C_SECAUTH_20 SAP Certified Technology Associate – SAP System Security and Authorizations Exam

Sub-solution: Administration
Delivery Methods: SAP Certification
Level: Associate
Exam: 80 questions
Cut Score: 65%
Duration: 180 mins
Languages: English

Description
The “SAP Certified Technology Associate – SAP System Security and Authorizations” certification exam verifies that the candidate has the fundamental and core knowledge required of a technology consultant profile in the area of SAP system security. This certificate proves that the candidate has a basic and overall understanding about securing SAP systems and SAP’s authorization concepts in SAP Business Suite and SAP S4/HANA, and can put this knowledge into practice as a member of a project team.

Notes
To ensure success, SAP recommends combining education courses and hands-on experience to prepare for your certification exam as questions will test your ability to apply the knowledge you have gained in training.
You are not allowed to use any reference materials during the certification test (no access to online documentation or to any SAP system).

Topic Areas
Please see below the list of topics that may be covered within this certification and the courses that cover them. Its accuracy does not constitute a legitimate claim; SAP reserves the right to update the exam content (topics, items, weighting) at any time.

Topic Areas
Please see below the list of topics that may be covered within this certification and the courses that cover them. Its accuracy does not constitute a legitimate claim; SAP reserves the right to update the exam content (topics, items, weighting) at any time.

Authorization and Role Maintenance > 12%
Describe the authorization concept and role maintenance in ABAP.

ADM940 (SAP S/4HANA 1909)
ADM945 (SAP S/4HANA 1809)

SAP Fiori Authorizations and S/4HANA > 12%
Describe the SAP Fiori authorization concept and how to implement them in S4/HANA systems.

ADM945 (SAP S/4HANA 1809)

Access Governance and Compliance in SAP 8% – 12%
Describe the security goals and the access goverance solutions and tools in SAP.

ADM900 (NW AS 7.52)

Infrastructure Security and Authentication 8% – 12%
Describe how SAP supports SNC, SSL and Single Sign-on.

ADM900 (NW AS 7.52)

User Administration 8% – 12%
Perform user administration and manage security policy in SAP systems.

ADM900 (NW AS 7.52)
ADM940 (SAP S/4HANA 1909)

Security Monitoring and Security Assessment 8% – 12%
Monitor security using SAP Solution Manager and troubleshoot security issues using traces and logs.

ADM900 (NW AS 7.52)
ADM950 (SEE COURSE DETAIL)

Data Privacy Governance and Cybersecurity 8% – 12%
Describe GDPR and how SAP is supporting for data privacy governance.

ADM900 (NW AS 7.52)

Security Audit 8% – 12%
Describe how to use security auditing in SAP systems.

ADM950 (SEE COURSE DETAIL)

Exam Preparation
All SAP consultant certifications are available as Cloud Certifications in the Certification Hub and can be booked with product code CER006. With CER006 – SAP Certification in the Cloud, you can take up to six exams attempts of your choice in one year – from wherever and whenever it suits you! Test dates can be chosen and booked individually.

Each specific certification comes with its own set of preparation tactics. We define them as “Topic Areas” and they can be found on each exam description. You can find the number of questions, the duration of the exam, what areas you will be tested on, and recommended course work and content you can reference.

Certification exams might contain unscored items that are being tested for upcoming releases of the exam. These unscored items are randomly distributed across the certification topics and are not counted towards the final score. The total number of items of an examination as advertised in the Training Shop is never exceeded when unscored items are used.

Please be aware that the professional- level certification also requires several years of practical on-the-job experience and addresses real-life scenarios.

For more information refer to our FAQs.
SAP Global Certification FAQ – Overview
SAP Global Certification FAQ – Exam Process
SAP Global Certification FAQ – Post-Exam Process

Safeguarding the Value of Certification
SAP Education has worked hard together with the Certification & Enablement Influence Council to enhance the value of certification and improve the exams. An increasing number of customers and partners are now looking towards certification as a reliable benchmark to safeguard their investments. Unfortunately, the increased demand for certification has brought with it a growing number of people who to try and attain SAP certification through unfair means. This ongoing issue has prompted SAP Education to place a new focus on test security. Please take a look at our post to understand what you can do to help to protect the credibility of your certification status.

Our Certification Test Security Guidelines will help you as test taker to understand the testing experience.

QUESTION 1
During maintenance of a role you notice that the status text for an authorization object indicates status
“Changed New”. What does this status text mean?

A. The authorization object has been flagged as a critical object.
B. The authorization object must be maintained again.
C. The authorization object was used to create a new authorization because the initial configuration of the role changed a default value maintained in SU24.
D. The authorization object was used to create a new authorization because the values contained in SU24 differ from the SAP Standard contained in SU25.

Correct Answer: C

QUESTION 2
How can you protect a system when you do not want the user assignments for a role to be transported?

A. Restrict import of users in table PRGN_CUST in the target system
B. Restrict import of users in table PRGN_CUST in the development system
C. Restrict access to the user assignment tab in PFCG in the target system
D. Restrict access to the user assignment tab in PFCG in the development system

Correct Answer: A

QUESTION 3
Which of the following objects allows you to restrict which users can distribute a role to another system using an RFC destination?

A. S_USER_AGR
B. S_USER_SYS
C. S_USER_STA
D. S_USER_AUT

Correct Answer: B

QUESTION 4
Which transaction allows a user to change the authorization values of multiple roles at the same time?

A. PFCGROLEDIST
B. SUPC
C. PFCG
D. PFCGMASSVAL

Correct Answer: D