[Mar 10, 2024] Pass SAP Certified Technology Professional P_SECAUTH_21 Exam With 80 Questions
Ultimate Guide to Prepare Free SAP P_SECAUTH_21 Exam Questions and Answer
SAP P-SECAUTH-21 certification is an industry-recognized standard for those who want to demonstrate their expertise in system security architecture. It is a valuable credential for professionals who work in the field of SAP security, as it demonstrates to employers and clients that they have the knowledge and skills necessary to design and implement secure SAP systems. Certified Technology Professional - System Security Architect certification is also a valuable asset for those who are looking to advance their careers in the field of SAP security.
NEW QUESTION # 34
What does return code 1 2 mean when performing STAUTHTRACE?
- A. No authorization but does have authorization object in user buffer
- B. No authorization and no authorization object in user buffer
- C. An invalid user name was specified in user
- D. Too many parameters for authorization checks
Answer: A
Explanation:
Explanation
Return code 12 means that the user does not have the required authorization for an authority check but does have the authorization object in the user buffer. This means that the user has some values for the authorization object but not the ones that are needed for the specific check. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 35
You are using the SAP Web Dispatcher for load-balancing purposes. Which actions are performed by the SAP Web Dispatcher in this scenario? Note: There are 2 correct answers to this question.
- A. Authenticates the user's credentials
- B. Checks current state of the message server
- C. Decrypts the HTTPS request and then selects the server
- D. Uses SAP logon groups to determine which requests are directed to which server
Answer: B,D
NEW QUESTION # 36
Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 2 correct answers to this question
- A. OData
- B. InA
- C. SNC
- D. HOP
Answer: B,C
NEW QUESTION # 37
For which reasons would you choose an "anonymous SSL Client PSE" setup? Note: There are
2 correct answers to this question.
- A. To perform authentication
- B. To use data encryption
- C. To perform mutual authentication
- D. To use as a container for the CAs
Answer: B,D
Explanation:
Explanation
These are some of the reasons why you would choose an "anonymous SSL Client PSE" setup in SAP systems.
An anonymous SSL Client PSE is a PSE that does not contain any client certificates or keys, but only contains certificates of trusted certificate authorities (CAs). It can be used to establish SSL connections with servers that do not require client authentication, but only use data encryption to protect the communication. It can also be used as a container for storing the CAs that are trusted by the client. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 38
You want to configure SNC in a newly-installed AS ABAP based SAP system. Besides running SNCWIZARD, what else do you need to perform for this scenario?
Note: There are 2 correct answers to this question
- A. Restart the SAP system
- B. Manage the PSE
- C. Enable encrypted HTTP service
- D. Set the parameters using sapgenpse
Answer: A,B
NEW QUESTION # 39
You are evaluating the "Cross-client object change" option using transaction SCC4 for your Unit Test Client in the development environment. Which setting do you recommend?
- A. No changes to cross-client customizing objects
- B. Changes to repository and cross-client customizing allowed
- C. No changes to repository and cross-client customizing objects
- D. No changes to repository objects
Answer: B
Explanation:
Explanation
This is the recommended setting for the "Cross-client object change" option using transaction SCC4 for your Unit Test Client in the development environment. This setting allows you to make changes to repository objects (such as programs, function modules, classes, etc.) and cross-client customizing objects (such as number ranges, message classes, etc.) in your Unit Test Client without affecting other clients in the same system. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 40
What connection type is used for restricted users?
- A. ODBC
- B. JDBC
- C. OLEDB
- D. HTTP/S
Answer: D
Explanation:
Explanation
This is the connection type that is used for restricted users in SAP HANA systems. Restricted users are users that can only access SAP HANA via HTTP/S connections using predefined services or applications, such as XSODATA or XSJS services or SAP Fiori applications. Restricted users cannot use other connection types, such as JDBC, ODBC, or OLEDB, which allow direct SQL access to SAP HANA. References:
https://help.sap.com/viewer/6b94445c94ae495c83a19646e7c3fd56/2.0.05/en-US/fafcbcf9d9101014b3d9a08ce33
NEW QUESTION # 41
Which of the following user types can be used to log on interactively? Note: There are 2 correct answers to this question.
- A. Service
- B. System
- C. Communication
- D. Dialog
Answer: C,D
Explanation:
Explanation
Dialog and Communication are two user types that can be used to log on interactively to an SAP system.
Dialog users are normal users who can access the system using a graphical user interface (GUI) or a web browser. Communication users are users who access the system using communication protocols, such as RFC or HTTP. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 42
For which purpose do you use instance Secure Storage File System (SSFS) in an SAP HANA system? Note: There are 2 correct answers to this question.
- A. To store root keys for data volume encryption
- B. To store the secure single sign-on configuration
- C. To protect the X.509 public key infrastructure certificates
- D. To protect the password of the root key backup
Answer: A,D
NEW QUESTION # 43
What must be included in a PFCG role for an end user on the Fiori front-end server to run an app?
- A. The catalog assignment for the start authorization
- B. The group assignment to display it in the Fiori Launchpad
- C. The S_START authorization object for starting the OData service
- D. The S_RFC authorization object for the OData access
Answer: A
Explanation:
Explanation
This must be included in a PFCG role for an end user on the Fiori front-end server to run an app. The catalog assignment for the start authorization defines which apps can be started by the user from the Fiori Launchpad.
The catalog assignment is done using the authorization object S_CTS_ADMI with field CTS_ADMI_RUN = SAP_CATALOG_ALL. References:
https://help.sap.com/viewer/a7b390faab1140c087b8926571e942b7/7.5.9/en-US/5c3d6d0f6c461014a1d99bc8a4f
https://help.sap.com/viewer/a7b390faab1140c087b8926571e942b7/7.5.9/en-US/5c3d6d0f6c461014a1d99bc8a4f
NEW QUESTION # 44
To enable access between tenant databases, what do you need to do in an SAP HANA system for multitenant database containers? Note: there are 3 correct answers to this question.
- A. The user in the source system must be associated with a user in the target database.
- B. The user in the source system must have sufficient privileges in the target database.
- C. The cross-tenant database communication must be explicitly activated.
- D. The bi-directional communication channel must be in the allow list.
- E. The INIFILE ADMIN system privilege must be assigned.
Answer: A,B,C
NEW QUESTION # 45
Where can you store Security Audit Log Events? Note: There are 2 correct answers to this question.
- A. In the database table RSAU_BUF_DATA
- B. In the kernel trace
- C. In the Linux system log
- D. Ip the file system of the application servers
Answer: A,D
NEW QUESTION # 46
The security administrator is troubleshooting authorization errors using transaction SU53. While running transaction MM50, the user received the following error.
"You are not authorized to use transaction MM01"
The user's position in the organization makes it inappropriate for them to have direct access to transaction MM01 because it creates a Segregation of Duties conflict.
How can the security administrator resolve the issue and still provide the user with the needed access to MM50?
- A. Set the check indicator value for object S_TCODE in the SU24 data for transaction MM01 to Do Not Check.
- B. Remove transaction MM01 as a CALLING transaction from table TCDCOUPLES.
- C. Set the value form instance parameter auth/no_check_in_some_cases to N.
- D. Set the check indicator (for the transaction authorization called by the MM01 transaction) to NO, using transaction SE97 for transaction MM50.
Answer: D
NEW QUESTION # 47
Which users should exist in client 000? Note: There are 2 correct answers to this question.
- A. EARLYWATCH
- B. TMSADM
- C. SAPCPIC
- D. SAP*
Answer: B,D
Explanation:
Explanation
These are some of the users that should exist in client 000 of an SAP system. Client 000 is a special client that contains configuration data and tools for system administration and maintenance. TMSADM is a user that is used for Transport Management System (TMS) communication and administration. SAP* is a user that can be used to log on to any client with a predefined password if no other users exist or if all users are locked.
References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?
NEW QUESTION # 48
Where does SAP HANA store the values for the default Password Policy parameter? Note: there are 2 correct answers to this question.
- A. nameservice.ini
- B. attributes.ini
- C. global.ini
- D. indexserver.ini
Answer: A,D
NEW QUESTION # 49
You want to create a role to provide users the ability to display and change an HR table's content based on the country groupings. Which of the steps would you take to accomplish these requirements? Note: There are 2 correct answers to this question.
- A. Maintain the authorization object S_TABU_NAM
- B. Maintain the authorization object S_TABU_LIN
- C. Create an authorization group with appropriate authorization fields for the table
- D. Define an organization criterion through transaction SPRO
Answer: B,D
Explanation:
Explanation
These are some of the steps that you would take to accomplish these requirements of creating a role to provide users the ability to display and change an HR table's content based on the country groupings. S_TABU_LIN is an authorization object that controls access to table entries based on organizational criteria, such as country grouping, personnel area, or personnel subarea. You would maintain this authorization object with appropriate values for your role in PFCG transaction. SPRO is a transaction that allows you to access customizing activities for various SAP applications and modules. You would define an organization criterion through this transaction by assigning an authorization field name (such as T500L-LAND1 for country grouping) to a table name (such as T500L for countries) in IMG activity "Maintain Table Names for Organizational Criteria".
References: https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-
NEW QUESTION # 50
Which OData authorizations are required for a user to see business data in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.
- A. Access authorization in the SAP S/4HANA back-end system
- B. Start authorization in the SAP S/4HANA back-end system
- C. Start authorization in the SAP Fiori front-end system
- D. Access authorization in the SAP Fiori front-end system
Answer: A,C
NEW QUESTION # 51
You have implemented CUA in your organization and you only want to compare the company address data between the central system and child systems to perform the synchronization activities. Which transact on do you use for comparing the company address between these systems?
- A. SCUC
- B. SCUG
- C. SCUM
- D. SUCOMP
Answer: D
NEW QUESTION # 52
Why do you use table logging in AS ABAP?
- A. To log changes in master data
- B. To log changes in table technical settings
- C. To log changes in application data
- D. To log changes in customizing tables
Answer: D
NEW QUESTION # 53
How does the SAP SSO wizard (transaction SNCWIZARD) simplify the SNC configuration process?
- A. It creates the SNC_LIB environment variable
- B. It sets the profile parameters for SAP SNC and SPNego in the default profile
- C. It exports an SNC SAPCRYPTOLIB certificate and imports it into the partner system
- D. It installs the CA certificate response
Answer: B
NEW QUESTION # 54
Which authorization object is required to support trusted system access by an RFC user following the configuration of a Managed System in SAP Solution Manager?
- A. S_RFCACL
- B. S_RFC_TT
- C. S_RFC_TTAC
- D. S_ACL_HIST
Answer: A
NEW QUESTION # 55
You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fiori front-end system (central hub). What transactions do you have to use to map a back-end system to one of those roles?
- A. /IWFND/MAINT_SERVICE
- B. /UI2/GW_SYS_ALIAS
- C. SEGW
- D. PFCG
Answer: A
NEW QUESTION # 56
What connection type is used for restricted users?
- A. ODBC
- B. JDBC
- C. OLEDB
- D. HTTP/S
Answer: D
NEW QUESTION # 57
You are running an SAP HANA database in a multi database container (MDC) mode with a single tenant configured. The global_auditing_state parameter has been set to "true" on the global.ini.After restarting the system and tenant databases, the tenant did not come up. When checking the cause, it was discovered that a tenant configuration parameter has been changed. The audit logging did NOT show any events.What could be the reason for this? Note: There are 2 correct answers to this question.
- A. The global_auditing_state parameter on the nameserver.ini file needs to be activated
- B. The configuration parameter was changed from the OS level
- C. The audit level was set to INFO
- D. The system was offline when the changes were done
Answer: A,B
NEW QUESTION # 58
......
Certified Technology Professional - System Security Architect Practice Tests 2024 | Pass P_SECAUTH_21 with confidence!: https://drive.google.com/open?id=1r7lGFo2ApFQ3S2fh0p4FVZc6jlxVx5Ru
Pass P_SECAUTH_21 Tests Engine pdf - All Free Dumps: https://www.dumpstests.com/P_SECAUTH_21-latest-test-dumps.html