P_SECAUTH_21 Exam Practice Questions prepared by SAP Professionals
Use Valid New P_SECAUTH_21 Questions - Top choice Help You Gain Success
NEW QUESTION # 19
Which OData authorizations are required for a user to see business data in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.
- A. Start authorization in the SAP S/4HANA back-end system
- B. Access authorization in the SAP Fiori front-end system
- C. Access authorization in the SAP S/4HANA back-end system
- D. Start authorization in the SAP Fiori front-end system
Answer: B,C
Explanation:
Explanation
These are some of the OData authorizations that are required for a user to see business data in the SAP Fiori Launchpad. OData (Open Data Protocol) is a protocol that enables CRUD (Create, Read, Update, Delete) operations on data using RESTful web services. SAP Fiori Launchpad is a web-based tool that provides access to various SAP Fiori applications and functions. SAP S/4HANA is an ERP (Enterprise Resource Planning) system that provides various business processes and functions. To see business data in the SAP Fiori Launchpad, the user needs to have access authorization in both the SAP Fiori front-end system, which handles the OData requests and responses between the user's browser and the back-end system, and the SAP S/4HANA back-end system, which contains the business logic and data access for the OData services.
References:
https://help.sap.com/viewer/a7b390faab1140c087b8926571e942b7/7.5.9/en-US/5c3d6d0f6c461014a1d99bc8a4f
NEW QUESTION # 20
A user is authorized to run SP01. What can this user access with authorization object S_ SPO_ ACT when the 'Value for Authorization Check' field is set to "__USER__"?
- A. All spool requests for users in the same user group
- B. All spool requests for all users in the client
- C. All unprotected spool requests for all users in the client
- D. All spool requests for a specific user in the client
Answer: D
Explanation:
Explanation
This is one of the things that a user can access with authorization object S_SPO_ACT when the 'Value for Authorization Check' field is set to "USER" and they are authorized to run SP01 transaction. S_SPO_ACT is an authorization object that controls access to spool requests based on various criteria, such as spool request number, output device, or user name. SP01 is a transaction that allows you to display and manage spool requests, which are requests for printing or outputting data from SAP systems. If the 'Value for Authorization Check' field is set to "USER" in S_SPO_ACT authorization object, the user can access all spool requests for their own user name in the client where they are logged on. References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?
NEW QUESTION # 21
What is the purpose of the parameter rec/client in an AS ABAP based SAP system?
- A. To log changes in tables
- B. To log changes in Core Data Services views
- C. To generate source code versions
- D. To generate changes in documents
Answer: A
NEW QUESTION # 22
When re-configuring the user management engine (UME) of an AS Java system, what do you need to consider to change the data source from system database to an ABAP system successfully?
- A. All users and groups in the system database must have different IDs than existing users and groups in the ABAP system.
- B. You must manually replace the UME configuration file dataSourceConfiguration_database_only.xmlwith an appropriate dataSourceConfiguration_abap.xmlfile.
- C. The logon security policy for the existing users is aligned with the logon security policy in the ABAP system.
- D. You need to import the users from the system database into the ABAP system.
Answer: A
NEW QUESTION # 23
An end user has indicated that they are getting an authorization error when attempting to call a Transaction Code (TCD). However, the TCD exists in the User Manu. What could be the issue and where would you check?
- A. This user is blocked from calling the TCD; check in SM01
- B. The TCD is assigned to the user via multiples roles; check in PFCG
- C. An entry in table USRBF prevents them from calling the TCD; check SE16
- D. Additional authorization checks are required for the TC; check in SE93
Answer: D
NEW QUESTION # 24
The SAP HANA database is installed with multi database container (MDC) mode with multiple tenant databases configured. What are the required activities to enable access between tenants? Note: There are 2 correct answers to this question.
- A. Set whitelist of cross-tenant database communication channel
- B. Decrease the level of isolation mode on all MDC tenants
- C. Configure smart data access (SDA) between the relevant HANA tenants
- D. Create user mapping between local and remote tenant databases
Answer: A,D
NEW QUESTION # 25
Which authorizations should you restrict when you create a developer role in an AS ABAP production system? Note: There are 2 correct answers to this question.
- A. The ability to use the ABAP Debugger through authorization object S_DEVELOP
- B. The ability to execute class methods through authorization object S_PROGRAM
- C. The ability to execute queries through authorization object S_OUERY
- D. The ability to execute function modules through authorization object S_DEVELOP
Answer: A,D
NEW QUESTION # 26
What are the key capabilities of Enterprise Threat Detection? Note: There are 2 correct answers to this question
- A. Predictive threat notification
- B. Blocking user access
- C. Dashboard-based analysis for security risks
- D. Real time capture of abnormal user activities
Answer: A,C
NEW QUESTION # 27
Based on your company guidelines you have set the password expiration to 60 days.
Unfortunately, there is an RFC user on your SAP system who must not have a password change for 1 80 days. Which option would you recommend to accomplish such a request?
- A. Create a security policy via SECPOL and assign it to the RFC users
- B. Create an enhancement spot or user exit
- C. Define the RFC user as a reference user
- D. Change the profile parameter login/password_expiration_time to 1 80
Answer: A
Explanation:
Explanation
This is one of the options that you would recommend to accomplish such a request of having an RFC user with a password expiration of 180 days instead of 60 days based on your company guidelines. SECPOL is a transaction that allows you to create and maintain security policies for password settings, such as minimum length, expiration time, or lockout threshold. You can assign different security policies to different users or user groups based on their roles or requirements. References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?
NEW QUESTION # 28
Which characteristics apply to the SAP ID Service? Note: There are 2 correct answers to this question.
- A. Non-configurable MFA for SAP BTP Cockpit
- B. Configurable password policy
- C. User base owned and managed by SAP
- D. Customizable user interface
Answer: B,C
Explanation:
Explanation
The SAP ID Service is a cloud-based identity provider that offers a configurable password policy and a user base owned and managed by SAP. The SAP ID Service is used to authenticate users for various SAP cloud applications and services, such as SAP Cloud Platform, SAP Analytics Cloud, and SAP Fiori Launchpad.
References: https://help.sap.com/viewer/product/SAP_ID_SERVICE/en-US
https://help.sap.com/viewer/product/SAP_ID_SERVICE/en-US
NEW QUESTION # 29
Because of which security threat would you need to make additional configuration settings to run the SAP Fiori Launchpad from within your SAP NetWeaver Portal?
- A. Content Spoofing
- B. Clickjacking
- C. Cross-Site Scripting
- D. Cross-Site Request Forgery
Answer: B
NEW QUESTION # 30
Which authorizations are required for an SAP Fiori Launchpad user? Note: There are 2 correct answers to this question
- A. /UI2/CHIP
- B. /UI2/PAGE_BUILDER_CUST
- C. /UI2/PAGE_BUILDER_PERS
- D. /UI2/INTEROP
Answer: C,D
NEW QUESTION # 31
Which platform services are available in the Cloud Foundry? Note: There are 2 correct answers to this question.
- A. Commerce
- B. Analytics
- C. Integration
- D. Data Quality
Answer: B,C
Explanation:
Explanation
Analytics and Integration are two of the platform services available in the Cloud Foundry environment of SAP Cloud Platform. Analytics provides capabilities for data visualization, reporting, and dashboarding. Integration provides capabilities for connecting applications, data sources, and processes across different environments.
References: https://help.sap.com/viewer/product/SAP_CLOUD_PLATFORM/Cloud/en-US
https://help.sap.com/viewer/product/SAP_CLOUD_PLATFORM/Cloud/en-US
NEW QUESTION # 32
How can you protect a table containing sensitive data using the authorization object S_TABU_DIS?
- A. The tables containing sensitive data must be named using the authorization object S_TA BU_NAM for all responsible administrator employees. The fields DICBERCLS of the object S_TABU_DIS can
- B. The tables containing sensitive data must be associated with table groups in table TBRG.
- C. Authorization table groups containing tables with sensitive data must be defined in table TDDAT and these must be omitted for all employees who do not need access to these tables
- D. The field DICBERCLS of the authorization object must enumerate all table names of the tables containing sensitive data.
Answer: C
Explanation:
then be filled with *.
NEW QUESTION # 33
Which of the objects do you assign to an SAP Fiori tile to make it visible in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.
- A. Role
- B. Group
- C. User
- D. Catalog
Answer: B,D
NEW QUESTION # 34
Which of the following functions can be used to troubleshoot authorization errors for ABAP CDS views with Authorization based on Access Control?
- A. E2E TRACE ANALYSIS
- B. REPORT RSUSR008_009
- C. STAUTHTRACE
- D. ABAP TRACE
Answer: C
Explanation:
Explanation
This is one of the functions that can be used to troubleshoot authorization errors for ABAP CDS views with Authorization based on Access Control (ABAC). ABAP CDS (Core Data Services) views are views that define data models and queries using SQL statements and annotations in ABAP Dictionary. ABAC is a feature that allows you to restrict access to data in ABAP CDS views based on certain conditions or filters using DCL (Data Control Language) statements and expressions. STAUTHTRACE is a transaction that allows you to activate and display authorization traces for users or sessions, which show detailed information about authorization checks and results for ABAP CDS views with ABAC. References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?
NEW QUESTION # 35
You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fiori front-end system (central hub). What transaction do you have to use to map a back-end system to one of those roles?
- A. /IWFND/MAINT_SERVICE
- B. SM59
- C. PFCG
- D. /UI2/GW_SYS_ALIAS
Answer: C
NEW QUESTION # 36
Your customer runs a 3-tier environment You are asked to set up controls around monitoring the sensitive objects (such as programs, user-exits, function modules) in a development system before they are transported to the quality assurance system.
Which table would you maintain to monitor such sensitive objects before executing an import?
- A. TMSMCONF
- B. TMSCDES
- C. TMSTCRI
- D. TMSBUFFER
Answer: C
NEW QUESTION # 37
Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 2 correct answers to this question
- A. SNC
- B. OData
- C. InA
- D. HOP
Answer: A,C
NEW QUESTION # 38
Which OData authorizations are required for a user to see business data in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.
- A. Start authorization in the SAP S/4HANA back-end system
- B. Start authorization in the SAP Fiori front-end system
- C. Access authorization in the SAP Fiori front-end system
- D. Access authorization in the SAP S/4HANA back-end system
Answer: B,D
NEW QUESTION # 39
How are user group administrators and user groups related in SAP HANA? Note: there are 2 correct answers to this question.
- A. Only one user group administrator per user group
- B. Multiple user groups per user group administrator
- C. Multiple user group administrators per user group
- D. Only one user group per user group administrator
Answer: B,C
NEW QUESTION # 40
......
P_SECAUTH_21 Exam Practice Materials Collection: https://easypass.examsreviews.com/P_SECAUTH_21-pass4sure-exam-review.html