P_SECAUTH_21 Exam Questions
80 real P_SECAUTH_21 exam questions with expert-verified answers and explanations. Page 1 of 2.
- Question #1Master Data
For which reasons would you choose an "anonymous SSL Client PSE" setup? Note: There are 2 correct answers to this question.
SSL/TLSPSEcertificate authoritydata encryption - Question #2Organizational Structures
The security administrator is troubleshooting authorization errors using transaction SU53. While running transaction MM50, the user received the following error: "You are not autho...
S_TCODECALL TRANSACTIONSU53authorization check chain - Question #3Organizational Structures
What must be included in a PFCG role for an end user on the Fiori front-end server to run an app?
PFCG roleFiori Launchpadcatalog assignmentstart authorization - Question #4Master Data
Which communication methods does the SAP Fiori Launchpad use to retrieve business data? Note: There are 2 correct answers to this question.
Fiori LaunchpadODataInA protocolbusiness data retrieval - Question #5Organizational Structures
How do you secure the special user "SAP*" in AS ABAP? Note: There are 3 correct answers to this question.
SAP* userclient securitylogin profile parameteruser lockout - Question #6Master Data
You have created an RFC destination with a registered external RFC server program. When you try to connect to the external RFC destination you receive a "SERVER_NOT_REGISTERED" err...
RFC securityREGINFO filegateway securityexternal RFC server - Question #7Master Data
What are characteristics of SAP HANA Deployment Infrastructure (HDI) roles? Note: There are 2 correct answers to this question.
SAP HANA HDIHDI rolesdatabase proceduresversion control - Question #8Master Data
Which tasks would you perform to allow increased security for the SAP Web Dispatcher WebAdministration interface? Note: There are 2 correct answers to this question.
SAP Web DispatcherSSL/TLSICM profile parametersweb administration security - Question #9Master Data
What connection type is used for restricted users?
restricted usersHANA connection typeHTTP/Suser authentication - Question #10Organizational Structures
Which SAP product supports General Data Privacy Regulation (GDPR) compliance through mitigating control testing and validation?
GDPR complianceSAP Process Controlmitigating controlsGRC - Question #11Organizational Structures
Which tools can you use to troubleshoot an authorization issue with a Fiori application? Note: There are 2 correct answers to this question.
Fiori authorizationOData error log/IWFND/ERROR_LOGtroubleshooting - Question #12Organizational Structures
When re-configuring the user management engine (UME) of an AS Java system, what do you need to consider to change the data source from system database to an ABAP system successfull...
UMEAS Javauser management enginedata source migration - Question #13Master Data
You verified the password of the TMSADM user in your SAP landscape to be SAP defaulted. You want to reset this password by using the program TMS_UPDATE_PWD_OF_TMSADM. What steps wo...
TMSADMTMS password resetTransport Domain ControllerTP LOCKSYS - Question #14Organizational Structures
Which authorizations are required for an SAP Fiori Launchpad user? Note: There are 2 correct answers to this question.
Fiori Launchpad/UI2/INTEROPpage builder authorizationUI2 objects - Question #15Master Data
Under which group can you find the 'System Recommendations' tile in the Solution Manager launchpad?
Solution ManagerSystem RecommendationsTechnical Administrationlaunchpad tile - Question #16Organizational Structures
SAP GRC Access Control provides risk analysis for which of the following? Note: There are 2 correct answers to this question.
SAP GRCAccess Controlrisk analysisBusiness Role Management - Question #17Organizational Structures
The security administrator is troubleshooting authorization errors using transaction SU53. While running transaction MM50, the user received the following error: "You are not autho...
Segregation of DutiesSU24 check indicatorS_TCODEauthorization conflict resolution - Question #18Master Data
How does the SAP SSO wizard (transaction SNCWIZARD) simplify the SNC configuration process?
SNC configurationSNCWIZARDSSO wizardinstance profile parameters - Question #19Master Data
You want to check the custom ABAP codes in your system for security vulnerabilities and you want to use the SAP Code Vulnerability Analyzer to carry out these extended security che...
Code Vulnerability AnalyzerABAP securityABAP Test Cockpitsecurity code scan - Question #20User Management (ABAP & Java)
Based on your company guidelines you have set the password expiration to 60 days. Unfortunately, there is an RFC user on your SAP system who must not have a password change for 1 8...
security policypassword expirationSECPOLRFC user - Question #21SAP Authorization Concept (ABAP & Java)
Which features do SAP HANA SQL-based analytic privileges offer compared to classic XMLbased ones? Note: There are 2 correct answers to this question.
SAP HANAanalytic privilegesSQL-based privilegescomplex filtering - Question #22Security for SAP Cloud Solutions (Foundational)
How are security relevant objects related in the Cloud Foundry?Note: There are 2 correct answers to this question.
Cloud Foundryrole collectionsrole templatesscopes - Question #23SAP Authorization Concept (ABAP & Java)
An end user has indicated that they are getting an authorization error when attempting to call a Transaction Code (TCD). However, the TCD exists in their User Menu. What could be t...
authorization errortransaction codeSE93additional authorization checks - Question #24User Management (ABAP & Java)
Which users should exist in client 000? Note: There are 2 correct answers to this question.
client 000standard usersTMSADMSAP* - Question #25SAP Authorization Concept (ABAP & Java)
Who can revoke a runtime role from a user in the SAP HANA tenant database? Note: There are 2 correct answers to this question.
SAP HANAruntime rolesROLE ADMINtenant database - Question #26SAP Authorization Concept (ABAP & Java)
What authorization objects do we need to create job steps with external commands in a background job? Note: There are 2 correct answers to this question.
background jobsexternal commandsS_BTCH_EXTS_BTCH_ADM - Question #27System Hardening and Security Baselines
For which purpose do you use instance Secure Storage File System (SSFS) in an SAP HANA system? Note: There are 2 correct answers to this question.
SSFSSAP HANAdata volume encryptionroot key backup - Question #28Single Sign-On (SSO)
What are main characteristics of the Logon ticket throughout an SSO logon procedure? Note: There are 2 correct answers to this question.
logon ticketSSOuser-to-system communicationsession management - Question #29Security for SAP Cloud Solutions (Foundational)
How can you describe the hierarchical relationships between technical entities in the Cloud Foundry?
Cloud Foundryglobal accountsubaccountsaccount hierarchy - Question #30System Hardening and Security Baselines
What does the SAP Security Optimization Service provide? Note: There are 2 correct answers to this question.
Security Optimization Serviceconfiguration checkssecurity vulnerabilitiesnetwork configuration - Question #31Security Audit and Logging
Which of the following programs can be used to enable ALE Audit using the ALEAUD message type in the Customer Distribution Model and Partner Profiles? Note: There are 2 correct ans...
ALE auditALEAUD message typeRBDAPP01Customer Distribution Model - Question #32SAP Authorization Concept (ABAP & Java)
Which OData authorizations are required for a user to see business data in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.
OData authorizationSAP Fiorifront-end systemS/4HANA back-end - Question #33Transport Security (SNC/SSL)
SNC is configured in the production system. For emergency purposes, you want to allow certain accounts to be able to access the system with password logon. What do you need to set...
SNCpassword logon fallbacksnc/only_encrypted_guiemergency access - Question #34Security Audit and Logging
While performing an audit of changes to the system and client change options for your production SAP S/4HANA environment, you receive the following message in transaction SCC4: "No...
security audit logrsau/enableSCC4change logging - Question #35SAP Authorization Concept (ABAP & Java)
What are characteristics of the SAP_INTERNAL_HANA_SUPPORT catalog role? Note: There are 2 correct answers to this question.
SAP HANAcatalog roleSAP_INTERNAL_HANA_SUPPORTmetadata access - Question #36SAP Authorization Concept (ABAP & Java)
Which of the following functions can be used to troubleshoot authorization errors for ABAP CDS views with Authorization based on Access Control?
ABAP CDS viewsSTAUTHTRACEauthorization traceAccess Control - Question #37System Hardening and Security Baselines
What information constitutes an indirect connection to an individual, in the context of GDPR? Note: There are 3 correct answers to this question.
GDPRpersonal dataindirect identificationdata privacy - Question #38System Hardening and Security Baselines
Which of the 7 core principals of the General Data Privacy Regulation (GDPR) requires thorough documentation of all policies and controls that govern the collection and processing...
GDPRaccountability principledocumentationdata protection - Question #39SAP Authorization Concept (ABAP & Java)
You want to create a role to provide users the ability to display and change an HR table's content based on the country groupings. Which of the steps would you take to accomplish t...
S_TABU_LINHR table authorizationcountry groupingorganization criterion - Question #40System Hardening and Security Baselines
To which services package does SAP Security Optimization Services (SOS) belong?
SAP SOSSecurity Optimization ServicesSystem Administration Optimizationservice portfolio - Question #41SAP Authorization Concept (ABAP & Java)
How would you control access to ABAP RFC function modules? Note: There are 2 correct answers to this question.
RFC authorizationUCONS_RFCRFC callback whitelist - Question #42Transport Security (SNC/SSL)
You want to configure SNC in a newly-installed AS ABAP based SAP system. Besides running SNCWIZARD, what else do you need to perform for this scenario? Note: There are 2 correct an...
SNC configurationSNCWIZARDPSE managementAS ABAP - Question #43Security Audit and Logging
You are asked to set up controls to monitor sensitive objects (such as programs, user exits, and function modules) in a development system before they are transported to the qualit...
transport monitoringTMSTCRIsensitive objectsTMS - Question #44System Hardening and Security Baselines
What are some characteristics of an SAP HANA multitenant database system (MDC) running in high isolation mode? Note: There are 2 correct answers to this question.
HANA MDChigh isolation modetenant databaseOS user permissions - Question #45SAP Authorization Concept (ABAP & Java)
How can you protect a table containing sensitive data using the authorization object S_TABU_DIS?
S_TABU_DISS_TABU_NAMtable authorizationtable groups - Question #46System Hardening and Security Baselines
You want to carry out some preparatory work for running the SAP Security Optimization Selfservice on a customer system. Which of the following steps do you have to run on the manag...
SOS SelfserviceST-A/PI plug-inmanaged system setupSecurity Optimization - Question #47SAP Authorization Concept (ABAP & Java)
You have delimited a single role that is part of a composite role, and a user comparison for the composite role has been performed. You notice that the comparison did NOT remove th...
composite rolerole delimitationprofile assignment cleanupPRGN_DELETE_ACTIVITY_GROUPS - Question #48SAP Authorization Concept (ABAP & Java)
You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fior...
SAP Fioricentral hub deploymentsystem alias/UI2/GW_SYS_ALIAS - Question #49Security Audit and Logging
Which transaction or report can be used to audit profile assignments in an SU01 user master record? Note: There are 2 correct answers to this question.
user auditRSUSR002RSUSR100profile assignment - Question #50Security Audit and Logging
Where can you store Security Audit Log events? Note: There are 2 correct answers to this question.
Security Audit LogRSAU_BUF_DATAaudit log storageapplication server