Oct-2023 Free SAP P-SECAUTH-21 Exam Question Practice Exams
Ace P-SECAUTH-21 Certification with 80 Actual Questions
SAP P_SECAUTH_21 exam is designed for professionals who want to validate their knowledge and skills as a system security architect. Certified Technology Professional - System Security Architect certification exam is intended for candidates who have a strong understanding of SAP system security architecture and are proficient in implementing and configuring security measures to protect enterprise systems from threats and vulnerabilities.
NEW QUESTION # 48
You are running an SAP HANA database in a multi database container (MDC) mode with a single tenant configured. The global_auditing_state parameter has been set to "true" on the global.ini.After restarting the system and tenant databases, the tenant did not come up. When checking the cause, it was discovered that a tenant configuration parameter has been changed. The audit logging did NOT show any events.What could be the reason for this? Note: There are 2 correct answers to this question.
- A. The global_auditing_state parameter on the nameserver.ini file needs to be activated
- B. The system was offline when the changes were done
- C. The configuration parameter was changed from the OS level
- D. The audit level was set to INFO
Answer: A,C
NEW QUESTION # 49
Which of the following user types can be used to log on interactively? Note: There are 2 correct answers to this question
- A. System
- B. Communication
- C. Dialog
- D. Service
Answer: C,D
NEW QUESTION # 50
Which type of systems can be found in the Identify Provisioning Service landscape? Note: There are 2 correct answers to this question
- A. Source
- B. Proxy
- C. Service Provider
- D. Identify Provider
Answer: A,D
NEW QUESTION # 51
You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fiori front-end system (central hub). What transactions do you have to use to map a back-end system to one of those roles?
- A. /IWFND/MAINT_SERVICE
- B. PFCG
- C. /UI2/GW_SYS_ALIAS
- D. SEGW
Answer: A
NEW QUESTION # 52
Based on your company guidelines you have set the password expiration to 60 days. Unfortunately, there is an RFC user on your SAP system which must not have a password change for 180 days. Which option would you recommend to accomplish such a request?
- A. Create additional authorizations for RFC users and assign it to them
- B. Create enhancement spot I user-exit
- C. Create a security policy via SECPOL and assign it to tile RFC users
- D. Change profile parameter login/password_expiration_time to 180
Answer: C
NEW QUESTION # 53
To enable access between tenant databases, what do you need to do in an SAP HANA system for multitenant database containers? Note: there are 3 correct answers to this question.
- A. The user in the source system must be associated with a user in the target database.
- B. The bi-directional communication channel must be in the allow list.
- C. The user in the source system must have sufficient privileges in the target database.
- D. The cross-tenant database communication must be explicitly activated.
- E. The INIFILE ADMIN system privilege must be assigned.
Answer: A,C,D
NEW QUESTION # 54
How are security relevant objects related in the Cloud Foundry? Note: There are 2 correct answers to this question
- A. Role Templates have 0 or many attributes
- B. Role Collections have 0 or many role templates
- C. Role Templates have 1 or many scopes
- D. Role Collections have 0 or many roles
Answer: A,B
NEW QUESTION # 55
How can you protect a table containing sensitive data using the authorization object S_TABU_DIS?
- A. The tables containing sensitive data must be associated with table groups in the TBRG table.
- B. The DICBERCLS field of the authorization object must enumerate all table names of the tables containing sensitive data.
- C. The tables containing sensitive data must be named using the authorization object S_TABU_NAM for all responsible administrators. The DICBERCLS fields of the S_TABU_DIS object can then be filled with *.
- D. Authorization table groups containing tables with sensitive data must be defined in the TDDAT table and these must be omitted for anyone who does not need access to these tables.
Answer: C
Explanation:
Explanation
This is one of the ways that you can protect a table containing sensitive data using the authorization object S_TABU_DIS. S_TABU_DIS is an authorization object that controls access to tables based on authorization groups, which are groups of tables that share the same access restrictions. The DICBERCLS field of this authorization object contains the name of the authorization group for a table or a range of tables. To protect a table containing sensitive data using this authorization object, you must assign it to an authorization group and enumerate all table names of the tables containing sensitive data in the DICBERCLS field. References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?
NEW QUESTION # 56
What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note:
There are 2 correct answers to this question.
- A. The Logon ticket is not domain restricted.
- B. The Logon ticket session is held in the working memory.
- C. The Logon ticket is used for user-to-system communication.
- D. The Logon ticket is always set to client 000.
Answer: B,C
Explanation:
Explanation
These are some of the main characteristics of the Logon ticket throughout an SSO logon procedure. SSO (Single Sign-On) is a feature that enables users to log on to multiple systems or applications with one authentication process and without entering their credentials multiple times. Logon ticket is one of the methods for implementing SSO in SAP systems, which uses digital certificates and cookies to authenticate users and systems. The Logon ticket is used for user-to-system communication, which means that it contains information about the user's identity and authorizations that can be verified by the target system or application.
The Logon ticket session is held in the working memory, which means that it is stored temporarily in the memory of the user's browser or system and deleted when the session ends or expires. References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?
NEW QUESTION # 57
How does the SAP SSO wizard (transaction SNCWIZARD) simplify the SNC configuration process?
- A. It restarts the SAP application server for all profile changes to take effect
- B. It creates the SNC_LIB environment variable in OS user profile
- C. It sets the profile parameter for SAP SNC in the instance profile
- D. It set the profile parameters for SAP SNC in the default profile
Answer: D
NEW QUESTION # 58
What are the characteristics of HTTP security session management? Note: There are 3 correct answers to this question
- A. Checks the logon credentials again for every request
- B. Creates security sessions at logon
- C. Refers to the session context through the session identifier
- D. Starts security sessions with a short user-based expiration time
- E. Deletes security sessions at logoff
Answer: B,C,E
NEW QUESTION # 59
What is the User Management Engine (UME) property "connect on pooling" used for? Note: There are 2 correct answers to this question.
- A. To create a new connect on to the LDAP directory server for each request
- B. To avoid unauthorized request to the LDAP directory server
- C. To improve performance of requests to the LDAP directory server
- D. To share server resources among requesting LDAP clients
Answer: C,D
NEW QUESTION # 60
Which authorization object controls access to the trusting system between the managed system and SAP Solution Manager?
- A. S_ ICM
- B. S_SERVICE
- C. S_RFC
- D. S_RFCACL
Answer: D
NEW QUESTION # 61
Which of the following programs can be used to enable ALE Audit using the ALEAUD message type in the Customer Distribution Model and Partner Profiles? Note: There are 2 correct answers to this question.
- A. RBDAPP01
- B. RBDAUD01
- C. RBDSTATE
- D. RBDMIDOC
Answer: A,D
Explanation:
Explanation
These are some of the programs that can be used to enable ALE Audit using the ALEAUD message type in the Customer Distribution Model and Partner Profiles. ALE (Application Link Enabling) is a technology that enables distributed communication and data exchange between SAP systems and components. ALE Audit is a feature that allows you to monitor and verify the status and results of ALE processes, such as data distribution or message processing. ALEAUD is a message type that is used to send audit information from one system to another. RBDAPP01 is a program that processes inbound IDocs (Intermediate Documents), which are data containers for ALE messages. RBDMIDOC is a program that creates outbound IDocs based on change pointers, which are records of changes in application data. References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/48/9e2e3f6f8e41e8a283aaf2ad2c64c4/content.htm?n
NEW QUESTION # 62
What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note: There are 2 correct answers to this question
- A. The Logon ticket session is held in the working memory
- B. The Logon ticket is not domain restricted
- C. The Logon ticket is always set to client 000
- D. The Logon ticket is sued for user-to-system communication
Answer: B,D
NEW QUESTION # 63
You are running a 3-tier SAP system landscape. Each time you are accessing STMS_IMPORT on any of these systems, you are prompted for a TMSADM password. How can you stop this prompt from appearing?
- A. Run the report TMS_ UPDATE_PWD_OF_TMSADM on the domain controller.
- B. Reset the TMSADM user's password on the system you are trying to access STMS_ IMPORT.
- C. Run the report RSUSR405 on the domain controller.
- D. Change the TMSA DM user's password directly in the TMS RFC destination in transact on SM59.
Answer: A
NEW QUESTION # 64
You are evaluating the "Cross-client object change" option using transaction SCC4 for your Unit Test Client in the development environment. Which setting do you recommend?
- A. Changes to repository and cross-client customizing allowed
- B. No changes to repository and cross-client customizing objects
- C. No changes to cross-client customizing objects
- D. No changes to repository objects
Answer: A
Explanation:
Explanation
This is the recommended setting for the "Cross-client object change" option using transaction SCC4 for your Unit Test Client in the development environment. This setting allows you to make changes to repository objects (such as programs, function modules, classes, etc.) and cross-client customizing objects (such as number ranges, message classes, etc.) in your Unit Test Client without affecting other clients in the same system. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 65
You have Reason Codes already defined. Which is the correct sequence of steps to configure a Firefighter ID in Emergency Access Management?
- A. Maintain an Owner for a Firefighter ID
Maintain a Firefighter ID for Controllers and Firefighters
Maintain Access Control Owner - B. Maintain an Owner for a Firefighter ID
Maintain a Firefighter ID for Controllers and Firefighters
Maintain Access Control Owner - C. Maintain a Firefighter ID for Controllers and Firefighters
Maintain an Owner for a Firefighter ID
Maintain Access Control Owner - D. Maintain an Owner for a Firefighter ID
Maintain a Firefighter ID for Controllers and Firefighters
Maintain Access Control Owner
Answer: B
NEW QUESTION # 66
What are the features of the Audit Information System (AIS)? Note: There are 2 correct answers to this question.
- A. It can be launched directly using transact on SECR
- B. It offers two types of audit reports: system and business
- C. The report selection variables are configured during setup
- D. The roles are built from nodes in the Implementation Guide (IMG)
Answer: B,C
NEW QUESTION # 67
For which reasons would you choose an "anonymous SSL Client PSE" setup? Note: There are
2 correct answers to this question.
- A. To use data encryption
- B. To perform authentication
- C. To use as a container for the CAs
- D. To perform mutual authentication
Answer: A,C
Explanation:
Explanation
These are some of the reasons why you would choose an "anonymous SSL Client PSE" setup in SAP systems.
An anonymous SSL Client PSE is a PSE that does not contain any client certificates or keys, but only contains certificates of trusted certificate authorities (CAs). It can be used to establish SSL connections with servers that do not require client authentication, but only use data encryption to protect the communication. It can also be used as a container for storing the CAs that are trusted by the client. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 68
What is the purpose of the parameter rec/client in an AS ABAP based SAP system?
- A. To generate change documents
- B. To log changes in Core Data Services views
- C. To generate source code versions
- D. To log changes in tables
Answer: D
Explanation:
Explanation
The purpose of the parameter rec/client in an AS ABAP based SAP system is to log changes in tables that are marked as change-relevant in transaction SE11 (ABAP Dictionary). The parameter rec/client specifies which clients are affected by table logging. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 69
How are assertion tickets used?
- A. They are used for system-to-system encryption.
- B. They are used for encrypting Web service communication.
- C. They are used for system-to-system communication.
- D. They are used for user-to-system trusted login.
Answer: C
Explanation:
Explanation
Assertion tickets are used for system-to-system communication in SAP systems. They are based on the SAML (Security Assertion Markup Language) standard and contain information about the identity and attributes of a user or a system. Assertion tickets can be used to establish trust relationships between systems and enable single sign-on scenarios. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 70
Why do you use table logging in AS ABAP?
- A. To log changes in table technical settings
- B. To log changes in master data
- C. To log changes in customizing tables
- D. To log changes in application data
Answer: C
NEW QUESTION # 71
Which type of systems can be found in the Identity Provisioning Service landscape? Note:
There are 2 correct answers to this question.
- A. Identity Provider
- B. Source
- C. Service Provider
- D. Proxy
Answer: B,C
Explanation:
Explanation
Source and Service Provider are two types of systems that can be found in the Identity Provisioning Service landscape. A source system is a system that provides user data to be provisioned to other systems, such as an identity provider or an LDAP server. A service provider system is a system that receives user data from a source system, such as an SAP Cloud Platform subaccount or an SAP SuccessFactors instance. References:
https://help.sap.com/viewer/product/SAP_CLOUD_PLATFORM_IDENTITY_PROVISIONING_SERVICE/en-
https://help.sap.com/viewer/product/SAP_CLOUD_PLATFORM_IDENTITY_PROVISIONING_SERVICE/en-
NEW QUESTION # 72
What does return code 1 2 mean when performing STAUTHTRACE?
- A. No authorization and no authorization object in user buffer
- B. No authorization but does have authorization object in user buffer
- C. An invalid user name was specified in user
- D. Too many parameters for authorization checks
Answer: B
Explanation:
Explanation
Return code 12 means that the user does not have the required authorization for an authority check but does have the authorization object in the user buffer. This means that the user has some values for the authorization object but not the ones that are needed for the specific check. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 73
......
P-SECAUTH-21 Questions PDF [2023] Use Valid New dump to Clear Exam: https://www.realvce.com/P-SECAUTH-21_free-dumps.html
PASS SAP P-SECAUTH-21 EXAM WITH UPDATED DUMPS: https://drive.google.com/open?id=1ayy2YlWSOHnHJRIFSVYQiyHWvKYpe5yA