Answer / naveen kumar

As a part of a security the functional consultant must give
wht r the tcode that are to be secure and not to be given
to end user depending on that we perpare a matrix

and then we create a role for the each indiviual matrix

assign to end user according to there business requirement

and thus we restrict the user for using of critical tcodes

we should not give SAP_All,SAP_NEW profiles to any user
inthe oragnization until unless told if u also give put a
trace on for that particular user id

Answer / chandu

First we are checking that t-code is critical tcode
Or not . After we take approval from our manager
Then. We are not assign tcode directly,
We create one role then we assign to role
That team..

If am wrong , correct me

One of the user logged into Production System, changed a table and then logged out. How will you track him?

2 Answers   Atos Origin, Infosys,

---

Explain internet-level security?

0 Answers  

---

what is transaction variant?

1 Answers   TCS,

---

What are the authorization objects which are always present in user master record?

1 Answers   Wipro,

---

How will you delete the user in sap security SU01

3 Answers  

---

What is the correct procedure for Mass Generation of Roles?

3 Answers   Satyam,

---

How can you find all t-codes which are locked in the system ?

5 Answers   Wipro,

---

Which t-code can be used to delete old security audit logs?

0 Answers  

---

What are su 24 t-codes used for?

1 Answers  

---

What profile versions?

0 Answers  

---

What are the components in VIRSA tool and GRC?

12 Answers   SAP Labs,

---

1).what is the diff b/w adding the tcode in s_tcode authorization object and addind the tcode inmenu tab of pfcg? 4) What is the difference between Owner, Controller and Administrator in Firefighter? 2) Can you tell me why do you use S_TABU_DIS authorization object? 3) Explain How do you restrict a particular table acces then? 5)In RAR ,What are the default Back ground Jobs? 6)Which job will update all user master records? 7)What will happen whenever we execute a t-code? 8)What is the purpose of the report RSUSR006? 9) Lets say a user is locked by admin? What value will you see in USR02 table and in UFLAG column? 10) What will you do if the user complains that he is not able to access a t-code? 11)why we have to delete users ? 12)a. What is Direct role assignment and indirect role assignment? b. What is the process of adding a t-code to an existing role? c. If client asked you to modify a role directly in PRODUCTION for emergency? Is it possible? What you will do in that situation? d. What is the purpose of customized Transaction codes? Have you created any custom t-codes? 13)

3 Answers   IBM,

---