Verified P_SECAUTH_21 &As - Provide P_SECAUTH_21 with Correct Answers [Q35-Q49]

4.5/5 - (2 votes)

Verified P_SECAUTH_21 Exam Dumps Q&As – Provide P_SECAUTH_21 with Correct Answers

Pass Your P_SECAUTH_21 Dumps Free Latest SAP Practice Tests

NEW QUESTION 35
You want to check the custom ABAP codes in your system for security vulnerabilities and you want to use the SAP Code Vulnerability Analyzer to carry out these extended security checks. What need to be done for this purpose? Note: There are 2 correct answers to this question

Run SAP Code Vulnerability Analyzer from the ABAP Test Cockpit

Run SAP Code Vulnerability Analyzer from the transaction ST01

Run the transaction ST12 to start the analysis

Run the extended syntax check from the SLIN transaction

NEW QUESTION 36
What are the characteristics of assertion tickets? Note: There are 2 correct answers to this question.

They are used for user-to-system trusted login

They are used for system-to-system communication

They have an unconfigurable validity of 2 minutes

They are transmitted as cookies

NEW QUESTION 37
Which authorizations should you restrict when you create a developer role in an AS ABAP production system? Note: There are 2 correct answers to this question.

The ability to execute class methods through authorization object S_PROGRAM

The ability to execute queries through authorization object S_OUERY

The ability to execute function modules through authorization object S_DEVELOP

The ability to use the ABAP Debugger through authorization object S_DEVELOP

NEW QUESTION 38
When re-configuring the user management engine (UME) of an AS Java system, what do you need to consider to change the data source from system database to an ABAP system successfully?

The logon security policy for the existing users is aligned with the logon security policy in the ABAP system.

All users and groups in the system database must have different IDs than existing users and groups in the ABAP system.

You need to import the users from the system database into the ABAP system.

You must manually replace the UME configuration file dataSourceConfiguration_database_only.xmlwith an appropriate dataSourceConfiguration_abap.xmlfile.

NEW QUESTION 39
The security administrator is troubleshooting authorization errors using transaction SU53. While running transaction MM50, the user received the following error: “You are not authorized to use transaction MM01” The users position in the organization makes it inappropriate for them to have direct access to transaction MM01 because it creates a Segregation of Duties conflict.
What would cause the system to run an authority check using object S_TCODE for transaction MM01 while running transaction MM50?

The developer who wrote the program for transaction MM50 issues the ABAL command CALL TRANSACTION for transaction MM01

The instance parameter auth/no_check_in_some_cases has been set to Y

The proposal value for the object S_TCODE in the SU24 data for transaction MM50 was incorrectly set to YES

MM01 was maintained as the CALLING transaction in table TCDCOUPLES with field OKFLAG value X

NEW QUESTION 40
Which tools can you use to troubleshoot an authorization issue with a Fiori application? Note: There are 2 correct answers to this question

/UI2/FLC

/UI2/GW_APPS_LOG

/IWFND/ERROR_LOG

/IWBEP/ERROR_LOG

NEW QUESTION 41
You want to allow your trainee colleagues to use the SAP GUI to connect directly to your SAP S/4HANA (on-premise) demo system form a public internet connection Which of the following SAP solutions is suited for this purpose?

SAP Web Dispatcher

SAP Cloud Connector

SAP NetWeaver Gateway

SAP Prouter

NEW QUESTION 42
How are user group administrators and user groups related in SAP HANA? Note: there are 2 correct answers to this question.

Multiple user groups per user group administrator

Only one user group administrator per user group

Multiple user group administrators per user group

Only one user group per user group administrator

NEW QUESTION 43
Because of which security threat would you need to make additional configuration settings to run the SAP Fiori Launchpad from within your SAP NetWeaver Portal?

Cross-Site Request Forgery

Clickjacking

Content Spoofing

Cross-Site Scripting

NEW QUESTION 44
The SAP HANA database is installed with multi database container (MDC) mode with multiple tenant databases configured. What are the required activities to enable access between tenants? Note: There are 2 correct answers to this question.

Create user mapping between local and remote tenant databases

Configure smart data access (SDA) between the relevant HANA tenants

Set whitelist of cross-tenant database communication channel

Decrease the level of isolation mode on all MDC tenants

NEW QUESTION 45
Based on your company guidelines you have set the password expiration to 60 days. Unfortunately, there is an RFC user in your SAP system who must not have a password change for 180 days. Which option would you recommend to accomplish such a request?

Create an enhancement spot or user exit

Create a security policy via SECPOL and assign it to the RFC user

Change the profile parameter login/password_expiration_time to 180

Define the RFC user as a reference user

NEW QUESTION 46
SAP GRC Access Control provides risk analysis for which of the following? Note: There are 2 correct answers to this question.

Business Rule Framework

Business Role Management

Access Request Management

Password Self-Service

NEW QUESTION 47
Which tasks would you perform to allow increased security for the SAP Web Dispatcher Web Administration interface? Note: There are 2 correct answers to this question.

Use a separate port for the content

Use access restrictions with the icm/HTTP/auth_<xx> profile parameter

Use subparameter ALLOWPUB = FALSE of the profile parameter icm/server_port_<xx>

Use Secure Socket Layer (SSL) for password encrypt on

NEW QUESTION 48
You have implemented CUA in your organization and you only want to compare the company address data between the central system and child systems to perform the synchronization activities. Which transact on do you use for comparing the company address between these systems?

SCUG

SCUM

SUCOMP

SCUC

NEW QUESTION 49
What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note: There are 2 correct answers to this question

The Logon ticket is not domain restricted

The Logon ticket session is held in the working memory

The Logon ticket is sued for user-to-system communication

The Logon ticket is always set to client 000