SAP C_GRCAC_13 Exam Questions

, SAP delivers multiple MSMP Process IDs for different scenarios and applications. To implement an MSMP Workflow that targets an SAP S/4HANA system, one of the prerequisites is to activate the BC set GRC_MSMP_CONFIGURATION. This BC set contains the basic configuration settings for MSMP Workflow, such as Process Global Settings, Maintain Rules, Maintain Agents, and so on. Therefore, B is the correct answer.A, C, and D are not valid BC sets for MSMP Workflow configuration. Reference:2https://help.sap.com/doc/e2ccae7ee6354b169cf845cd665e07fe/1.0%202016-07/en-US/frameset.htm?frameset.htm

According to the SAP Help Portal1, there are three tasks that are required for delivery of the EAM session logs to the controller via the Firefighter Log Report Review Workflow. These are: Assignment of a EAM Owner ID, Configuration of the Agent ID GRAC_SPM_CNTL_AGENT, and Execution of the Firefighter Log Synch. The EAM Owner ID is a user who is responsible for reviewing and approving the EAM session logs. The Agent ID GRAC_SPM_CNTL_AGENT is a workflow agent rule that determines the recipients of the workflow tasks for log review. The Firefighter Log Synch is a background job that synchronizes the EAM session logs from the plug-in systems to the GRC system. Therefore, A, B and E are the correct answers.C and D are not valid tasks for delivering the EAM session logs, as they are related to other aspects of EAM configuration, such as workflow synchronization and master data synchronization. Reference:1https://help.sap.com/doc/e2ccae7ee6354b169cf845cd665e07fe/1.0%202016-07/en-US/frameset.htm?frameset.htm

According to the SAP wiki3, you can ensure that a coordinator has the opportunity to review UAR request assignments by setting the Admin review required before sending tasks to reviewers parameter for UAR to YES. This parameter controls whether a coordinator can review and modify the UAR request assignments before they are sent to reviewers.

According to the SAP Help Portal1, one of the ways to specify on which system and client the control is executed is to assign a risk definition to the control for the desired system. The risk definition contains the connector information that determines the system and client where the control runs. Therefore, A is the correct answer.B, C, and D are not valid ways to specify the system and client for control execution, as they are related to other aspects of control configuration, such as approval, reporting, and rule set assignment. Reference:1https://help.sap.com/doc/e2ccae7ee6354b169cf845cd665e07fe/1.0%202016-07/en-US/frameset.htm?frameset.htm

According to the SAP Blogs1, Business Role Management provides several capabilities for managing roles in SAP Access Control. Some of these capabilities are: Facilitate role creation at the function level (A), Align role definitions with business processes , and Standardize methodology for role assignment (D). These capabilities help to simplify and automate the role design and maintenance process. Therefore, A, C and D are the correct answers.B and E are not valid capabilities of Business Role Management, as they are related to other scenarios, such as Role Certification and Emergency Access Management. Reference:1https://blogs.sap.com/2019/03/14/sap-access-control-12-role-certification/