Which action is part of the API key lifecycle in Cortex?

Storing the key in plain text in configuration files

Rotating the key periodically to reduce risk of compromise

Disabling the key after a single use

Sharing the key with all team members for convenience

In Cortex, what is the primary purpose of defining a role?

To store user credentials securely within the tenant

To track user login activity and generate audit logs

To define a set of permissions that can be assigned to users or groups

To group users by department for reporting purposes

A user in Cortex has been assigned the 'Analyst' role, which grants view access to incidents. The user is being promoted to a role that should also allow closing incidents. The 'Analyst' role is shared by 20 other users. What is the best way to update the user's permissions without affecting the other users?

Create a new role with the 'Close Incidents' permission and assign it to the user.

Modify the 'Analyst' role to include the 'Close Incidents' permission.

Add the 'Close Incidents' permission directly to the user's account.

Remove the user from the 'Analyst' role and assign the 'Admin' role.

An administrator needs to revoke access for a user who has been using an API key for automated reporting. The user's account is being deactivated. What should the administrator do to ensure the API key no longer works?

Change the user's role to read-only.

Remove the user from all groups.

When an employee leaves an organization, what is the recommended FIRST step in the Cortex identity lifecycle to secure the tenant?

Deactivate the user account to revoke access while preserving the identity record

Change the user's password to a temporary value and keep the account active

Remove the user's roles but leave the account active

Delete the user account immediately to free up license capacity

Palo Alto NetworksCertified Cloud Security Engineer

Domain 1Objective 4

1.4 Explain the Configuration and Management Lifecycle of User Identity, Roles, Permissions, and Access Controls Within a Cortex Tenant (e.g., Scope-Based Access Control [SBAC], Custom Role-Based Access Control [RBAC] Roles, API Keys) CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Part of the Planning and Installation domain, which accounts for 12% of the CLOUD-SECURITY-ENGINEER exam.

22questions here

5free pages

8concepts

12%of the exam

Questions 6–10

6foundation · easy
Which action is part of the API key lifecycle in Cortex?
Select an answer first
7foundation · easy
In Cortex, what is the primary purpose of defining a role?
Select an answer first
8expert · hard
A user in Cortex has been assigned the 'Analyst' role, which grants view access to incidents. The user is being promoted to a role that should also allow closing incidents. The 'Analyst' role is shared by 20 other users. What is the best way to update the user's permissions without affecting the other users?
Select an answer first
9application · medium
An administrator needs to revoke access for a user who has been using an API key for automated reporting. The user's account is being deactivated. What should the administrator do to ensure the API key no longer works?
Select an answer first
10foundation · easy
When an employee leaves an organization, what is the recommended FIRST step in the Cortex identity lifecycle to secure the tenant?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.