1.1 Demonstrate Knowledge of Planning and Configuring System Authentication and Authorization XSOAR-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   An organization is migrating from LDAP to SAML SSO. During the transition, some users can log in via SAML but cannot access certain playbooks they previously used. The administrator verifies that the SAML assertion includes the correct username attribute. What is the most likely cause?

   • AThe LDAP server is still enforcing password policies
   • BThe users' roles are not mapped correctly in the SAML attribute mapping
   • CThe users' local accounts were deleted during migration
   • DThe SAML identity provider is using a different username format
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A user has been promoted from analyst to team lead and now needs to manage other analysts' accounts. The team lead should not have access to system configuration. What should the administrator do?

   • ACreate a custom role with user management permissions but without system configuration permissions
   • BAssign the Administrator role
   • CAssign the Analyst role and enable user management
   • DModify the Analyst role to add user management
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A user reports they cannot log in to XSOAR via SSO. The SAML configuration appears correct. What is the first troubleshooting step?

   • AChange the user's password in XSOAR
   • BReinstall the XSOAR server
   • CCheck the XSOAR logs for SAML authentication errors
   • DDisable the user's account and re-enable it
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a recommended best practice for securing authentication in XSOAR?

   • ADisable multi-factor authentication (MFA) to simplify login
   • BAllow users to share accounts for convenience
   • CUse the same role for all users to reduce administrative overhead
   • DEnforce strong password policies for local users
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   When integrating XSOAR with an external identity provider for SSO, what is the role of the identity provider (IdP)?

   • ATo store XSOAR's incident data
   • BTo authenticate users and provide assertions about their identity
   • CTo manage XSOAR's custom roles
   • DTo provide the XSOAR server's IP address
   Reveal Solution Discussion Select an answer first