An organization wants to enforce a minimum password length of 12 characters and require that passwords expire every 60 days for local XSOAR accounts. Where should the administrator configure these requirements?

In the LDAP server's password policy

In XSOAR's authentication settings under password policy

In the SAML identity provider's password settings

An organization is configuring SAML SSO and wants to ensure that only users from the 'security' group in the identity provider can access XSOAR. The identity provider supports group attributes in the assertion. What is the most reliable way to enforce this restriction?

Configure XSOAR to only accept SAML assertions that include the 'security' group attribute

Use LDAP authentication and filter by group membership

Create local accounts for all security group members and disable SAML

Rely on the identity provider to only send assertions for users in the 'security' group

A contractor who previously had access to XSOAR has left the company. The administrator wants to ensure the contractor's account can no longer be used, but must preserve the audit history of actions taken under that account. What should the administrator do?

Change the user's password to a random value

Palo Alto NetworksCertified XSOAR Engineer

Domain 1Objective 1

1.1 Demonstrate Knowledge of Planning and Configuring System Authentication and Authorization XSOAR-ENGINEER Practice Questions (Page 1)

Part of the Planning, Installation, and Maintenance domain, which accounts for 14% of the XSOAR-ENGINEER exam.

28questions here

6free pages

7concepts

14%of the exam

Questions 1–5

1application · medium
An organization wants to enforce a minimum password length of 12 characters and require that passwords expire every 60 days for local XSOAR accounts. Where should the administrator configure these requirements?
Select an answer first
2expert · hard
An organization is configuring SAML SSO and wants to ensure that only users from the 'security' group in the identity provider can access XSOAR. The identity provider supports group attributes in the assertion. What is the most reliable way to enforce this restriction?
Select an answer first
3foundation · easy
Which authentication method in XSOAR allows users to authenticate using credentials stored directly in the XSOAR local database?
Select an answer first
4application · medium
A new SOC analyst needs to view and investigate incidents, create notes, and run playbooks, but must not be able to modify user accounts or change system configuration. Which predefined role should be assigned?
Select an answer first
5application · medium
A contractor who previously had access to XSOAR has left the company. The administrator wants to ensure the contractor's account can no longer be used, but must preserve the audit history of actions taken under that account. What should the administrator do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XSOAR-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “XSOAR-ENGINEER” is a trademark of its owner, used for identification only.

1.1 Demonstrate Knowledge of Planning and Configuring System Authentication and Authorization XSOAR-ENGINEER Practice Questions (Page 1)

Questions 1–5

An organization wants to enforce a minimum password length of 12 characters and require that passwords expire every 60 days for local XSOAR accounts. Where should the administrator configure these requirements?

An organization is configuring SAML SSO and wants to ensure that only users from the 'security' group in the identity provider can access XSOAR. The identity provider supports group attributes in the assertion. What is the most reliable way to enforce this restriction?

Which authentication method in XSOAR allows users to authenticate using credentials stored directly in the XSOAR local database?

A new SOC analyst needs to view and investigate incidents, create notes, and run playbooks, but must not be able to modify user accounts or change system configuration. Which predefined role should be assigned?

A contractor who previously had access to XSOAR has left the company. The administrator wants to ensure the contractor's account can no longer be used, but must preserve the audit history of actions taken under that account. What should the administrator do?

Keep studying — Planning, Installation, and Maintenance