1.1 Demonstrate Knowledge of Planning and Configuring System Authentication and Authorization XSOAR-ENGINEER Practice Questions (Page 6)

Questions 26–28

1. 26application · medium

   A security operations center is implementing XSOAR and requires analysts to authenticate using their existing corporate Active Directory credentials. The team also wants to enforce multi-factor authentication (MFA) at the identity provider level. Which authentication method should the administrator configure in XSOAR?

   • ARADIUS authentication to the Active Directory server
   • BLocal authentication with password synchronization
   • CSAML single sign-on with the corporate identity provider
   • DLDAP authentication with the Active Directory server
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An administrator is reviewing XSOAR user accounts and finds that several users have the Administrator role who only need to view dashboards and investigate incidents. What is the best practice to address this?

   • ADisable the accounts and create new ones with the Read-Only role
   • BCreate a custom role with all permissions except user management
   • CLeave the accounts as-is to avoid disrupting their work
   • DAssign the Analyst role to users who need investigation capabilities
   Reveal Solution Discussion Select an answer first
3. 28foundation · easy

   When configuring LDAP authentication in XSOAR, which setting is required to specify the location of the LDAP server?

   • APassword policy
   • BServer hostname or IP address
   • CSAML assertion URL
   • DDefault user role
   Reveal Solution Discussion Select an answer first