Latest SAP P-SECAUTH-21 Dumps for success in Actual Exam Feb-2024 [Q32-Q55]

5/5 - (1 vote)

Latest SAP P-SECAUTH-21 Dumps for success in Actual Exam Feb-2024]

Realistic P-SECAUTH-21 100% Pass Guaranteed Download Exam Q&A

NO.32 Which of the following programs can be used to enable ALE Audit using the ALEAUD message type in the Customer Distribution Model and Partner Profiles?
Note: There are 2 correct answers to this question

RBDSTATE

RBDMIDOC

RBDAUD01

RBDAPP01

NO.33 Why should you create multiple dispatchers in SAP Identity Management? Note: There are 2 correct answers to this question.

To accommodate scalability

To support fail-over scenarios

To handle password provisioning

To handle special network access requirements

NO.34 Which data source needs to be integrated into SAP Identity Management via the Virtual Directory Server (VOS)?

AS ABAP

AS Java

LDAP

SAP HCM

NO.35 In your system, you have a program which calls transaction A. Users with access to this program can still execute transaction A without explicit authorizations given to this transaction.
How do you prevent the access of users to the transaction A from within the program?

Make sure you do NOT assign transact on A to the authorization object S_TCODE in the role that you assign to the unauthorized users.

Maintain SE93 with authorization objects for transact on A.

Maintain the check indicator in table TCDCOUPLES

Ensure that transact on A is NOT assigned into the same program authorization group

NO.36 What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note:
There are 2 correct answers to this question.

The Logon ticket is used for user-to-system communication.

The Logon ticket session is held in the working memory.

The Logon ticket is always set to client 000.

The Logon ticket is not domain restricted.

NO.37 How can you protect a table containing sensitive data using the authorization object S_TABU_DIS?

The tables containing sensitive data must be associated with table groups in table TBRG.

The field DICBERCLS of the authorization object must enumerate all table names of the tables containing sensitive data.

Authorization table groups containing tables with sensitive data must be defined in table TDDAT and these must be omitted for all employees who do not need access to these tables

The tables containing sensitive data must be named using the authorization object S_TA BU_NAM for all responsible administrator employees. The fields DICBERCLS of the object S_TABU_DIS can

NO.38 You verified the password of the TMSADM user in your SAP landscape to be SAP defaulted.
You want to reset this password by using the program
TMS_UPDATE_PWD_OF_TMSADM.What steps would you take to reset this password? Note:
There are 2 correct answers to this question.

Run the program in all systems/clients including 000

Run the program in the Domain Controller (client 000)

Deactivate the SNC option

Execute command TP LOCKSYS <SID> pf=<DOMAIN_CONTROLLER_PROFILE>

NO.39 You want to check the custom ABAP codes in your system for security vulnerabilities and you want to use the SAP Code Vulnerability Analyzer to carry out these extended security checks. What needs to be done for this purpose? Note: There are 2 correct answers to thisquestion.

Run SAP Code Vulnerability Analyzer from the ABAP Test Cockpit

Run SAP Code Vulnerability Analyzer from the transaction ST01

Run the extended syntax check from the SLIN transaction

Run the transaction ST1 2 to start the analysis

NO.40 How would you control access to the ABAP RFC function modules? Note: There are 2 correct answers to this question.

O Block RFC Callback Whitelists

O Restrict RFC authorizations

O Deactivate switchable authorization checks

O Implement UCON functionality

NO.41 How would you control access to ABAP RFC function modules? Note: There are 2 correct answers to this question.

Deactivate switchable authorization checks

Block RFC Callback Whitelists

Implement UCON functionality

Restrict RFC authorizations

NO.42 You want to check the custom ABAP codes in your system for security vulnerabilities and you want to use the SAP Code Vulnerability Analyzer to carry out these extended security checks. What need to be done for this purpose? Note: There are 2 correct answers to this question

Run SAP Code Vulnerability Analyzer from the ABAP Test Cockpit

Run SAP Code Vulnerability Analyzer from the transaction ST01

Run the transaction ST12 to start the analysis

Run the extended syntax check from the SLIN transaction

NO.43 Which SAP tool provides functions to support Data Destruction, Business Rules Maintenance, and Processing of Audit Areas?

SAP Information Retrieval Framework

SAP Information Lifecycle Management

SAP Business Rule Framework Plus

SAP Data Controller Rule Framework

NO.44 Which communication protocols are supported by the SAP Cloud Connector? Note: There are 2 correct answers to this question

NNTP

LDAP

SNA

RFC

NO.45 What are the key capabilities of Enterprise Threat Detection? Note: There are 2 correct answers to this question

Blocking user access

Predictive threat notification

Dashboard-based analysis for security risks

Real time capture of abnormal user activities

NO.46 You want to allow some of your colleagues to use the SAP GUI for Java to connect directly to your SAP back-end system from a public internet connection without having to set up a VPN connection first. Which of the following SAP solutions is suited for this purpose?

SAP Web Dispatcher

SAP router

SAP Cloud Connector

SAP NetWeaver Gateway

NO.47 For which purpose do you use instance Secure Storage File System (SSFS) in an SAP HANA system? Note: There are 2 correct answers to this question.

To protect the password of the root key backup

To store root keys for data volume encryption

To store the secure single sign-on configuration

To protect the X.509 public key infrastructure certificates

NO.48 Which features does SAProuter provide? Note: There are 2 correct answers to this question.

Filtered and logged network connections

Load-balanced RFC connections

Password-protected connections

HTTP conversion into HTTPS connections

NO.49 Which SAP tool provides functions to support Data Destruction, Business Rules Maintenance, and Processing of Audit Areas?

SAP Information Retrieval Framework

SAP Information Lifecycle Management

SAP Business Rule Framework Plus

SAP Data Controller Rule Framework

NO.50 Which measures should we implement to protect the PSEs? Note: There are 2 correct answers to this question

Review the usage of the S_DATASET object

Restrict access to the opposing system users

Review the usage of the S_ADMI_FCD object

Encyrpt the files with the transaction SNCO

NO.51 You are using the SAP Web Dispatcher for load-balancing purposes. Which actions are performed by the SAP Web Dispatcher in this scenario? Note: There are 2 correct answers to this question.

Authenticates the user’s credentials

Uses SAP logon groups to determine which requests are directed to which server

Checks current state of the message server

Decrypts the HTTPS request and then selects the server

NO.52 You are using the SAP Web Dispatcher for load-balancing purposes. Which actions are performed by the SAP Web Dispatcher in this scenario? Note: There are 2 correct answers to this question.

Validates the user credentials

Uses logon groups to determine how to direct requests

Decrypts the HTTPS request and then selects the server

Checks the current state of the message server

NO.53 What authorization object is checked when a user selects an ABAP Web Dynpro application to run?

S_SERVICE

S_PROGRAM

S_START

S_TCODE

NO.54 In your SAP HCM system, you are implementing structural authorizations for your users. What are the characteristics of this authorization type? Note: There are 2 correct answers to this question.

The structural profile is maintained and assigned to users using the Profile Generator

The structural profile determines the access mode which the user can perform

The structural profile is maintained and assigned to users using the Implementation Guide

The structural profile determines the accessible object in the organizational structure

NO.55 What is required when you configure the PFCG role for an end-user on the front-end server? Note: There are 2 correct answers to this question.

The catalog assignment for the start authorization

The S_RFC authorization object for the OData access

The Fiori Launchpad designer assignment

The group assignment to display it in the Fiori Launchpad