Operational SAP Security Interview Questions & Answers:

1. What are the components of grc?

SAP GRC covers following components:
1) Access Control
2) Process Control
3) Risk Management
4) Environment, Health and Safety
5) Global Trade Service

Further, Global Trade Service (which is an area more specific to my interest) has following sub-modules:
1) Compliance Management
2) Customs Management
3) Risk Management

2. What is the use of RSECADMIN?

IN SAP BI
Reporting Users - Analysis Authorization using transaction
RSECADMIN, to maintain authorizations for reporting users.

RSECADMIN - To maintain analysis authorization and role
assignment to user.

3. Explain about SPM?

SPM can be used to maintain and monitor the super user
access in an SAP system. This enables the super-users to
perform emergency activities and critical transactions
within a completely auditable environment. The logs of the
SPM user IDs helps auditors in easily tracing the critical
transactions that have been performed by the Business users

4. What is the T-code to get into RAR from R/3?

/virsar/ZVRAT

5. Does s_tabu_dis org level values in a master role gets reflected in the child role?

If we do the adjusted derived role in the master role
while updating the values in the master role thn values will
be reflected in the child roles.

6. What is the main difference between single role and a derived role?

Main difference--we can add/delete the tcodes for the
single roles but we cann't do it for the derived roles.

7. Tell me about derived role?

Derived roles..To restrict the user access based on
organizational level values.
Derived role will be inherited by master role and inherit
all the properties except org level values.

8. What is the main purpose of Parameters, Groups &
Personalization tabs?

parameters : when ever user want some defaults values
when ever he/she excute the t-code we can mainatian some
pid's by taking help of abapers.

9. What does the Profile Generator do?

we can create roles , transport , copy ,
download,modifications , all these thing done from pfcg t-
code.

10. What is the difference between PFCG,PFCG_TIME_DEPENDENCY&PFUD?

PFCG is used to create maintain and modify the roles.
PFCG_TIME_DEPENDENCY is a background job of PFUD.
PFUD is used for mass user comparison but the difference is
if you set the background job daily basis it will do mass
user comparison automatically