2024 Updated P-SECAUTH-21 Tests Engine pdf - All Free Dumps Guaranteed!
Latest SAP Certified Technology Professional P-SECAUTH-21 Actual Free Exam Questions
The P_SECAUTH_21 exam is intended for professionals with a background in SAP technology and system security. Candidates should have knowledge of SAP NetWeaver, SAP HANA, and other SAP systems. They should also have experience with security protocols and standards, such as OAuth, SAML, and SSL. In addition, candidates should be familiar with industry best practices for securing enterprise systems.
NEW QUESTION # 30
Which transaction or report can be used to audit profile assignments in an SU01 user master record? Note: There are 2 correct answers to this question.
- A. RSUSR1 00
- B. SM20N
- C. RSUSR002
- D. ST01
Answer: A,C
Explanation:
Explanation
These are some of the transactions or reports that can be used to audit profile assignments in an SU01 user master record. A user master record is a record that contains information about a user in an SAP system, such as personal data, logon data, defaults, parameters, or authorizations. A profile assignment is an assignment of a profile to a user master record, which grants the user certain authorizations or permissions in the system.
RSUSR002 is a transaction or report that displays users by complex selection criteria, such as profiles, authorizations, or transactions. RSUSR100 is a transaction or report that displays users according to logon date and password change date, along with their profiles and roles. References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?
NEW QUESTION # 31
Which of the following function can be used to troubleshoot authorization errors for ABAP CDS views with Authorization based on Access Control?
- A. E2E TRACE ANALYSIS
- B. ABAP TRACE
- C. STAUTHTRACE
- D. REPORT RSUSR008_009
Answer: C
NEW QUESTION # 32
How do you secure the special user "SAP*" in AS ABAP? Note: There are 3 correct answers to this question.
- A. Lock and expire the user in all clients except 000
- B. Lock and expire the user in all clients
- C. Remove all authorizations from the user
- D. Set profile parameter login/no_automatic_user_sapstar to 1
- E. Set profile parameter login/no_automatic_user_sapstar to 0
Answer: B,C,D
Explanation:
Explanation
These are some of the tasks that you would perform to secure the special user "SAP*" in AS ABAP. The user
"SAP*" is a default user that can be used to log on to any client with a predefined password if no other users exist or if all users are locked. To prevent unauthorized access using this user, you should remove all authorizations from it, lock and expire it in all clients, and set the profile parameter login/no_automatic_user_sapstar to 1, which disables the automatic logon feature for this user. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 33
To which services package does SAP Security Optimization Services (SOS) belong?
- A. Application Integration Optimization
- B. System Administration Optimization
- C. EarlyWatch Reporting
- D. Performance Optimization
Answer: B
Explanation:
Explanation
This is one of the services packages that SAP Security Optimization Services (SOS) belongs to. SOS is a service that enables you to assess and improve the security level of your SAP systems and landscapes based on best practices and recommendations from SAP experts. SOS belongs to System Administration Optimization services package, which is a package that provides services for optimizing various aspects of system administration and operation, such as performance, availability, backup, or security. References:
https://support.sap.com/en/security/security-optimization-services.html
https://support.sap.com/en/security/security-optimization-services.html
NEW QUESTION # 34
You are using the SAP Web Dispatcher for load-balancing purposes. Which actions are performed by the SAP Web Dispatcher in this scenario? Note: There are 2 correct answers to this question.
- A. Decrypts the HTTPS request and then selects the server
- B. Validates the user credentials
- C. Checks the current state of the message server
- D. Uses logon groups to determine how to direct requests
Answer: C,D
Explanation:
Explanation
The SAP Web Dispatcher performs these actions when it is used for load-balancing purposes. It uses logon groups to determine how to direct requests to the appropriate application servers based on the user's role and preferences. It also checks the current state of the message server to obtain information about the load and availability of the application servers. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 35
You verified the password of the TMSADM user in your SAP landscape to be SAP defaulted. You want to reset this password by using program TMS_UPDATE_PWD_OF_TMSADM. What steps would you take to reset this password?
Note: There are 2 correct answers to this question
- A. Deactivate the SNC option
- B. Assign "SAP_ALL" to TMSADM in all systems/clients including 000
- C. Lock TMSADM in all the system/clients including 000
- D. Run this program in the Domain Controller (client 000)
Answer: A,D
NEW QUESTION # 36
A security consultant has activated a trace via ST01 and is analyzing the authorization error with Return Code 12. What does the Return Code 12 signify?
- A. "No authorizations but does have authorization object in their buffer"
- B. "Too many parameters for authorization checks"
- C. "Objects not contained in User Buffer"
- D. "No authorizations and does NOT have authorization object in their buffer"
Answer: A
NEW QUESTION # 37
Which OData authorizations are required for a user to see business data in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.
- A. Start authorization in the SAP Fiori front-end system
- B. Access authorization in the SAP Fiori front-end system
- C. Access authorization in the SAP S/4HANA back-end system
- D. Start authorization in the SAP S/4HANA back-end system
Answer: A,C
NEW QUESTION # 38
Which of the following events will create security alerts in the CCMS Alert Monitor of SAP Solution Manager? Note: There are 2 correct answers to this question.
- A. Call of RFC functions
- B. Start of reports
- C. Manual table changes
- D. Changes to the instance profile
Answer: A,B
NEW QUESTION # 39
How can you describe static and dynamic assignments? Note: There are 2 correct answers to this question.
- A. Dynamic assignments are based on scope values.
- B. Static assignments are set up via the Cloud Cockpit.
- C. Dynamic assignments are based on attribute values
- D. Static assignments occur at runtime.
Answer: A,B
Explanation:
Explanation
Static assignments are the assignments of roles and role collections to users or groups that are done manually via the Cloud Cockpit. Dynamic assignments are the assignments of roles and role collections to users or groups that are done automatically based on scope values. Scope values are attributes that are derived from the user's identity provider or from the application context. References:
https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/9e1bf57130ef466e8017eab298
https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/9e1bf57130ef466e8017eab298
NEW QUESTION # 40
You are reviewing the authorizations for Core Data Services (CDS) views. How are classic authorizations integrated with CDS authorizations?
- A. By assigning the CDS view to the authorization profile in PFCG
- B. By using the statement AUTHORITY-CHECK in the access control of the CDS view
- C. By defining the CDS view in the authorization object in SU21
- D. By defining access conditions in an access rule for the CDS view
Answer: D
NEW QUESTION # 41
What is the User Management Engine (UME) property "connect on pooling" used for? Note: There are 2 correct answers to this question.
- A. To avoid unauthorized request to the LDAP directory server
- B. To share server resources among requesting LDAP clients
- C. To improve performance of requests to the LDAP directory server
- D. To create a new connect on to the LDAP directory server for each request
Answer: B,C
NEW QUESTION # 42
How does the SAP SSO wizard (transaction SNCWIZARD) simplify the SNC configuration process?
- A. It sets the profile parameter for SAP SNC in the instance profile
- B. It restarts the SAP application server for all profile changes to take effect
- C. It creates the SNC_LIB environment variable in OS user profile
- D. It set the profile parameters for SAP SNC in the default profile
Answer: D
NEW QUESTION # 43
The security administrator is troubleshooting authorization errors using transaction SU53.
While running transaction MM50, the user received the following error: "You are not authorized to use transaction MM01 ." The user's position in the organization makes it inappropriate for them to have direct access to transaction MM01 because it creates a Segregation of Duties conflict. How can the security administrator resolve the issue and still provide the user with the needed access to MM50?
- A. Set the check indicator value for object S_TCODE in the SU24 data for transaction MM01 to Do Not Check.
- B. Set the check indicator (for the transaction authorization called by the MM01 transaction) to NO, using transaction SE97 for transaction MM50.
- C. Remove transaction MM01 as a CALLING transaction from table TCDCOUPLES.
- D. Set the value for instance parameter auth/no_check_in_some_cases to N.
Answer: B
Explanation:
Explanation
This is one of the ways that the security administrator can resolve the issue and still provide the user with the needed access to MM50. Transaction SE97 is a tool that allows you to maintain check indicators for called transactions, which determine whether an authority check for object S_TCODE is performed when a transaction calls another transaction. By setting the check indicator to NO for MM01 when it is called by MM50, the user can run MM50 without being authorized for MM01. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 44
Which tasks would you perform to allow increased security for the SAP Web Dispatcher Web Administration Interface? Note: There are 2 correct answers to this question
- A. Use access restrictions to the icm/HTTP/auth_<xx> profile parameter
- B. Use subparameter ALLOWPUB = TRUE of the profile parameter icm/server_port_<xx>
- C. Use a separate port for the administration interface
- D. Use Secure Socket Layer (SSL) for encrypted access
Answer: B,C
NEW QUESTION # 45
Which communication protocols are supported by the SAP Cloud Connector? Note: There are 2 correct answers to this question.
- A. LDAP
- B. NNTP
- C. SNA
- D. RFC
Answer: A,D
Explanation:
Explanation
The SAP Cloud Connector supports these communication protocols: LDAP (Lightweight Directory Access Protocol) and RFC (Remote Function Call). LDAP is used to connect to an on-premise directory service, such as Active Directory, and synchronize user data with the cloud identity provider. RFC is used to connect to an on-premise SAP system and enable remote function calls from the cloud applications. References:
https://help.sap.com/viewer/cca91383641e40ffbe03bdc78f00f681/Cloud/en-US/e6c7616abb5710148cfcf3e75d96
https://help.sap.com/viewer/cca91383641e40ffbe03bdc78f00f681/Cloud/en-US/e6c7616abb5710148cfcf3e75d96
NEW QUESTION # 46
What are the characteristics of HTTP security session management? Note: There are 3 correct answers to this question
- A. Refers to the session context through the session identifier
- B. Starts security sessions with a short user-based expiration time
- C. Checks the logon credentials again for every request
- D. Creates security sessions at logon
- E. Deletes security sessions at logoff
Answer: A,D,E
NEW QUESTION # 47
SAP GRC Access Control provides risk analysis for which of the following? Note: There are 2 correct answers to this question.
- A. Password Self-Service
- B. Access Request Managment
- C. Business Role Management
- D. Business Rule Framework
Answer: B,C
Explanation:
Explanation
SAP GRC Access Control provides risk analysis for these components. SAP GRC Access Control is a suite of applications that enables you to manage access risks and compliance across your SAP systems and landscapes.
Business Role Management is a component that allows you to design and maintain business roles based on user tasks and functions, and analyze them for potential risks or conflicts. Access Request Management is a component that allows you to request, approve, provision, and monitor access changes for users and roles, and analyze them for potential risks or violations. References:
https://help.sap.com/viewer/product/SAP_ACCESS_CONTROL/en-US
NEW QUESTION # 48
You are consolidating user measurement results and transferring them to SAP. What act on do you take?
- A. Run transact on USMM
- B. Run report RSLAW_PLUGIN
- C. Run report RFAUDI06_BCE
- D. Run report RSUSR200
Answer: A
NEW QUESTION # 49
......
SAP P-SECAUTH-21 certification is designed to validate the knowledge of System Security Architects in delivering secure enterprise solutions and provide them with the tools necessary to make their SAP implementations more secure. Passing this certification exam is evidence of an individual’s expertise in security architectures and their ability to apply this knowledge to a variety of business use cases.
SAP P-SECAUTH-21 certification exam is a rigorous and challenging exam that requires candidates to have a solid understanding of SAP system security architecture. P-SECAUTH-21 exam consists of 80 multiple-choice questions and lasts for three hours. Candidates must achieve a passing score of 65% or higher to earn the certification. P-SECAUTH-21 exam is administered by SAP and can be taken at authorized testing centers worldwide.
P-SECAUTH-21 Dumps Updated Practice Test and 80 unique questions: https://www.validvce.com/P-SECAUTH-21-exam-collection.html
Latest 100% Exam Passing Ratio - P-SECAUTH-21 Dumps PDF: https://drive.google.com/open?id=1-ddEI4RKaC78rxQR1HOghPzsvbnR-Zsz
