[2023年10月12日]P_SECAUTH_21試験ブレーン問題集で学習注釈と理論
合格させるSAP P_SECAUTH_21テスト練習テスト問題試験問題集
質問 # 30
Which authorizations should you restrict when you create a developer role in an AS ABAP production system? Note: There are 2 correct answers to this question.
- A. The ability to execute class methods through authorization object S_PROGRAM
- B. The ability to execute function modules through authorization object S_DEVELOP
- C. The ability to execute queries through authorization object S_OUERY
- D. The ability to use the ABAP Debugger through authorization object S_DEVELOP
正解：B、D
質問 # 31
Which of the 7 core principals of the General Data Privacy Regulation (GDPR) requires thorough documentation of all policies and controls that govern the collection and processing of data?
- A. Accountability
- B. Lawfulness, Fairness, and Transparency
- C. Integrity and Confidentiality
- D. Accuracy
正解：A
解説：
Explanation
This is one of the 7 core principles of GDPR (General Data Protection Regulation) that requires thorough documentation of all policies and controls that govern the collection and processing of data. Accountability means that data controllers and processors must be able to demonstrate compliance with GDPR requirements and obligations, such as data protection by design and by default, data protection impact assessment, data breach notification, or data subject rights. Accountability also means that data controllers and processors must keep records of their data processing activities and cooperate with supervisory authorities when requested.
References: https://gdpr-info.eu/art-5-gdpr/ https://gdpr-info.eu/art-5-gdpr/
質問 # 32
For which purpose do you use instance Secure Storage File System (SSFS) in an SAP HANA system? Note: There are 2 correct answers to this question.
- A. To store root keys for data volume encryption
- B. To store the secure single sign-on configuration
- C. To protect the password of the root key backup
- D. To protect the X.509 public key infrastructure certificates
正解：A、B
質問 # 33
How does the SAP SSO wizard (transaction SNCWIZARD) simplify the SNC configuration process?
- A. It sets the profile parameters for SAP SNC in the default profile
- B. It creates the SNC_LIB environment variable in OS user profile.
- C. It restarts the SAP application server for all profile changes to take effect.
- D. It sets the profile parameters for SAP SNC in the instance profile.
正解：D
解説：
Explanation
This is one of the ways that the SAP SSO wizard (transaction SNCWIZARD) simplifies the SNC configuration process. SNC (Secure Network Communication) is a feature that enables secure and encrypted communication between SAP systems and components using certificates and keys. The SAP SSO wizard is a tool that guides you through the steps of configuring SNC for your SAP system, such as creating or importing certificates and keys, setting up trust relationships, and activating SNC protection level. It also sets the profile parameters for SAP SNC in the instance profile, which are required for enabling SNC on your system.
References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/48/9e2e3f6f8e41e8a283aaf2ad2c64c4/content.htm?n
質問 # 34
Which platform services are available in the Cloud Foundry? Note: There are 2 correct answers to this question
- A. Integration
- B. Commerce
- C. Analytics
- D. Data Quality
正解：A、C
質問 # 35
How is the role concept applied for modeled authorizations based on Core Data Services (CDS) views?
- A. CDS roles are defined for the CDS views and implicitly applied to each user.
- B. CDS roles are defined in the WHERE clause when calling a CDS view in Open SQL.
- C. CDS roles are mapped to the CDS view in the access rules.
- D. CDS roles are defined for CDS views in Object Navigator.
正解：C
解説：
Explanation
The role concept for modeled authorizations based on Core Data Services (CDS) views works in this way:
CDS roles are mapped to the CDS view in the access rules that define which users can access which data from the CDS view. The access rules are defined using annotations in the CDS view definition or using a separate access control DDL source file. References:
https://help.sap.com/viewer/cc0c305d2fab47bd808adcad3ca7ee9d/7.5.9/en-US/fafcbcf9d9101014b3d9a08ce33d
https://help.sap.com/viewer/cc0c305d2fab47bd808adcad3ca7ee9d/7.5.9/en-US/fafcbcf9d9101014b3d9a08ce33d
質問 # 36
How can you describe static and dynamic assignments? Note: There are 2 correct answers to this question.
- A. Static assignments are set up via the Cloud Cockpit.
- B. Dynamic assignments are based on attribute values
- C. Static assignments occur at runtime.
- D. Dynamic assignments are based on scope values.
正解：A、D
解説：
Explanation
Static assignments are the assignments of roles and role collections to users or groups that are done manually via the Cloud Cockpit. Dynamic assignments are the assignments of roles and role collections to users or groups that are done automatically based on scope values. Scope values are attributes that are derived from the user's identity provider or from the application context. References:
https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/9e1bf57130ef466e8017eab298
https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/9e1bf57130ef466e8017eab298
質問 # 37
Under which group can you find the "System Recommendations" file in the Solution Manager launchpad?
- A. Root Cause Analysis
- B. Change Management
- C. Technical Administration
- D. IT Service Management
正解：B
質問 # 38
What are characteristics of SAP HANA Deployment Infrastructure (HDI) roles? Note: There are 2 correct answers to this question.
- A. They are owned by the user who creates them.
- B. They are granted using database procedures.
- C. They are transportable between systems.
- D. They are managed by the native HDI version control.
正解：B、D
解説：
Explanation
These are some of the characteristics of SAP HANA Deployment Infrastructure (HDI) roles. HDI roles are roles that are defined and deployed as part of HDI containers, which are isolated units of database objects and data in SAP HANA systems. HDI roles are managed by the native HDI version control, which tracks changes and dependencies among HDI objects and artifacts. HDI roles are granted using database procedures, such as GRANT_CONTAINER_GROUP_ROLE or GRANT_CONTAINER_SCHEMA_ROLE, which enable dynamic role assignments based on container groups or schemas. References:
https://help.sap.com/viewer/6b94445c94ae495c83a19646e7c3fd56/2.0.05/en-US/fafcbcf9d9101014b3d9a08ce33
質問 # 39
What is the User Management Engine (UME) property "connect on pooling" used for? Note: There are 2 correct answers to this question.
- A. To share server resources among requesting LDAP clients
- B. To create a new connect on to the LDAP directory server for each request
- C. To improve performance of requests to the LDAP directory server
- D. To avoid unauthorized request to the LDAP directory server
正解：A、C
質問 # 40
Which features does SAProuter provide? Note: There are 2 correct answers to this question.
- A. Password-protected connections
- B. Filtered and logged network connections
- C. Load-balanced RFC connections
- D. HTTP conversion into HTTPS connections
正解：A、B
解説：
Explanation
SAProuter is a software application that acts as an intermediate station between SAP systems and external networks. It provides features such as filtered and logged network connections based on access control lists, password-protected connections using Secure Network Communication (SNC), and encrypted connections using Secure Socket Layer (SSL). References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
質問 # 41
Which of the objects do you assign to an SAP Fiori tile to make it visible in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.
- A. Catalog
- B. User
- C. Role
- D. Group
正解：A、D
質問 # 42
You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fiori front-end system (central hub). What transaction do you have to use to map a back-end system to one of those roles?
- A. /IWFND/MAINT_SERVICE
- B. PFCG
- C. /UI2/GW_SYS_ALIAS
- D. SM59
正解：B
質問 # 43
You want to check the custom ABAP codes in your system for security vulnerabilities and you want to use the SAP Code Vulnerability Analyzer to carry out these extended security checks. What need to be done for this purpose? Note: There are 2 correct answers to this question
- A. Run SAP Code Vulnerability Analyzer from the ABAP Test Cockpit
- B. Run SAP Code Vulnerability Analyzer from the transaction ST01
- C. Run the extended syntax check from the SLIN transaction
- D. Run the transaction ST12 to start the analysis
正解：A、C
質問 # 44
SAP GRC Access Control provides risk analysis for which of the following? Note: There are 2 correct answers to this question.
- A. Business Rule Framework
- B. Password Self-Service
- C. Access Request Management
- D. Business Role Management
正解：C、D
質問 # 45
What is the default authentication mechanism in the SAP Cloud Platform?
- A. SAP Logon Tickets
- B. Kerberos
- C. SAML
- D. X 509 Certificates
正解：C
質問 # 46
Where does SAP HANA store the values for the default Password Policy parameter? Note: there are 2 correct answers to this question.
- A. indexserver.ini
- B. global.ini
- C. attributes.ini
- D. nameservice.ini
正解：A、D
質問 # 47
......
SAP P_SECAUTH_21認証はグローバルに認識されており、SAPシステムを操作する専門家にとって貴重な資格です。システムセキュリティアーキテクチャに関する候補者の専門知識と、安全なSAPシステムを設計および実装する能力を示しています。この認定を保持している専門家は需要が高く、SAPセキュリティの分野でより高い給与を獲得し、キャリアを前進させることを期待できます。
SAP P_SECAUTH_21（認定技術プロフェッショナル-システムセキュリティアーキテクト）認定試験は、技術とサイバーセキュリティの分野で高く求められる認定資格です。この認定試験は、SAPシステムの管理とセキュリティを専門とするプロフェッショナルが、その専門的知識を証明するために設計されています。この試験はSAPによって実施され、グローバルに利用可能です。
厳密検証されたP_SECAUTH_21問題集と解答でP_SECAUTH_21問題集と正解付き：https://jp.fast2test.com/P_SECAUTH_21-premium-file.html
ベストSAP Certified Technology Professional学習ガイドP_SECAUTH_21試験：https://drive.google.com/open?id=1GxiZPsHVre3d6doXzA-s1nzED3XxLMqq