ERP Security 3

Question 1

Which attack vector specifically targets ERP systems by exploiting trust relationships between connected third-party integrations?

Accepted Answer

Supply chain / API integration attacks

Answer

ERP systems connected to third-party APIs can be compromised through insecure integration points, making API security critical.

Question 2

What is the primary purpose of an ERP security baseline configuration?

Accepted Answer

To define the minimum secure settings required before go-live

Answer

A security baseline establishes the hardened default configuration that every ERP instance must meet before deployment.

Question 3

A user in the procurement module can create purchase orders and also approve them. This violates which principle?

Accepted Answer

Segregation of duties

Answer

SoD requires that creating and approving the same transaction be handled by different users to prevent unauthorized purchasing.

Question 4

Which ERP security log event should trigger an immediate security alert?

Accepted Answer

Access to SAP basis transaction SE16 by a non-basis user

Answer

SE16 (table browser) allows direct database table access and should never be used by non-basis users in production.

Question 5

In Microsoft Dynamics 365, what mechanism controls which entities and fields a user security role can read, write, or delete?

Accepted Answer

Privileges and access levels on security roles

Answer

Dynamics 365 security roles combine entity-level privileges with access level scopes (user, business unit, organization) to govern data access.

ERP - Management Practice Test