1.3 Configure User Roles, Permissions, and Access Controls XDR-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In Palo Alto Networks XDR, what is the correct way to add a new user to the system?

   • AModify an existing user's permissions to include the new user
   • BCreate the user account and assign a role that defines their permissions
   • CDeactivate an existing user and reuse their account
   • DAssign the user a role without creating an account
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of audit logs in Palo Alto Networks XDR?

   • ATo record user activities and administrative actions for security review
   • BTo configure network firewalls
   • CTo automatically block malicious users
   • DTo store endpoint detection data for threat analysis
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In Palo Alto Networks XDR, what happens when a user is assigned multiple roles?

   • AThe user receives no permissions until an administrator resolves the conflict
   • BThe user receives only the permissions from the role with the highest priority
   • CThe user receives the union of all permissions from the assigned roles
   • DThe user receives only the permissions from the most recently assigned role
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   Your security team suspects that a former employee's XDR account may have been used to access sensitive data after their departure. You need to determine what actions the account performed and when. What should you do?

   • ACheck the user's browser history on their assigned workstation to see what XDR pages they visited.
   • BContact the user's supervisor to ask if they recall any unusual activity.
   • CReset the user's password and force a re-login to see if the account is still active.
   • DReview the audit logs for the user's account to see all actions taken, including logins, data access, and configuration changes.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   When creating a custom role in Palo Alto Networks XDR, what is the first step an administrator must take?

   • ASet the role's expiration date
   • BAssign the role to a user
   • CSelect the specific permissions the role should have
   • DDelete an existing default role to make room
   Reveal Solution Discussion Select an answer first