[2023年11月17日] 最新更新されたのはP_SECAUTH_21試験問題2023年更新
無料更新されたSAP P_SECAUTH_21テストエンジン問題には80問題と解答
SAP P-SECAUTH-21（認定テクノロジープロフェッショナル-システムセキュリティアーキテクト）認定試験は、SAPシステムのセキュリティを担当するITプロフェッショナルを対象としています。この認定試験は、SAPシステムのセキュリティアーキテクチャー、設計、実装に関する候補者の知識とスキルを試験します。この試験は、安全なSAPシステムの計画、実装、および維持に関与する技術プロフェッショナルやコンサルタントを対象としています。
質問 # 41
SNC is configured in the production system. For emergency purposes, you want to allow certain accounts to be able to access the system with password logon. What do you need to set up for this purpose? Note: There are 2 correct answers to this question.
- A. Use 'Unsecure communication permitted' in SU01
- B. Maintain the user access control list in table USRACLEXT
- C. Use the profile parameter snc/only_encrypted_gui with value '0'
- D. Use the profile parameter snc/accept_insecure_gui with value 'U'
正解：A、C
解説：
Explanation
These are some of the things that you need to set up for this purpose of allowing certain accounts to be able to access the system with password logon even when SNC is configured in the production system. SNC (Secure Network Communication) is a feature that enables secure and encrypted communication between SAP systems and components using certificates and keys. SU01 is a transaction that allows you to create and maintain user master records and their properties. One of the properties is the 'Unsecure communication permitted' flag, which determines whether a user can log on to the system without SNC protection. The profile parameter snc/only_encrypted_gui is a parameter that controls whether only SNC-protected connections are allowed from SAP GUI clients. If the parameter is set to '0', both SNC-protected and unprotected connections are allowed. References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?
質問 # 42
For which purpose do you use instance Secure Storage File System (SSFS) in an SAP HANA system? Note: There are 2 correct answers to this question.
- A. To protect the password of the root key backup
- B. To store root keys for data volume encryption
- C. To store the secure single sign-on configuration
- D. To protect the X.509 public key infrastructure certificates
正解：A、B
質問 # 43
You are running an SAP HANA database in a multi database container (MDC) mode with a single tenant configured. The global_auditing_state parameter has been set to "true" on the global.ini.After restarting the system and tenant databases, the tenant did not come up. When checking the cause, it was discovered that a tenant configuration parameter has been changed. The audit logging did NOT show any events.What could be the reason for this? Note: There are 2 correct answers to this question.
- A. The audit level was set to INFO
- B. The configuration parameter was changed from the OS level
- C. The system was offline when the changes were done
- D. The global_auditing_state parameter on the nameserver.ini file needs to be activated
正解：B、D
質問 # 44
Which platform services are available in the Cloud Foundry? Note: There are 2 correct answers to this question
- A. Data Quality
- B. Analytics
- C. Commerce
- D. Integration
正解：B、D
質問 # 45
You want to configure SNC with X.509 certificates using Common CryptoLib as the cryptographic library in a new installed AS ABAP system. Besides running SNCWIZARD, what do you need to set up for this scenario? Note: There are 2 correct answers to this question.
- A. Maintain the relevant CCL/SNC/' profile parameters
- B. Set the CCL SNC parameters using sapgenpse
- C. Set the environment variable CCL_ PROFILE to SECUDIR
- D. Set the environment variable CCL_ PROFILE to the default profile file path
正解：A、D
質問 # 46
You want to carry out some preparatory work for running the SAP Security Optimization Selfservice on a customer system. Which of the following steps do you have to run on the managed systems? Note: There are 2 correct answers to this question.
- A. Install the ST-A/PI plug-in
- B. Grant operating system access
- C. Configure specific authorizations
- D. Configure Secure Network Communications
正解：A、C
解説：
Explanation
These are some of the steps that you have to run on the managed systems to prepare for running the SAP Security Optimization Self-service on a customer system. The SAP Security Optimization Self-service is a service that allows you to perform security checks on your SAP systems using predefined questionnaires and automated analysis tools. The service requires specific authorizations on the managed systems, such as RFC authorizations or Security Audit Log authorizations, which you have to configure using PFCG transaction or RZ10 transaction respectively. The service also requires the ST-A/PI plug-in on the managed systems, which is a plug-in that provides various functions and tools for service delivery, such as data collection or remote analysis. References: https://support.sap.com/en/security/security-optimization-services.html
https://support.sap.com/en/security/security-optimization-services.html
質問 # 47
Where can we store the Security Audit Log events? Note: There are 2 correct answers to this question.
- A. In the file system of the application servers
- B. In the database table RSAU_BUF_DATA
- C. In a central fi e system
- D. In the SAP Solution Manager system
正解：A、D
質問 # 48
Which features do SAP HANA SQL-based analytic privileges offer compared to classic XMLbased ones?
Note: There are 2 correct answers to this question.
- A. Complex filtering
- B. Transportable
- C. Control of read-only SAP HANA procedures
- D. Control of read-only access to SQL views
正解：A、D
解説：
Explanation
These are some of the features that SAP HANA SQL-based analytic privileges offer compared to classic XML-based ones. Analytic privileges are privileges that restrict access to data in analytical views or calculation views based on certain conditions or filters. SAP HANA supports two types of analytic privileges:
SQL-based and XML-based. SQL-based analytic privileges are defined using SQL statements and stored as database objects. XML-based analytic privileges are defined using XML files and stored as repository objects.
SQL-based analytic privileges offer more features and flexibility than XML-based ones, such as control of read-only access to SQL views, which prevents users from modifying data in the views, and complex filtering, which allows users to define multiple filters with different operators and expressions. References:
https://help.sap.com/viewer/6b94445c94ae495c83a19646e7c3fd56/2.0.05/en-US/fafcbcf9d9101014b3d9a08ce33
質問 # 49
Which of the following user types can be used to log on interactively? Note: There are 2 correct answers to this question.
- A. Service
- B. Dialog
- C. System
- D. Communication
正解：B、D
解説：
Explanation
Dialog and Communication are two user types that can be used to log on interactively to an SAP system.
Dialog users are normal users who can access the system using a graphical user interface (GUI) or a web browser. Communication users are users who access the system using communication protocols, such as RFC or HTTP. References:
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
https://help.sap.com/doc/saphelp_nw70ehp3/7.03/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?no_
質問 # 50
What is the default authentication mechanism in the SAP Cloud Platform?
- A. X 509 Certificates
- B. SAML
- C. Kerberos
- D. SAP Logon Tickets
正解：B
質問 # 51
The SSO authentication using X.509 client certificates is configured. Users complain that they can't log in to the back-end system. The trace file shows the following error message: "HTTP request [2/5/9] Reject untrusted forwarded certificate". What is missing in the configuration? Note: There are 2 correct answers to this question.
- A. On the back-end, the profile parameter icm/HTTPS/verify client must NOT be set to 0
- B. The web dispatcher's SAPSSLC.PSE certificate must be added to the trusted reverse proxies list in icm/trusted_reverse_proxy_<xx>
- C. On the web-dispatcher, the profile parameter icm/HTTPS/verify_client must be set to 0
- D. On the web-dispatcher, the SAPSSLS.pse must be signed by a trusted certification authority
正解：A、D
質問 # 52
A system user created a User1 and a schema on the HANA database with some dat a. User2 is developing modelling views and requires access to objects in User1's schema. What needs to be done?
- A. System user should grant User2 with SELECT privilege to User 1schema
- B. User2 needs to be granted with the same roles like User1
- C. ROLE ADMIN needs to be granted to User2
- D. User1 should grant _SYS_REPO with SELECT WITH GRANT privilege
正解：A
質問 # 53
You have delimited a single role which is part of a composite role, and a user comparison for the composite role has been performed. You notice that the comparison did NOT remove the profile assignments for that single role. What program would you run to resolve this situation?
- A. 0 PRGN_DELETE_ACT IVITY_GROUPS
- B. 0 PRGN_COMPRESS_TIMES
- C. 0PRGN_COMPARE_ROLE_MENU
- D. 0 PRGN_MERGE_PREVIEW
正解：B
質問 # 54
Currently, transports into your SAP system are not scanned automatically. To avoid the import of non-secure programs, you have implemented the strategy to set up a virus scanner using a script to automatically scan for the malicious programs. What is the valid fi e format where data files are first converted into and then checked by a virus scanner?
- A. Plain text
- B. SAP compressed
- C. 0csv
- D. XML
正解：D
質問 # 55
Which SAP tool provides functions to support Data Destruction, Business Rules Maintenance, and Processing of Audit Areas?
- A. SAP Information Retrieval Framework
- B. SAP Business Rule Framework Plus
- C. SAP Data Controller Rule Framework
- D. SAP Information Lifecycle Management
正解：D
解説：
Explanation
SAP Information Lifecycle Management (SAP ILM) provides functions to support Data Destruction, Business Rules Maintenance, and Processing of Audit Areas. SAP ILM enables you to manage the retention and destruction of data according to legal and business requirements, as well as to archive and delete data securely and compliantly. References:
https://help.sap.com/viewer/product/SAP_INFORMATION_LIFECYCLE_MANAGEMENT_ILM_/200/en-US
https://help.sap.com/viewer/product/SAP_INFORMATION_LIFECYCLE_MANAGEMENT_ILM_/200/en-US
質問 # 56
Which of the following functions can be used to troubleshoot authorization errors for ABAP CDS views with Authorization based on Access Control?
- A. ABAP TRACE
- B. E2E TRACE ANALYSIS
- C. STAUTHTRACE
- D. REPORT RSUSR008_009
正解：C
解説：
Explanation
This is one of the functions that can be used to troubleshoot authorization errors for ABAP CDS views with Authorization based on Access Control (ABAC). ABAP CDS (Core Data Services) views are views that define data models and queries using SQL statements and annotations in ABAP Dictionary. ABAC is a feature that allows you to restrict access to data in ABAP CDS views based on certain conditions or filters using DCL (Data Control Language) statements and expressions. STAUTHTRACE is a transaction that allows you to activate and display authorization traces for users or sessions, which show detailed information about authorization checks and results for ABAP CDS views with ABAC. References:
https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/c8/e8d53d35fb11d182b90000e829fbfe/content.htm?
質問 # 57
How can you protect a table containing sensitive data using the authorization object S_TABU_DIS?
- A. Authorization table groups containing tables with sensitive data must be defined in table TDDAT and these must be omitted for all employees who do not need access to these tables
- B. The tables containing sensitive data must be associated with table groups in table TBRG.
- C. The tables containing sensitive data must be named using the authorization object S_TA BU_NAM for all responsible administrator employees. The fields DICBERCLS of the object S_TABU_DIS can
- D. The field DICBERCLS of the authorization object must enumerate all table names of the tables containing sensitive data.
正解：A
解説：
then be filled with *.
質問 # 58
What are characteristics of SAP HANA Deployment Infrastructure (HDI) roles? Note: there are 2 correct answers to this question.
- A. They are granted using database procedures
- B. They are transportable between systems
- C. They are managed by the native HDI version control.
- D. They are owned by the user who creates them
正解：A、C
質問 # 59
......
SAP P_SECAUTH_21試験では、SAPセキュリティと認可の概念、SAPセキュリティアーキテクチャ、SAPセキュリティ実装など、幅広いトピックをカバーしています。この試験は、セキュリティリスクを特定して軽減する候補者の能力をテストするように設計されています。試験は2つのセクションに分かれており、それぞれが180分の時間制限があります。
SAP P-SECAUTH-21 試験は、システムセキュリティアーキテクチャに特化したプロフェッショナルを対象とした認定プログラムです。この認定は、SAPソリューションに深い理解を持ち、SAPシステムのセキュリティと整合性を確保する専門知識を証明したい個人を対象としています。また、彼らの組織で安全なSAPソリューションを実装し、管理する責任を持つITプロフェッショナルにも理想的です。
100%の合格率を試そう！更新されたのはP_SECAUTH_21試験問題 [2023年更新]：https://www.passtest.jp/SAP/P_SECAUTH_21-shiken.html
ベストな問題集を使おうSAP Certified Technology Professional P_SECAUTH_21専門試験問題：https://drive.google.com/open?id=1cg3QFJLPhDSE1BtES3NNXNmNdAV-McJU