SAP Autho

What does SAP GRC stand for?

• a) Global Resource Control
  

• b) Governance, Risk, and Compliance
  

• c) General Reporting Console
  

• d) Group Role Configuration

  
  

What is the primary purpose of SAP authorization objects?

• a) To define data storage locations
  

• b) To manage user roles and responsibilities
  

• c) To facilitate data entry in SAP
  

• d) Group Role Configuration

  
  

Which component of SAP Security is responsible for managing user access to specific transactions and data?

• a) SAP GRC
  

• b) SAP Identity Management
  

• c) SAP Authorization Concept
  

• d) SAP BusinessObjects

  
  

In SAP, what is a "role"?

• a) A type of transaction
  

• b) A collection of related authorization objects
  

• c) A user's login credentials
  

• d) A type of report

  
  

Which of the following is a key principle of SAP security?

• a) Providing unrestricted access to all users
  

• b) Least privilege principle
  

• c) Using generic user accounts
  

• d) Sharing passwords among employees

  
  

What is the purpose of the "Firefighter" access in SAP GRC?

• a) It grants superuser access to all users.
  

• b) It allows users to perform emergency access tasks for auditing purposes.
  

• c) It controls access to SAP's online marketplace.
  

• d) It is a role for SAP developers.

  
  

What is the role of SAP Security Administrators?

• a) They design SAP user interfaces.
  

• b) They manage the physical security of SAP servers.
  

• c) They create and maintain user roles and authorizations.
  

• d) They develop SAP applications.

  
  

Which SAP GRC component is focused on continuous risk monitoring and remediation?

• a) SAP GRC Access Control
  

• b) SAP GRC Process Control
  

• c) SAP GRC Risk Management
  

• d) SAP GRC Audit Management

  
  

What is the purpose of segregation of duties (SoD) controls in SAP security?

• a) To encourage employees to work together closely
  

• b) To ensure that employees have access to all necessary data
  

• c) To prevent conflicts of interest and fraud by restricting user access
  

• d) To eliminate all job roles in an organization

  
  

In SAP security, what is the "critical task" or "sensitive function" that should not be performed by a single user?

• a) Dual authorization
  

• a) Dual authorization
  

• c) Role assignment
  

• d) Emergency access