1.5 Configure User Roles, Permissions, and Access Controls XSIAM-ENGINEER Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   Which of the following is an example of an access control configuration in XSIAM?

   • ASetting a role's permission to view only incident data
   • BEnabling multi-factor authentication for all users
   • CSetting the time zone for the XSIAM interface
   • DConfiguring the system to send email alerts for critical incidents
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A compliance officer needs to verify that no user has accessed the 'HR' data source without authorization in the last 90 days. What is the most efficient way to perform this verification?

   • ACheck the password policy to ensure only authorized users have valid passwords.
   • BQuery the audit log for access events to the 'HR' data source and cross-reference with the list of authorized users.
   • CReview the XSIAM configuration backup to see which users were configured.
   • DReview the current role assignments to see which users have access to the 'HR' data source.
   Reveal Solution Discussion Select an answer first
3. 23foundation · easy

   What is the principle of least privilege in role assignment?

   • AUsers should be granted only the permissions necessary to perform their job functions
   • BUsers should be assigned to roles based on their seniority in the organization
   • CUsers should be given all permissions by default and then have them removed as needed
   • DUsers should be assigned to the role with the highest level of access to avoid delays
   Reveal Solution Discussion Select an answer first