1.4 Explain the Configuration and Management Lifecycle of User Identity, Roles, Permissions, and Access Controls Within a Cortex Tenant (e.g., Scope-Based Access Control [SBAC], Custom Role-Based Access Control [RBAC] Roles, API Keys) CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–22

1. 21foundation · easy

   In Cortex, which of the following is required to configure access control for a user?

   • AA network zone and an IP address
   • BA user group and an email address
   • CAn API key and a password
   • DA role and a data scope
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   An organization uses Azure AD to provision users into Cortex. A user has been terminated, and the administrator has disabled the user's account in Azure AD. However, the user still has access to Cortex. What is the most likely reason for this?

   • AThe user's role in Cortex grants access that is not tied to the Azure AD account.
   • BThe user's group membership in Cortex has not been updated.
   • CThe user has an API key that is still active.
   • DThe user's role is assigned directly and not through a group.
   Reveal Solution Discussion Select an answer first