問題集を購入するなら最新の2023年01月10日 P-SECAUTH-21試験問題と解答PDFで一年間無料更新 [Q61-Q84]

問題集を購入するなら最新の2023年01月10日 P-SECAUTH-21試験問題と解答PDFで一年間無料更新

時間限定無料ダウンロード！最新のP-SECAUTH-21問題集で2023年最新のP-SECAUTH-21試験問題

SAP P-SECAUTH-21 認定試験の出題範囲：

トピック	出題範囲
トピック 1	SAP システムを保護し、セキュリティチェックを実施する方法を説明する SAP クラウドプラットフォームでのセキュリティとシナリオを説明する
トピック 2	SAP のガバナンスとコンプライアンスへのアクセス SAP Cloud Platform Security SAP システムの保護
トピック 3	Solution Manager を使用してセキュリティを監視し、セキュリティの問題をトラブルシューティングする SAP S 4HANA の承認の概念を説明および実装する
トピック 4	SAP でのユーザー管理と ID ライフサイクル管理 SAP HANA での承認、セキュリティ、およびシナリオについて説明する

質問 61
Who can revoke a runtime role from a user in the SAP HANA tenant database? Note: There are 2 correct answers to this question. Note: there are 2 correct answers to this question.

A. Anyone with "ROLE ADMIN"
B. The DBACOCKPIT user
C. The owner of the HDI container
D. The grating user

正解: A,D

質問 62
In your SAP HCM system, you are implementing structural authorizations for your users. What are the characteristics of this authorization type? Note: There are 2 correct answers to this question.

A. The structural profile determines the access mode which the user can perform
B. The structural profile is maintained and assigned to users using the Implementation Guide
C. The structural profile determines the accessible object in the organizational structure
D. The structural profile is maintained and assigned to users using the Profile Generator

正解: B,C

質問 63
Which tools can you use to troubleshoot an authorization issue with a Fiori application? Note: There are 2 correct answers to this question

A. /UI2/GW_APPS_LOG
B. /IWFND/ERROR_LOG
C. /UI2/FLC
D. /IWBEP/ERROR_LOG

正解: A,B

質問 64
For which reasons would you choose an "anonymous SSL Client PSE" setup? Note: There are 2 correct answers to this question

A. To perform authentication
B. To use as a container for the CAs
C. To use data encryption
D. To perform mutual authentication

正解: A,B

質問 65
Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 3 correct answers to this question.

A. Trusted RFC
B. Info Access (InA)
C. Secure Network Communication (SNC)
D. HTIP(S)
E. Data

正解: A,B,C

質問 66
What are the characteristics of HTTP security session management? Note: There are 3 correct answers to this question

A. Creates security sessions at logon
B. Refers to the session context through the session identifier
C. Checks the logon credentials again for every request
D. Deletes security sessions at logoff
E. Starts security sessions with a short user-based expiration time

正解: A,B,D

質問 67
SNC is configured in the production system. For emergency purposes, you want to allow certain accounts to be able to access the system with password logon. What do you need to set up for this purpose? Note: There are 2 correct answers to this question.

A. Use the 'Unsecure communication permitted option' In SU01 for specific users
B. Use profile parameter SNC/ONLY_ENCRYPTED_GUI with value 'O'
C. Use profile parameter SNC/ACCEPT_ INSECURE_GUI with value 'U'
D. Maintain the user access control list in table USRACLEXT

正解: A,C

質問 68
You verified the password of the TMSADM user in your SAP landscape to be SAP defaulted. You want to reset this password by using program TMS_UPDATE_PWD_OF_TMSADM. What steps would you take to reset this password?
Note: There are 2 correct answers to this question

A. Assign "SAP_ALL" to TMSADM in all systems/clients including 000
B. Lock TMSADM in all the system/clients including 000
C. Run this program in the Domain Controller (client 000)
D. Deactivate the SNC opt on

正解: B,C

質問 69
Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 2 correct answers to this question

A. HOP
B. OData
C. SNC
D. InA

正解: C,D

質問 70
To prevent session fixation and session hijacking attacks, SAP's HTTP security session management is highly recommended. What are the characteristics of HTTP security session management? Note: There are 2 correct answers to this question.

A. The system is checking the logon credentials again for every request
B. It uses URLs containing sap-context d to identify the security session
C. The security sessions are created during logon and deleted during logoff.
D. The session identifier is a reference to the session context transmitted through a cookie.

正解: C,D

質問 71
You have an HR table for which you want to create a role to provide users the ability to display and change its table content based on the country groupings. Which of the steps would you take to accomplish these requirements? Note: There are 2 correct answers to this question.

A. Maintain the authorization object S_TABU_LIN
B. Define an organization criterion through transaction SPRO
C. Create an authorization group with appropriate authorization fields for the table
D. Maintain the authorization object S_TABU_NAM

正解: A,B

質問 72
What are the key capabilities of Event Analyzer in Enterprise Threat Detection 1.0? Note: There are 2 correct answers to this question.

A. Synchronization of user contexts from ABAP Systems
B. Baseline detection
C. Pseudonymize user identities for data protection
D. Predictive threat notification

正解: B,C

質問 73
Why do you use table logging in AS ABAP?

A. To log changes in table technical settings
B. To log changes in customizing tables
C. To log changes in master data
D. To log changes in application data

正解: B

質問 74
Your company is running SAP S/4HANA on premise, with the requirement to run the SAP Fiori Launchpad in the SAP Cloud Platform. What would be the recommended scenario for user authentication for internet browser access to the SAP Fiori Launchpad?

A. Principal Propagation
B. SAML2 and OData Provisioning
C. X.509 Client Certificates
D. SAP Logon Tickets

正解: C

質問 75
You have implemented CUA in your organization and you only want to compare the company address data between the central system and child systems to perform the synchronization activities. Which transact on do you use for comparing the company address between these systems?

A. SCUM
B. SCUC
C. SUCOMP
D. SCUG

正解: C

質問 76
What does the SAP Security Optimization Service provide? Note: There are 2 correct answers to this question.

A. Analysis of the network configuration
B. Analysis of the security vulnerabilities within an SAP landscape
C. Configuration checks of SAP systems
D. Results containing the list of patches that have to be applied.

正解: C,D

質問 77
What are the features of the Audit Information System (AIS)? Note: There are 2 correct answers to this question.

A. It offers two types of audit reports: system and business
B. The roles are built from nodes in the Implementation Guide (IMG)
C. The report selection variables are configured during setup
D. It can be launched directly using transact on SECR

正解: A,C

質問 78
How are security relevant objects related in the Cloud Foundry? Note: There are 2 correct answers to this question

A. Role Templates have 1 or many scopes
B. Role Collections have 0 or many role templates
C. Role Collections have 0 or many roles
D. Role Templates have 0 or many attributes

正解: B,D

質問 79
You have delimited a single role which is part of a composite role, and a user comparison for the composite role has been performed. You notice that the comparison did NOT remove the profile assignments for that single role. What program would you run to resolve this situation?

A. 0 PRGN_COMPRESS_TIMES
B. 0PRGN_COMPARE_ROLE_MENU
C. 0 PRGN_MERGE_PREVIEW
D. 0 PRGN_DELETE_ACT IVITY_GROUPS

正解: A

質問 80
Which Object ID is used to integrate Business Rule Framework (BRF+) to Multi Step Multi Process (MSMP) initiator workflow?

A. Function ID
B. Application ID
C. Expression ID
D. Process ID

正解: A

質問 81
You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fiori front-end system (central hub). What transactions do you have to use to map a back-end system to one of those roles?

A. SEGW
B. PFCG
C. /IWFND/MAINT_SERVICE
D. /UI2/GW_SYS_ALIAS

正解: C

質問 82
The security administrator is troubleshooting authorization errors using transaction SU53. While running transaction MM50, the user received the following error: "You are not authorized to use transaction MM01" The users position in the organization makes it inappropriate for them to have direct access to transaction MM01 because it creates a Segregation of Duties conflict.
What would cause the system to run an authority check using object S_TCODE for transaction MM01 while running transaction MM50?

A. The instance parameter auth/no_check_in_some_cases has been set to Y
B. The developer who wrote the program for transaction MM50 issues the ABAL command CALL TRANSACTION for transaction MM01
C. The proposal value for the object S_TCODE in the SU24 data for transaction MM50 was incorrectly set to YES
D. MM01 was maintained as the CALLING transaction in table TCDCOUPLES with field OKFLAG value X

正解: B

質問 83
Which of the following events will create security alerts in the CCMS Alert Monitor of SAP Solution Manager? Note: There are 2 correct answers to this question.