ERP Security 4

Question 1

Which ERP security control helps detect when a privileged user exports an unusually large volume of records outside normal business patterns?

Accepted Answer

User and entity behavior analytics (UEBA)

Answer

UEBA establishes behavioral baselines and alerts when anomalous data access or export patterns are detected.

Question 2

When migrating an ERP system to a cloud provider, who is responsible for configuring ERP application-level user access controls?

Accepted Answer

The organization, as the ERP application owner

Answer

Under the cloud shared responsibility model, the customer always owns security configuration within the applications they deploy.

Question 3

A company wants to allow auditors read-only access to financial reports in the ERP without exposing transaction entry screens. Which approach is most appropriate?

Accepted Answer

Assign a dedicated read-only auditor role with no posting privileges

Answer

A purpose-built read-only role enforces least privilege, giving auditors exactly the access they need—nothing more.

Question 4

SAP's Security Audit Log (SM20) is used primarily for which purpose?

Accepted Answer

Recording and reviewing security-relevant ERP events for forensic analysis

Answer

SM20 captures login attempts, authorization failures, and sensitive transaction usage, enabling security incident investigation.

Question 5

Which type of ERP security test simulates a real-world attacker attempting to exploit vulnerabilities without prior knowledge of the system?

Accepted Answer

Black-box penetration testing

Answer

Black-box penetration testing mimics an external attacker with no insider knowledge, revealing externally exploitable weaknesses.

ERP - Management Practice Test

ERP - Management Practice Test

ERP Security 4