Free Sales Ending Soon - Use Real P-SECAUTH-21 PDF Questions [Mar 20, 2024]
Updated Mar-2024 Exam P-SECAUTH-21 Dumps - Pass Your Certification Exam
NEW QUESTION # 23
What are characteristics of SAP HANA Deployment Infrastructure (HDI) roles? Note: there are 2 correct answers to this question.
- A. They are owned by the user who creates them
- B. They are managed by the native HDI version control.
- C. They are granted using database procedures
- D. They are transportable between systems
Answer: B,C
NEW QUESTION # 24
What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note: There are 2 correct answers to this question
- A. The Logon ticket is always set to client 000
- B. The Logon ticket is not domain restricted
- C. The Logon ticket is sued for user-to-system communication
- D. The Logon ticket session is held in the working memory
Answer: B,C
NEW QUESTION # 25
A security consultant has activated a trace via ST01 and is analyzing the authorization error with Return Code 12. What does the Return Code 12 signify?
- A. "Objects not contained in User Buffer"
- B. "No authorizations but does have authorization object in their buffer"
- C. "Too many parameters for authorization checks"
- D. "No authorizations and does NOT have authorization object in their buffer"
Answer: D
NEW QUESTION # 26
What does the SAP Security Optimization Service provide? Note: There are 2 correct answers to this question.
- A. Results containing the list of patches that have to be applied.
- B. Configuration checks of SAP systems
- C. Analysis of the network configuration
- D. Analysis of the security vulnerabilities within an SAP landscape
Answer: A,B
NEW QUESTION # 27
How does the SAP SSO wizard (transaction SNCWIZARD) simplify the SNC configuration process?
- A. It restarts the SAP application server for all profile changes to take effect
- B. It set the profile parameters for SAP SNC in the default profile
- C. It creates the SNC_LIB environment variable in OS user profile
- D. It sets the profile parameter for SAP SNC in the instance profile
Answer: B
NEW QUESTION # 28
You verified the password of the TMSADM user in your SAP landscape to be SAP defaulted. You want to reset this password by using program TMS_UPDATE_PWD_OF_TMSADM. What steps would you take to reset this password?
Note: There are 2 correct answers to this question
- A. Lock TMSADM in all the system/clients including 000
- B. Deactivate the SNC option
- C. Assign "SAP_ALL" to TMSADM in all systems/clients including 000
- D. Run this program in the Domain Controller (client 000)
Answer: B,D
NEW QUESTION # 29
Which of the following user types can be used to log on interactively? Note: There are 2 correct answers to this question.
- A. Communication
- B. Dialog
- C. Service
- D. System
Answer: A,B
Explanation:
Explanation
Dialog and Communication are two user types that can be used to log on interactively to an SAP system.
Dialog users are normal users who can access the system using a graphical user interface (GUI) or a web browser. Communication users are users who access the system using communication protocols, such as RFC or HTTP. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 30
Because of which security threat would you need to make additional configuration settings to run the SAP Fiori Launchpad from within your SAP NetWeaver Portal?
- A. Clickjacking
- B. Content Spoofing
- C. Cross-Site Scripting
- D. Cross-Site Request Forgery
Answer: A
NEW QUESTION # 31
Which features does SAProuter provide? Note: There are 2 correct answers to this question.
- A. Load-balanced RFC connections
- B. Filtered and logged network connections
- C. HTTP conversion into HTTPS connections
- D. Password-protected connections
Answer: B,D
Explanation:
Explanation
SAProuter is a software application that acts as an intermediate station between SAP systems and external networks. It provides features such as filtered and logged network connections based on access control lists, password-protected connections using Secure Network Communication (SNC), and encrypted connections using Secure Socket Layer (SSL). References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
NEW QUESTION # 32
What is the default authentication mechanism in the SAP Cloud Platform?
- A. Kerberos
- B. SAP Logon Tickets
- C. X 509 Certificates
- D. SAML
Answer: D
NEW QUESTION # 33
How can you describe the hierarchical relationships between technical entities in the Cloud Foundry?
- A. A SaaS tenant acts as one provider account.
- B. A subscription is a PaaS tenant.
- C. A global account can have one or many subaccounts
- D. A SaaS tenant acts as one Cloud Foundry Organization.
Answer: C
NEW QUESTION # 34
Which characteristics apply to the SAP ID Service? Note: There are 2 correct answers to this question
- A. Non-configurable MFA for SAP BTP Cockpit
- B. Customizable user interface
- C. Configurable password policy
- D. User base owned and managed by SAP
Answer: B,D
NEW QUESTION # 35
You want to allow your trainee colleagues to use the SAP GUI to connect directly to your SAP S/4HANA (on-premise) demo system from a public internet connection. Which of the following SAP solutions is suited for this purpose?
- A. SAP NetWeaver Gateway
- B. SAP Web Dispatcher
- C. SAP Cloud Connector
- D. SAProuter
Answer: D
Explanation:
Explanation
This is one of the SAP solutions that is suited for this purpose of allowing your trainee colleagues to use the SAP GUI to connect directly to your SAP S/4HANA (on-premise) demo system from a public internet connection. SAProuter is a program that acts as an application-level gateway between SAP systems and networks using TCP/IP protocol. SAProuter can be used to establish secure and encrypted connections between SAP systems and external networks using SNC (Secure Network Communication) certificates and keys. SAProuter can also be used to control access to SAP systems based on various criteria, such as source IP address, destination IP address, service name, or port number. References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?
NEW QUESTION # 36
Where does SAP HANA store the values for the default Password Policy parameter? Note: there are 2 correct answers to this question.
- A. global.ini
- B. nameservice.ini
- C. indexserver.ini
- D. attributes.ini
Answer: B,C
NEW QUESTION # 37
You want to use Configuration Validation functionality in SAP Solution Manager to check the consistency of settings across your SAP environment. What serves as the reference basis for Configuration Validation? Note: There are 2 correct answers to this question.
- A. A target system in your system landscape
- B. A virtual set of manually maintained configuration ems
- C. A list of recommended settings attached to a specific SAP Note
- D. A result list of configuration items from SAP Early Watch Alert (EWA)
Answer: A,B
NEW QUESTION # 38
You have an HR table for which you want to create a role to provide users the ability to display and change its table content based on the country groupings. Which of the steps would you take to accomplish these requirements? Note: There are 2 correct answers to this question.
- A. Define an organization criterion through transaction SPRO
- B. Create an authorization group with appropriate authorization fields for the table
- C. Maintain the authorization object S_TABU_LIN
- D. Maintain the authorization object S_TABU_NAM
Answer: A,C
NEW QUESTION # 39
How can you protect a table containing sensitive data using the authorization object S_TABU_DIS?
- A. Authorization table groups containing tables with sensitive data must be defined in table TDDAT and these must be omitted for all employees who do not need access to these tables
- B. The field DICBERCLS of the authorization object must enumerate all table names of the tables containing sensitive data.
- C. The tables containing sensitive data must be named using the authorization object S_TA BU_NAM for all responsible administrator employees. The fields DICBERCLS of the object S_TABU_DIS can
- D. The tables containing sensitive data must be associated with table groups in table TBRG.
Answer: A
Explanation:
then be filled with *.
NEW QUESTION # 40
How are security relevant objects related in the Cloud Foundry?Note: There are 2 correct answers to this question.
- A. Role Collections have 0 or many roles.
- B. Role Templates have 1 or many scopes.
- C. Role Templates have 0 or many attributes.
- D. Role Collections have 0 or many role templates.
Answer: A,D
Explanation:
Explanation
These are some of the ways that security relevant objects are related in the Cloud Foundry. Cloud Foundry is a platform-as-a-service (PaaS) that enables developers to deploy and run cloud-native applications using various services and frameworks. Cloud Foundry uses different security relevant objects to manage user access and authorization, such as role collections, roles, role templates, and scopes. Role collections are groups of roles that can be assigned to users or groups. Roles are sets of permissions that define what actions users can perform on resources or services. Role templates are predefined roles that can be reused for different role collections or services. Scopes are strings that represent specific permissions or attributes of a user or service.
References:
https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/9e1bf57130ef466e8017eab298
NEW QUESTION # 41
The security administrator is troubleshooting authorization errors using transaction SU53. While running transaction MM50, the user received the following error.
"You are not authorized to use transaction MM01"
The user's position in the organization makes it inappropriate for them to have direct access to transaction MM01 because it creates a Segregation of Duties conflict.
How can the security administrator resolve the issue and still provide the user with the needed access to MM50?
- A. Set the value form instance parameter auth/no_check_in_some_cases to N.
- B. Remove transaction MM01 as a CALLING transaction from table TCDCOUPLES.
- C. Set the check indicator (for the transaction authorization called by the MM01 transaction) to NO, using transaction SE97 for transaction MM50.
- D. Set the check indicator value for object S_TCODE in the SU24 data for transaction MM01 to Do Not Check.
Answer: C
NEW QUESTION # 42
You want to configure SNC in a newly-installed AS ABAP based SAP system. Besides running SNCWIZARD, what else do you need to perform for this scenario?
Note: There are 2 correct answers to this question
- A. Restart the SAP system
- B. Enable encrypted HTTP service
- C. Set the parameters using sapgenpse
- D. Manage the PSE
Answer: A,D
NEW QUESTION # 43
What connection type is used for restricted users?
- A. JDBC
- B. HTTP/S
- C. OLEDB
- D. ODBC
Answer: B
NEW QUESTION # 44
How can you describe the hierarchical relationships between technical entities in the Cloud Foundry?
- A. A global account can have one or many subaccounts.
- B. A SaaS tenant acts as one provider account.
- C. A subscription is a PaaS tenant.
- D. A SaaS tenant acts as one Cloud Foundry Organization.
Answer: A
Explanation:
Explanation
This is one of the ways that you can describe the hierarchical relationships between technical entities in the Cloud Foundry. Cloud Foundry is a platform-as-a-service (PaaS) that enables developers to deploy and run cloud-native applications using various services and frameworks. Cloud Foundry uses different technical entities to organize and manage resources and access rights, such as global accounts, subaccounts, organizations, spaces, applications, and services. A global account is an entity that represents a customer or partner who has subscribed to SAP Cloud Platform services and products. A global account can have one or many subaccounts, which are entities that represent logical subdivisions or business units within a global account. References:
https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/9e1bf57130ef466e8017eab298
NEW QUESTION # 45
......
P-SECAUTH-21 Dumps To Pass SAP Certified Technology Professional Exam in One Day: https://vcetorrent.passreview.com/P-SECAUTH-21-exam-questions.html