C_GRCAC_12 Online Practice Questions and Answers

You want to use the User Analysis Dashboard to evaluate Segregation of Duties violations after your most recent batch risk analysis has completed. However, when reviewing the data you realize that the dashboard does not display all of your current users. What do you need do to correct the problem?

A. Execute the Repository Object Sync and then re-execute the user level batch risk analysis.

B. Execute the Authorization Synch and then re-execute the user level batch risk analysis.

C. Execute the Action Usage Sync followed by the Role Usage Sync and then re-execute the user level batch risk analysis.

D. Execute the user level batch risk analysis again and remove any exclude objects.

How can you make sure that a risk analysis is performed when you use access request management?

Note: There are 2 correct answers to this question

A. Set Enable Offline Risk Analysis parameter to Yes

B. Configure the MSMP workflow stage to require a risk analysis

C. Configure the MSMP workflow path to require a risk analysis

D. Set the Enable Risk Analysis Form on Submission parameter to Yes

Which of the following reviewer options does User Access Review support?

A. Manager or Risk Owner

B. Manager or Role Owner

Business Role Management provides the functionality to improve the role management process. Which of the following capabilities does it offer? Note: There are 2 correct answers to this question.

A. Replacement of the PFCG role management transaction

B. Management of role definition transports

C. Enforcement of consistency in naming conventions

D. Identification of duplicate roles

Which of the following jobs are a prerequisite for scheduling a User Access Review (UAR)? Note: There are 3 correct answers to this question.

A. Action Usage Sync

B. Role Comparison

C. Authorization Sync

D. Role Usage Sync

E. User/Role/Profile sync

Where can you use a custom field in SAP Access Control? Note: There are 2 correct answers to this question.

A. On a risk definition

B. On an access request

C. On a role definition

D. On a mitigating control definition

Which of the following must be specified when defining a mitigating control? Note: There are 2 correct answers to this question.

A. Organization

B. Risk Approver

C. Report

D. Mitigation Monitor

You want to configure connector settings for a connector used by SAP Access Control. What are the supported connector group types that you can configure? Note: There are 2 correct answers to this question.

A. Application Type

B. Cross System

C. Automated Monitoring

D. Logical

You are configuring a BRFplus flat rule and defining the attribute values for your Initiator rule conditions. You encounter the LINE_ITEM_KEY field. What value should you select for this field?

A. REQTYPE

B. ROLE_NAME

C. ITEMNUM

D. PRIORITY

Which of the following are benefits of the role methodology in Business Role Management? Note: There are 2 correct answers to this question.

A. Is always the same for all roles

B. Enforce a process flow for role maintenance

C. Allows for the documentation of the role

D. Enforce a process flow for role assignment