1.1 Demonstrate Knowledge of Planning and Configuring System Authentication and Authorization XSOAR-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which action is required when creating a new user in XSOAR to ensure they can access the system?

   • AConfigure a SAML identity provider
   • BCreate a new custom role for the user
   • CAssign at least one role to the user
   • DDisable the user's account temporarily
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In XSOAR's role-based access control model, what is the purpose of a predefined role?

   • ATo automatically create user accounts when new employees join
   • BTo encrypt communication between XSOAR and external systems
   • CTo store user credentials for authentication
   • DTo provide a set of permissions that can be assigned to users without needing to define permissions from scratch
   Reveal Solution Discussion Select an answer first
4. 18application · hard

   After configuring SAML SSO, users report they can log in but are immediately logged out when they try to access the incident page. The administrator verifies the identity provider is reachable and the assertion is valid. What is the most likely cause?

   • AThe SAML assertion does not include the correct attribute for the user's role
   • BThe user's browser has cookies disabled
   • CThe identity provider is using the wrong signing certificate
   • DThe SAML endpoint URL is incorrect
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In XSOAR, what is the effect of disabling a user account?

   • AThe user's password is reset to a temporary value
   • BThe user can no longer log in, but their historical data remains intact
   • CThe user is automatically assigned a new role
   • DThe user's data is permanently deleted
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A large organization has multiple XSOAR instances and wants to centralize role management. They currently use SAML SSO and want to assign roles based on group membership in the identity provider. What is the most efficient way to manage roles?

   • ACreate custom roles in each XSOAR instance and map SAML groups to roles in each instance
   • BUse the same predefined roles in all instances and map SAML groups to those roles
   • CUse LDAP authentication and assign roles based on LDAP groups
   • DCreate local users in each instance and assign roles manually
   Reveal Solution Discussion Select an answer first