Pass Your P_SECAUTH_21 Exam Easily With 100% Exam Passing Guarantee [2024]
P_SECAUTH_21 Dumps are Available for Instant Access from ITPassLeader
NEW QUESTION # 17
You want to configure SNC in a newly-installed AS ABAP based SAP system. Besides running SNCWIZARD, what else do you need to perform for this scenario?
Note: There are 2 correct answers to this question
- A. Enable encrypted HTTP service
- B. Set the parameters using sapgenpse
- C. Manage the PSE
- D. Restart the SAP system
Answer: C,D
NEW QUESTION # 18
What are characteristics of SAP HANA Deployment Infrastructure (HDI) roles? Note: there are 2 correct answers to this question.
- A. They are transportable between systems
- B. They are owned by the user who creates them
- C. They are granted using database procedures
- D. They are managed by the native HDI version control.
Answer: C,D
NEW QUESTION # 19
Based on your company guidelines you have set the password expiration to 60 days. Unfortunately, there is an RFC user in your SAP system who must not have a password change for 180 days. Which option would you recommend to accomplish such a request?
- A. Change the profile parameter login/password_expiration_time to 180
- B. Define the RFC user as a reference user
- C. Create an enhancement spot or user exit
- D. Create a security policy via SECPOL and assign it to the RFC user
Answer: D
NEW QUESTION # 20
You are reviewing the authorizations for Core Data Services (CDS) views. How are classic authorizations integrated with CDS authorizations?
- A. By defining the CDS view in the authorization object in SU21
- B. By assigning the CDS view to the authorization profile in PFCG
- C. By defining access conditions in an access rule for the CDS view
- D. By using the statement AUTHORITY-CHECK in the access control of the CDS view
Answer: C
NEW QUESTION # 21
Where can we store the Security Audit Log events? Note: There are 2 correct answers to this question.
- A. In the file system of the application servers
- B. In a central fi e system
- C. In the database table RSAU_BUF_DATA
- D. In the SAP Solution Manager system
Answer: A,D
NEW QUESTION # 22
What are characteristics of SAP HANA Deployment Infrastructure (HDI) roles? Note: There are 2 correct answers to this question.
- A. They are owned by the user who creates them.
- B. They are transportable between systems.
- C. They are granted using database procedures.
- D. They are managed by the native HDI version control.
Answer: C,D
Explanation:
Explanation
These are some of the characteristics of SAP HANA Deployment Infrastructure (HDI) roles. HDI roles are roles that are defined and deployed as part of HDI containers, which are isolated units of database objects and data in SAP HANA systems. HDI roles are managed by the native HDI version control, which tracks changes and dependencies among HDI objects and artifacts. HDI roles are granted using database procedures, such as GRANT_CONTAINER_GROUP_ROLE or GRANT_CONTAINER_SCHEMA_ROLE, which enable dynamic role assignments based on container groups or schemas. References:
https://help.sap.com/viewer/6b94445c94ae495c83a19646e7c3fd56/2.0.05/en-US/fafcbcf9d9101014b3d9a08ce33
NEW QUESTION # 23
Which tasks would you perform to allow increased security for the SAP Web Dispatcher Web Administration interface? Note: There are 2 correct answers to this question.
- A. Use Secure Socket Layer (SSL) for password encrypt on
- B. Use access restrictions with the icm/HTTP/auth_<xx> profile parameter
- C. Use subparameter ALLOWPUB = FALSE of the profile parameter icm/server_port_<xx>
- D. Use a separate port for the content
Answer: C,D
NEW QUESTION # 24
How would you control access to the ABAP RFC function modules? Note: There are 2 correct answers to this question.
- A. O Restrict RFC authorizations
- B. O Deactivate switchable authorization checks
- C. O Implement UCON functionality
- D. O Block RFC Callback Whitelists
Answer: A,B
NEW QUESTION # 25
You want to use Configuration Validation functionality in SAP Solution Manager to check the consistency of settings across your SAP environment. What serves as the reference basis for Configuration Validation? Note: There are 2 correct answers to this question.
- A. A result list of configuration items from SAP Early Watch Alert (EWA)
- B. A target system in your system landscape
- C. A virtual set of manually maintained configuration itsems
- D. A list of recommended settings attached to a specific SAP Note
Answer: B,C
NEW QUESTION # 26
You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fiori front-end system (central hub). What transaction do you have to use to map a back-end system to one of those roles?
- A. PFCG
- B. /IWFND/MAINT_SERVICE
- C. /UI2/GW_SYS_ALIAS
- D. SM59
Answer: A
NEW QUESTION # 27
Which OData authorizations are required for a user to see business data in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.
- A. Start authorization in the SAP Fiori front-end system
- B. Access authorization in the SAP Fiori front-end system
- C. Start authorization in the SAP S/4HANA back-end system
- D. Access authorization in the SAP S/4HANA back-end system
Answer: A,D
NEW QUESTION # 28
The security administrator is troubleshooting authorization errors using transaction SU53.
While running transaction MM50, the user received the following error: "You are not authorized to use transaction MM01 ." The users position in the organization makes it inappropriate for them to have direct access to transaction MM01 because it creates a Segregation of Duties conflict. What would cause the system to run an authority check using object S_TCODE for transaction MM01 while running transaction MM50?
- A. The instance parameter auth/no_check_in_some_cases has been set to Y.
- B. The proposal value for the object S_TCODE in the SU24 data for transaction MM50 was incorrectly set to YES.
- C. MM01 was maintained as the CALLING transaction in table TCDCOUPLES with field OKFLAG value X.
- D. The developer who wrote the program for transaction MM50 issues the ABAP command CALL TRANSACTION for transaction MM01 .
Answer: D
Explanation:
Explanation
This would cause the system to run an authority check using object S_TCODE for transaction MM01 while running transaction MM50. The CALL TRANSACTION command is used to start another transaction from within a program. If the user does not have the authorization to execute the called transaction, an error message is displayed and the authority check fails. References:
https://help.sap.com/doc/abapdocu_751_index_htm/7.51/en-US/abenlogon_check_guidl.htm
NEW QUESTION # 29
For which reasons would you choose an "anonymous SSL Client PSE" setup? Note: There are 2 correct answers to this question
- A. To perform mutual authentication
- B. To perform authentication
- C. To use data encryption
- D. To use as a container for the CAs
Answer: B,D
NEW QUESTION # 30
What is required when you configure the PFCG role for an end-user on the front-end server? Note: There are 2 correct answers to this question.
- A. The group assignment to display it in the Fiori Launchpad
- B. The catalog assignment for the start authorization
- C. The S_RFC authorization object for the OData access
- D. The Fiori Launchpad designer assignment
Answer: A,B
NEW QUESTION # 31
Which basis transaction provides an optimized user interface for evaluating authorization checks only?
- A. STAUTHTRACE
- B. RSECADMIN
- C. ABAP_TRACE
- D. ST01
Answer: A
NEW QUESTION # 32
You have a load balancer in a DMZ network zone (called natl.mydomain.com) in front of 2 SAP NetWeaver AS systems (hostl.mydomain.com, host2.mydomain.com). What is the recommended common name part of the distinguished name on the SSL Server's PSE?
- A. It should be *.mydomain.com (wildcard) names
- B. It should be a combined DNS alias for host 1.mydomain.com and host2.mydomain.com and nat1.mydomain.com
- C. It should be natl.mydomain.com
- D. It should be host 1.mydomain.com, host2.mydornain.com individually for each PSE
Answer: A
NEW QUESTION # 33
How are assertion tickets used?
- A. They are used for user-to-system trusted login.
- B. They are used for system-to-system encryption.
- C. They are used for system-to-system communication.
- D. They are used for encrypting Web service communication.
Answer: C
Explanation:
Explanation
Assertion tickets are used for system-to-system communication in SAP systems. They are based on the SAML (Security Assertion Markup Language) standard and contain information about the identity and attributes of a user or a system. Assertion tickets can be used to establish trust relationships between systems and enable single sign-on scenarios. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 34
What must be included in a PFCG role for an end user on the Fiori front-end server to run an app?
- A. The catalog assignment for the start authorization
- B. The group assignment to display it in the Fiori Launchpad
- C. The S_RFC authorization object for the OData access
- D. The S_START authorization object for starting the OData service
Answer: A
Explanation:
Explanation
This must be included in a PFCG role for an end user on the Fiori front-end server to run an app. The catalog assignment for the start authorization defines which apps can be started by the user from the Fiori Launchpad.
The catalog assignment is done using the authorization object S_CTS_ADMI with field CTS_ADMI_RUN = SAP_CATALOG_ALL. References:
https://help.sap.com/viewer/a7b390faab1140c087b8926571e942b7/7.5.9/en-US/5c3d6d0f6c461014a1d99bc8a4f
https://help.sap.com/viewer/a7b390faab1140c087b8926571e942b7/7.5.9/en-US/5c3d6d0f6c461014a1d99bc8a4f
NEW QUESTION # 35
A user is authorized to run SP01. What can this user access with authorization object S_ SPO_ ACT when the 'Value for Authorization Check' field is set to "__USER__"?
- A. All spool requests for users in the same user group
- B. All unprotected spool requests for all users in the client
- C. All spool requests for a specific user in the client
- D. All spool requests for all users in the client
Answer: C
Explanation:
Explanation
This is one of the things that a user can access with authorization object S_SPO_ACT when the 'Value for Authorization Check' field is set to "USER" and they are authorized to run SP01 transaction. S_SPO_ACT is an authorization object that controls access to spool requests based on various criteria, such as spool request number, output device, or user name. SP01 is a transaction that allows you to display and manage spool requests, which are requests for printing or outputting data from SAP systems. If the 'Value for Authorization Check' field is set to "USER" in S_SPO_ACT authorization object, the user can access all spool requests for their own user name in the client where they are logged on. References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?
NEW QUESTION # 36
Which authorization object controls access to the trusting system between the managed system and SAP Solution Manager?
- A. S_RFC
- B. S_RFCACL
- C. S_SERVICE
- D. S_ ICM
Answer: B
NEW QUESTION # 37
How can you describe the hierarchical relationships between technical entities in the Cloud Foundry?
- A. A SaaS tenant acts as one provider account.
- B. A subscription is a PaaS tenant.
- C. A global account can have one or many subaccounts.
- D. A SaaS tenant acts as one Cloud Foundry Organization.
Answer: C
Explanation:
Explanation
This is one of the ways that you can describe the hierarchical relationships between technical entities in the Cloud Foundry. Cloud Foundry is a platform-as-a-service (PaaS) that enables developers to deploy and run cloud-native applications using various services and frameworks. Cloud Foundry uses different technical entities to organize and manage resources and access rights, such as global accounts, subaccounts, organizations, spaces, applications, and services. A global account is an entity that represents a customer or partner who has subscribed to SAP Cloud Platform services and products. A global account can have one or many subaccounts, which are entities that represent logical subdivisions or business units within a global account. References:
https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/9e1bf57130ef466e8017eab298
NEW QUESTION # 38
Which of the following programs can be used to enable ALE Audit using the ALEAUD message type in the Customer Distribution Model and Partner Profiles?
Note: There are 2 correct answers to this question
- A. RBDSTATE
- B. RBDAPP01
- C. RBDAUD01
- D. RBDMIDOC
Answer: A,C
NEW QUESTION # 39
The security administrator is troubleshooting authorization errors using transaction SU53. While running transaction MM50, the user received the following error: "You are not authorized to use transaction MM01" The users position in the organization makes it inappropriate for them to have direct access to transaction MM01 because it creates a Segregation of Duties conflict.
What would cause the system to run an authority check using object S_TCODE for transaction MM01 while running transaction MM50?
- A. The proposal value for the object S_TCODE in the SU24 data for transaction MM50 was incorrectly set to YES
- B. The instance parameter auth/no_check_in_some_cases has been set to Y
- C. MM01 was maintained as the CALLING transaction in table TCDCOUPLES with field OKFLAG value X
- D. The developer who wrote the program for transaction MM50 issues the ABAL command CALL TRANSACTION for transaction MM01
Answer: D
NEW QUESTION # 40
Which measures should we implement to protect the PSEs? Note: There are 2 correct answers to this question
- A. Review the usage of the S_DATASET object
- B. Encyrpt the files with the transaction SNCO
- C. Review the usage of the S_ADMI_FCD object
- D. Restrict access to the opposing system users
Answer: A,D
NEW QUESTION # 41
......
Study resources for the Valid P_SECAUTH_21 Braindumps: https://exam-labs.itpassleader.com/SAP/P_SECAUTH_21-dumps-pass-exam.html