Quality P_SECAUTH_21 PDF Dumps – P_SECAUTH_21 Exam Questions [Q20-Q44]

Rate this post

Quality P_SECAUTH_21 PDF Dumps – P_SECAUTH_21 Exam Questions

Most UptoDate SAP P_SECAUTH_21 Exam Dumps PDF 2023

NO.20 You want to configure SNC with X.509 certificates using Common CryptoLib as the cryptographic library in a new installed AS ABAP system. Besides running SNCWIZARD, what do you need to set up for this scenario? Note: There are 2 correct answers to this question.

Set the environment variable CCL_ PROFILE to the default profile file path

Maintain the relevant CCL/SNC/’ profile parameters

Set the environment variable CCL_ PROFILE to SECUDIR

Set the CCL SNC parameters using sapgenpse

NO.21 SAP GRC Access Control provides risk analysis for which of the following? Note: There are 2 correct answers to this question.

Business Rule Framework

Business Role Management

Access Request Management

Password Self-Service

NO.22 Which authorizations are required for an SAP Fiori Launchpad user? Note: There are 2 correct answers to this question

/UI2/INTEROP

/UI2/CHIP

/UI2/PAGE_BUILDER_PERS

/UI2/PAGE_BUILDER_CUST

NO.23 What does the SAP Security Optimization Service provide? Note: There are 2 correct answers to this question.

Configuration check of the SAP systems and the SAP middleware components against defined configurations

Results with recommendations on how to resolve identified vulnerabilities without prioritization

Analysis of security vulnerabilities within an enterprise’s SAP landscape to ensure optimal protection against intrusions

Analysis of your operating system, database, and entire SAP system to ensure optimal performance and reliability

NO.24 Which tool do you use to customize the SAP HANA default password policy? Note: There are 2 correct answers to this question.

SAP HANA Lifecycle Manager

SAP HANA Studio

SAP HANA Cockpit

SAP Web IDE

NO.25 How would you control access to the ABAP RFC function modules? Note: There are 2 correct answers to this question.

Block RFC Callback Whitelists

Restrict RFC authorizations

Deactivate switchable authorization checks

Implement UCON functionality

NO.26 What connection type is used for restricted users?

OLEDB

ODBC

HTTP/S

JDBC

NO.27 Which OData authorizations are required for a user to see business data in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.

Start authorization in the SAP Fiori front-end system

Access authorization in the SAP Fiori front-end system

Access authorization in the SAP S/4HANA back-end system

Start authorization in the SAP S/4HANA back-end system

NO.28 Why do you use table logging in AS ABAP?

To log changes in application data

To log changes in master data

To log changes in table technical settings

To log changes in customizing tables

NO.29 Which tasks would you perform to allow increased security for the SAP Web Dispatcher Web Administration Interface? Note: There are 2 correct answers to this question

Use subparameter ALLOWPUB = TRUE of the profile parameter icm/server_port_<xx>

Use access restrictions to the icm/HTTP/auth_<xx> profile parameter

Use a separate port for the administration interface

Use Secure Socket Layer (SSL) for encrypted access

NO.30 The security administrator is troubleshooting authorization errors using transaction SU53. While running transaction MM50, the user received the following error.
“You are not authorized to use transaction MM01”
The user’s position in the organization makes it inappropriate for them to have direct access to transaction MM01 because it creates a Segregation of Duties conflict.
How can the security administrator resolve the issue and still provide the user with the needed access to MM50?

Set the check indicator (for the transaction authorization called by the MM01 transaction) to NO, using transaction SE97 for transaction MM50.

Set the check indicator value for object S_TCODE in the SU24 data for transaction MM01 to Do Not Check.

Remove transaction MM01 as a CALLING transaction from table TCDCOUPLES.

Set the value form instance parameter auth/no_check_in_some_cases to N.

NO.31 What does the SAP Security Optimization Service provide? Note: There are 2 correct answers to this question.

Analysis of the security vulnerabilities within an SAP landscape

Results containing the list of patches that have to be applied.

Configuration checks of SAP systems

Analysis of the network configuration

NO.32 What authorization object is checked when a user selects an A BAP Web Dynpro application to execute?

S_PROGRAM

S_START

S_TCODE

S_SERVICE

NO.33 In your system, you have a program which calls transaction A. Users with access to this program can still execute transaction A without explicit authorizations given to this transaction. How do you prevent the access of users to the transaction A from within the program?

Make sure you do NOT assign transact on A to the authorization object S_TCODE in the role that you assign to the unauthorized users.

Maintain SE93 with authorization objects for transact on A.

Maintain the check indicator in table TCDCOUPLES

Ensure that transact on A is NOT assigned into the same program authorization group

NO.34 To prevent session fixation and session hijacking attacks, SAP’s HTTP security session management is highly recommended. What are the characteristics of HTTP security session management? Note: There are 2 correct answers to this question.

It uses URLs containing sap-context d to identify the security session

The system is checking the logon credentials again for every request

The security sessions are created during logon and deleted during logoff.

The session identifier is a reference to the session context transmitted through a cookie.

NO.35 Which platform services are available in the Cloud Foundry? Note: There are 2 correct answers to this question

Commerce

Integration

Analytics

Data Quality

NO.36 Which measures should we implement to protect the PSEs? Note: There are 2 correct answers to this question

Review the usage of the S_DATASET object

Restrict access to the opposing system users

Review the usage of the S_ADMI_FCD object

Encyrpt the files with the transaction SNCO

NO.37 What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note: There are 2 correct answers to this question

The Logon ticket is not domain restricted

The Logon ticket session is held in the working memory

The Logon ticket is sued for user-to-system communication

The Logon ticket is always set to client 000

NO.38 What information constitutes an indirect connection to an individual, in the context of GDPR? Note: There are 3 correct answers to this question

National Identifier

Postal Address

Date of Birth

License plate number

IP Address

NO.39 Based on your company guidelines you have set the password expiration to 60 days. Unfortunately, there is an RFC user on your SAP system which must not have a password change for 180 days. Which option would you recommend to accomplish such a request?

Change profile parameter login/password_expiration_time to 180

Create a security policy via SECPOL and assign it to tile RFC users

Create additional authorizations for RFC users and assign it to them

Create enhancement spot I user-exit

NO.40 Under which group can you find the “System Recommendations” file in the Solution Manager launchpad?

IT Service Management

Technical Administration

Change Management

Root Cause Analysis

NO.41 How can you protect a table containing sensitive data using the authorization object S_TABU_DIS?

The tables containing sensitive data must be associated with table groups in table TBRG.

The field DICBERCLS of the authorization object must enumerate all table names of the tables containing sensitive data.

Authorization table groups containing tables with sensitive data must be defined in table TDDAT and these must be omitted for all employees who do not need access to these tables

The tables containing sensitive data must be named using the authorization object S_TA BU_NAM for all responsible administrator employees. The fields DICBERCLS of the object S_TABU_DIS can then be filled with *.

NO.42 You want to allow some of your colleagues to use the SAP GUI for Java to connect directly to your SAP back-end system from a public internet connection without having to set up a VPN connection first. Which of the following SAP solutions is suited for this purpose?

SAP Web Dispatcher

SAP router

SAP Cloud Connector

SAP NetWeaver Gateway

NO.43 Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 3 correct answers to this question.

HTIP(S)

Trusted RFC

Secure Network Communication (SNC)

Info Access (InA)

Data

NO.44 What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note: There are 2 correct answers to this question.

The Logon ticket is used for user-to-system communication

The Logon ticket is domain restricted

The Logon ticket has an unconfigurable lifetime validity

The Logon ticket session is held in the working memory

100% Free SAP Certified Technology Professional P_SECAUTH_21 Dumps PDF Demo Cert Guide Cover: https://www.examstorrent.com/P_SECAUTH_21-exam-dumps-torrent.html

admin

You May Also Like

Leave a Reply Cancel reply