Ace P_SECAUTH_21 Certification with 139 Actual Questions
PASS SAP P_SECAUTH_21 EXAM WITH UPDATED DUMPS
SAP P_SECAUTH_21 Exam Description:
The "SAP Certified Technology Professional - System Security Architect" certification exam verifies that the candidate possesses the depth of knowledge required in the areas of SAP System Security and Authorization. This certificate proves that the candidate has an advanced understanding within the Technology Consultant profile and is able to apply these skills practically and provide guidance in SAP project implementations in the role of a SAP Security Architect. Furthermore, the holder of this certification is capable to review and evaluate the security level of complex on-premise, cloud and hybrid system architectures.
P_SECAUTH_21 Exam Certification Details:
| Duration: | 180 mins |
| Exam: | 80 questions |
| Sub-solution: | Administration |
| Level: | Professional |
| Sample Questions: | SAP P_SECAUTH_21 Exam Sample Question |
NEW QUESTION 13
Which of the objects do you assign to an SAP Fiori tile to make it visible in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.
- A. Role
- B. User
- C. Catalog
- D. Group
Answer: C,D
NEW QUESTION 14
You are reviewing the authorizations for Core Data Services (CDS) views. How are classic authorizations integrated with CDS authorizations?
- A. By defining access conditions in an access rule for the CDS view
- B. By assigning the CDS view to the authorization profile in PFCG
- C. By defining the CDS view in the authorization object in SU21
- D. By using the statement AUTHORITY-CHECK in the access control of the CDS view
Answer: A
NEW QUESTION 15
What does the SAP Security Optimization Service provide? Note: There are 2 correct answers to this question.
- A. Analysis of your operating system, database, and entire SAP system to ensure optimal performance and reliability
- B. Analysis of security vulnerabilities within an enterprise's SAP landscape to ensure optimal protection against intrusions
- C. Results with recommendations on how to resolve identified vulnerabilities without prioritization
- D. Configuration check of the SAP systems and the SAP middleware components against defined configurations
Answer: B,D
NEW QUESTION 16
You are evaluating the "Cross-client object change" option using transact on SCC4 for your Unit Test Client in the development environment. Which setting do you recommend?
- A. No changes to cross-client customizing objects
- B. No changes to repository objects
- C. Changes to repository and cross-client customizing allowed
- D. No changes to repository and cross-client customizing objects
Answer: D
NEW QUESTION 17
You want to launch classic SAP GUI transactions directly from the SAP Fiori Launchpad. Which of the following scenarios do you choose?
- A. Internet Explorer, SAP Business Client, SAP GUI for Windows
- B. Chrome, SAP Cloud Platform, SAP GUI for Java
- C. Internet Explorer, ABAP front-end server, SAP GUI for Windows
- D. Chrome, SAP Enterprise Portal, SAP GUI for Java
Answer: C
NEW QUESTION 18
What are the characteristics of assertion tickets? Note: There are 2 correct answers to this question.
- A. They are transmitted as cookies
- B. They are used for system-to-system communication
- C. They are used for user-to-system trusted login
- D. They have an unconfigurable validity of 2 minutes
Answer: B,D
NEW QUESTION 19
Your company is running SAP S/4HANA on premise, with the requirement to run the SAP Fiori Launchpad in the SAP Cloud Platform. What would be the recommended scenario for user authentication for internet browser access to the SAP Fiori Launchpad?
- A. SAP Logon Tickets
- B. X.509 Client Certificates
- C. SAML2 and OData Provisioning
- D. Principal Propagation
Answer: B
NEW QUESTION 20
While performing an audit of changes to the system and client change options for your production SAP S/4HANA environment, you receive the following message in transaction SCC4. "No logs found for selected period" How can you correct the problem.
- A. Maintain parameter log-mode with value normal SAP HANA
- B. Maintain parameter rsau/enable with value 1
- C. Maintain parameter rec/client with value ALL
- D. Maintain parameter rdisp/TRACE with value 3
Answer: C
NEW QUESTION 21
You want to allow some of your colleagues to use the SAP GUI for Java to connect directly to your SAP back-end system from a public internet connection without having to set up a VPN connection first. Which of the following SAP solutions is suited for this purpose?
- A. SAP router
- B. SAP Cloud Connector
- C. SAP NetWeaver Gateway
- D. SAP Web Dispatcher
Answer: B
NEW QUESTION 22
Based on your company guidelines you have set the password expiration to 60 days. Unfortunately, there is an RFC user in your SAP system who must not have a password change for 180 days. Which option would you recommend to accomplish such a request?
- A. Define the RFC user as a reference user
- B. Create a security policy via SECPOL and assign it to the RFC user
- C. Change the profile parameter login/password_expiration_time to 180
- D. Create an enhancement spot or user exit
Answer: B
NEW QUESTION 23
Which communication protocols are supported by the SAP Cloud Connector? Note: There are 2 correct answers to this question
- A. SNA
- B. LDAP
- C. RFC
- D. NNTP
Answer: B,C
NEW QUESTION 24
You are running a 3-tier SAP system landscape. Each time you are accessing STMS_IMPORT on any of these systems, you are prompted for a TMSADM password. How can you stop this prompt from appearing?
- A. Change the TMSA DM user's password directly in the TMS RFC destination in transact on SM59.
- B. Run the report RSUSR405 on the domain controller.
- C. Reset the TMSADM user's password on the system you are trying to access STMS_ IMPORT.
- D. Run the report TMS_ UPDATE_PWD_OF_TMSADM on the domain controller.
Answer: D
NEW QUESTION 25
You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fiori front-end system (central hub). What transactions do you have to use to map a back-end system to one of those roles?
- A. SEGW
- B. PFCG
- C. /IWFND/MAINT_SERVICE
- D. /UI2/GW_SYS_ALIAS
Answer: C
NEW QUESTION 26
What are characteristics of SAP HANA Deployment Infrastructure (HDI) roles? Note: there are 2 correct answers to this question.
- A. They are managed by the native HDI version control.
- B. They are transportable between systems
- C. They are owned by the user who creates them
- D. They are granted using database procedures
Answer: A,D
NEW QUESTION 27
To which services packages does SAP Security Optimization Services (SOS) belong?
- A. EarlyWatch Reporting
- B. Performance Optimization
- C. Application Integration Optimization
- D. System Administration Optimization
Answer: D
NEW QUESTION 28
What is required when you configure the PFCG role for an end-user on the front-end server? Note: There are 2 correct answers to this question.
- A. The Fiori Launchpad designer assignment
- B. The catalog assignment for the start authorization
- C. The group assignment to display it in the Fiori Launchpad
- D. The S_RFC authorization object for the OData access
Answer: B,C
NEW QUESTION 29
Which measures should we implement to protect the PSEs? Note: There are 2 correct answers to this question
- A. Review the usage of the S_DATASET object
- B. Encyrpt the files with the transaction SNCO
- C. Review the usage of the S_ADMI_FCD object
- D. Restrict access to the opposing system users
Answer: A,D
NEW QUESTION 30
You want to check the custom ABAP codes in your system for security vulnerabilities and you want to use the SAP Code Vulnerability Analyzer to carry out these extended security checks. What need to be done for this purpose? Note: There are 2 correct answers to this question
- A. Run SAP Code Vulnerability Analyzer from the ABAP Test Cockpit
- B. Run the transaction ST12 to start the analysis
- C. Run SAP Code Vulnerability Analyzer from the transaction ST01
- D. Run the extended syntax check from the SLIN transaction
Answer: A,D
NEW QUESTION 31
Which authorizations should you restrict when you create a developer role in an AS ABAP production system? Note: There are 2 correct answers to this question.
- A. The ability to use the ABAP Debugger through authorization object S_DEVELOP
- B. The ability to execute function modules through authorization object S_DEVELOP
- C. The ability to execute queries through authorization object S_OUERY
- D. The ability to execute class methods through authorization object S_PROGRAM
Answer: A,B
NEW QUESTION 32
In your SAP HCM system, you are implementing structural authorizations for your users. What are the characteristics of this authorization type? Note: There are 2 correct answers to this question.
- A. The structural profile is maintained and assigned to users using the Implementation Guide
- B. The structural profile determines the access mode which the user can perform
- C. The structural profile is maintained and assigned to users using the Profile Generator
- D. The structural profile determines the accessible object in the organizational structure
Answer: A,D
NEW QUESTION 33
What does the SAP Security Optimization Service provide? Note: There are 2 correct answers to this question.
- A. Analysis of the network configuration
- B. Results containing the list of patches that have to be applied.
- C. Analysis of the security vulnerabilities within an SAP landscape
- D. Configuration checks of SAP systems
Answer: B,D
NEW QUESTION 34
You want to allow your trainee colleagues to use the SAP GUI to connect directly to your SAP S/4HANA (on-premise) demo system form a public internet connection Which of the following SAP solutions is suited for this purpose?
- A. SAP Cloud Connector
- B. SAP NetWeaver Gateway
- C. SAP Web Dispatcher
- D. SAP Prouter
Answer: A
NEW QUESTION 35
What are the requirements of SPNego SSO configuration in an SAP Fiori front-end system? Note: There are 2 correct answers to this question.
- A. The system requires Microsoft Active Directory infrastructure in place.
- B. The system's users in the ABAP system must have the same user names as the database users in SAP HANA
- C. The system requires an identity provider as an issuing system to enable single sign-on with SPNego in an internet-facing deployment scenario.
- D. The system should typically be located within the corporate network.
Answer: A,D
NEW QUESTION 36
SNC is configured in the production system. For emergency purposes, you want to allow certain accounts to be able to access the system with password logon. What do you need to set up for this purpose? Note: There are 2 correct answers to this question.
- A. Use profile parameter SNC/ACCEPT_ INSECURE_GUI with value 'U'
- B. Use profile parameter SNC/ONLY_ENCRYPTED_GUI with value 'O'
- C. Maintain the user access control list in table USRACLEXT
- D. Use the 'Unsecure communication permitted option' In SU01 for specific users
Answer: A,D
NEW QUESTION 37
What are characteristic of the SAP_INTERNAL_HANA_SUPPORT catalog role? Note: there are 2 correct answers to this question.
- A. No role can be granted to it
- B. Object privileges can be granted to the role
- C. It has full access to all metadata
- D. System privileges can be granted to the role
Answer: A,D
NEW QUESTION 38
......
SAP P_SECAUTH_21 Certification Exam Topics:
| Topic Areas | Topic Details, Courses, Books |
|---|---|
| Authorization Concept for SAP Business Suite 8% - 12% | Describe and implement the authorization concept for SAP Business Suite |
| Authorization Concept for SAP S/4HANA > 12% | Describe and implement the authorization concept for SAP S/4HANA |
| Authorization, Security and Scenarios in SAP HANA > 12% | Explain authorization, security and scenarios in SAP HANA |
| SAP Netweaver Application Server and Infrastructure Security > 12% | Describe and implement security in a SAP NetWeaver Application Server and related infrastructure components |
| User Administration and Identity Lifecycle Management in SAP < 8% | Manage users in SAP systems |
| Secure an SAP System 8% - 12% | Explain how to secure an SAP system and conduct security checks |
P_SECAUTH_21 Questions PDF [2023] Use Valid New dump to Clear Exam: https://www.test4engine.com/P_SECAUTH_21_exam-latest-braindumps.html
Passing SAP P_SECAUTH_21 Exam Using 2023 Practice Tests: https://drive.google.com/open?id=1TfarA5M8SITbXpnzX4fMDPqZ0KyEGOwL