[Jun-2022] SAP P_SECAUTH_21 Actual Questions and Braindumps [Q39-Q58]

Rate this post

[Jun-2022] SAP P_SECAUTH_21 Actual Questions and Braindumps

Pass P_SECAUTH_21 Exam with Updated P_SECAUTH_21 Exam Dumps PDF 2022

QUESTION 39
Based on your company guidelines you have set the password expiration to 60 days. Unfortunately, there is an RFC user on your SAP system which must not have a password change for 180 days. Which option would you recommend to accomplish such a request?

Change profile parameter login/password_expiration_time to 180

Create a security policy via SECPOL and assign it to tile RFC users

Create additional authorizations for RFC users and assign it to them

Create enhancement spot I user-exit

QUESTION 40
How does the SAP SSO wizard (transaction SNCWIZARD) simplify the SNC configuration process?

It installs the CA certificate response

It exports an SNC SAPCRYPTOLIB certificate and imports it into the partner system

It creates the SNC_LIB environment variable

It sets the profile parameters for SAP SNC and SPNego in the default profile

QUESTION 41
You have an HR table for which you want to create a role to provide users the ability to display and change its table content based on the country groupings. Which of the steps would you take to accomplish these requirements? Note: There are 2 correct answers to this question.

Maintain the authorization object S_TABU_LIN

Create an authorization group with appropriate authorization fields for the table

Define an organization criterion through transaction SPRO

Maintain the authorization object S_TABU_NAM

QUESTION 42
Your company is running SAP S/4HANA on premise, with the requirement to run the SAP Fiori Launchpad in the SAP Cloud Platform. What would be the recommended scenario for user authentication for internet browser access to the SAP Fiori Launchpad?

SAML2 and OData Provisioning

SAP Logon Tickets

Principal Propagation

X.509 Client Certificates

QUESTION 43
The SSO authentication using X.509 client certificates is configured. Users complain that they can’t log in to the back-end system. The trace file shows the following error message: “HTTP request [2/5/9] Reject untrusted forwarded certificate”. What is missing in the configuration? Note: There are 2 correct answers to this question.

On the back-end, the profile parameter icm/HTTPS/verify client must NOT be set to 0

On the web-dispatcher, the SAPSSLS.pse must be signed by a trusted certification authority

On the web-dispatcher, the profile parameter icm/HTTPS/verify_client must be set to 0

The web dispatcher’s SAPSSLC.PSE certificate must be added to the trusted reverse proxies list in icm/trusted_reverse_proxy_<xx>

QUESTION 44
You are running an SAP HANA database in a multi database container (MDC) mode with a single tenant configured. The global_auditing_state parameter has been set to “true” on the global.ini.After restarting the system and tenant databases, the tenant did not come up. When checking the cause, it was discovered that a tenant configuration parameter has been changed. The audit logging did NOT show any events.What could be the reason for this? Note: There are 2 correct answers to this question.

The system was offline when the changes were done

The audit level was set to INFO

The global_auditing_state parameter on the nameserver.ini file needs to be activated

The configuration parameter was changed from the OS level

QUESTION 45
You are consolidating user measurement results and transferring them to SAP. What act on do you take?

Run report RSUSR200

Run report RFAUDI06_BCE

Run report RSLAW_PLUGIN

Run transact on USMM

QUESTION 46
You want to launch classic SAP GUI transactions directly from the SAP Fiori Launchpad. Which of the following scenarios do you choose?

Chrome, SAP Enterprise Portal, SAP GUI for Java

Chrome, SAP Cloud Platform, SAP GUI for Java

Internet Explorer, ABAP front-end server, SAP GUI for Windows

Internet Explorer, SAP Business Client, SAP GUI for Windows

QUESTION 47
You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fiori front-end system (central hub). What transaction do you have to use to map a back-end system to one of those roles?

/UI2/GW_SYS_ALIAS

PFCG

SM59

/IWFND/MAINT_SERVICE

QUESTION 48
You want to configure SNC with X.509 certificates using Common CryptoLib as the cryptographic library in a new installed AS ABAP system. Besides running SNCWIZARD, what do you need to set up for this scenario? Note: There are 2 correct answers to this question.

Set the environment variable CCL_ PROFILE to the default profile file path

Maintain the relevant CCL/SNC/’ profile parameters

Set the environment variable CCL_ PROFILE to SECUDIR

Set the CCL SNC parameters using sapgenpse

QUESTION 49
What is the User Management Engine (UME) property “connect on pooling” used for? Note: There are 2 correct answers to this question.

To improve performance of requests to the LDAP directory server

To avoid unauthorized request to the LDAP directory server

To create a new connect on to the LDAP directory server for each request

To share server resources among requesting LDAP clients

QUESTION 50
What are characteristics only valid for the MDC high isolation mode?

Every tenant has its own set of OS users

All internal database communication is secured using SNC

Every tenant has its own set of database users

Every tenant has its own set of database users belonging to the same sapsys group

QUESTION 51
Why should you create multiple dispatchers in SAP Identity Management? Note: There are 2 correct answers to this question.

To accommodate scalability

To support fail-over scenarios

To handle password provisioning

To handle special network access requirements

QUESTION 52
How would you control access to the ABAP RFC function modules? Note: There are 2 correct answers to this question.

O Block RFC Callback Whitelists

O Restrict RFC authorizations

O Deactivate switchable authorization checks

O Implement UCON functionality

QUESTION 53
When re-configuring the user management engine (UME) of an AS Java system, what do you need to consider to change the data source from system database to an ABAP system successfully?

The logon security policy for the existing users is aligned with the logon security policy in the ABAP system.

All users and groups in the system database must have different IDs than existing users and groups in the ABAP system.

You need to import the users from the system database into the ABAP system.

You must manually replace the UME configuration file dataSourceConfiguration_database_only.xmlwith an appropriate dataSourceConfiguration_abap.xmlfile.

QUESTION 54
What authorization objects do we need to create job steps with external commands in a background job? Note: There are 2 correct answers to this question.

S_ADMI_FCD

S_LOG_COM

S_RZL_ADM

S_BTCH_EXT

QUESTION 55
How can you protect a table containing sensitive data using the authorization object S_TABU_DIS?

The tables containing sensitive data must be associated with table groups in table TBRG.

The field DICBERCLS of the authorization object must enumerate all table names of the tables containing sensitive data.

Authorization table groups containing tables with sensitive data must be defined in table TDDAT and these must be omitted for all employees who do not need access to these tables

The tables containing sensitive data must be named using the authorization object S_TA BU_NAM for all responsible administrator employees. The fields DICBERCLS of the object S_TABU_DIS can

QUESTION 56
Which of the objects do you assign to an SAP Fiori tile to make it visible in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.

Group

Role

User

Catalog

QUESTION 57
What are the requirements of SPNego SSO configuration in an SAP Fiori front-end system? Note: There are 2 correct answers to this question.

The system requires an identity provider as an issuing system to enable single sign-on with SPNego in an internet-facing deployment scenario.

The system’s users in the ABAP system must have the same user names as the database users in SAP HANA

The system should typically be located within the corporate network.

The system requires Microsoft Active Directory infrastructure in place.

QUESTION 58
A system user created a User1 and a schema on the HANA database with some dat a. User2 is developing modelling views and requires access to objects in User1’s schema. What needs to be done?

User1 should grant _SYS_REPO with SELECT WITH GRANT privilege

User2 needs to be granted with the same roles like User1

System user should grant User2 with SELECT privilege to User 1schema

ROLE ADMIN needs to be granted to User2