Get Sep-2022 Dumps to Pass your P_SECAUTH_21 Exam with 100% Real Questions and Answers [Q32-Q46]

4/5 - (2 投票)

Get Sep-2022 Dumps to Pass your P_SECAUTH_21 Exam with 100% Real Questions and Answers

Updated Exam P_SECAUTH_21 Dumps with New Questions

NO.32 Your company is running SAP S/4HANA on premise, with the requirement to run the SAP Fiori Launchpad in the SAP Cloud Platform. What would be the recommended scenario for user authentication for internet browser access to the SAP Fiori Launchpad?

SAML2 and OData Provisioning

SAP Logon Tickets

Principal Propagation

X.509 Client Certificates

NO.33 What authorization objects do we need to create job steps with external commands in a background job? Note: There are 2 correct answers to this question.

S_ADMI_FCD

S_LOG_COM

S_RZL_ADM

S_BTCH_EXT

NO.34 Which OData authorizations are required for a user to see business data in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.

Start authorization in the SAP Fiori front-end system

Access authorization in the SAP Fiori front-end system

Access authorization in the SAP S/4HANA back-end system

Start authorization in the SAP S/4HANA back-end system

NO.35 You want to use Configuration Validation functionality in SAP Solution Manager to check the consistency of settings across your SAP environment. What serves as the reference basis for Configuration Validation? Note: There are 2 correct answers to this question.

A list of recommended settings attached to a specific SAP Note

A target system in your system landscape

A virtual set of manually maintained configuration ems

A result list of configuration items from SAP Early Watch Alert (EWA)

NO.36 You want to configure SNC with X.509 certificates using Common CryptoLib as the cryptographic library in a new installed AS ABAP system. Besides running SNCWIZARD, what do you need to set up for this scenario? Note: There are 2 correct answers to this question.

Set the environment variable CCL_ PROFILE to the default profile file path

Maintain the relevant CCL/SNC/’ profile parameters

Set the environment variable CCL_ PROFILE to SECUDIR

Set the CCL SNC parameters using sapgenpse

NO.37 You have configured a Gateway SSO authentication using X.509 client certificates. The configuration of the dual trust relationship between client (browser) and SAP Web Dispatcher as well as the configuration of the SAP Web Dispatcher to accept and forward client certificates were done. Users complain that they can’t log in to the back-end system. How can you check the cause?

Run back-end transaction SMICM and open the trace file

Run back-end system trace using ST12

Run gateway transaction /IWFND/TRACES

Run gateway transaction /IWFND/ ERRORJ.OG

第38位 For which purpose do you use instance Secure Storage File System (SSFS) in an SAP HANA system? Note: There are 2 correct answers to this question.

To protect the password of the root key backup

To store root keys for data volume encryption

To store the secure single sign-on configuration

To protect the X.509 public key infrastructure certificates

NO.39 How do you check when and by whom profiles were assigned or deleted?

Run report RSUSR008_009_NEW with appropriate filters

Run report RSUSR100 with appropriate filters

Check system trace using transaction ST01

Check security audit log using transact on SM20

40位 SAP Web Dispatcher Web Administration インターフェースのセキュリティを強化するには、どのタスクを実行しますか?注：この質問には2つの正解があります。

コンテンツ用に別のポートを使用する

icm/HTTP/auth_ プロファイルパラメータでアクセス制限を使用する。

プロファイルパラメータicm/server_port_のサブパラメータALLOWPUB = FALSEを使用する。

パスワードの暗号化にはセキュア・ソケット・レイヤー（SSL）を使用する。

NO.41 Where can we store the Security Audit Log events? Note: There are 2 correct answers to this question.

In the database table RSAU_BUF_DATA

In the file system of the application servers

In the SAP Solution Manager system

In a central fi e system

NO.42 Which tool do you use to customize the SAP HANA default password policy? Note: There are 2 correct answers to this question.

SAP HANA Lifecycle Manager

SAP HANA Studio

SAP HANA Cockpit

SAP Web IDE

NO.43 Based on your company guidelines you have set the password expiration to 60 days. Unfortunately, there is an RFC user on your SAP system which must not have a password change for 180 days. Which option would you recommend to accomplish such a request?

Change profile parameter login/password_expiration_time to 180

Create a security policy via SECPOL and assign it to tile RFC users

Create additional authorizations for RFC users and assign it to them

Create enhancement spot I user-exit

NO.44 Which features does the SAP Router support? Note: There are 2 correct answers to this question.

Balancing the load to ensure an even distribution across the back-end servers

Terminating, forwarding and (re)encrypting requests, depending on the SSL configuration

Password-protecting connections from unauthorized access from outside the network

Controlling and logging network connections to SAP systems

NO.45 How would you control access to the ABAP RFC function modules? Note: There are 2 correct answers to this question.

O Block RFC Callback Whitelists

O Restrict RFC authorizations