A SOC manager wants to allow a group of analysts to view and investigate alerts but prevent them from exporting data or performing response actions. The manager also wants to ensure that these analysts cannot modify their own permissions. What should the manager do?

Assign the Admin role and rely on user discipline

Create a custom role with view and investigate permissions, but without export or response permissions

Use the Viewer role, which allows investigation and export

Assign the Analyst role, which includes export and response permissions

How does Cortex XDR support compliance with common standards such as PCI DSS or HIPAA?

Through logging, auditing, and reporting capabilities

By providing a dedicated compliance officer role

By disabling all user access to logs

By automatically encrypting all data in transit

In Cortex XDR, what does a user role primarily determine?

The amount of storage space allocated for log data

The network bandwidth available for data ingestion

The encryption algorithm used for data at rest

The specific permissions and access controls granted to a user

How does Role-Based Access Control (RBAC) in Cortex XDR help enforce least privilege access?

By requiring users to request permission for every action

By encrypting all user communications

By granting users only the permissions necessary for their job functions

By automatically granting all users full administrative access

Palo Alto NetworksCertified Security Operations Professional

Domain 1Objective 1

1.1 Explain the Function of Users, Roles, Log Management, Compliance, and Data Protection in Cortex XDR SECURITY-OPERATIONS-PROFESSIONAL Practice Questions (Page 4)

Part of the Security Operations Fundamentals domain, which accounts for 25% of the SECURITY-OPERATIONS-PROFESSIONAL exam.

31questions here

7free pages

6concepts

25%of the exam

Questions 16–20

16foundation · easy
Which mechanism is used in Cortex XDR to protect sensitive data from being exposed in logs or reports?
Select an answer first
17application · medium
A SOC manager wants to allow a group of analysts to view and investigate alerts but prevent them from exporting data or performing response actions. The manager also wants to ensure that these analysts cannot modify their own permissions. What should the manager do?
Select an answer first
18foundation · easy
How does Cortex XDR support compliance with common standards such as PCI DSS or HIPAA?
Select an answer first
19foundation · easy
In Cortex XDR, what does a user role primarily determine?
Select an answer first
20foundation · easy
How does Role-Based Access Control (RBAC) in Cortex XDR help enforce least privilege access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “SECURITY-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.