• ホーム
  • ブログ
  • 最高でP_SECAUTH_21最新の2023問題集は100%試験合格率保証付きます [Q29-Q54]

最高でP_SECAUTH_21最新の2023問題集は100%試験合格率保証付きます [Q29-Q54]

Share

最高でP_SECAUTH_21最新の2023問題集は100%試験合格率保証付きます

ベストな方法はSAP P_SECAUTH_21練習試験問題集

質問 # 29
Which measures should we implement to protect the PSEs? Note: There are 2 correct answers to this question

  • A. Review the usage of the S_ADMI_FCD object
  • B. Review the usage of the S_DATASET object
  • C. Encyrpt the files with the transaction SNCO
  • D. Restrict access to the opposing system users

正解：B、D


質問 # 30
Which features does SAProuter provide? Note: There are 2 correct answers to this question.

  • A. Password-protected connections
  • B. Load-balanced RFC connections
  • C. Filtered and logged network connections
  • D. HTTP conversion into HTTPS connections

正解：A、C

解説：
Explanation
SAProuter is a software application that acts as an intermediate station between SAP systems and external networks. It provides features such as filtered and logged network connections based on access control lists, password-protected connections using Secure Network Communication (SNC), and encrypted connections using Secure Socket Layer (SSL). References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_


質問 # 31
To enable access between tenant databases, what do you need to do in an SAP HANA system for multitenant database containers? Note: There are 3 correct answers to this question.

  • A. The bi-directional communication channel must be in the allow list.
  • B. The user in the source system must have sufficient privileges in the target database.
  • C. The cross-tenant database communication must be explicitly activated.
  • D. The user in the source system must be associated with a user in the target database.
  • E. The INIFILE ADMIN system privilege must be assigned.

正解：A、B、C

解説：
Explanation
To enable access between tenant databases in an SAP HANA system for multitenant database containers, you need to do these steps: activate the cross-tenant database communication parameter in the global.ini file, add the bi-directional communication channel to the allow list parameter in the global.ini file, and grant the user in the source system the required privileges in the target database using a remote source object. References:
https://help.sap.com/viewer/6b94445c94ae495c83a19646e7c3fd56/2.0.05/en-US/20d5f6af75191014b47cf39247
https://help.sap.com/viewer/6b94445c94ae495c83a19646e7c3fd56/2.0.05/en-US/20d5f6af75191014b47cf39247


質問 # 32
The security administrator is troubleshooting authorization errors using transaction SU53. While running transaction MM50, the user received the following error.
"You are not authorized to use transaction MM01"
The user's position in the organization makes it inappropriate for them to have direct access to transaction MM01 because it creates a Segregation of Duties conflict.
How can the security administrator resolve the issue and still provide the user with the needed access to MM50?

  • A. Remove transaction MM01 as a CALLING transaction from table TCDCOUPLES.
  • B. Set the check indicator (for the transaction authorization called by the MM01 transaction) to NO, using transaction SE97 for transaction MM50.
  • C. Set the check indicator value for object S_TCODE in the SU24 data for transaction MM01 to Do Not Check.
  • D. Set the value form instance parameter auth/no_check_in_some_cases to N.

正解：B


質問 # 33
What is the User Management Engine (UME) property "connect on pooling" used for? Note: There are 2 correct answers to this question.

  • A. To avoid unauthorized request to the LDAP directory server
  • B. To create a new connect on to the LDAP directory server for each request
  • C. To improve performance of requests to the LDAP directory server
  • D. To share server resources among requesting LDAP clients

正解：C、D


質問 # 34
You want to create an SAP Fiori app for multiple users and multiple back-end systems. To support this, you create different roles for the different back-end systems in the SAP Fiori front-end system (central hub). What transaction do you have to use to map a back-end system to one of those roles?

  • A. PFCG
  • B. /UI2/GW_SYS_ALIAS
  • C. SM59
  • D. /IWFND/MAINT_SERVICE

正解：A


質問 # 35
How do you check when and by whom profiles were assigned or deleted?

  • A. Run report RSUSR008_009_NEW with appropriate filters
  • B. Run report RSUSR100 with appropriate filters
  • C. Check security audit log using transact on SM20
  • D. Check system trace using transaction ST01

正解：B


質問 # 36
You want to allow some of your colleagues to use the SAP GUI for Java to connect directly to your SAP back-end system from a public internet connection without having to set up a VPN connection first. Which of the following SAP solutions is suited for this purpose?

  • A. SAP Cloud Connector
  • B. SAP router
  • C. SAP NetWeaver Gateway
  • D. SAP Web Dispatcher

正解：A


質問 # 37
You are using the SAP Web Dispatcher for load-balancing purposes. Which actions are performed by the SAP Web Dispatcher in this scenario? Note: There are 2 correct answers to this question.

  • A. Validates the user credentials
  • B. Uses logon groups to determine how to direct requests
  • C. Decrypts the HTTPS request and then selects the server
  • D. Checks the current state of the message server

正解：B、D

解説：
Explanation
The SAP Web Dispatcher performs these actions when it is used for load-balancing purposes. It uses logon groups to determine how to direct requests to the appropriate application servers based on the user's role and preferences. It also checks the current state of the message server to obtain information about the load and availability of the application servers. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_


質問 # 38
SNC is configured in the production system. For emergency purposes, you want to allow certain accounts to be able to access the system with password logon. What do you need to set up for this purpose? Note: There are 2 correct answers to this question.

  • A. Use the 'Unsecure communication permitted option' In SU01 for specific users
  • B. Use profile parameter SNC/ONLY_ENCRYPTED_GUI with value 'O'
  • C. Maintain the user access control list in table USRACLEXT
  • D. Use profile parameter SNC/ACCEPT_ INSECURE_GUI with value 'U'

正解：A、D


質問 # 39
How do you secure the special user "SAP*" in AS ABAP? Note: There are 3 correct answers to this question.

  • A. Lock and expire the user in all clients
  • B. Remove all authorizations from the user
  • C. Set profile parameter login/no_automatic_user_sapstar to 0
  • D. Set profile parameter login/no_automatic_user_sapstar to 1
  • E. Lock and expire the user in all clients except 000

正解：A、B、D

解説：
Explanation
These are some of the tasks that you would perform to secure the special user "SAP*" in AS ABAP. The user
"SAP*" is a default user that can be used to log on to any client with a predefined password if no other users exist or if all users are locked. To prevent unauthorized access using this user, you should remove all authorizations from it, lock and expire it in all clients, and set the profile parameter login/no_automatic_user_sapstar to 1, which disables the automatic logon feature for this user. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_


質問 # 40
A security consultant has activated a trace via ST01 and is analyzing the authorization error with Return Code 12. What does the Return Code 12 signify?

  • A. "Too many parameters for authorization checks"
  • B. "No authorizations and does NOT have authorization object in their buffer"
  • C. "Objects not contained in User Buffer"
  • D. "No authorizations but does have authorization object in their buffer"

正解：B


質問 # 41
How are security relevant objects related in the Cloud Foundry?Note: There are 2 correct answers to this question.

  • A. Role Templates have 1 or many scopes.
  • B. Role Collections have 0 or many role templates.
  • C. Role Templates have 0 or many attributes.
  • D. Role Collections have 0 or many roles.

正解：B、D

解説：
Explanation
These are some of the ways that security relevant objects are related in the Cloud Foundry. Cloud Foundry is a platform-as-a-service (PaaS) that enables developers to deploy and run cloud-native applications using various services and frameworks. Cloud Foundry uses different security relevant objects to manage user access and authorization, such as role collections, roles, role templates, and scopes. Role collections are groups of roles that can be assigned to users or groups. Roles are sets of permissions that define what actions users can perform on resources or services. Role templates are predefined roles that can be reused for different role collections or services. Scopes are strings that represent specific permissions or attributes of a user or service.
References:
https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/9e1bf57130ef466e8017eab298


質問 # 42
Which of the objects do you assign to an SAP Fiori tile to make it visible in the SAP Fiori Launchpad? Note: There are 2 correct answers to this question.

  • A. User
  • B. Group
  • C. Role
  • D. Catalog

正解：B、D


質問 # 43
What does the SAP Security Optimization Service provide? Note: There are 2 correct answers to this question.

  • A. Configuration checks of SAP systems
  • B. Analysis of the network configuration
  • C. Analysis of the security vulnerabilities within an SAP landscape
  • D. Results containing the list of patches that have to be applied.

正解：A、D


質問 # 44
What does the SAP Security Optimization Service provide? Note: There are 2 correct answers to this question.

  • A. Analysis of the network configuration
  • B. Configuration checks of SAP systems
  • C. Analysis of the security vulnerabilities within an SAP landscape
  • D. Results containing the list of patches that have to be applied

正解：A、B

解説：
Explanation
These are some of the things that the SAP Security Optimization Service provides. SAP Security Optimization Service is a service that enables you to assess and improve the security level of your SAP systems and landscapes based on best practices and recommendations from SAP experts. The service provides configuration checks of SAP systems, which analyze various parameters and settings related to security aspects, such as passwords, authorizations, encryption, or logging. The service also provides analysis of the network configuration, which evaluates the network topology and communication channels between SAP systems and components. References: https://support.sap.com/en/security/security-optim


質問 # 45
You have created an RFC destination with a registered external RFC server program. When you try to connect to the external RFC destination you receive a "SERVER_NOT_REGISTERED" error message. Note: There are 2 correct answers to this question How can you resolve the issue?

  • A. Maintain the entries in the REGINFO file
  • B. Maintain the entries in the SECINFO file
  • C. Maintain the profile parameter gw/acl_mode = 0
  • D. Maintain the access list in the transaction SMMS

正解：A、D


質問 # 46
What are the characteristics of HTTP security session management? Note: There are 3 correct answers to this question.

  • A. Checks the logon credentials again for every request.
  • B. Starts security sessions with a short user-based expiration time
  • C. Refers to the session context through the session identifier
  • D. Deletes security sessions at logoff
  • E. Creates security sessions at logon

正解：B、C、E

解説：
Explanation
These are some of the characteristics of HTTP security session management in SAP systems. HTTP security session management creates security sessions at logon that store information about the user's identity and authorizations in a session context on the server side. The security sessions start with a short user-based expiration time that can be extended by user activity or terminated by logoff or timeout. The security sessions refer to the session context through a session identifier that is passed between the client and the server using cookies or URL parameters. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_


質問 # 47
Who can revoke a runtime role from a user in the SAP HANA tenant database? Note: There are 2 correct answers to this question. Note: there are 2 correct answers to this question.

  • A. The DBACOCKPIT user
  • B. Anyone with "ROLE ADMIN"
  • C. The owner of the HDI container
  • D. The grating user

正解：B、D


質問 # 48
Which tools can you use to troubleshoot an authorization issue with a Fiori application? Note: There are 2 correct answers to this question

  • A. /UI2/FLC
  • B. /IWFND/ERROR_LOG
  • C. /IWBEP/ERROR_LOG
  • D. /UI2/GW_APPS_LOG

正解：B、D


質問 # 49
A user reports an issue with data not showing up in the visualization of the SAP Fiori tiles. You want to verify the target mapping. At what level are you going to check the target mapping?

  • A. O At the group level in the SAP Fiori front-end server
  • B. O At the group level in the SAP Fiori Launchpad
  • C. O At the application level in the Web IDE
  • D. O At the catalog level in the SAP Fiori front-end server

正解：D


質問 # 50
How can you protect a table containing sensitive data using the authorization object S_TABU_DIS?

  • A. The tables containing sensitive data must be associated with table groups in the TBRG table.
  • B. Authorization table groups containing tables with sensitive data must be defined in the TDDAT table and these must be omitted for anyone who does not need access to these tables.
  • C. The DICBERCLS field of the authorization object must enumerate all table names of the tables containing sensitive data.
  • D. The tables containing sensitive data must be named using the authorization object S_TABU_NAM for all responsible administrators. The DICBERCLS fields of the S_TABU_DIS object can then be filled with *.

正解：D

解説：
Explanation
This is one of the ways that you can protect a table containing sensitive data using the authorization object S_TABU_DIS. S_TABU_DIS is an authorization object that controls access to tables based on authorization groups, which are groups of tables that share the same access restrictions. The DICBERCLS field of this authorization object contains the name of the authorization group for a table or a range of tables. To protect a table containing sensitive data using this authorization object, you must assign it to an authorization group and enumerate all table names of the tables containing sensitive data in the DICBERCLS field. References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?


質問 # 51
How is the role concept applied for modeled authorizations based on Core Data Services (CDS) views?

  • A. CDS roles are defined for CDS views in Object Navigator
  • B. CDS roles are mapped to the CDS view in the access rules
  • C. CDS roles are defined for the CDS views and implicitly applied to each user
  • D. CDS roles are defined in the WHERE clause when calling a CDS view in Open SQL

正解：B


質問 # 52
What are some characteristics of an SAP HANA multitenant database system (MDC) running in high isolation mode? Note: There are 2 correct answers to this question.

  • A. All tenant databases will share the operating system user and group.
  • B. All tenant-specific file and directory permissions are managed by the SAP HANA system
  • C. The <sid>adm user can access the tenant-specific configuration and trace files.
  • D. All tenant-specific permissions to access files and directories are revoked from the
    <sid>adm user.

正解：B、D

解説：
Explanation
These are some of the characteristics of an SAP HANA multitenant database system (MDC) running in high isolation mode. MDC is a feature that allows you to run multiple databases on one SAP HANA system, each with its own users, catalog, repository, data, and services. High isolation mode is a mode that provides enhanced security and isolation for tenant databases by restricting access to files and directories at the operating system level. In high isolation mode, all tenant-specific permissions to access files and directories are revoked from the <sid>adm user, which is the operating system user for SAP HANA administration. All tenant-specific file and directory permissions are managed by the SAP HANA system using internal users and groups. References: https://help.sap.com/viewer/6b94445c94ae495c83a1


質問 # 53
What is the SAP Best Practice to delete a security SAP role from the landscape running SAP systems?

  • A. Delete the SAP role in all clients in all systems using Profile Generator
  • B. Transport the SAP role and delete the role using Profile Generator
  • C. Delete the SAP role in all clients using Profile Generator
  • D. Delete the SAP role using Profile Generator, and then put it in the transport

正解：D

解説：
Explanation
The SAP Best Practice to delete a security SAP role from the landscape running SAP systems is to delete the SAP role using Profile Generator (transaction PFCG), and then put it in a transport request that can be moved across systems using Change and Transport System (CTS). This way, you can ensure that the role is deleted consistently and completely from all systems. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US


質問 # 54
......

Certified Technology Professional - System Security Architect認証サンプル問題と練習試験：https://www.passtest.jp/SAP/P_SECAUTH_21-shiken.html

リアルな試験問題と解答でSAP P_SECAUTH_21問題集が待ってます：https://drive.google.com/open?id=1Wr2bT6Nwcwt123TKa2H3qWop2CmAGOpn

関するブログ

もっと
P_SECAUTH_21 無料問題集