You have created a BRFplus Initiator Rule. Which of the following must be active in BRFplus for MSMP Workflow to utilize your new rule?
Note: There are 2 correct answers to this question. Path Function Application Process ID.
Which of the following can you reinforce when using a role methodology in BRM?
Note: There are 2 correct answers to this question. Provisioning Mitigation Testing Derivation.
Which of the following items are mandatory for creating an access request template?
Note: There are 2 correct answers to this question. EUP ID Request details Request description (Request type no estaba como respuesta disponible).
You want to generate an MSMP rule for MSMP Process ID SAP_GRAC_ACCESS_REQUEST. Which type of rule can you generate?
Note: There are 2 correct answers to this question. ABAP Class Rule Business Rule Escalation Rule BRFplus Flat Rule.
You have configured a BRFplus flat rule ..... LINE_ITEM_KEY .... ITEMNUM.
How ... ? Aggregate ? ? ?.
Which of the following solutions are installed with SAP GRC 12.0?
Note: There are 2 correct answers to this question. SAP Global Trade Services SAP Access Control SAP Risk Management SAP Audit Management.
Which of the following are functions of the SAP Access Control Solution?
Note: There are 3 correct answers to this question. Privilege Monitoring Role Provisioning Compliance Certification Sign-Off Risk Response Risk Analysis.
Which of the following represent a valid Rule Kind when configuring a MSMP Workflow?
Note: There are 2 correct answers to this question. BRFplus Notification Variable Agent ABAP Class.
Your compliance team requires that all changes to access rules be tracked? Which of the following change log do you enable?
Note: There are 3 correct answers to this question. Access Rule Rule Set Role Critical Role Function.
You want to configure Password Self-Service (PSS) to allow your end users to easily reset their password and process changes to their name. Which of the following actions are required before PSS can be used? Maintain target system connector setting for PSS Activate the PSS workflow Process ID Deactivate password maintenance for target system in transaction SU01 Set PSS parameter value to YES in AC Configuration settings.
Which of the following Business Configuration (BC) sets configure a connector group in SAP Access Control?
Note: There are 3 correct answers to this question. GRAC_ACCESS_REQUEST_APPL_MAPPING GRAC_RA_RULESET_COMMON GRAC_RA_RULESET_PSOFT GRAC_ROLE_MGMT_LANDSCAPE GRAC_RA_RULESET_BASIS.
You are updating the configuration of a stage detail during maintenance of your MSMP Workflow configuration. You want to apply the updated configuration to both new and existing requests that are to be processed. Where can you configure this setting? Task settings Stage details ? ?.
Email notifications.
Note: There are 2 correct answers to this question. Replace SAP stantard.... ? ? ?.
SAP delivers multiple MSMP Process IDs. You want to implement an MSMP Workflow that targets your SAP S/4HANA system. Which BC Set do you need to activate as a prerequisite? GRC_MSMP_CONFIGURATION GRAC_DT_REQUEST_DISPLAY_SECTIONS GRAC_ROLE_MGMT_LANDSCAPE GRAC_RA_RULESET_S4HANA_CORE.
Which of the following are required to enable Centralized Emergency Access Management (EAM)?
Note: There are 2 correct answers to this question. Set the Enable Decentralized Firefighting parameter for Emergency Access Management to YES Set the Enable Decentralized Firefighting parameter for Emergency Access Management to NO Set the Application Type parameter for Emergency Access Management to value ID in SAP Access Control Set the Application Type parameter for Emergency Access Management to value Role in the target system GRC Plug-in.
You have created a BRFplus Initiator Rule for MSMP Process ID SAP_GRAC_ACCESS_REQUEST using transaction GRFNMW_DEV_RULES but the Decision Table did not get created. Where do you go to manually create a Top Expression for your rule? Application Function Business Rule Data Object.
Why might you integrate Business Role Management with Business Rules Framework?
Note: There are 2 correct answers to this question. Determine role methodology Determine role business area Determine role owner Determine role naming convention.
Which of the following reviewer options does User Access Review support? Manager or Role Owner Manager or Risk Owner Manager and Risk Owner Manager and Role Owner.
You want to configure SAP Access Control to generate alerts to help manage compliance. What are the available alert capabilities that can be configured?
Note: There are 3 correct answers to this question. Identify a user who has executed a critical action and generate an email notification Identify a user who has executed conflicting functions and open a support desk message Identify a user who has executed conflicting functions Identify a control monitor who has failed to execute defined reports in a timely fashion Identify a user who has executed a critical action and open a support desk message.
You are creating an Initiator rule and want to build a condition using header attributes. Which of the following attributes can you use?
Note: There are 2 correct answers to this question. Functional Area Prerequisite Company Subprocess.
You want to configure your MSMP Workflow stage definition to ensure that a workflow request that has NOT been processed after a certain period of time can be escalated and approved by another approver. Which of the following options can you use to configure escalation?
Note: There are 3 correct answers to this question. Define an Alternate Approver Skip to Next Stage Maintain Fallback Receiver Escalate to Specified Agent Use Defaults.
Which of the following logs can be collected for an Emergency Access Management session?
Note: There are 3 correct answers to this question. Audit log System log Change log GRC Audit log SLG1 application log.
Which of the following are standard delivered SAP Fiori business catalogs for SAP Access Control?
Note: There are 2 correct answers to this question. Access Control Employee Risk Manager Compliance Specialist Compliance Owner.
How can you make sure that a risk analysis is performed when you use Access Request Management?
Note: There are 2 correct answers to this question Set Enable Offline Risk Analysis parameter to Yes Configure the MSMP workflow stage to require a risk analysis Configure the MSMP workflow path to require a risk analysis Set the Enable Risk Analysis Form on Submission parameter to Yes.
You have activated an approval workflow to require an approval for updates to a defined function. What else do you need to do you enable this capability? Flag the function for approval Set the 1064 Function Maintenance parameter to YES Configure the GRAC_FUNCTION_APPROVER agent Activate the SAP_GRAC_FUNC_APPR MSMP Process ID.
... Fiori ... GRC functionality GRCBAS001 SAP_UI GRCACUI01 GRCRMPC.
You want to create an Initiator rule in BRFplus for the standard access request. Which structures provide the attributes that you can use to define your rule?
Note: There are 2 correct answers to this question. GRAC_S_REQUEST_RULE_LINE GRAC_S_REQUEST_RULE_HEADER GRAC_DT_REQUEST_FIELD_LABELS GRAC_ACCESS_REQUEST_APPL_MAPPING.
You want to create an Initiator rule in BRFplus for the standard access request that takes into account the Business Process fo the role. Which structure provides this attribute? GRAC_S_REQUEST_RULE_LINE GRAC_DT_REQUEST_FIELD_LABELS GRAC_ACCESS_REQUEST_APPL_MAPPING GRAC_BRF_BPROCESS.
You want to use Access Request Management to provision access in a target system. Which of the following actions are required before access can be provisioned using an Access Request?
Note: There are 2 correct answers to this question. Import role definitions in Business Role Management Maintain System Provisioning Configuration Maintain Global Provisioning Configuration Maintain custom End User Personalization settings.
Which of the following jobs are a prerequisite for scheduling a User Access Review (UAR)?
Note: There are 3 correct answers to this question Action Usage Sync Role Comparison Authorization Sync Role Usage Sync User/Role/Profile sync.
Which methods can you use to send a firefight session log to a controller?
Note: There are 2 correct answers to this question. Email Log Display Support message Workflow.
Which of the following conditions can you use to configure an escape route in MSMP Workflow? Note: There are 2 correct answers to this question. No Role Owner SOD Violation Approver Not Found Auto Provisioning Failure.
ou are configuring your MSMP Workflow path and you want to allow an approver to decide which type of provisioning should occur upon approval. Which configuration options provide this capability?
Note: There are 2 correct answers to this question. Set system provisioning option for auto-provisioning to manual provisioning Set global provisioning option for auto-provisioning to manual provisioning Set stage task setting to Override Assignment Type Set stage task setting to Allow Manual Provisioning.
You are tasked with configuring SAP Access Control to retrieve user and authentication information. SAP Access Control supports connector configuration for which of the following functions?
Note: There are 3 correct answers to this question. User Search Data Source User Detail Data Source End User Verification User Identity Federation User Identity Management.
You are tasked with configuring SAP Access Control to retrieve user and authentication information. SAP Access Control supports connector configuration for which of the following functions?
Note: There are 2 correct answers to this question. HR User Detail Data Source SU01 User Detail Data Source SU01 End User Verification LDAP User Identity Management.
How to transport Rule Set changes?
Note: There are 2 correct answers to this question. Download/upload TR for each change un Function and Risk Generate and instert .... in production ?.
You want to create a transportable BRFplus Routing Rule for MSMP Process ID SAP_GRAC_ACCESS_REQUEST using transaction GRFNMW_DEV_RULES. What must be done in order for your rule to be transportable? You must assign a package to the Application after you generate the rule You must assign a package to the Function after you generate the rule You must assign a package to the Application before you generate the rule You must assign a package to the Function before you generate the rule.
SAP Governance, Risk and Compliance solutions are organized along 4 key themes. Which of the following are key themes?
Note: There are 3 correct answers to this question. Business Integrity Screening Access Governance Cybersecurity and Data Protection Enterprise Risk and Compliance Audit Management.
Prerequisite to be able to request role removal from Remediation View? Activate GRAC_ACCESS_REQUEST workflow Process ID Upload role definitions to Business Role Management Run repository sync job ?.
When is it necessary to define subsequent connectors?
Note: There are 2 correct answers to this question. When the Fiori gateway is in a central system When you need to define a cross-system Risk When a connector needs to trigger another connector When you plan to configure multiple data sources for user authentication.
Actions ... 004 Provisioning ... at least one default... ? ? ?.
Which of the following are prerequisites for implementing Emergency Access Management?
Note: There are 2 correct answers to this question. Users and roles that are used for firefighting activities have been created for the SAP Access Control system The repository object sync must be completed Implementation of a user exit on the SAP Access Control system to prevent direct logon with the Firefighter ID Users and roles that are used for firefighting activities have been created in the target system.
Which plugins deliver SAP GRC 12.0 functionalities?
Note: There are 2 correct answers to this question. GRCFND_A GRCPINW GRCPIERP UIGRAC01.
SAP developed a three phase, six step SoD Risk Management Process for use when implementing Access Risk Analysis. Which of the following steps are a part of this process?
Note: There are 3 correct answers to this question. Risk Recognition Mitigation Analysis Role Building and Analysis Rule Set Design.
You want to deploy the End User Login Page for your users. Which of the following actions must you perform for this page to be available?
Note: There are 2 correct answers to this question. Activate service for the grac_uibb_end_user_login Web Dynpro Maintain default user for application logon Maintain RFC destination for target system Set End User Login Page parameter value to ACTIVE in AC Configuration Settings.
Which of the following are Service Level Agreement time frame options?
Note: There are 2 correct answers to this question. Fixed by number of days Formula Manually entered date No date.
Which of the following rule sets are delivered standard in SAP Access Control 12.0?
Note: There are 3 correct answers to this question. GRAC_RA_RULESET_JDE GRAC_RA_RULESET_S4HANA_ALL GRAC_RA_RULESET_S4HANA_NWBC GRAC_RA_RULESET_COMMON GRAC_RA_RULESET_JAVA.
Which of the following rule sets is a prerequisite for GRAC_RA_RULESET_S4HANA_FIORI? GRAC_RA_RULESET_S4HANA_ALL GRAC_RA_RULESET_COMMON GRAC_RA_RULESET_BASIS GRAC_RA_RULESET_S4HANA_NWBC.
You want to create a role in SAP Access Control. Which of the following attributes are mandatory?
Note: There are 3 correct answers to this question. Business Process Role methodology Project release Workflow approval path Naming convention.
You are implementing Access Request Management. Which integration scenarios should you assign to the target connector? PROV, ROLMG PROV PROV, AUTH PROV, ROLMG, SUPMG, AUTH.
How can you ensure that a coordinator has the opportunity to review UAR request assignments? Set the Admin review required before sending tasks to reviewers parameter for UAR to YES Schedule the Generate new request for UAR rejected request job Maintain the GRAC_COORDINATOR agent at the approval stage in MSMP Process ID SAP_GRAC_USER_ACCESS_REVIEW Set the Who are the reviewers? parameter for UAR to COORDINATOR.
The Consolidated Log Report provides data from which of the following? ABAP debug information ABAP dump information SQL command execution ABAP trace execution.
Which of the following reviewer options does SOD Review support? Manager or Role Owner Manager or Risk Owner Manager and Risk Owner Manager and Role Owner.
You want to deploy the End User Login Page for your users. Which of the following actions must you perform for this page to be available?
Note: There are 2 correct answers to this question. Maintain RFC destination for target system Activate service for the grac_uibb_end_user_login Web Dynpro Maintain default user for application logon Set End User Login Page parameter value to ACTIVE in AC Configuration Settings.
Which of the following roles delivered by SAP can you use to grant access to Emergency Access Management? SAP_GRAC_END_USER SAP_GRAC_SPM_FFID SAP_GRAC_RULE_SETUP SAP_GRAC_SUPER_USER_MGMT_USER.
Which of the following roles delivered by SAP can you use to grant access to a Firefighter ID Controller, a Owner, or both?
Note: There are 2 correct answers to this question. SAP_GRAC_SUPER_USER_MGMT_USER SAP_GRAC_SPM_FFID SAP_GRIA_END_USER SAP_GRIA_ADMIN.
For which IMG object can you activate the password self-service (PSS) in Access Control? Condition group Connector Cross system Logical system.
You want request details to be sent to specific users automatically using a custom notification. What do you have to do to enable this?
Note: There are 2 correct answers to this question. Define a stage in MSMP workflow. Define a notification message using the required variables. Enable e-mail reminders for the required users. Assign a document object to a message class.
Which reports does Business Role Management makes available?
Note: There are 3 correct answers to this question. Transactions executable for user PFCG change history Role relationship to user/group ? ?.
Which of the following jobs are a prerequisite for scheduling a User Access Review (UAR)?
Note: There are 2 correct answers to this question Generate data for access request UAR review Update Workflow for UAR Request ? ?.
Who is the recipient of Role certification process in Business Role Management? Role content approver Role assignment approver Manager Risk Owner.
Which of the following attributes are mandatory when creating business role definition details in Business Role Management?
Note: There are 3 correct answers to this question. Company Landscape Application Type Functional Area Project Release.
|
