SAP SAP Certified Application Associate C_GRCAC_13 Questions & Answers

• Question 1:

  You are creating a mitigating control.

  How do you specify on which system and client the control is executed?

  A. Assign one or more reports to the control from the desired system

  B. Assign a rule set for the desired system

  C. Assign an approver or monitor from the desired system

  D. Assign a risk definition to the control for the desired system

  Correct Answer: C

• Question 2:

  Which of the following activities can you do in Emergency Access Management (EAM)? Note: There are 2 correct answers to this question.

  A. Log on to the Firefighter ID directly with a password

  B. Maintain EAM master data in the back-end system

  C. Display a log file of performed activities

  D. Perform tasks outside of the normal responsibilities

  Correct Answer: CD

• Question 3:

  You want to use the User Analysis Dashboard to evaluate Segregation of Duties violations after your most recent batch risk analysis has completed. However, when reviewing the data you realize that the dashboard does not display all of your current users.

  What do you need do to correct the problem?

  A. Execute the Repository Object Sync and then re-execute the user level batch risk analysis.

  B. Execute the Authorization Synch and then re-execute the user level batch risk analysis.

  C. Execute the Action Usage Sync followed by the Role Usage Sync and then re-execute the user level batch risk analysis.

  D. Execute the user level batch risk analysis again and remove any exclude objects.

  Correct Answer: A

• Question 4:

  Which of the following tasks can you complete using the Role Certification process? Note: There are 2 correct answers to this question.

  A. Provide audit trail for role review

  B. Periodic review of user's role assignment

  C. Periodic review of role content

  D. Periodic review of user segregation of duties

  Correct Answer: AC

• Question 5:

  You want to restrict a user by specific organizational levels by creating a derived role. How would you complete this task using Business Role Management?

  A. Assign an organization

  B. Assign a functional area

  C. Assign a business process

  D. Assign an organizational value map

  Correct Answer: D

• Question 6:

  You wish to synchronize data from transaction SU24 in the SAP S/4HANA production system into SAP Access Control for use in building a rule set. What is the correct synchronization job schedule for completing this task?

  A. It is not possible to synchronize SU24 data from a production system

  B. Repository Object Sync followed by an Action Usage Sync

  C. Action Usage Sync followed by Role Usage Sync

  D. Authorization Sync

  Correct Answer: D

• Question 7:

  Business Role Management provides the functionality to improve the role management process. Which of the following capabilities does it offer? Note: There are 2 correct answers to this question.

  A. Replacement of the PFCG role management transaction

  B. Management of role definition transports

  C. Enforcement of consistency in naming conventions

  D. Identification of duplicate roles

  Correct Answer: CD

• Question 8:

  You want to create an Initiator rule in BRFplus for the standard access request. Which structures provide the attributes that you can use to define your rule? Note: There are 2 correct answers to this question.

  A. GRAC_S_REQUEST_RULE_LINE

  B. GRAC_S_REQUEST_RULE_HEADER

  C. GRAC_DT_REQUEST_FIELD_LABELS

  D. GRAC_ACCESS_REQUEST_APPL_MAPPING

  Correct Answer: AB

• Question 9:

  Which of the following rule sets are delivered standard in SAP Access Control 12.0? Note: There are 3 correct answers to this question.

  A. GRAC_RA_RULESET_JDE

  B. GRAC_RA_RULESET_S4HANA_ALL

  C. GRAC_RA_RULESET_S4HANA_NWBC

  D. GRAC_RA_RULESET_COMMON

  E. GRAC_RA_RULESET_JAVA

  Correct Answer: ABD

• Question 10:

  You want to use Access Request Management to provision access in a target system.

  Which of the following actions are required before access can be provisioned using an access request?

  Note: There are 2 correct answers to this question.

  A. Import role definitions in Business Role Management

  B. Maintain System Provisioning Configuration

  C. Maintain Global Provisioning Configuration

  D. Maintain custom End User Personalization settings

  Correct Answer: BC