Online Access Free P_SECAUTH_21 Exam Questions

What must be included in a PFCG role for an end user on the Fiori front-end server to run an app?

• A.The S_RFC authorization object for the OData access
• B.The group assignment to display it in the Fiori Launchpad
• C.The catalog assignment for the start authorization
• D.The S_START authorization object for starting the OData service

The security administrator is troubleshooting authorization errors using transaction SU53.
While running transaction MM50, the user received the following error: "You are not authorized to use transaction MM01 ." The users position in the organization makes it inappropriate for them to have direct access to transaction MM01 because it creates a Segregation of Duties conflict. What would cause the system to run an authority check using object S_TCODE for transaction MM01 while running transaction MM50?

• A.The proposal value for the object S_TCODE in the SU24 data for transaction MM50 was incorrectly set to YES.
• B.The instance parameter auth/no_check_in_some_cases has been set to Y.
• C.The developer who wrote the program for transaction MM50 issues the ABAP command CALL TRANSACTION for transaction MM01 .
• D.MM01 was maintained as the CALLING transaction in table TCDCOUPLES with field OKFLAG value X.

What are the characteristics of the Audit Information System (AIS)? Note: There are 2 correct answers to this question.

• A.The report selection variables are configured during setup.
• B.It offers two types of audit reports: system and business.
• C.The roles are built from nodes in the Implementation Guide (IMG).
• D.It can be launched directly using transaction SECR.

SNC is configured in the production system. For emergency purposes, you want to allow certain accounts to be able to access the system with password logon. What do you need to set up for this purpose? Note: There are 2 correct answers to this question.

• A.Use 'Unsecure communication permitted' in SU01
• B.Maintain the user access control list in table USRACLEXT
• C.Use the profile parameter snc/only_encrypted_gui with value '0'
• D.Use the profile parameter snc/accept_insecure_gui with value 'U'

Which users should exist in client 000? Note: There are 2 correct answers to this question.

• A.SAP*
• B.EARLYWATCH
• C.TMSADM
• D.SAPCPIC