SAP SAP Certifications C_GRCAC_13 Questions & Answers

• Question 51:

  Which of the following must be specified when defining a mitigating control? Note: There are 2 correct answers to this question.

  A. Organization

  B. Risk Approver

  C. Report

  D. Mitigation Monitor

  Correct Answer: AD

• Question 52:

  Which of the following represent valid Agent Types within MSMP Workflow configuration? Note: There are 2 correct answers to this question.

  A. PFCG Roles

  B. BRFplus flat rule

  C. BRFplus rule

  D. GRC API (Application Programming Interface) Rules

  Correct Answer: AD

• Question 53:

  Which of the following items are mandatory for creating an access request template?

  Note: There are 2 correct answers to this question.

  A. End user personalization

  B. Template description

  C. Request type

  D. Request description

  Correct Answer: AC

• Question 54:

  The Consolidated Log Report provides data from which of the following?

  A. ABAP debug information

  B. ABAP dump information

  C. SQL command execution

  D. ABAP trace execution

  Correct Answer: D

• Question 55:

  SAP Access Control delivers multiple applications that can be mapped to BRFplus functions. Which of the following applications can be mapped to a BRFplus function?

  Note: There are 3 correct answers to this question.

  A. Notification Variables

  B. Service Level Agreements

  C. Request Multiple Rule Set

  D. Initiators

  E. HR Triggers

  Correct Answer: ACD

• Question 56:

  Which of the following are possible ways to assign emergency access in Emergency Access Management? Note: There are 2 correct answers to this question.

  A. Assign a Firefighter ID to a firefighter owner in SAP Access Control

  B. Assign a Firefighter ID to a firefighter in SAP Access Control

  C. Assign a Firefighter role to a firefighter in SAP Access Control

  D. Assign a Firefighter role to a firefighter in a target system

  Correct Answer: BD

• Question 57:

  Which of the following are features of a business role in SAP Access Control? Note: There are 2 correct answers to this question.

  A. They can be viewed in transaction PFCG

  B. They are provisioned on target systems

  C. They represent a job function

  D. They contain one or more technical roles

  Correct Answer: CD

• Question 58:

  Which of the provisioning types can be used with Auto-Provisioning? Note: There are 2 correct answers to this question.

  A. Direct provisioning

  B. Indirect provisioning

  C. Manual provisioning

  D. Global provisioning

  Correct Answer: AB

• Question 59:

  How can you make sure that a risk analysis is performed when you use access request management? Note: There are 2 correct answers to this question

  A. Set Enable Offline Risk Analysis parameter to Yes

  B. Configure the MSMP workflow stage to require a risk analysis

  C. Configure the MSMP workflow path to require a risk analysis

  D. Set the Enable Risk Analysis Form on Submission parameter to Yes

  Correct Answer: BD

• Question 60:

  Risk Terminator provides the capability to execute a user level risk analysis for which of the following tools? Note: There are 2 correct answers to this question.

  A. SCUA

  B. PA30

  C. SU01

  D. PFCG

  Correct Answer: CD