security sessions are created during logon and deleted during logoff.

The session identifier is a reference to the session context transmitted through a cookie.

NO.50 What authorization object is checked when a user selects an A BAP Web Dynpro application to execute?

S_PROGRAM

S_START

S_TCODE

S_SERVICE

NO.51 You have implemented CUA in your organization and you want to set the field distribution attribute as follows: Maintain a default value in the central system that is automatically distributed to the child systems when you create a user. After distribution, the data is maintained only locally and is no longer distributed if you change it in the central or child system. Which field distribution parameter do you maintain?

Redistribution

Local

Global

Proposal

NO.52 Which authorization object is required to support trusted system access by an RFC user following the configuration of a Managed System in SAP Solution Manager?

S_RFCACL

S_ACL_HIST

S_RFC_TT

S_RFC_TTAC

NO.53 You verified the password of the TMSADM user in your SAP landscape to be SAP defaulted. You want to reset this password by using program TMS_UPDATE_PWD_OF_TMSADM. What steps would you take to reset this password?
Note: There are 2 correct answers to this question

Run this program in the Domain Controller (client 000)

Lock TMSADM in all the system/clients including 000

Assign “SAP_ALL” to TMSADM in all systems/clients including 000

Deactivate the SNC option

NO.54 Which of the following events will create security alerts in the CCMS Alert Monitor of SAP Solution Manager? Note: There are 2 correct answers to this question.

Manual table changes

Changes to the instance profile

Call of RFC functions

Start of reports

NO.55 How can you register an SAP Gateway service? Note: There are 2 correct answers to this question.

Use SAP_GAT EWAY_BASIC_CONFIG in transact on STCO 1 on the frontend server

Use transaction /IWFND/MA INT_SERVICE on the front-end server

Use SAP_GAT EWAY_ACTIVATE_ODATA_SERV in transact on STC01 on the front-end server

Use transaction SEGW on the back-end server

NO.56 Which features does the SAP Router support? Note: There are 2 correct answers to this question.

Balancing the load to ensure an even distribution across the back-end servers

Terminating, forwarding and (re)encrypting requests, depending on the SSL configuration

Password-protecting connections from unauthorized access from outside the network

Controlling and logging network connections to SAP systems

NO.57 Insufficient authorization checks might allow A BAP programs to access the PSE files. Which authorization objects should we check to protect the PSEs? Note: There are 2 correct answers to this question.

S_RZL_ADM

S_DATASET

S_ADMI_FCD

S_DEVELOP

NO.58 You are reviewing the authorizations for Core Data Services (CDS) views. How are classic authorizations integrated with CDS authorizations?

By using the statement AUTHORITY-CHECK in the access control of the CDS view

By defining access conditions in an access rule for the CDS view

By assigning the CDS view to the authorization profile in PFCG

By defining the CDS view in the authorization object in SU21

NO.59 SAP GRC Access Control provides risk analysis for which of the following? Note: There are 2 correct answers to this question.

Business Rule Framework

Business Role Management

Access Request Management

Password Self-Service

NO.60 You are evaluating the “Cross-client object change” option using transact on SCC4 for your Unit Test Client in the development environment. Which setting do you recommend?

Changes to repository and cross-client customizing allowed

No changes to repository and cross-client customizing objects

No changes to cross-client customizing objects

No changes to repository objects

NO.61 What does the SAP Security Optimization Service provide? Note: There are 2 correct answers to this question.

Configuration check of the SAP systems and the SAP middleware components against defined configurations

Results with recommendations on how to resolve identified vulnerabilities without prioritization

Analysis of security vulnerabilities within an enterprise’s SAP landscape to ensure optimal protection against intrusions

Analysis of your operating system, database, and entire SAP system to ensure optimal performance and reliability

NO.62 How would you control access to the ABAP RFC function modules? Note: There are 2 correct answers to this question.

O Block RFC Callback Whitelists

O Restrict RFC authorizations

O Deactivate switchable authorization checks

O Implement UCON functionality

NO.63 What are the key capabilities of Event Analyzer in Enterprise Threat Detection 1.0? Note: There are 2 correct answers to this question.

Synchronization of user contexts from ABAP Systems

Predictive threat notification

Pseudonymize user identities for data protection

Baseline detection

NO.64 How does the SAP SSO wizard (transaction SNCWIZARD) simplify the SNC configuration process?

It restarts the SAP application server for all profile changes to take effect

It sets the profile parameter for SAP SNC in the instance profile

It creates the SNC_LIB environment variable in OS user profile

It set the profile parameters for SAP SNC in the default profile

NO.65 How can you describe static and dynamic assignments? Note: There are 2 correct answers to this question

Static assignments occur at runtime

Dynamic assignments are based on scope values

Dynamic assignments are based on attribute values

Static assignments are set up via the Cloud Cockpit

NO.66 Which of the 7 core principles of the General Data Privacy Regulation (GDPR) requires thorough documentation of all policies and controls that govern the collection and processing of data?

Accuracy

Lawfulness, Fairness and Transparency

Accountability

Integrity and Confidentiality

Loading …