1.4 Explain the Configuration and Management Lifecycle of User Identity, Roles, Permissions, and Access Controls Within a Cortex Tenant (e.g., Scope-Based Access Control [SBAC], Custom Role-Based Access Control [RBAC] Roles, API Keys) CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which practice is a recommended best practice for lifecycle governance in Cortex?

   • AAllow users to self-assign roles without approval
   • BDisable audit logging to reduce storage costs
   • CRegularly review user access and role assignments
   • DGrant all users the same role to simplify management
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In Cortex, how can an administrator grant a user additional permissions?

   • ABy changing the user's email address
   • BBy creating a new API key for the user
   • CBy assigning an additional role to the user
   • DBy modifying the user's password
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the effect of removing a role from a user in Cortex?

   • AThe user's password is reset
   • BThe user's account is deactivated
   • CThe user loses all permissions that were granted by that role
   • DThe user's API keys are automatically rotated
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Why is auditing important in the lifecycle governance of identities and access controls?

   • AIt prevents users from changing their passwords
   • BIt automatically rotates API keys
   • CIt provides a record of who accessed what and when, supporting compliance and security investigations
   • DIt reduces the need for role reviews
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In Cortex, which component is used to define the data scope for SBAC?

   • AA folder or dataset
   • BA user group
   • CA network zone
   • DAn API key
   Reveal Solution Discussion Select an answer first