Practice on 2023 LATEST P-SECAUTH-21 Exam Updated 81 Questions [Q48-Q70]

Rate this post

Practice on 2023 LATEST P-SECAUTH-21 Exam Updated 81 Questions

Download Latest P-SECAUTH-21 Dumps with Authentic Real Exam QA’s

SAP P-SECAUTH-21 Exam Syllabus Topics:

Topic	Details
Topic 1	User Administration and Identity Lifecycle Management in SAP Explain authorization, security and scenarios in SAP HANA
Topic 2	Explain how to secure an SAP system and conduct security checks Explain security and scenarios in SAP Cloud platform
Topic 3	Monitor security and troubleshoot security issues using Solution Manager Describe and implement the authorization concept for SAP S 4HANA
Topic 4	Describe and implement the authorization concept for SAP Business Suite SAP Netweaver Application Server and Infrastructure Security
Topic 5	Describe the security goals, data privacy goverance Authorization, Security and Scenarios in SAP HANA

NO.48 What authorization object is checked when a user selects an A BAP Web Dynpro application to execute?

S_PROGRAM

S_START

S_TCODE

S_SERVICE

NO.49 A user reports an issue with data not showing up in the visualization of the SAP Fiori tiles. You want to verify the target mapping. At what level are you going to check the target mapping?

O At the catalog level in the SAP Fiori front-end server

O At the group level in the SAP Fiori front-end server

O At the group level in the SAP Fiori Launchpad

O At the application level in the Web IDE

NO.50 What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note: There are 2 correct answers to this question.

The Logon ticket is used for user-to-system communication

The Logon ticket is domain restricted

The Logon ticket has an unconfigurable lifetime validity

The Logon ticket session is held in the working memory

NO.51 Which tool do you use to customize the SAP HANA default password policy? Note: There are 2 correct answers to this question.

SAP HANA Lifecycle Manager

SAP HANA Studio

SAP HANA Cockpit

SAP Web IDE

NO.52 Where can we store the Security Audit Log events? Note: There are 2 correct answers to this question.

In the database table RSAU_BUF_DATA

In the file system of the application servers

In the SAP Solution Manager system

In a central fi e system

NO.53 In your SAP HCM system, you are implementing structural authorizations for your users. What are the characteristics of this authorization type? Note: There are 2 correct answers to this question.

The structural profile is maintained and assigned to users using the Profile Generator

The structural profile determines the access mode which the user can perform

The structural profile is maintained and assigned to users using the Implementation Guide

The structural profile determines the accessible object in the organizational structure

NO.54 Which tasks would you perform to allow increased security for the SAP Web Dispatcher Web Administration interface? Note: There are 2 correct answers to this question.

Use a separate port for the content

Use access restrictions with the icm/HTTP/auth_<xx> profile parameter

Use subparameter ALLOWPUB = FALSE of the profile parameter icm/server_port_<xx>

Use Secure Socket Layer (SSL) for password encrypt on

NO.55 What are the features of the Audit Information System (AIS)? Note: There are 2 correct answers to this question.

The roles are built from nodes in the Implementation Guide (IMG)

It can be launched directly using transact on SECR

It offers two types of audit reports: system and business

The report selection variables are configured during setup

NO.56 A user has the authorization to execute SP01. What can this user access with authorization object S_ SPO_ ACT when the ‘Value for Authorization Check’ field is set to “_USER.

All spool requests for all users in the client

All spool requests for users in the same user group

User’s own spool requests

All spool requests for a specific user in the client

NO.57 What reference is used to connect multiple Cloud Connectors to one SAP Cloud Platform subaccount?

System Alias

Location ID

Instance ID

Virtual Host

NO.58 You want to configure SNC with X.509 certificates using Common CryptoLib as the cryptographic library in a new installed AS ABAP system. Besides running SNCWIZARD, what do you need to set up for this scenario? Note: There are 2 correct answers to this question.

Set the environment variable CCL_ PROFILE to the default profile file path

Maintain the relevant CCL/SNC/’ profile parameters

Set the environment variable CCL_ PROFILE to SECUDIR

Set the CCL SNC parameters using sapgenpse

NO.59 You have implemented CUA in your organization and you want to set the field distribution attribute as follows: Maintain a default value in the central system that is automatically distributed to the child systems when you create a user. After distribution, the data is maintained only locally and is no longer distributed if you change it in the central or child system. Which field distribution parameter do you maintain?

Redistribution

Local

Global

Proposal

NO.60 SNC is configured in the production system. For emergency purposes, you want to allow certain accounts to be able to access the system with password logon. What do you need to set up for this purpose? Note: There are 2 correct answers to this question.

Use profile parameter SNC/ACCEPT_ INSECURE_GUI with value ‘U’

Use profile parameter SNC/ONLY_ENCRYPTED_GUI with value ‘O’

Maintain the user access control list in table USRACLEXT

Use the ‘Unsecure communication permitted option’ In SU01 for specific users

NO.61 You are reviewing the authorizations for Core Data Services (CDS) views. How are classic authorizations integrated with CDS authorizations?

By using the statement AUTHORITY-CHECK in the access control of the CDS view

By defining access conditions in an access rule for the CDS view

By assigning the CDS view to the authorization profile in PFCG

By defining the CDS view in the authorization object in SU21

NO.62 A system user created a User1 and a schema on the HANA database with some dat a. User2 is developing modelling views and requires access to objects in User1’s schema. What needs to be done?

User1 should grant _SYS_REPO with SELECT WITH GRANT privilege

User2 needs to be granted with the same roles like User1

System user should grant User2 with SELECT privilege to User 1schema

ROLE ADMIN needs to be granted to User2

NO.63 To prevent session fixation and session hijacking attacks, SAP’s HTTP security session management is highly recommended. What are the characteristics of HTTP security session management? Note: There are 2 correct answers to this question.

It uses URLs containing sap-context d to identify the security session

The system is checking the logon credentials again for every request

The security sessions are created during logon and deleted during logoff.

The session identifier is a reference to the session context transmitted through a cookie.

NO.64 Which authorization object controls access to the trusting system between the managed system and SAP Solution Manager?

S_RFCACL

S_RFC

S_SERVICE

S_ ICM

NO.65 The SSO authentication using X.509 client certificates is configured. Users complain that they can’t log in to the back-end system. The trace file shows the following error message: “HTTP request [2/5/9] Reject untrusted forwarded certificate”. What is missing in the configuration? Note: There are 2 correct answers to this question.

On the back-end, the profile parameter icm/HTTPS/verify client must NOT be set to 0

On the web-dispatcher, the SAPSSLS.pse must be signed by a trusted certification authority

On the web-dispatcher, the profile parameter icm/HTTPS/verify_client must be set to 0

The web dispatcher’s SAPSSLC.PSE certificate must be added to the trusted reverse proxies list in icm/trusted_reverse_proxy_<xx>

NO.66 You are evaluating the “Cross-client object change” option using transact on SCC4 for your Unit Test Client in the development environment. Which setting do you recommend?

Changes to repository and cross-client customizing allowed

No changes to repository and cross-client customizing objects

No changes to cross-client customizing objects

No changes to repository objects

NO.67 User1 grants role 1 to user2. Who can revoke role 1 role from user2?

The system OBA user

The owner of role 1

Only User1

Any user with the ‘ROLE ADMIN’ database role

NO.68 You are running a 3-tier SAP system landscape. Each time you are accessing STMS_IMPORT on any of these systems, you are prompted for a TMSADM password. How can you stop this prompt from appearing?

Run the report RSUSR405 on the domain controller.

Reset the TMSADM user’s password on the system you are trying to access STMS_ IMPORT.

Change the TMSA DM user’s password directly in the TMS RFC destination in transact on SM59.

Run the report TMS_ UPDATE_PWD_OF_TMSADM on the domain controller.

NO.69 Which of the following events will create security alerts in the CCMS Alert Monitor of SAP Solution Manager? Note: There are 2 correct answers to this question.

Manual table changes

Changes to the instance profile

Call of RFC functions

Start of reports

NO.70 You want to check the custom ABAP codes in your system for security vulnerabilities and you want to use the Code Vulnerability Analyzer (CVA) for carrying out these extended security checks. What needs to be done for this purpose? Note: There are 2 correct answers to this question.

Execute transaction ST12 to start the analysis

Execute program RSLIN_SEC_LICENSE_SETUP

Run CVA from the ABAP Test Cockpit

Run CVA from the ABAP Trace

Loading …