(2022) P_SECAUTH_21 Dumps and Practice Test (81 Questions) [Q48-Q64]

4/5 - (1 vote)

(2022) P_SECAUTH_21 Dumps and Practice Test (81 Questions)

Guide (New 2022) Actual SAP P_SECAUTH_21 Exam Questions

NEW QUESTION 48
You are running a 3-tier SAP system landscape. Each time you are accessing STMS_IMPORT on any of these systems, you are prompted for a TMSADM password. How can you stop this prompt from appearing?

Run the report RSUSR405 on the domain controller.

Reset the TMSADM user’s password on the system you are trying to access STMS_ IMPORT.

Change the TMSA DM user’s password directly in the TMS RFC destination in transact on SM59.

Run the report TMS_ UPDATE_PWD_OF_TMSADM on the domain controller.

NEW QUESTION 49
You want to allow some of your colleagues to use the SAP GUI for Java to connect directly to your SAP back-end system from a public internet connection without having to set up a VPN connection first. Which of the following SAP solutions is suited for this purpose?

SAP Web Dispatcher

SAP router

SAP Cloud Connector

SAP NetWeaver Gateway

NEW QUESTION 50
Which authorization object controls access to the trusting system between the managed system and SAP Solution Manager?

S_RFCACL

S_RFC

S_SERVICE

S_ ICM

NEW QUESTION 51
SNC is configured in the production system. For emergency purposes, you want to allow certain accounts to be able to access the system with password logon. What do you need to set up for this purpose? Note: There are 2 correct answers to this question.

Use profile parameter SNC/ACCEPT_ INSECURE_GUI with value ‘U’

Use profile parameter SNC/ONLY_ENCRYPTED_GUI with value ‘O’

Maintain the user access control list in table USRACLEXT

Use the ‘Unsecure communication permitted option’ In SU01 for specific users

NEW QUESTION 52
You want to use Configuration Validation functionality in SAP Solution Manager to check the consistency of settings across your SAP environment. What serves as the reference basis for Configuration Validation? Note: There are 2 correct answers to this question.

A list of recommended settings attached to a specific SAP Note

A target system in your system landscape

A virtual set of manually maintained configuration ems

A result list of configuration items from SAP Early Watch Alert (EWA)

NEW QUESTION 53
In your SAP HCM system, you are implementing structural authorizations for your users. What are the characteristics of this authorization type? Note: There are 2 correct answers to this question.

The structural profile is maintained and assigned to users using the Profile Generator

The structural profile determines the access mode which the user can perform

The structural profile is maintained and assigned to users using the Implementation Guide

The structural profile determines the accessible object in the organizational structure

NEW QUESTION 54
Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 3 correct answers to this question.

HTIP(S)

Trusted RFC

Secure Network Communication (SNC)

Info Access (InA)

Data

NEW QUESTION 55
What are characteristics only valid for the MDC high isolation mode?

Every tenant has its own set of OS users

All internal database communication is secured using SNC

Every tenant has its own set of database users

Every tenant has its own set of database users belonging to the same sapsys group

NEW QUESTION 56
Because of which security threat would you need to make additional configuration settings to run the SAP Fiori Launchpad from within your SAP NetWeaver Portal?

Cross-Site Request Forgery

Clickjacking

Content Spoofing

Cross-Site Scripting

NEW QUESTION 57
Which tasks would you perform to allow increased security for the SAP Web Dispatcher Web Administration interface? Note: There are 2 correct answers to this question.

Use a separate port for the content

Use access restrictions with the icm/HTTP/auth_<xx> profile parameter

Use subparameter ALLOWPUB = FALSE of the profile parameter icm/server_port_<xx>

Use Secure Socket Layer (SSL) for password encrypt on

NEW QUESTION 58
What are the characteristics of assertion tickets? Note: There are 2 correct answers to this question.

They are used for user-to-system trusted login

They are used for system-to-system communication

They have an unconfigurable validity of 2 minutes

They are transmitted as cookies

NEW QUESTION 59
How do you check when and by whom profiles were assigned or deleted?

Run report RSUSR008_009_NEW with appropriate filters

Run report RSUSR100 with appropriate filters

Check system trace using transaction ST01

Check security audit log using transact on SM20

NEW QUESTION 60
To prevent session fixation and session hijacking attacks, SAP’s HTTP security session management is highly recommended. What are the characteristics of HTTP security session management? Note: There are 2 correct answers to this question.

It uses URLs containing sap-context d to identify the security session

The system is checking the logon credentials again for every request

The security sessions are created during logon and deleted during logoff.

The session identifier is a reference to the session context transmitted through a cookie.

NEW QUESTION 61
Where can we store the Security Audit Log events? Note: There are 2 correct answers to this question.

In the database table RSAU_BUF_DATA

In the file system of the application servers

In the SAP Solution Manager system

In a central fi e system

NEW QUESTION 62
You have implemented CUA in your organization and you only want to compare the company address data between the central system and child systems to perform the synchronization activities. Which transact on do you use for comparing the company address between these systems?

SCUG

SCUM

SUCOMP

SCUC

NEW QUESTION 63
What does the SAP Security Optimization Service provide? Note: There are 2 correct answers to this question.

Configuration check of the SAP systems and the SAP middleware components against defined configurations

Results with recommendations on how to resolve identified vulnerabilities without prioritization

Analysis of security vulnerabilities within an enterprise’s SAP landscape to ensure optimal protection against intrusions

Analysis of your operating system, database, and entire SAP system to ensure optimal performance and reliability

NEW QUESTION 64
You want to configure SNC with X.509 certificates using Common CryptoLib as the cryptographic library in a new installed AS ABAP system. Besides running SNCWIZARD, what do you need to set up for this scenario? Note: There are 2 correct answers to this question.

Set the environment variable CCL_ PROFILE to the default profile file path

Maintain the relevant CCL/SNC/’ profile parameters

Set the environment variable CCL_ PROFILE to SECUDIR

Set the CCL SNC parameters using sapgenpse

Loading …