View All P-SECAUTH-21 Actual Free Exam Questions Feb 09, 2023 Updated
Pass Authentic SAP P-SECAUTH-21 with Free Practice Tests and Exam Dumps
NEW QUESTION 15
A user reports an issue with data not showing up in the visualization of the SAP Fiori tiles. You want to verify the target mapping. At what level are you going to check the target mapping?
- A. O At the group level in the SAP Fiori Launchpad
- B. O At the group level in the SAP Fiori front-end server
- C. O At the application level in the Web IDE
- D. O At the catalog level in the SAP Fiori front-end server
Answer: D
NEW QUESTION 16
Which SAP product supports General Data Privacy Regulation (GDPR) compliance through mitigating control testing and validation
- A. SAP Process Control
- B. SAP Solution Manager
- C. SAP Access Control
- D. SAP Identify Access Governance
Answer: A
NEW QUESTION 17
You have Reason Codes already defined. Which is the correct sequence of steps to configure a Firefighter ID in Emergency Access Management?
- A. Maintain an Owner for a Firefighter ID
Maintain a Firefighter ID for Controllers and Firefighters
Maintain Access Control Owner - B. Maintain an Owner for a Firefighter ID
Maintain a Firefighter ID for Controllers and Firefighters
Maintain Access Control Owner - C. Maintain an Owner for a Firefighter ID
Maintain a Firefighter ID for Controllers and Firefighters
Maintain Access Control Owner - D. Maintain a Firefighter ID for Controllers and Firefighters
Maintain an Owner for a Firefighter ID
Maintain Access Control Owner
Answer: A
NEW QUESTION 18
Because of which security threat would you need to make additional configuration settings to run the SAP Fiori Launchpad from within your SAP NetWeaver Portal?
- A. Cross-Site Scripting
- B. Cross-Site Request Forgery
- C. Clickjacking
- D. Content Spoofing
Answer: C
NEW QUESTION 19
Which features does SAProuter provide?
Note: There are 2 correct answers to this question
- A. Filtered and logged network connections
- B. Password-protected connections
- C. HTTP conversion into HTTPS connections
- D. Load-balanced RFC connections
Answer: A,B
NEW QUESTION 20
To prevent session fixation and session hijacking attacks, SAP's HTTP security session management is highly recommended. What are the characteristics of HTTP security session management? Note: There are 2 correct answers to this question.
- A. It uses URLs containing sap-context d to identify the security session
- B. The session identifier is a reference to the session context transmitted through a cookie.
- C. The system is checking the logon credentials again for every request
- D. The security sessions are created during logon and deleted during logoff.
Answer: B,D
NEW QUESTION 21
To which services packages does SAP Security Optimization Services (SOS) belong?
- A. EarlyWatch Reporting
- B. System Administration Optimization
- C. Application Integration Optimization
- D. Performance Optimization
Answer: B
NEW QUESTION 22
Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 3 correct answers to this question.
- A. Info Access (InA)
- B. Data
- C. Secure Network Communication (SNC)
- D. HTIP(S)
- E. Trusted RFC
Answer: A,C,E
NEW QUESTION 23
You want to check the custom ABAP codes in your system for security vulnerabilities and you want to use the Code Vulnerability Analyzer (CVA) for carrying out these extended security checks. What needs to be done for this purpose? Note: There are 2 correct answers to this question.
- A. Run CVA from the ABAP Test Cockpit
- B. Run CVA from the ABAP Trace
- C. Execute program RSLIN_SEC_LICENSE_SETUP
- D. Execute transaction ST12 to start the analysis
Answer: A,B
NEW QUESTION 24
The security administrator is troubleshooting authorization errors using transaction SU53. While running transaction MM50, the user received the following error.
"You are not authorized to use transaction MM01"
The user's position in the organization makes it inappropriate for them to have direct access to transaction MM01 because it creates a Segregation of Duties conflict.
How can the security administrator resolve the issue and still provide the user with the needed access to MM50?
- A. Set the check indicator value for object S_TCODE in the SU24 data for transaction MM01 to Do Not Check.
- B. Remove transaction MM01 as a CALLING transaction from table TCDCOUPLES.
- C. Set the value form instance parameter auth/no_check_in_some_cases to N.
- D. Set the check indicator (for the transaction authorization called by the MM01 transaction) to NO, using transaction SE97 for transaction MM50.
Answer: D
NEW QUESTION 25
Which of the following user types can be used to log on interactively? Note: There are 2 correct answers to this question
- A. Service
- B. System
- C. Communication
- D. Dialog
Answer: A,D
NEW QUESTION 26
What is the purpose of the parameter rec/client in an AS ABAP based SAP system?
- A. To log changes in Core Data Services views
- B. To generate source code versions
- C. To generate changes in documents
- D. To log changes in tables
Answer: D
NEW QUESTION 27
How are user group administrators and user groups related in SAP HANA? Note: there are 2 correct answers to this question.
- A. Multiple user group administrators per user group
- B. Only one user group administrator per user group
- C. Multiple user groups per user group administrator
- D. Only one user group per user group administrator
Answer: A,C
NEW QUESTION 28
You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fiori front-end system (central hub). What transactions do you have to use to map a back-end system to one of those roles?
- A. /UI2/GW_SYS_ALIAS
- B. /IWFND/MAINT_SERVICE
- C. PFCG
- D. SEGW
Answer: B
NEW QUESTION 29
Which of the following function can be used to troubleshoot authorization errors for ABAP CDS views with Authorization based on Access Control?
- A. ABAP TRACE
- B. STAUTHTRACE
- C. E2E TRACE ANALYSIS
- D. REPORT RSUSR008_009
Answer: B
NEW QUESTION 30
User1 grants role 1 to user2. Who can revoke role 1 role from user2?
- A. Only User1
- B. The owner of role 1
- C. The system OBA user
- D. Any user with the 'ROLE ADMIN' database role
Answer: D
NEW QUESTION 31
What are the characteristics of HTTP security session management? Note: There are 3 correct answers to this question
- A. Deletes security sessions at logoff
- B. Starts security sessions with a short user-based expiration time
- C. Checks the logon credentials again for every request
- D. Creates security sessions at logon
- E. Refers to the session context through the session identifier
Answer: A,D,E
NEW QUESTION 32
You verified the password of the TMSADM user in your SAP landscape to be SAP defaulted. You want to reset this password by using program TMS_UPDATE_PWD_OF_TMSADM. What steps would you take to reset this password?
Note: There are 2 correct answers to this question
- A. Run this program in the Domain Controller (client 000)
- B. Deactivate the SNC option
- C. Lock TMSADM in all the system/clients including 000
- D. Assign "SAP_ALL" to TMSADM in all systems/clients including 000
Answer: A,B
NEW QUESTION 33
Who can revoke a runtime role from a user in the SAP HANA tenant database? Note: There are 2 correct answers to this question. Note: there are 2 correct answers to this question.
- A. The grating user
- B. Anyone with "ROLE ADMIN"
- C. The DBACOCKPIT user
- D. The owner of the HDI container
Answer: A,B
NEW QUESTION 34
What are the characteristics of assertion tickets? Note: There are 2 correct answers to this question.
- A. They are transmitted as cookies
- B. They are used for user-to-system trusted login
- C. They are used for system-to-system communication
- D. They have an unconfigurable validity of 2 minutes
Answer: C,D
NEW QUESTION 35
You are reviewing the authorizations for Core Data Services (CDS) views. How are classic authorizations integrated with CDS authorizations?
- A. By defining the CDS view in the authorization object in SU21
- B. By using the statement AUTHORITY-CHECK in the access control of the CDS view
- C. By defining access conditions in an access rule for the CDS view
- D. By assigning the CDS view to the authorization profile in PFCG
Answer: C
NEW QUESTION 36
SNC is configured in the production system. For emergency purposes, you want to allow certain accounts to be able to access the system with password logon. What do you need to set up for this purpose? Note: There are 2 correct answers to this question.
- A. Use profile parameter SNC/ACCEPT_ INSECURE_GUI with value 'U'
- B. Use the 'Unsecure communication permitted option' In SU01 for specific users
- C. Use profile parameter SNC/ONLY_ENCRYPTED_GUI with value 'O'
- D. Maintain the user access control list in table USRACLEXT
Answer: A,B
NEW QUESTION 37
Which tools can you use to troubleshoot an authorization issue with a Fiori application? Note: There are 2 correct answers to this question
- A. /UI2/GW_APPS_LOG
- B. /UI2/FLC
- C. /IWFND/ERROR_LOG
- D. /IWBEP/ERROR_LOG
Answer: A,C
NEW QUESTION 38
......
New P-SECAUTH-21 Exam Questions Real SAP Dumps: https://quiztorrent.testbraindump.com/P-SECAUTH-21-exam-prep.html
