[Sep-2022] SAP P_SECAUTH_21 Exam Practice Test Questions – TestSimulate [Q37-Q60]

4.6/5 - (7 votes)

[Sep-2022] SAP P_SECAUTH_21 Exam Practice Test Questions – TestSimulate

Updated Certification Exam P_SECAUTH_21 Dumps – Practice Test Questions

NO.37 Based on your company guidelines you have set the password expiration to 60 days. Unfortunately, there is an RFC user on your SAP system which must not have a password change for 180 days. Which option would you recommend to accomplish such a request?

Change profile parameter login/password_expiration_time to 180

Create a security policy via SECPOL and assign it to tile RFC users

Create additional authorizations for RFC users and assign it to them

Create enhancement spot I user-exit

NO.38 Which Object ID is used to integrate Business Rule Framework (BRF+) to Multi Step Multi Process (MSMP) initiator workflow?

Function ID

Application ID

Process ID

Expression ID

NO.39 What does the SAP Security Optimization Service provide? Note: There are 2 correct answers to this question.

Configuration check of the SAP systems and the SAP middleware components against defined configurations

Results with recommendations on how to resolve identified vulnerabilities without prioritization

Analysis of security vulnerabilities within an enterprise’s SAP landscape to ensure optimal protection against intrusions

Analysis of your operating system, database, and entire SAP system to ensure optimal performance and reliability

NO.40 What is the SAP Best Practice to delete a security SAP role in SAP landscape?

Transport the SAP role and delete the role using Profile Generator

Delete the SAP role in all clients using Profile Generator

Delete the SAP role using Profile Generator, and then put it in the transport

Delete the SAP role in all clients in all systems using Profile Generator

NO.41 When re-configuring the user management engine (UME) of an AS Java system, what do you need to consider to change the data source from system database to an ABAP system successfully?

The logon security policy for the existing users is aligned with the logon security policy in the ABAP system.

All users and groups in the system database must have different IDs than existing users and groups in the ABAP system.

You need to import the users from the system database into the ABAP system.

You must manually replace the UME configuration file dataSourceConfiguration_database_only.xmlwith an appropriate dataSourceConfiguration_abap.xmlfile.

NO.42 Insufficient authorization checks might allow A BAP programs to access the PSE files. Which authorization objects should we check to protect the PSEs? Note: There are 2 correct answers to this question.

S_RZL_ADM

S_DATASET

S_ADMI_FCD

S_DEVELOP

NO.43 Which data source needs to be integrated into SAP Identity Management via the Virtual Directory Server (VOS)?

AS ABAP

AS Java

LDAP

SAP HCM

NO.44 Which of the following events will create security alerts in the CCMS Alert Monitor of SAP Solution Manager? Note: There are 2 correct answers to this question.

Manual table changes

Changes to the instance profile

Call of RFC functions

Start of reports

NO.45 The SAP HANA database has its parameters configured with its default values. How can the SAP_INTERNAL_HA NA_SUPPORT catalog role be used?

The role can be granted to another role (nested)

The role can be granted to multiple users at a time

The role can be granted only with system privileges

The role can be granted to the SYSTEM user

NO.46 Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 3 correct answers to this question.

HTIP(S)

Trusted RFC

Secure Network Communication (SNC)

Info Access (InA)

Data

NO.47 What can you maintain in transaction SU24 to reduce the overall maintenance in PFCG? Note: There are 3 correct answers to this question.

The default values so they are appropriate for the transactions used in the roles

The authorization objects that are not linked to transact on codes correctly

The default values in the tables USOBX and USOBT

The default authority check settings for the role maintenance tool

The authorization objects that have unacceptable default values

NO.48 You have implemented CUA in your organization and you want to set the field distribution attribute as follows: Maintain a default value in the central system that is automatically distributed to the child systems when you create a user. After distribution, the data is maintained only locally and is no longer distributed if you change it in the central or child system. Which field distribution parameter do you maintain?

Redistribution

Local

Global

Proposal

NO.49 Currently, transports into your SAP system are not scanned automatically. To avoid the import of non-secure programs, you have implemented the strategy to set up a virus scanner using a script to automatically scan for the malicious programs. What is the valid fi e format where data files are first converted into and then checked by a virus scanner?

XML

Plain text

0csv

SAP compressed

NO.50 How is the role concept applied in the authorizations for Core Data Services (CDS) views?

CDS roles are defined in the CDS view and assigned to users in the classic role editor

CDS roles are defined in the WHERE clause when calling a CDS view in Open SOL

CDS roles are defined in the CDS view and implicitly applied to all users

CDS roles are mapped to the CDS view in the access rules

NO.51 For which purpose do you use instance Secure Storage File System (SSFS) in an SAP HANA system? Note: There are 2 correct answers to this question.

To protect the password of the root key backup

To store root keys for data volume encryption

To store the secure single sign-on configuration

To protect the X.509 public key infrastructure certificates

NO.52 Which of the objects do you assign to an SAP Fiori tile to make it visible in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.

Group

Role

User

Catalog

NO.53 Which authorization object controls access to the trusting system between the managed system and SAP Solution Manager?

S_RFCACL

S_RFC

S_SERVICE

S_ ICM

NO.54 You have delimited a single role which is part of a composite role, and a user comparison for the composite role has been performed. You notice that the comparison did NOT remove the profile assignments for that single role. What program would you run to resolve this situation?

0 PRGN_COMPRESS_TIMES

0PRGN_COMPARE_ROLE_MENU

0 PRGN_DELETE_ACT IVITY_GROUPS

0 PRGN_MERGE_PREVIEW

NO.55 What are the requirements of SPNego SSO configuration in an SAP Fiori front-end system? Note: There are 2 correct answers to this question.

The system requires an identity provider as an issuing system to enable single sign-on with SPNego in an internet-facing deployment scenario.

The system’s users in the ABAP system must have the same user names as the database users in SAP HANA

The system should typically be located within the corporate network.

The system requires Microsoft Active Directory infrastructure in place.

NO.56 You want to check the custom ABAP codes in your system for security vulnerabilities and you want to use the Code Vulnerability Analyzer (CVA) for carrying out these extended security checks. What needs to be done for this purpose? Note: There are 2 correct answers to this question.

Execute transaction ST12 to start the analysis

Execute program RSLIN_SEC_LICENSE_SETUP

Run CVA from the ABAP Test Cockpit

Run CVA from the ABAP Trace

NO.57 Which basis transaction provides an optimized user interface for evaluating authorization checks only?

STAUTHTRACE

RSECADMIN

ST01

ABAP_TRACE

NO.58 You want to launch classic SAP GUI transactions directly from the SAP Fiori Launchpad. Which of the following scenarios do you choose?

Chrome, SAP Enterprise Portal, SAP GUI for Java

Chrome, SAP Cloud Platform, SAP GUI for Java

Internet Explorer, ABAP front-end server, SAP GUI for Windows

Internet Explorer, SAP Business Client, SAP GUI for Windows

NO.59 User1 grants role 1 to user2. Who can revoke role 1 role from user2?

The system OBA user

The owner of role 1

Only User1

Any user with the ‘ROLE ADMIN’ database role

NO.60 A system user created a User1 and a schema on the HANA database with some dat a. User2 is developing modelling views and requires access to objects in User1’s schema. What needs to be done?

User1 should grant _SYS_REPO with SELECT WITH GRANT privilege

User2 needs to be granted with the same roles like User1

System user should grant User2 with SELECT privilege to User 1schema

ROLE ADMIN needs to be granted to User2

Updated Verified P_SECAUTH_21 dumps Q&As – Pass Guarantee or Full Refund: https://www.testsimulate.com/P_SECAUTH_21-study-materials.html

Leave a Reply Cancel reply