Verified P_SECAUTH_21 Dumps Q&As - P_SECAUTH_21 Test Engine with Correct Answers
Pass Your P_SECAUTH_21 Dumps as PDF Updated on 2023 With 80 Questions
SAP P-SECAUTH-21 exam is a comprehensive test that covers a wide range of topics related to system security architecture. Candidates will be tested on their knowledge of access control, risk management, cryptography, and network security, among other areas. P_SECAUTH_21 exam consists of 80 multiple-choice questions and candidates have 180 minutes to complete it. Passing the SAP P-SECAUTH-21 exam requires a score of at least 65%, which demonstrates a candidate's proficiency in system security architecture.
SAP P_SECAUTH_21 certification is recognized globally and is highly valued by organizations. Certified Technology Professional - System Security Architect certification is an indication that the candidate has the necessary skills and knowledge to design, implement, and manage SAP system security solutions. Certified Technology Professional - System Security Architect certification can help professionals gain a competitive edge in the job market and increase their chances of getting hired by top organizations.
NEW QUESTION # 16
Your company is running SAP S/4HANA on premise, with the requirement to run the SAP Fiori Launchpad in the SAP Cloud Platform. What would be the recommended scenario for user authentication for internet browser access to the SAP Fiori Launchpad?
- A. SAML2 and OData Provisioning
- B. Principal Propagation
- C. SAP Logon Tickets
- D. X.509 Client Certificates
Answer: D
NEW QUESTION # 17
Which SAP tool provides functions to support Data Destruction, Business Rules Maintenance, and Processing of Audit Areas?
- A. SAP Data Controller Rule Framework
- B. SAP Information Retrieval Framework
- C. SAP Information Lifecycle Management
- D. SAP Business Rule Framework Plus
Answer: A
NEW QUESTION # 18
How can you register an SAP Gateway service? Note: There are 2 correct answers to this question.
- A. Use transaction /IWFND/MA INT_SERVICE on the front-end server
- B. Use SAP_GAT EWAY_BASIC_CONFIG in transact on STCO 1 on the frontend server
- C. Use transaction SEGW on the back-end server
- D. Use SAP_GAT EWAY_ACTIVATE_ODATA_SERV in transact on STC01 on the front-end server
Answer: A,C
NEW QUESTION # 19
How is the role concept applied in the authorizations for Core Data Services (CDS) views?
- A. CDS roles are defined in the CDS view and assigned to users in the classic role editor
- B. CDS roles are defined in the WHERE clause when calling a CDS view in Open SOL
- C. CDS roles are mapped to the CDS view in the access rules
- D. CDS roles are defined in the CDS view and implicitly applied to all users
Answer: A
NEW QUESTION # 20
You are evaluating the "Cross-client object change" option using transaction SCC4 for your Unit Test Client in the development environment. Which setting do you recommend?
- A. No changes to repository objects
- B. Changes to repository and cross-client customizing allowed
- C. No changes to repository and cross-client customizing objects
- D. No changes to cross-client customizing objects
Answer: B
Explanation:
Explanation
This is the recommended setting for the "Cross-client object change" option using transaction SCC4 for your Unit Test Client in the development environment. This setting allows you to make changes to repository objects (such as programs, function modules, classes, etc.) and cross-client customizing objects (such as number ranges, message classes, etc.) in your Unit Test Client without affecting other clients in the same system. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 21
What can you maintain in transaction SU24 to reduce the overall maintenance in PFCG? Note: There are 3 correct answers to this question.
- A. The default values in the tables USOBX and USOBT
- B. The authorization objects that have unacceptable default values
- C. The authorization objects that are not linked to transact on codes correctly
- D. The default authority check settings for the role maintenance tool
- E. The default values so they are appropriate for the transactions used in the roles
Answer: B,C,E
NEW QUESTION # 22
SAP GRC Access Control provides risk analysis for which of the following? Note: There are 2 correct answers to this question.
- A. Access Request Management
- B. Password Self-Service
- C. Business Role Management
- D. Business Rule Framework
Answer: A,C
NEW QUESTION # 23
How does the SAP SSO wizard (transaction SNCWIZARD) simplify the SNC configuration process?
- A. It restarts the SAP application server for all profile changes to take effect.
- B. It creates the SNC_LIB environment variable in OS user profile.
- C. It sets the profile parameters for SAP SNC in the default profile
- D. It sets the profile parameters for SAP SNC in the instance profile.
Answer: D
Explanation:
Explanation
This is one of the ways that the SAP SSO wizard (transaction SNCWIZARD) simplifies the SNC configuration process. SNC (Secure Network Communication) is a feature that enables secure and encrypted communication between SAP systems and components using certificates and keys. The SAP SSO wizard is a tool that guides you through the steps of configuring SNC for your SAP system, such as creating or importing certificates and keys, setting up trust relationships, and activating SNC protection level. It also sets the profile parameters for SAP SNC in the instance profile, which are required for enabling SNC on your system.
References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/48/9e2e3f6f8e41e8a283aaf2ad2c64c4/content.htm?n
NEW QUESTION # 24
In your system, you have a program which calls transaction A. Users with access to this program can still execute transaction A without explicit authorizations given to this transaction. How do you prevent the access of users to the transaction A from within the program?
- A. Maintain the check indicator in table TCDCOUPLES
- B. Ensure that transact on A is NOT assigned into the same program authorization group
- C. Make sure you do NOT assign transact on A to the authorization object S_TCODE in the role that you assign to the unauthorized users.
- D. Maintain SE93 with authorization objects for transact on A.
Answer: D
NEW QUESTION # 25
What information constitutes an indirect connection to an individual, in the context of GDPR? Note: There are 3 correct answers to this question
- A. Postal Address
- B. Date of Birth
- C. License plate number
- D. IP Address
- E. National Identifier
Answer: C,D,E
NEW QUESTION # 26
Which features do SAP HANA SQL-based analytic privileges offer compared to classic XML-based ones? Note: there are 2 correct answers to this question.
- A. Control of read-only SAP HANA procedures
- B. Control of read-only access to SQL views
- C. Transportable
- D. Complex filtering
Answer: A,C
NEW QUESTION # 27
Which communication protocols are supported by the SAP Cloud Connector? Note: There are 2 correct answers to this question.
- A. SNA
- B. NNTP
- C. LDAP
- D. RFC
Answer: C,D
Explanation:
Explanation
The SAP Cloud Connector supports these communication protocols: LDAP (Lightweight Directory Access Protocol) and RFC (Remote Function Call). LDAP is used to connect to an on-premise directory service, such as Active Directory, and synchronize user data with the cloud identity provider. RFC is used to connect to an on-premise SAP system and enable remote function calls from the cloud applications. References:
https://help.sap.com/viewer/cca91383641e40ffbe03bdc78f00f681/Cloud/en-US/e6c7616abb5710148cfcf3e75d96
https://help.sap.com/viewer/cca91383641e40ffbe03bdc78f00f681/Cloud/en-US/e6c7616abb5710148cfcf3e75d96
NEW QUESTION # 28
Currently, transports into your SAP system are not scanned automatically. To avoid the import of non-secure programs, you have implemented the strategy to set up a virus scanner using a script to automatically scan for the malicious programs. What is the valid fi e format where data files are first converted into and then checked by a virus scanner?
- A. 0csv
- B. SAP compressed
- C. XML
- D. Plain text
Answer: C
NEW QUESTION # 29
What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note: There are 2 correct answers to this question.
- A. The Logon ticket is used for user-to-system communication
- B. The Logon ticket session is held in the working memory
- C. The Logon ticket has an unconfigurable lifetime validity
- D. The Logon ticket is domain restricted
Answer: A,D
NEW QUESTION # 30
In addition to the authorization /UI2/LAUNCHPAD, which other authorizations are required to assign to an SAP Fiori Launchpad user? Note: There are 2 correct answers to this question.
- A. /UI2/FLC
- B. /U12/INTEROP
- C. /UI2JPAGE_BUILDER_CUST
- D. /U12JPAGE_BUILDER_PERS
Answer: B,D
NEW QUESTION # 31
You want to create a role to provide users the ability to display and change an HR table's content based on the country groupings. Which of the steps would you take to accomplish these requirements? Note: There are 2 correct answers to this question.
- A. Maintain the authorization object S_TABU_LIN
- B. Define an organization criterion through transaction SPRO
- C. Maintain the authorization object S_TABU_NAM
- D. Create an authorization group with appropriate authorization fields for the table
Answer: A,B
Explanation:
Explanation
These are some of the steps that you would take to accomplish these requirements of creating a role to provide users the ability to display and change an HR table's content based on the country groupings. S_TABU_LIN is an authorization object that controls access to table entries based on organizational criteria, such as country grouping, personnel area, or personnel subarea. You would maintain this authorization object with appropriate values for your role in PFCG transaction. SPRO is a transaction that allows you to access customizing activities for various SAP applications and modules. You would define an organization criterion through this transaction by assigning an authorization field name (such as T500L-LAND1 for country grouping) to a table name (such as T500L for countries) in IMG activity "Maintain Table Names for Organizational Criteria".
References: https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-
NEW QUESTION # 32
What are the requirements of SPNego SSO configuration in an SAP Fiori front-end system? Note: There are 2 correct answers to this question.
- A. The system requires Microsoft Active Directory infrastructure in place.
- B. The system requires an identity provider as an issuing system to enable single sign-on with SPNego in an internet-facing deployment scenario.
- C. The system should typically be located within the corporate network.
- D. The system's users in the ABAP system must have the same user names as the database users in SAP HANA
Answer: A,C
NEW QUESTION # 33
Which transaction or report can be used to audit profile assignments in an SU01 user master record? Note: There are 2 correct answers to this question
- A. RSUSR002
- B. RSUSR100
- C. ST01
- D. SM20N
Answer: A,B
NEW QUESTION # 34
Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 2 correct answers to this question
- A. SNC
- B. InA
- C. HOP
- D. OData
Answer: A,B
NEW QUESTION # 35
......
SAP P-SECAUTH-21 certification exam is designed for individuals who want to demonstrate their expertise in system security architecture within the SAP environment. Certified Technology Professional - System Security Architect certification is offered by SAP and is aimed at technology professionals who have experience in designing and implementing security solutions for SAP systems. P_SECAUTH_21 exam covers a wide range of topics, including risk management, authentication and authorization, network security, and secure communication protocols.
Pass SAP P_SECAUTH_21 Exam Info and Free Practice Test: https://www.exam4tests.com/P_SECAUTH_21-valid-braindumps.html
SAP P_SECAUTH_21 Real Exam Questions and Answers FREE: https://drive.google.com/open?id=1XimD1HA7NlcHhciFnfuDeoTeaQ4nyJsH