[Dec 22, 2023] Valid P_SECAUTH_21 Test Answers & SAP P_SECAUTH_21 Exam PDF [Q12-Q33] : Valid Premium Exam : http://premium.validexam.com

NO.12 What can you maintain in transaction SU24 to reduce the overall maintenance in PFCG? Note: There are 3 correct answers to this question.

The default values so they are appropriate for the transactions used in the roles

The authorization objects that are not linked to transact on codes correctly

The default values in the tables USOBX and USOBT

The default authority check settings for the role maintenance tool

The authorization objects that have unacceptable default values

NO.13 The SAP HANA database is installed with multi database container (MDC) mode with multiple tenant databases configured. What are the required activities to enable access between tenants? Note: There are 2 correct answers to this question.

Create user mapping between local and remote tenant databases

Configure smart data access (SDA) between the relevant HANA tenants

Set whitelist of cross-tenant database communication channel

Decrease the level of isolation mode on all MDC tenants

NO.14 You want to check the custom ABAP codes in your system for security vulnerabilities and you want to use the SAP Code Vulnerability Analyzer to carry out these extended security checks. What need to be done for this purpose? Note: There are 2 correct answers to this question

Run SAP Code Vulnerability Analyzer from the ABAP Test Cockpit

Run SAP Code Vulnerability Analyzer from the transaction ST01

Run the transaction ST12 to start the analysis

Run the extended syntax check from the SLIN transaction

NO.15 What authorization objects do we need to create job steps with external commands in a background job? Note: There are 2 correct answers to this question.

S_ADMI_FCD

S_LOG_COM

S_RZL_ADM

S_BTCH_EXT

NO.16 What information constitutes an indirect connection to an individual, in the context of GDPR? Note: There are 3 correct answers to this question

National Identifier

Postal Address

Date of Birth

License plate number

IP Address

NO.17 Which basis transaction provides an optimized user interface for evaluating authorization checks only?

STAUTHTRACE

RSECADMIN

ST01

ABAP_TRACE

NO.18 For which purpose do you use instance Secure Storage File System (SSFS) in an SAP HANA system? Note: There are 2 correct answers to this question.

To protect the password of the root key backup

To store root keys for data volume encryption

To store the secure single sign-on configuration

To protect the X.509 public key infrastructure certificates

NO.19 What authorization object is checked when a user selects an ABAP Web Dynpro application to run?

S_SERVICE

S_PROGRAM

S_START

S_TCODE

NO.20 Who can revoke a runtime role from a user in the SAP HANA tenant database? Note: There are 2 correct answers to this question.

The granting user

Anyone with “ROLE ADMIN”

The owner of the HDI container

The DBACOCKPIT user

NO.21 Which type of systems can be found in the Identify Provisioning Service landscape? Note: There are 2 correct answers to this question

Identify Provider

Source

Proxy

Service Provider

NO.22 How are assertion tickets used?

They are used for user-to-system trusted login.

They are used for encrypting Web service communication.

They are used for system-to-system encryption.

They are used for system-to-system communication.

NO.23 What are characteristics of SAP HANA Deployment Infrastructure (HDI) roles? Note: there are 2 correct answers to this question.

They are transportable between systems

They are granted using database procedures

They are managed by the native HDI version control.

They are owned by the user who creates them

NO.24 Your customer runs a 3-tier environment You are asked to set up controls around monitoring the sensitive objects (such as programs, user-exits, function modules) in a development system before they are transported to the quality assurance system.
Which table would you maintain to monitor such sensitive objects before executing an import?

TMSCDES

TMSBUFFER

TMSMCONF

TMSTCRI

NO.25 Which authorizations should you restrict when you create a developer role in an AS ABAP production system? Note: There are 2 correct answers to this question.

The ability to use the ABAP Debugger through authorization object S_DEVELOP

The ability to run class methods through authorization object S_PROGRAM

The ability to run queries through authorization object S_QUERY

The ability to run function modules through authorization object S_DEVELOP

NO.26 What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note:
There are 2 correct answers to this question.

The Logon ticket is used for user-to-system communication.

The Logon ticket session is held in the working memory.

The Logon ticket is always set to client 000.

The Logon ticket is not domain restricted.

NO.27 An end user has indicated that they are getting an authorization error when attempting to call a Transaction Code (TCD). However, the TCD exists in the User Manu. What could be the issue and where would you check?

The TCD is assigned to the user via multiples roles; check in PFCG

An entry in table USRBF prevents them from calling the TCD; check SE16

This user is blocked from calling the TCD; check in SM01

Additional authorization checks are required for the TC; check in SE93

NO.28 Under which group can you find the “System Recommendations” file in the Solution Manager launchpad?

IT Service Management

Technical Administration

Change Management

Root Cause Analysis

NO.29 You have delimited a single role which is part of a composite role, and a user comparison for the composite role has been performed. You notice that the comparison did NOT remove the profile assignments for that single role. What program would you run to resolve this situation?

0 PRGN_COMPRESS_TIMES

0PRGN_COMPARE_ROLE_MENU

0 PRGN_DELETE_ACT IVITY_GROUPS

0 PRGN_MERGE_PREVIEW

NO.30 What must be included in a PFCG role for an end user on the Fiori front-end server to run an app?

The group assignment to display it in the Fiori Launchpad

The S_RFC authorization object for the OData access

The S_START authorization object for starting the OData service

The catalog assignment for the start authorization

NO.31 What are the characteristics of HTTP security session management? Note: There are 3 correct answers to this question.

Creates security sessions at logon

Starts security sessions with a short user-based expiration time

Checks the logon credentials again for every request.

Deletes security sessions at logoff

Refers to the session context through the session identifier

NO.32 What is the User Management Engine (UME) property “connect on pooling” used for? Note: There are 2 correct answers to this question.

To improve performance of requests to the LDAP directory server

To avoid unauthorized request to the LDAP directory server

To create a new connect on to the LDAP directory server for each request

To share server resources among requesting LDAP clients

NO.33 Which authorization object is required to support trusted system access by an RFC user following the configuration of a Managed System in SAP Solution Manager?

S_RFCACL

S_ACL_HIST

S_RFC_TT

S_RFC_TTAC