ERP Security 2

Question 1

Which ERP security concept ensures that no single user can complete a sensitive transaction from start to finish without another user's involvement?

Accepted Answer

Segregation of duties

Answer

Segregation of duties (SoD) divides critical tasks among multiple users to prevent fraud and error.

Question 2

In SAP ERP, which authorization object controls access to specific financial posting transactions?

Accepted Answer

F_BKPF_BUK

Answer

F_BKPF_BUK governs document posting authorizations by company code in SAP FI.

Question 3

An ERP system stores sensitive HR salary data. Which encryption approach best protects this data at rest?

Accepted Answer

AES-256 column-level encryption

Answer

AES-256 column-level encryption protects specific sensitive fields in the database even if the storage media is compromised.

Question 4

A company discovers that an ERP consultant's account was used to export the entire customer list after their contract ended. What control failure does this represent?

Accepted Answer

Failure to revoke access upon offboarding

Answer

Timely deprovisioning of user accounts when employment or contracts end is a critical access management control.

Question 5

Which ERP security layer protects against SQL injection attacks targeting the ERP database?

Accepted Answer

Parameterized queries and input validation

Answer

Parameterized queries prevent malicious SQL code from being injected through user input fields.

ERP - Management Practice Test

ERP - Management Practice Test

ERP Security 2