Get Latest Apr-2023 Conduct effective penetration tests using Test4Cram C-GRCAC-13 exam [Q12-Q31]

Rate this post

Get Latest [Apr-2023] Conduct effective penetration tests using Test4Cram C-GRCAC-13

Penetration testers simulate C-GRCAC-13 exam PDF

Q12. Which of the following represent valid Agent Types within MSMP Workflow configuration? Note: There are 2 correct answers to this question.

PFCG Roles

BRFplus flat rule

BRFplus rule

GRC API (Application Programming Interface) Rules

Q13. You are configuring your MSMP Workflow path and you want to allow an approver to decide which type of provisioning should occur upon approval.Which configuration options provide this capability?Note: There are 2 correct answers to this question.

Set stage task setting to Allow Manual Provisioning

Set system provisioning option for auto-provisioning to manual provisioning

Set stage task setting to Override Assignment Type

Set global provisioning option for auto-provisioning to manual provisioning

Q14. Which of the following tasks can you complete using the Role Certification process? Note: There are 2 correct answers to this question.

Send work item for role review

Determine if the role is assigned correctly

Send email notification for role review

Determine if the role is designed correctly

Q15. What are condition groups used for in Business Role Management? Note: There are 2 correct answers to this question.

Organizational Value Mapping

Role Naming Convention

Role Methodology

Role Owners

Q16. Which of the following is a prerequisite for scheduling a Role Usage Sync in SAP Access Control?

BOM Data Sync

Authorization Sync

IdM/IAG Role Import

Action Usage Sync

Q17. Which of the following are required to create a role in SAP Access Control? Note: There are 3 correct answers to this question.

Business Process

Role Methodology

Owners/Approvers

Project Release

Naming Convention

Q18. You want to configure SAP Access Control to generate alerts to help manage compliance. What are the available alert capabilities that can be configured? Note; There are 3 correct answers to this question.

Identify a user who has executed a critical action and generate an email notification

Identify a user who has executed conflicting functions and open a support desk message

Identify a user who has executed conflicting functions

Identify a control monitor who has failed to execute defined reports in a timely fashion

Identify a user who has executed a critical action and open a support desk message.

Q19. It is mandatory for a Firefighter ID to be assigned to which of the following?

Firefighter ID Controller

Firefighter

Firefighter ID Owner and Firefighter ID Controller

Firefighter ID Owner

Q20. Which of the following conditions are contained in the MSMP Workflow Routing Rules delivered by SAP? Note: There are 2 correct answers to this question.

SOD Violation

Approver Not Found

No Role Owner

Auto Provisioning Failure

Q21. You are using the End User Login Page link configured in SAP Access Control.What options are provided for you to use?Note: There are 3 correct answers to this question.

Submit a Template Request

Review role assignments

Create a Simplified Access Request

Specify Approver Delegation

Q22. In Business Role Management, which of the following actions can be incorporated and enforced in a Role Methodology?Note; There are 3 correct answers to this question

Derivation

Provisioning

Testing

Certification

Mitigation

Q23. Which of the following represent a Rule Kind when configuring MSMP Workflow?Note: There are 2 correct answers to this question.

Function Module

Decision Table

Notification Variable

Agent

Q24. Which of the following tasks can you complete using the Role Certification process? Note: There are 2 correct answers to this question.

Send work item for role review

Determine if the role is assigned correctly

Send email notification for role review

Determine if the role is designed correctly

Q25. You are creating a mitigating control.
How do you specify on which system and client the control is executed?

Assign one or more reports to the control from the desired system

Assign a rule set for the desired system

Assign an approver or monitor from the desired system

Assign a risk definition to the control for the desired system

Q26. Which of the following tasks can you complete using the Role Certification process? Note: There are 2 correct answers to this question.

Provide audit trail for role review

Periodic review of user’s role assignment

Periodic review of role content

Periodic review of user segregation of duties

Q27. How can you make sure that a risk analysis is performed when you use access request management? Note: There are 2 correct answers to this question

Set Enable Offline Risk Analysis parameter to Yes

Configure the MSMP workflow stage to require a risk analysis

Configure the MSMP workflow path to require a risk analysis

Set the Enable Risk Analysis Form on Submission parameter to Yes

Q28. You want to configure Password Self Service (PSS) to allow your end users to reset their password and process changes to their name. Which of the following actions are required before PSS can be used?

Activate PSS for User Authentication Data Source in activity Maintain Data Source Configuration.

Activate PSS manually for each target connector in activity Maintain Connector Settings.

Map the PSS Application to a BRFplus function ID in activity Maintain AC Applications and BRFplus Function Mapping.

Activate PSS manually for each target connector group in activity Maintain Connectors and Connection Types.

Q29. You are creating an Initiator rule and want to build a condition using header attributes. Which of the following attributes can you use? Note: There are 2 correct answers to this question.

Prerequisite

Functional Area

Company

Subprocess

Q30. Which of the following settings can be configured in both the global and system-specific provisioning configurations?Note: There are 3 correct answers to this question.

Account Validation Error

Role Delimit Hours

Send Password

Override Assignment Type

Deactivate Password

Q31. You have been asked to change the email message delivered to an end user when their access request is rejected. Which of the following actions should you do? Note: There are 3 correct answers to this question.

Update the required text using a copy of the standard document object.

Replace the SAP standard document object for the message class with a custom document object.

Update the required text for the standard document object.

Define a custom notification template in table GRFNVNOTIFYMSG.

Configure the Notification Event for all relevant paths and stages in MSMP Workflow.

Loading …