SAP C_GRCAC_10 Online Practice Questions and Exam Preparation

SAP C_GRCAC_10 Online Questions & Answers

• Question 11:

  What must you define in order to analyze user access for a critical transaction?

  A. A critical mitigation control
  B. A critical role
  C. A critical profile
  D. A critical access rule
  D. A critical access rule

• Question 12:

  Which of the following objects can you customize for MSMP workflows? (Choose two)

  A. Multiple initiator rule IDs for one process ID
  B. Multiple paths for one process ID
  C. Multiple agent IDs for one stage
  D. Multiple notification templates for one process ID
  B. Multiple paths for one process ID
  D. Multiple notification templates for one process ID

• Question 13:

  Which of the following tasks must you perform if you want to enable a user to log on to a Firefighter ID?

  A. Schedule the Firefighter Workflow Sync job periodically.
  B. Run the Firefighter Log Sync job.
  C. Set up the Firefighter log configuration parameters.
  D. Create a reason code.
  D. Create a reason code.

• Question 14:

  Your customer wants a manager to fulfill both MSMP workflow agent purposes. How do you configure this?

  A. Maintain the manager agent twice, once for each purpose, using the same agent ID.
  B. Maintain the manager agent once and assign both purposes to it without using an agent ID.
  C. Maintain the manager agent twice, once for each purpose, using different agent IDs.
  D. Maintain the manager agent once and assign both purposes to it using the same agent ID.
  C. Maintain the manager agent twice, once for each purpose, using different agent IDs.

• Question 15:

  What is the purpose of role mining?

  A. To consolidate roles by taking actions after running comparisons
  B. To compare authorizations by merging roles during the back-end synchronization
  C. To consolidate authorizations by merging roles in one step
  D. To compare roles by running back-end synchronizations
  A. To consolidate roles by taking actions after running comparisons

• Question 16:

  Which of the following jobs do you have to schedule to collect Firefighter session information?

  A. GRAC_SPM_LOG_ARCHIVING
  B. GRAC_SPM_WORKFLOW_SYNC
  C. GRAC_SPM_LOG_SYNC_UPDATE
  D. GRAC_SPM_CLEANUP
  C. GRAC_SPM_LOG_SYNC_UPDATE

• Question 17:

  For which of the following scenarios would you activate the end-user logon function?

  A. A user has no access to the Access Control system and needs to submit a request for access.
  B. A user has been promoted to manager and needs to log on to the Access Control system to approve a pending request.
  C. A user has successfully completed validation testing.
  D. A user has signed a non-disclosure agreement (NDA).
  A. A user has no access to the Access Control system and needs to submit a request for access.

• Question 18:

  Your customer has created a custom transaction code ZFB10N by copying transaction FB10 and implementing a user exit. How can you incorporate the customer enhancement into the global rule set so that it will be available for Risk Analysis?

  A. Update security permissions in all relevant authorization objects, maintain the custom program name in all relevant functions, and generate the access rules.
  B. Update all relevant functions with ZFB10N, maintain the permission values for all relevant authorization objects, and generate the access rules.
  C. Update all relevant functions with ZFB10N, maintain the permission values in the relevant access risk, and generate the global rule set.
  D. Update the relevant access risk with ZFB10N, maintain access rules in all relevant functions, and generate the global rule set.
  B. Update all relevant functions with ZFB10N, maintain the permission values for all relevant authorization objects, and generate the access rules.

• Question 19:

  Which connection type do you use for the RFC destination to establish a connection between GRC and an SAP ERP back-end system?

  A. Logical connection
  B. TCP/IP connection
  C. ABAP connection
  D. ABAP driver connection
  C. ABAP connection

• Question 20:

  Which of the following actions in Business Role Management require a connection to a target system? (Choose three)

  A. Generation
  B. Authorization maintenance (actions and permissions)
  C. Risk analysis
  D. Approval
  E. Testing
  A. Generation
  B. Authorization maintenance (actions and permissions)
  C. Risk analysis