P_SECAUTH_21 PDF Dumps | Mar 02, 2024 Recently Updated Questions
P_SECAUTH_21 Exam Questions – Valid P_SECAUTH_21 Dumps Pdf
SAP P-SECAUTH-21 exam is vendor-neutral and is open to all IT professionals who have experience in system security architecture. Certified Technology Professional - System Security Architect certification is particularly useful for IT professionals who work with SAP systems and want to advance their careers in this field.
SAP P-SECAUTH-21 exam is designed to assess the knowledge and skills of individuals seeking to become certified technology professionals in the field of system security architecture. P_SECAUTH_21 exam is one of the most sought-after certifications in the field of IT security, and passing it demonstrates a comprehensive understanding of the principles and concepts involved in securing SAP systems.
NEW QUESTION # 13
While performing an audit of changes to the system and client change options for your production SAP S/4HANA environment, you receive the following message in transaction SCC4: "No logs found for selected period." How can you correct the problem?
- A. Maintain parameter rec/client with value ALL
- B. Maintain parameter log_mode with value normal for SAP HANA
- C. Maintain parameter rdisp/TRACE with value 3
- D. Maintain parameter rsau/enable with value 1
Answer: D
Explanation:
Explanation
This is one of the things that you need to do to correct the problem and enable logging of changes to the system and client change options for your production SAP S/4HANA environment. The system and client change options are settings that determine whether changes to configuration data or customizing objects are allowed or restricted in a system or client. The changes to these options can be logged using the Security Audit Log, which is a tool that records security-relevant events in SAP systems. The parameter rsau/enable is a parameter that controls whether the Security Audit Log is activated or deactivated. If the parameter is set to
'1', the Security Audit Log is activated and changes to the system and client change options are logged.
References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?
NEW QUESTION # 14
The security administrator is troubleshooting authorization errors using transaction SU53. While running transaction MM50, the user received the following error.
"You are not authorized to use transaction MM01"
The user's position in the organization makes it inappropriate for them to have direct access to transaction MM01 because it creates a Segregation of Duties conflict.
How can the security administrator resolve the issue and still provide the user with the needed access to MM50?
- A. Set the value form instance parameter auth/no_check_in_some_cases to N.
- B. Set the check indicator value for object S_TCODE in the SU24 data for transaction MM01 to Do Not Check.
- C. Set the check indicator (for the transaction authorization called by the MM01 transaction) to NO, using transaction SE97 for transaction MM50.
- D. Remove transaction MM01 as a CALLING transaction from table TCDCOUPLES.
Answer: C
NEW QUESTION # 15
What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note: There are 2 correct answers to this question
- A. The Logon ticket is not domain restricted
- B. The Logon ticket is sued for user-to-system communication
- C. The Logon ticket is always set to client 000
- D. The Logon ticket session is held in the working memory
Answer: A,B
NEW QUESTION # 16
You want to create a role to provide users the ability to display and change an HR table's content based on the country groupings. Which of the steps would you take to accomplish these requirements? Note: There are 2 correct answers to this question.
- A. Define an organization criterion through transaction SPRO
- B. Maintain the authorization object S_TABU_LIN
- C. Maintain the authorization object S_TABU_NAM
- D. Create an authorization group with appropriate authorization fields for the table
Answer: A,B
Explanation:
Explanation
These are some of the steps that you would take to accomplish these requirements of creating a role to provide users the ability to display and change an HR table's content based on the country groupings. S_TABU_LIN is an authorization object that controls access to table entries based on organizational criteria, such as country grouping, personnel area, or personnel subarea. You would maintain this authorization object with appropriate values for your role in PFCG transaction. SPRO is a transaction that allows you to access customizing activities for various SAP applications and modules. You would define an organization criterion through this transaction by assigning an authorization field name (such as T500L-LAND1 for country grouping) to a table name (such as T500L for countries) in IMG activity "Maintain Table Names for Organizational Criteria".
References: https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-
NEW QUESTION # 17
What are the key capabilities of Enterprise Threat Detection? Note: There are 2 correct answers to this question.
- A. Predictive threat notification
- B. Blocking user access
- C. Dashboard-based analysis for security risks
- D. Real time capture of abnormal user activities
Answer: C,D
Explanation:
Explanation
Enterprise Threat Detection is a security solution that provides dashboard-based analysis for security risks and real time capture of abnormal user activities. It enables you to monitor and detect cyberattacks and internal fraud by analyzing log data from various sources, such as SAP systems, operating systems, databases, firewalls, and routers. References:
https://help.sap.com/viewer/product/SAP_ENTERPRISE_THREAT_DETECTION/en-US
https://help.sap.com/viewer/product/SAP_ENTERPRISE_THREAT_DETECTION/en-US
NEW QUESTION # 18
You are evaluating the "Cross-client object change" option using transact on SCC4 for your Unit Test Client in the development environment. Which setting do you recommend?
- A. No changes to cross-client customizing objects
- B. No changes to repository and cross-client customizing objects
- C. No changes to repository objects
- D. Changes to repository and cross-client customizing allowed
Answer: B
NEW QUESTION # 19
You want to carry out some preparatory work for executing the SAP Security Optimization Self-service on a customer system. Which of the following steps do you have to execute on the managed systems? Note: There are 2 correct answers to this question.
- A. Install the ST-A/PI plug-in
- B. Configure Secure Network Communications
- C. Grant operating system access
- D. Configure specific authorizations
Answer: A,D
NEW QUESTION # 20
SNC is configured in the production system. For emergency purposes, you want to allow certain accounts to be able to access the system with password logon. What do you need to set up for this purpose? Note: There are 2 correct answers to this question.
- A. Use profile parameter SNC/ACCEPT_ INSECURE_GUI with value 'U'
- B. Use profile parameter SNC/ONLY_ENCRYPTED_GUI with value 'O'
- C. Maintain the user access control list in table USRACLEXT
- D. Use the 'Unsecure communication permitted option' In SU01 for specific users
Answer: A,D
NEW QUESTION # 21
How do you handle user "SAP 'in AS ABAP? Note: There are 3 correct answers to this question.
- A. Lock and expire the user in all clients except 000
- B. Set profile parameter login/no_automatic_user_sapstar to 0
- C. Lock and expire the user in all clients
- D. Set profile parameter login/no_automatic_user_sapstar to 1
- E. Remove all authorizations from the user
Answer: C,D,E
NEW QUESTION # 22
Which characteristics apply to the SAP ID Service? Note: There are 2 correct answers to this question.
- A. Configurable password policy
- B. Non-configurable MFA for SAP BTP Cockpit
- C. User base owned and managed by SAP
- D. Customizable user interface
Answer: A,C
Explanation:
Explanation
The SAP ID Service is a cloud-based identity provider that offers a configurable password policy and a user base owned and managed by SAP. The SAP ID Service is used to authenticate users for various SAP cloud applications and services, such as SAP Cloud Platform, SAP Analytics Cloud, and SAP Fiori Launchpad.
References: https://help.sap.com/viewer/product/SAP_ID_SERVICE/en-US
https://help.sap.com/viewer/product/SAP_ID_SERVICE/en-US
NEW QUESTION # 23
How can you register an SAP Gateway service? Note: There are 2 correct answers to this question.
- A. Use SAP_GAT EWAY_BASIC_CONFIG in transact on STCO 1 on the frontend server
- B. Use transaction /IWFND/MA INT_SERVICE on the front-end server
- C. Use transaction SEGW on the back-end server
- D. Use SAP_GAT EWAY_ACTIVATE_ODATA_SERV in transact on STC01 on the front-end server
Answer: B,C
NEW QUESTION # 24
How are assertion tickets used?
- A. They are used for system-to-system communication.
- B. They are used for encrypting Web service communication.
- C. They are used for user-to-system trusted login.
- D. They are used for system-to-system encryption.
Answer: A
Explanation:
Explanation
Assertion tickets are used for system-to-system communication in SAP systems. They are based on the SAML (Security Assertion Markup Language) standard and contain information about the identity and attributes of a user or a system. Assertion tickets can be used to establish trust relationships between systems and enable single sign-on scenarios. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 25
For which purpose do you use instance Secure Storage File System (SSFS) in an SAP HANA system? Note: There are 2 correct answers to this question.
- A. To store root keys for data volume encryption
- B. To protect the X.509 public key infrastructure certificates
- C. To protect the password of the root key backup
- D. To store the secure single sign-on configuration
Answer: A,C
NEW QUESTION # 26
Which type of systems can be found in the Identity Provisioning Service landscape? Note:
There are 2 correct answers to this question.
- A. Source
- B. Identity Provider
- C. Service Provider
- D. Proxy
Answer: A,C
Explanation:
Explanation
Source and Service Provider are two types of systems that can be found in the Identity Provisioning Service landscape. A source system is a system that provides user data to be provisioned to other systems, such as an identity provider or an LDAP server. A service provider system is a system that receives user data from a source system, such as an SAP Cloud Platform subaccount or an SAP SuccessFactors instance. References:
https://help.sap.com/viewer/product/SAP_CLOUD_PLATFORM_IDENTITY_PROVISIONING_SERVICE/en-
https://help.sap.com/viewer/product/SAP_CLOUD_PLATFORM_IDENTITY_PROVISIONING_SERVICE/en-
NEW QUESTION # 27
Where can we store the Security Audit Log events? Note: There are 2 correct answers to this question.
- A. In the file system of the application servers
- B. In a central fi e system
- C. In the database table RSAU_BUF_DATA
- D. In the SAP Solution Manager system
Answer: A,D
NEW QUESTION # 28
What benefits does the SAP Cloud Connector have compared to a 3rd partyreverse proxy solution, when connecting your SAP Cloud Platform with your SAP backend systems? Note: There are 2 correct answers to this question.
- A. It supports multiple application protocols, such as HTTP and RFC
- B. It allows for remote invocation by the SAP Cloud Platform only
- C. It establishes an SSL VPN tunnel to SAP Cloud Platform
- D. It can cache SAP proprietary OData packets to improve the response times
Answer: A,C
NEW QUESTION # 29
You have implemented CUA in your organization and you want to set the field distribution attribute as follows: Maintain a default value in the central system that is automatically distributed to the child systems when you create a user. After distribution, the data is maintained only locally and is no longer distributed if you change it in the central or child system. Which field distribution parameter do you maintain?
- A. Global
- B. Redistribution
- C. Proposal
- D. Local
Answer: C
NEW QUESTION # 30
Which characteristics apply to the SAP ID Service? Note: There are 2 correct answers to this question
- A. Configurable password policy
- B. Customizable user interface
- C. Non-configurable MFA for SAP BTP Cockpit
- D. User base owned and managed by SAP
Answer: B,D
NEW QUESTION # 31
Which of the 7 core principals of the General Data Privacy Regulation (GDPR) requires thorough documentation of all policies and controls that govern the collection and processing of data?
- A. Accuracy
- B. Accountability
- C. Lawfulness, Fairness, and Transparency
- D. Integrity and Confidentiality
Answer: B
Explanation:
Explanation
This is one of the 7 core principles of GDPR (General Data Protection Regulation) that requires thorough documentation of all policies and controls that govern the collection and processing of data. Accountability means that data controllers and processors must be able to demonstrate compliance with GDPR requirements and obligations, such as data protection by design and by default, data protection impact assessment, data breach notification, or data subject rights. Accountability also means that data controllers and processors must keep records of their data processing activities and cooperate with supervisory authorities when requested.
References: https://gdpr-info.eu/art-5-gdpr/ https://gdpr-info.eu/art-5-gdpr/
NEW QUESTION # 32
What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note:
There are 2 correct answers to this question.
- A. The Logon ticket session is held in the working memory.
- B. The Logon ticket is used for user-to-system communication.
- C. The Logon ticket is always set to client 000.
- D. The Logon ticket is not domain restricted.
Answer: A,B
Explanation:
Explanation
These are some of the main characteristics of the Logon ticket throughout an SSO logon procedure. SSO (Single Sign-On) is a feature that enables users to log on to multiple systems or applications with one authentication process and without entering their credentials multiple times. Logon ticket is one of the methods for implementing SSO in SAP systems, which uses digital certificates and cookies to authenticate users and systems. The Logon ticket is used for user-to-system communication, which means that it contains information about the user's identity and authorizations that can be verified by the target system or application.
The Logon ticket session is held in the working memory, which means that it is stored temporarily in the memory of the user's browser or system and deleted when the session ends or expires. References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?
NEW QUESTION # 33
What is the User Management Engine (UME) property "connect on pooling" used for? Note: There are 2 correct answers to this question.
- A. To share server resources among requesting LDAP clients
- B. To create a new connect on to the LDAP directory server for each request
- C. To improve performance of requests to the LDAP directory server
- D. To avoid unauthorized request to the LDAP directory server
Answer: A,C
NEW QUESTION # 34
Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 2 correct answers to this question
- A. OData
- B. SNC
- C. HOP
- D. InA
Answer: B,D
NEW QUESTION # 35
How are security relevant objects related in the Cloud Foundry? Note: There are 2 correct answers to this question
- A. Role Templates have 1 or many scopes
- B. Role Collections have 0 or many roles
- C. Role Templates have 0 or many attributes
- D. Role Collections have 0 or many role templates
Answer: C,D
NEW QUESTION # 36
What reference is used to connect multiple Cloud Connectors to one SAP Cloud Platform subaccount?
- A. Instance ID
- B. Virtual Host
- C. System Alias
- D. Location ID
Answer: D
NEW QUESTION # 37
......
To prepare for the SAP P-SECAUTH-21 certification exam, candidates should have a strong background in SAP system security and architecture. They should also have experience working with SAP technologies and be familiar with the latest trends and best practices in system security. There are many resources available to help candidates prepare for the exam, including study guides, practice exams, and online training courses. By investing the time and effort required to prepare for the exam, candidates can increase their chances of passing and obtaining the SAP P-SECAUTH-21 certification.
P_SECAUTH_21 dumps Sure Practice with 80 Questions: https://pass4sure.test4cram.com/P_SECAUTH_21_real-exam-dumps.html