You want to generate a BRFplus Initiator Rule that utilizes an expression of type Decision Table for the SAP_GRAC_ACCESS_REQUEST MSMP Process ID.

Which rule types can you use?

Note: There are 2 correct answers to this question.

A. Class Based Rule

B. Function Module Based Rule

C. BRFplus Flat Rule

D. BRFplus Rule

SAP developed a three phase, six step SoD Risk Management Process for use when implementing Access Risk Analysis.

Which of the following steps are a part of this process?

Note: There are 3 correct answers to this question.

A. Risk Recognition

B. Mitigation

C. Analysis

D. Role Building and Analysis

E. Rule Set Design

Which methods can you use to send a firefight session log to a controller? Note: There are 2 correct answers to this question.

A. Email

B. Log Display

C. Support message

D. Workflow

You want to create a transportable BRFplus Routing Rule for MSMP Process ID SAP_GRAC_ACCESS_REQUEST using transaction GRFNMW_DEV_RULES.

What must be done in order for your rule to be transportable?

A. You must assign a package to the Application after you generate the rule.

B. You must assign a package to the Function after you generate the rule.

C. You must assign a package to the Application before you generate the rule.

D. You must assign a package to the Function before you generate the rule.

How can you make sure that a risk analysis is performed when you use access request management? Note: There are 2 correct answers to this question

A. Set Enable Offline Risk Analysis parameter to Yes

B. Configure the MSMP workflow stage to require a risk analysis

C. Configure the MSMP workflow path to require a risk analysis

D. Set the Enable Risk Analysis Form on Submission parameter to Yes

Which of the following represent valid Agent Types within MSMP Workflow configuration? Note: There are 2 correct answers to this question.

A. PFCG Roles

B. BRFplus flat rule

C. BRFplus rule

D. GRC API (Application Programming Interface) Rules

Which of the following must be specified when defining a mitigating control? Note: There are 2 correct answers to this question.

A. Organization

B. Risk Approver

C. Report

D. Mitigation Monitor

SAP delivers multiple MSMP Process IDs. You want to implement an MSMP Workflow that targets your SAP S/4HANAsystem.

Which BC set do you need to activate as a prerequisite?

A. BC Set GRAC_ROLE_MGMT_LANDSCAPE

B. BC Set GRC_MSMP_CONFIGURATION

C. BC Set GRAC_DT_REQUEST_DISPLAY_SECTIONS

D. BC Set GRAC_RA_RULESET_S4HANA_CORE

Where can you use a custom field in SAP Access Control? Note: There are 2 correct answers to this question.

A. On a risk definition

B. On an access request

C. On a role definition

D. On a mitigating control definition

Which of the following rule sets are delivered standard in SAP Access Control 12.0? Note: There are 3 correct answers to this question.

A. GRAC_RA_RULESET_JDE

B. GRAC_RA_RULESET_S4HANA_ALL

C. GRAC_RA_RULESET_S4HANA_NWBC

D. GRAC_RA_RULESET_COMMON

E. GRAC_RA_RULESET_JAVA