Download Exam P_SECAUTH_21 Practice Test Questions with 100% Verified Answers [Q25-Q49]

Rate this post

Download Exam P_SECAUTH_21 Practice Test Questions with 100% Verified Answers

Share Latest P_SECAUTH_21Test Practice Test Questions, Exam Dumps

P_SECAUTH_21 Exam Certification Details:

Sample Questions:	SAP P_SECAUTH_21 Exam Sample Question
Duration:	180 mins
Level:	Professional

NO.25 Currently, transports into your SAP system are not scanned automatically. To avoid the import of non-secure programs, you have implemented the strategy to set up a virus scanner using a script to automatically scan for the malicious programs. What is the valid fi e format where data files are first converted into and then checked by a virus scanner?

XML

Plain text

0csv

SAP compressed

NO.26 You are setting up your SAP NetWeaver AS in a SSL client scenario. What are the reasons to choose an “anonymous SSL Client PSE” setup?
Note: There are 2 correct answers to this question.

To support mutual authentication

To support server-side authentication and data encryption

To use as a container for the list of CAs that the server trusts

To have an individual identity when accessing a specific application

NO.27 How do you check when and by whom profiles were assigned or deleted?

Run report RSUSR008_009_NEW with appropriate filters

Run report RSUSR100 with appropriate filters

Check system trace using transaction ST01

Check security audit log using transact on SM20

NO.28 How do you handle user “SAP ‘in AS ABAP? Note: There are 3 correct answers to this question.

Remove all authorizations from the user

Lock and expire the user in all clients

Set profile parameter login/no_automatic_user_sapstar to 0

Set profile parameter login/no_automatic_user_sapstar to 1

Lock and expire the user in all clients except 000

NO.29 You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fiori front-end system (central hub). What transaction do you have to use to map a back-end system to one of those roles?

/UI2/GW_SYS_ALIAS

PFCG

SM59

/IWFND/MAINT_SERVICE

NO.30 Why should you create multiple dispatchers in SAP Identity Management? Note: There are 2 correct answers to this question.

To accommodate scalability

To support fail-over scenarios

To handle password provisioning

To handle special network access requirements

NO.31 What can you maintain in transaction SU24 to reduce the overall maintenance in PFCG? Note: There are 3 correct answers to this question.

The default values so they are appropriate for the transactions used in the roles

The authorization objects that are not linked to transact on codes correctly

The default values in the tables USOBX and USOBT

The default authority check settings for the role maintenance tool

The authorization objects that have unacceptable default values

NO.32 You verified the password of the TMSADM user in your SAP landscape to be SAP defaulted. You want to reset this password by using program TMS_UPDATE_PWD_OF_TMSADM. What steps would you take to reset this password?
Note: There are 2 correct answers to this question

Run this program in the Domain Controller (client 000)

Lock TMSADM in all the system/clients including 000

Assign “SAP_ALL” to TMSADM in all systems/clients including 000

Deactivate the SNC opt on

NO.33 A security consultant has activated a trace via ST01 and is analyzing the authorization error with Return Code 12. What does the Return Code 12 signify?

“Objects not contained in User Buffer”

“No authorizations and does NOT have authorization object in their buffer”

“No authorizations but does have authorization object in their buffer”

“Too many parameters for authorization checks”

NO.34 What reference is used to connect multiple Cloud Connectors to one SAP Cloud Platform subaccount?

System Alias

Location ID

Instance ID

Virtual Host

NO.35 In your system, you have a program which calls transaction A. Users with access to this program can still execute transaction A without explicit authorizations given to this transaction.
How do you prevent the access of users to the transaction A from within the program?

Make sure you do NOT assign transact on A to the authorization object S_TCODE in the role that you assign to the unauthorized users.

Maintain SE93 with authorization objects for transact on A.

Maintain the check indicator in table TCDCOUPLES

Ensure that transact on A is NOT assigned into the same program authorization group

NO.36 You want to launch classic SAP GUI transactions directly from the SAP Fiori Launchpad. Which of the following scenarios do you choose?

Chrome, SAP Enterprise Portal, SAP GUI for Java

Chrome, SAP Cloud Platform, SAP GUI for Java

Internet Explorer, ABAP front-end server, SAP GUI for Windows

Internet Explorer, SAP Business Client, SAP GUI for Windows

NO.37 The SAP HANA database is installed with multi database container (MDC) mode with multiple tenant databases configured. What are the required activities to enable access between tenants? Note: There are 2 correct answers to this question.

Create user mapping between local and remote tenant databases

Configure smart data access (SDA) between the relevant HANA tenants

Set whitelist of cross-tenant database communication channel

Decrease the level of isolation mode on all MDC tenants

NO.38 How would you control access to the ABAP RFC function modules? Note: There are 2 correct answers to this question.

O Block RFC Callback Whitelists

O Restrict RFC authorizations

O Deactivate switchable authorization checks

O Implement UCON functionality

NO.39 What are the characteristics of assertion tickets? Note: There are 2 correct answers to this question.

They are used for user-to-system trusted login

They are used for system-to-system communication

They have an unconfigurable validity of 2 minutes

They are transmitted as cookies

NO.40 The SAP HANA database has its parameters configured with its default values. How can the SAP_INTERNAL_HA NA_SUPPORT catalog role be used?

The role can be granted to another role (nested)

The role can be granted to multiple users at a time

The role can be granted only with system privileges

The role can be granted to the SYSTEM user

NO.41 Your customer runs a 3-tier environment You are asked to set up controls around monitoring the sensitive objects (such as programs, user-exits, function modules) in a development system before they are transported to the quality assurance system.
Which table would you maintain to monitor such sensitive objects before executing an import?

TMSCDES

TMSBUFFER

TMSMCONF

TMSTCRI

NO.42 You have implemented CUA in your organization and you only want to compare the company address data between the central system and child systems to perform the synchronization activities. Which transact on do you use for comparing the company address between these systems?

SCUG

SCUM

SUCOMP

SCUC

NO.43 Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 3 correct answers to this question.

HTIP(S)

Trusted RFC

Secure Network Communication (SNC)

Info Access (InA)

Data

NO.44 Which OData authorizations are required for a user to see business data in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.

Start authorization in the SAP Fiori front-end system

Access authorization in the SAP Fiori front-end system

Access authorization in the SAP S/4HANA back-end system

Start authorization in the SAP S/4HANA back-end system

NO.45 How can you register an SAP Gateway service? Note: There are 2 correct answers to this question.

Use SAP_GAT EWAY_BASIC_CONFIG in transact on STCO 1 on the frontend server

Use transaction /IWFND/MA INT_SERVICE on the front-end server

Use SAP_GAT EWAY_ACTIVATE_ODATA_SERV in transact on STC01 on the front-end server

Use transaction SEGW on the back-end server

NO.46 You are running an SAP HANA database in a multi database container (MDC) mode with a single tenant configured. The global_auditing_state parameter has been set to “true” on the global.ini.After restarting the system and tenant databases, the tenant did not come up. When checking the cause, it was discovered that a tenant configuration parameter has been changed. The audit logging did NOT show any events.What could be the reason for this? Note: There are 2 correct answers to this question.

The system was offline when the changes were done

The audit level was set to INFO

The global_auditing_state parameter on the nameserver.ini file needs to be activated

The configuration parameter was changed from the OS level

NO.47 Why do you use table logging in AS ABAP?

To log changes in application data

To log changes in master data

To log changes in table technical settings

To log changes in customizing tables

NO.48 You want to configure SNC with X.509 certificates using Common CryptoLib as the cryptographic library in a new installed AS ABAP system. Besides running SNCWIZARD, what do you need to set up for this scenario? Note: There are 2 correct answers to this question.

Set the environment variable CCL_ PROFILE to the default profile file path

Maintain the relevant CCL/SNC/’ profile parameters

Set the environment variable CCL_ PROFILE to SECUDIR

Set the CCL SNC parameters using sapgenpse

NO.49 What are the features of the Audit Information System (AIS)? Note: There are 2 correct answers to this question.

The roles are built from nodes in the Implementation Guide (IMG)

It can be launched directly using transact on SECR

It offers two types of audit reports: system and business

The report selection variables are configured during setup