2022 Updated Verified Pass P-SECAUTH-21 Study Guides & Best Courses [Q29-Q49]

ExamBoosts August 8, 2022 P-SECAUTH-21 > SAP 0

4/5 - (1 vote)

2022 Updated Verified Pass P-SECAUTH-21 Study Guides & Best Courses

Ultimate Guide to the P-SECAUTH-21 – Latest Edition Available Now

NO.29 Which authorization object controls access to the trusting system between the managed system and SAP Solution Manager?

S_RFCACL

S_RFC

S_SERVICE

S_ ICM

NO.30 Which tasks would you perform to allow increased security for the SAP Web Dispatcher Web Administration interface? Note: There are 2 correct answers to this question.

Use a separate port for the content

Use access restrictions with the icm/HTTP/auth_<xx> profile parameter

Use subparameter ALLOWPUB = FALSE of the profile parameter icm/server_port_<xx>

Use Secure Socket Layer (SSL) for password encrypt on

NO.31 Which of the objects do you assign to an SAP Fiori tile to make it visible in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.

Group

Role

User

Catalog

NO.32 Which data source needs to be integrated into SAP Identity Management via the Virtual Directory Server (VOS)?

AS ABAP

AS Java

LDAP

SAP HCM

NO.33 Which tool do you use to customize the SAP HANA default password policy? Note: There are 2 correct answers to this question.

SAP HANA Lifecycle Manager

SAP HANA Studio

SAP HANA Cockpit

SAP Web IDE

NO.34 What reference is used to connect multiple Cloud Connectors to one SAP Cloud Platform subaccount?

System Alias

Location ID

Instance ID

Virtual Host

NO.35 How does the SAP SSO wizard (transaction SNCWIZARD) simplify the SNC configuration process?

It installs the CA certificate response

It exports an SNC SAPCRYPTOLIB certificate and imports it into the partner system

It creates the SNC_LIB environment variable

It sets the profile parameters for SAP SNC and SPNego in the default profile

NO.36 You want to use Configuration Validation functionality in SAP Solution Manager to check the consistency of settings across your SAP environment. What serves as the reference basis for Configuration Validation? Note: There are 2 correct answers to this question.

A list of recommended settings attached to a specific SAP Note

A target system in your system landscape

A virtual set of manually maintained configuration ems

A result list of configuration items from SAP Early Watch Alert (EWA)

NO.37 Insufficient authorization checks might allow A BAP programs to access the PSE files. Which authorization objects should we check to protect the PSEs? Note: There are 2 correct answers to this question.

S_RZL_ADM

S_DATASET

S_ADMI_FCD

S_DEVELOP

NO.38 You have an HR table for which you want to create a role to provide users the ability to display and change its table content based on the country groupings. Which of the steps would you take to accomplish these requirements? Note: There are 2 correct answers to this question.

Maintain the authorization object S_TABU_LIN

Create an authorization group with appropriate authorization fields for the table

Define an organization criterion through transaction SPRO

Maintain the authorization object S_TABU_NAM

NO.39 Where can we store the Security Audit Log events? Note: There are 2 correct answers to this question.

In the database table RSAU_BUF_DATA

In the file system of the application servers

In the SAP Solution Manager system

In a central fi e system

NO.40 SNC is configured in the production system. For emergency purposes, you want to allow certain accounts to be able to access the system with password logon. What do you need to set up for this purpose? Note: There are 2 correct answers to this question.

Use profile parameter SNC/ACCEPT_ INSECURE_GUI with value ‘U’

Use profile parameter SNC/ONLY_ENCRYPTED_GUI with value ‘O’

Maintain the user access control list in table USRACLEXT

Use the ‘Unsecure communication permitted option’ In SU01 for specific users

NO.41 To prevent session fixation and session hijacking attacks, SAP’s HTTP security session management is highly recommended. What are the characteristics of HTTP security session management? Note: There are 2 correct answers to this question.

It uses URLs containing sap-context d to identify the security session

The system is checking the logon credentials again for every request

The security sessions are created during logon and deleted during logoff.

The session identifier is a reference to the session context transmitted through a cookie.

NO.42 You want to configure SNC with X.509 certificates using Common CryptoLib as the cryptographic library in a new installed AS ABAP system. Besides running SNCWIZARD, what do you need to set up for this scenario? Note: There are 2 correct answers to this question.

Set the environment variable CCL_ PROFILE to the default profile file path

Maintain the relevant CCL/SNC/’ profile parameters

Set the environment variable CCL_ PROFILE to SECUDIR

Set the CCL SNC parameters using sapgenpse

NO.43 What are the characteristics of assertion tickets? Note: There are 2 correct answers to this question.

They are used for user-to-system trusted login

They are used for system-to-system communication

They have an unconfigurable validity of 2 minutes

They are transmitted as cookies

NO.44 You are reviewing the authorizations for Core Data Services (CDS) views. How are classic authorizations integrated with CDS authorizations?

By using the statement AUTHORITY-CHECK in the access control of the CDS view

By defining access conditions in an access rule for the CDS view

By assigning the CDS view to the authorization profile in PFCG

By defining the CDS view in the authorization object in SU21

NO.45 The SAP HANA database is installed with multi database container (MDC) mode with multiple tenant databases configured. What are the required activities to enable access between tenants? Note: There are 2 correct answers to this question.

Create user mapping between local and remote tenant databases

Configure smart data access (SDA) between the relevant HANA tenants

Set whitelist of cross-tenant database communication channel

Decrease the level of isolation mode on all MDC tenants

NO.46 How do you handle user “SAP ‘in AS ABAP? Note: There are 3 correct answers to this question.

Remove all authorizations from the user

Lock and expire the user in all clients

Set profile parameter login/no_automatic_user_sapstar to 0

Set profile parameter login/no_automatic_user_sapstar to 1

Lock and expire the user in all clients except 000

NO.47 Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 3 correct answers to this question.

HTIP(S)

Trusted RFC

Secure Network Communication (SNC)

Info Access (InA)

Data

NO.48 Why do you use table logging in AS ABAP?

To log changes in application data

To log changes in master data

To log changes in table technical settings

To log changes in customizing tables

NO.49 When re-configuring the user management engine (UME) of an AS Java system, what do you need to consider to change the data source from system database to an ABAP system successfully?

The logon security policy for the existing users is aligned with the logon security policy in the ABAP system.

All users and groups in the system database must have different IDs than existing users and groups in the ABAP system.

You need to import the users from the system database into the ABAP system.

You must manually replace the UME configuration file dataSourceConfiguration_database_only.xmlwith an appropriate dataSourceConfiguration_abap.xmlfile.

Loading …