P_TSEC10_75 questions and answers

Question 1

Single choice

What is the field of the authorization object S_TABU_CLI

1. A

   Filament

2. B

   CLIIDMAINT

Reveal answer details Close answer details

Correct answerB

Question 2

Multiple choice

What are the 2 main options to create and save audit filters?

1. A

   Create and save filters permanently in the database

2. B

   Change filters dynamically

3. C

   Create and save filter temporary in the database

Reveal answer details Close answer details

Correct answersA, B

Question 3

Multiple choice

What is the audit log's main objective? (3 points)

1. A

   Security-related changes

2. B

   Higher level of transparency

3. C

   Enables the reconstruction of a series of events

4. D

   Slower level of transparency

Reveal answer details Close answer details

Correct answersA, B, C

Question 4

Multiple choice

What are the 3 steps to install the PAS?

1. A

   Install SAP package ntauth.sar

2. B

   Set the Service file parameters

3. C

   Maintain user mapping. Maintain table USREXTID Report (RSUSREXTID)

4. D

   user must accept session cookies

Reveal answer details Close answer details

Correct answersA, B, C

Question 5

Single choice

Profile parameter: list containing the users who may log onto the system more than once is stored

1. A

   login/fails_to_session_end

2. B

   login/multi_login_users

3. C

   login/min_password_lng

4. D

   Login/fails_to_user_lock

Reveal answer details Close answer details

Correct answerB

Question 6

Single choice

What is the transaction to display an overview of the modifications and enhancement found in the system that you can search by Last transport request or Request/Task?

1. A

   SE95

2. B

   SE96

3. C

   SE97

4. D

   SE98

Reveal answer details Close answer details

Correct answerA

Question 7

Multiple choice

6 types of information that can be recorded with the security audit log?

1. A

   Dialog log-on attempts

2. B

   RFC log-on attemps

3. C

   Transaction starts

4. D

   Modification

Reveal answer details Close answer details

Correct answersA, B, C

Question 8

Multiple choice

7 activities of the ICM monitor?

1. A

   Start and Stop the ICM

2. B

   Set trace level, view logs

3. C

   View profile parameters settings View statistics

4. D

   View memory pipe informationView active services

5. E

   Monitor service cache

6. F

   Start Memory in icm

Reveal answer details Close answer details

Correct answersA, B, C, D, E

Question 9

Multiple choice

Which fields has the authorization object S_TABU_LIN?

1. A

   Activity

2. B

   Organizational criterion

3. C

   Attribute for organizational criterion

4. D

   Pripare

Reveal answer details Close answer details

Correct answersA, B, C

Question 10

Multiple choice

What is the structure of SAP Router file entry?

1. A

   D: Deny

2. B

   P: Permit

3. C

   S: Permit

4. D

   T:Permit

Reveal answer details Close answer details

Correct answersA, B, C

Question 11

Multiple choice

What 3 security goals answer SSF?

1. A

   Integrity

2. B

   Privacy

3. C

   Authentication

4. D

   Unprivacy

Reveal answer details Close answer details

Correct answersA, B, C

Question 12

Multiple choice

ITS:

What are the 4 main functions of the A gate?

1. A

   Communication to and from the SAP system

2. B

   Communicates using the SAP protocols RFC and DIAG.

3. C

   Data security is associated with persons and individuals

4. D

   Generating the HTML pages from SAP screens

5. E

   Managing user logon data and session information

Reveal answer details Close answer details

Correct answersA, B, D, E

Question 13

Single choice

Which command displays all connections and listening ports on your computer?

1. A

   netstat -a

2. B

   netstat -b

3. C

   netstat -c

Reveal answer details Close answer details

Correct answerA

Question 14

Multiple choice

In a dual host installation, where do you use firewalls?

1. A

   Firewall in front of the Web server to deny access using undesired protocols

2. B

   Firewall between the Web server and the AGate to restrict access even more.

3. C

   Using groups at the operating system level

Reveal answer details Close answer details

Correct answersA, B

Question 15

Single choice

What is the transaction to maintain the SNC PSE?

1. A

   Use the trust manager S_Trust

2. B

   Use the trust manager A_Trust

3. C

   Use the trust manager D_Trust

Reveal answer details Close answer details

Correct answerA

Question 16

Multiple choice

What are the 3 different fields of the S_LOG_COM authorization object?

1. A

   Command

2. B

   Opsystem

3. C

   Host

4. D

   Host

Reveal answer details Close answer details

Correct answersA, B, C

Question 17

Multiple choice

What are the 4 steps required to setup the AIS

1. A

   Copy the SAP role

2. B

   Update the roles

3. C

   Create a user for the auditor

4. D

   Assign the roles

5. E

   User profile roles

Reveal answer details Close answer details

Correct answersA, B, C, D

Question 18

Multiple choice

In which transaction can you release the change request to transport?

1. A

   SE09

2. B

   SE10

3. C

   SE08

Reveal answer details Close answer details

Correct answersA, B

Question 19

Multiple choice

What is the measure for each source of risk?

1. A

   Organizational Measures

2. B

   Technical Measures

3. C

   Environmental measures

4. D

   Access Control

5. E

   System Access Control

Reveal answer details Close answer details

Correct answersA, B, C

Question 20

Single choice

Which special user is delivered in the client 066?

1. A

   DDIC

2. B

   Early Watch

3. C

   SUPPORT

4. D

   S_TCODE

Reveal answer details Close answer details

Correct answerB

Question 21

Single choice

How do you protect access to the ITS service and template files?

1. A

   Using groups at the operating system level

2. B

   Using groups at the creation dolmen level

Reveal answer details Close answer details

Correct answerA

Question 22

Single choice

Which authorization object gives access to many administration functions?

1. A

   S_AGFI_FCD

2. B

   S_AFGI_FCD

3. C

   S_ADMI_FCD

Reveal answer details Close answer details

Correct answerA

Question 23

Single choice

Which authorization object enforce actions you can take with spool requests (Admin) and enforce access to a spool request that does not belong to you?

1. A

   S_SAO_ACT

2. B

   S_SPO_ACT

Reveal answer details Close answer details

Correct answerB

Question 24

Single choice

Which table defines for each transaction and for each authorization object which default values an authorization created from the authorization object should have in the Profile Generator?

1. A

   USOBT

2. B

   RZ11

3. C

   USOBX_C

4. D

   USOBT_C

5. E

   USOBX

Reveal answer details Close answer details

Correct answerA

Question 25

Single choice

Which transaction allows you to view the assignments of the events to audit classes and security levels with the system log message maintenance

1. A

   SE92

2. B

   SE93

3. C

   SE91

4. D

   SE94

Reveal answer details Close answer details

Correct answerA

Question 26

Single choice

SAP systems maintain their audit logs on a daily basis. The system does not delete or overwrite audit files
from previous days; it keeps them until you manually delete them.

Which transaction is used in order to archive or delete the audit files?

1. A

   SM15

2. B

   SM16

3. C

   SM17

4. D

   SM18

Reveal answer details Close answer details

Correct answerD

Question 27

Single choice

Transaction code to maintain profile parameters?

1. A

   RZ11

2. B

   USOBX_C

3. C

   USOBT_C

4. D

   USOBX

Reveal answer details Close answer details

Correct answerA

Question 28

Single choice

You have successfully finished an SAP S/4HANA backend, SAP Fiori front-end and Web-dispatcher configuration.
In the SAP Fiori Launchpad the search for a G/L account fails, but regular app search works fine.

What could be the cause of the problem?

1. A

   Missing authorization on the front-end side

2. B

   The search connectors are NOT activated

3. C

   The SAP Web Dispatcher is down

4. D

   Missing authorization on the back-end side

Reveal answer details Close answer details

Correct answerC

Question 29

Single choice

Which SAP Product is used for DIAG/RFC Proxy?

1. A

   SAP Create

2. B

   SAP router

Reveal answer details Close answer details

Correct answerB

Question 30

Single choice

Which authorization object define which printers you can print to?

1. A

   S_SPO_DEV

2. B

   S_SVR_DEV

Reveal answer details Close answer details

Correct answerA

Question 31

Single choice

Which authorization object is provided to create and maintain users and assignments in a decentralized fashion with user groups?

1. A

   S_USER_GRP

2. B

   S_CHANGE_GRP

3. C

   S_CHATLOG_GRP

4. D

   S_PROFESSION_GRP

Reveal answer details Close answer details

Correct answerA

Question 32

Multiple choice

Which authorization objects can you examine to determine if security is administered centrally or regionally?

1. A

   S_USER_GRP

2. B

   S_TCD_GRP

3. C

   S_USER_AGR

4. D

   S_USER_ADD

Reveal answer details Close answer details

Correct answersA, C

Question 33

Single choice

Authorization that defines the roles names for which an administrator is authorized and the activities that are allowed?

1. A

   S_USER_GRP

2. B

   S_USER_AUTH

3. C

   S_USER_PRO

4. D

   S_USER_AGR

5. E

   S_USER_TCD

Reveal answer details Close answer details

Correct answerD

Question 34

Multiple choice

What are the 2 different worlds for SSO?

1. A

   SAP GUI for Windows SNC

2. B

   Web SSL

3. C

   SAP RTD for Windows SFG

Reveal answer details Close answer details

Correct answersA, B

Question 35

Single choice

What is the transaction of the ICM monitor?

1. A

   SMICM

2. B

   SHDFK

3. C

   SIFIDH

Reveal answer details Close answer details

Correct answerA

Question 36

Single choice

Which safeguards answers to the threat of Tampering (denial, message alteration)?

1. A

   the SAP Passport

2. B

   Digital signature

Reveal answer details Close answer details

Correct answerB

Question 37

Multiple choice

What are the 3 types of encryption?

1. A

   Symmetric

2. B

   Asymmetric

3. C

   Sdfmmetric

Reveal answer details Close answer details

Correct answersA, B

Question 38

Single choice

Which transaction allows you to approve a transport request?

1. A

   STMS

2. B

   SYAS

3. C

   AJSA

Reveal answer details Close answer details

Correct answerA

Question 39

Single choice

Which authorization object helps you to enforce the role naming convention in restricting the allowed roles names?

1. A

   S_USER_AGR

2. B

   S_USER_TCD

3. C

   S_USER_VAL

Reveal answer details Close answer details

Correct answerA