SAP P-SECAUTH-21 Daily Practice Exam New 2023 Updated 80 Questions [Q47-Q71]

5/5 - (1 vote)

SAP P-SECAUTH-21 Daily Practice Exam New 2023 Updated 80 Questions

Use Valid P-SECAUTH-21 Exam – Actual Exam Question & Answer

With the SAP P-SECAUTH-21 certification, IT professionals can enhance their skills and knowledge in system security architecture, making them more valuable to their organizations. Certified Technology Professional – System Security Architect certification also demonstrates their commitment to staying up-to-date with the latest security trends and technologies.

SAP P_SECAUTH_21 exam is designed for those who wish to become technology professionals specializing in system security architecture. Certified Technology Professional – System Security Architect certification exam is intended for individuals who are experienced in SAP security and are looking to validate their knowledge and expertise in this area.

NEW QUESTION 47
What are the key capabilities of Enterprise Threat Detection? Note: There are 2 correct answers to this question

Blocking user access

Predictive threat notification

Dashboard-based analysis for security risks

Real time capture of abnormal user activities

NEW QUESTION 48
A user reports an issue with data not showing up in the visualization of the SAP Fiori tiles. You want to verify the target mapping. At what level are you going to check the target mapping?

O At the catalog level in the SAP Fiori front-end server

O At the group level in the SAP Fiori front-end server

O At the group level in the SAP Fiori Launchpad

O At the application level in the Web IDE

NEW QUESTION 49
Where can we store the Security Audit Log events? Note: There are 2 correct answers to this question.

In the database table RSAU_BUF_DATA

In the file system of the application servers

In the SAP Solution Manager system

In a central fi e system

NEW QUESTION 50
You are using the SAP Web Dispatcher for load-balancing purposes. Which actions are performed by the SAP Web Dispatcher in this scenario? Note: There are 2 correct answers to this question.

Validates the user credentials

Uses logon groups to determine how to direct requests

Decrypts the HTTPS request and then selects the server

Checks the current state of the message server

NEW QUESTION 51
Based on your company guidelines you have set the password expiration to 60 days. Unfortunately, there is an RFC user in your SAP system who must not have a password change for 180 days. Which option would you recommend to accomplish such a request?

Create an enhancement spot or user exit

Create a security policy via SECPOL and assign it to the RFC user

Change the profile parameter login/password_expiration_time to 180

Define the RFC user as a reference user

NEW QUESTION 52
While performing an audit of changes to the system and client change options for your production SAP S/4HANA environment, you receive the following message in transaction SCC4: “No logs found for selected period.” How can you correct the problem?

Maintain parameter rsau/enable with value 1

Maintain parameter log_mode with value normal for SAP HANA

Maintain parameter rdisp/TRACE with value 3

Maintain parameter rec/client with value ALL

NEW QUESTION 53
Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 2 correct answers to this question

OData

InA

HOP

SNC

NEW QUESTION 54
Which type of systems can be found in the Identity Provisioning Service landscape? Note:
There are 2 correct answers to this question.

Source

Service Provider

Proxy

Identity Provider

NEW QUESTION 55
Where can you store Security Audit Log Events? Note: There are 2 correct answers to this question.

In the kernel trace

In the database table RSAU_BUF_DATA

Ip the file system of the application servers

In the Linux system log

NEW QUESTION 56
What is the User Management Engine (UME) property “connect on pooling” used for? Note: There are 2 correct answers to this question.

To improve performance of requests to the LDAP directory server

To avoid unauthorized request to the LDAP directory server

To create a new connect on to the LDAP directory server for each request

To share server resources among requesting LDAP clients

NEW QUESTION 57
Which tool do you use to customize the SAP HANA default password policy? Note: There are 2 correct answers to this question.

SAP HANA Lifecycle Manager

SAP HANA Studio

SAP HANA Cockpit

SAP Web IDE

NEW QUESTION 58
How are security relevant objects related in the Cloud Foundry? Note: There are 2 correct answers to this question

Role Collections have 0 or many role templates

Role Templates have 0 or many attributes

Role Collections have 0 or many roles

Role Templates have 1 or many scopes

NEW QUESTION 59
How does the SAP SSO wizard (transaction SNCWIZARD) simplify the SNC configuration process?

It installs the CA certificate response

It exports an SNC SAPCRYPTOLIB certificate and imports it into the partner system

It creates the SNC_LIB environment variable

It sets the profile parameters for SAP SNC and SPNego in the default profile

NEW QUESTION 60
When re-configuring the user management engine (UME) of an AS Java system, what do you need to consider to change the data source from system database to an ABAP system successfully?

The UME configuration file dataSourceConfiguration_database_only.xml is automatically updated with an appropriate dataSourceConfiguration_abap.xml file.

All users and groups in the system database must have different IDs than existing users and groups in the ABAP system.

The logon security policy for the existing users is aligned with the logon security policy in the ABAP system.

You need to import the users from the system database into the ABAP system.

NEW QUESTION 61
What is required when you configure the PFCG role for an end-user on the front-end server? Note: There are 2 correct answers to this question.

The catalog assignment for the start authorization

The S_RFC authorization object for the OData access

The Fiori Launchpad designer assignment

The group assignment to display it in the Fiori Launchpad

NEW QUESTION 62
Which transaction or report can be used to audit profile assignments in an SU01 user master record? Note: There are 2 correct answers to this question

RSUSR100

ST01

SM20N

RSUSR002

NEW QUESTION 63
Which SAP product supports General Data Privacy Regulation (GDPR) compliance through mitigating control testing and validation?

SAP Identity Access Governance

SAP Access Control

SAP Solution Manager

SAP Process Control

NEW QUESTION 64
Under which group can you find the ‘System Recommendations’ tile in the Solution Manager launchpad?

Technical Administration

IT Service Management

Change Management

Root Cause Analysis

NEW QUESTION 65
Which users should exist in client 000?
Note: There are 2 correct answers to this question

SAP*

EARLYWATCH

SAPCPIC

TMSADM

NEW QUESTION 66
Which measures should we implement to protect the PSEs? Note: There are 2 correct answers to this question.

Review the usage of the S_ADMI_FCD object

Encrypt the files with the transaction SNC0

Review the usage of the S_DATASET object

Restrict access to the operating system users

NEW QUESTION 67
You have a load balancer in a DMZ network zone (called natl.mydomain.com) in front of 2 SAP NetWeaver AS systems (hostl.mydomain.com, host2.mydomain.com). What is the recommended common name part of the distinguished name on the SSL Server’s PSE?

It should be a combined DNS alias for host 1.mydomain.com and host2.mydomain.com and nat1.mydomain.com

It should be host 1.mydomain.com, host2.mydornain.com individually for each PSE

It should be natl.mydomain.com

It should be *.mydomain.com (wildcard) names

NEW QUESTION 68
To which services packages does SAP Security Optimization Services (SOS) belong?

EarlyWatch Reporting

Performance Optimization

Application Integration Optimization

System Administration Optimization

NEW QUESTION 69
User1 grants role 1 to user2. Who can revoke role 1 role from user2?

The system OBA user

The owner of role 1

Only User1

Any user with the ‘ROLE ADMIN’ database role

NEW QUESTION 70
You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fiori front-end system (central hub). What transaction do you have to use to map a back-end system to one of those roles?

PFCG

SEGW

/UI2/GW_SYS_ALIAS

/IWFND/MAINT_SERVICE

NEW QUESTION 71
Which communication protocols are supported by the SAP Cloud Connector? Note: There are 2 correct answers to this question

NNTP

LDAP

SNA

RFC