SAP C_SEC_2405 Online Practice Questions and Exam Preparation

SAP C_SEC_2405 Online Questions & Answers

• Question 31:

  When performing a comparison from the imparting role, what happens to the organizational level field values in the derived role? Note: There are 2correct answers to this question.

  A. Data for organizational levels is always transferred when authorization data for the derived role is modified.
  B. Data for organizational levels that have already been maintained in the derived role is NOT overwritten.
  C. Data for organizational levels is transferred only when authorization data for the derived role is first modified.
  D. Data for organizational levels that have already been maintained in the derived role is overwritten.
  B. Data for organizational levels that have already been maintained in the derived role is NOT overwritten.
  C. Data for organizational levels is transferred only when authorization data for the derived role is first modified.

• Question 32:

  Which log types are available in the Administration Console of Cloud Identity Services? Note: There are 2correct answers to this question.

  A. Change logs
  B. Troubleshooting logs
  C. Performance logs
  D. Usage logs
  A. Change logs
  D. Usage logs

• Question 33:

  Which SU01 user types are NOT enabled for interaction? Note: There are 2correct answers to this question.

  A. Service
  B. System
  C. Dialog
  D. Communications Data
  A. Service
  B. System

• Question 34:

  What must you do before you can use transaction PFCG? Note: There are 2correct answers to this question.

  A. Fill tables USOBT and USOBX with the SAP-delivered authorization default values.
  B. Set the system profile parameter auth/no_check_in_some_cases to Y.
  C. Fill tables USOBT_C and USOBX_C with the SAP-delivered authorization default values.
  D. Set the system profile parameter auth/no_check_in_some_cases to N.
  A. Fill tables USOBT and USOBX with the SAP-delivered authorization default values.
  B. Set the system profile parameter auth/no_check_in_some_cases to Y.

• Question 35:

  Which levels of security protection are provided by Secure Network Communication (SNC)? Note: There are 3correct answers to this question.

  A. Authentication
  B. Integrity
  C. Availability
  D. Privacy
  E. Authorization
  A. Authentication
  B. Integrity
  D. Privacy

• Question 36:

  You are building a PFCG role for access to an SAP Fiori app on your SAP S/4HANA on- premise system. After you enter the catalog in the role menu, an entry for an OData service is missing and you have to add it manually to the role menu.

  When you maintain authorization data in the PFCG role, why does SAP recommend that you NOT maintain the SRV_NAME field value of the S_SERVICE authorization object manually?

  A. Because the TADIR Service name is the same for the front-end server component and the back-end server component.
  B. Because the TADIR Service name for the back-end server component was automatically added to the role menu.
  C. Because the SRV_NAME hash value for the front-end server component and back-end server component are the same.
  D. Because the SRV_NAME hash value for the front-end server component and back- endserver component are different.
  D. Because the SRV_NAME hash value for the front-end server component and back- endserver component are different.

• Question 37:

  Which limitations apply to restricted users in SAP HANA Cloud? Note: There are 3correct answers to this question.

  A. They can only create objects in their own database schema.
  B. They can only connect to the database using HTTP/HTTPS.
  C. They only have full SQL access via the SQL console.
  D. They cannot connect via ODBC or JDBC.
  E. They cannot create objects in the database.
  A. They can only create objects in their own database schema.
  B. They can only connect to the database using HTTP/HTTPS.
  E. They cannot create objects in the database.

• Question 38:

  When you maintain authorizations for SAPUI5 Fiori apps, which of the following object types is the front-end authorization object type?

  A. TADIR G4BA-SAP Gateway Odata V4 Backend Service Group and Assignments
  B. TADIR IWSV - SAP Gateway Business Suite Enablement-Service
  C. TADIR IWSG - SAP Gateway: Service Groups Metadata
  D. TADIR INA1 InA Service
  B. TADIR IWSV - SAP Gateway Business Suite Enablement-Service

• Question 39:

  If you want to evaluate catalog menu entries and authorization default values of IWSG and IWSV applications, which SUIM reports would you use? Note: There are 2correct answers to this question.

  A. Search Startable Applications in Roles
  B. Search Applications in Roles
  C. Roles By Transaction Assignment in Menu
  D. Roles By Authorization Object
  A. Search Startable Applications in Roles
  B. Search Applications in Roles

• Question 40:

  Which of the following are Security Goals? Note: There are 2correct answers to this question.

  A. Repudiation
  B. Identity Authentication
  C. Encryption
  D. Information Integrity
  B. Identity Authentication
  D. Information Integrity