SAP Certified Application Associate - SAP Access Control 12.0 C_GRCAC_13 Exam Questions

Answer : A, D

According to the SAP Press blog3, some of the functions of the SAP Access Control solution are issue management and role provisioning. Issue management is a process that allows you to monitor and resolve issues related to access risks, such as policy violations, mitigating control deficiencies, or audit findings. Role provisioning is a process that allows you to request, approve, and assign roles and authorizations to users across different systems.

Answer : C

According to the SAP wiki2, you can use the Reaffirm Approval option in the MSMP Workflow stage configuration to confirm the identity of an approver when processing an access request. This option requires the approver to enter their user ID and password again before approving or rejecting a request.

Answer : B, C

According to the SAP Help Portal, you can make sure that a risk analysis is performed when you use access request management by setting the Enable Risk Analysis Form on Submission parameter to Yes and configuring the MSMP workflow stage to require a risk analysis. The Enable Risk Analysis Form on Submission parameter allows you to perform a risk analysis before submitting an access request. The MSMP workflow stage configuration allows you to define a risk analysis as a mandatory step in the approval process.

Answer : C, D

According to the SAP Help Portal3, you need two component plug-ins to contain SAP Access Control functionality for SAP S/4HANA: GRCFND_A and GRCPIERP. GRCFND_A is a software component that contains the core functionality of SAP Access Control, such as access request management, access risk analysis, or emergency access management. GRCPIERP is a software component that contains the plug-in functionality of SAP Access Control for SAP S/4HANA systems, such as connector configuration, data extraction, or provisioning.

Answer : C, D

According to the SAP Help Portal, you need two components to deliver SAP Fiori applications for SAP GRC solutions: UIGRAC01 and SAP_UI. UIGRAC01 is a software component that contains the front-end components of a bundle of transactional apps for SAP Access Control that run on the SAP Fiori launchpad. SAP_UI is a software component that contains the UI development toolkit for HTML5 (SAPUI5), which is used to create user interfaces for SAP Fiori apps.

Answer : A, B, E

According to the SAP Help Portal, some of the rule sets that are delivered in SAP Access Control are GRAC_RA_RULESET_COMMON, GRAC_RA_RULESET_ERP, and GRAC_RA_RULESET_S4HANA. GRAC_RA_RULESET_COMMON contains common rule set definitions that are used by other rule sets. GRAC_RA_RULESET_ERP contains rule set definitions for SAP ERP systems. GRAC_RA_RULESET_S4HANA contains rule set definitions for SAP S/4HANA systems.

Answer : B, C, D

According to the SAP Press blog2, some of the available alert capabilities that can be configured in SAP Access Control are identifying a user who has executed conflicting functions, identifying a user who has executed a critical action and opening a support desk message, and identifying a user who has executed a critical action and generating an email notification. These alerts help to monitor and manage compliance by notifying the relevant parties about potential access risks or violations.