Free Preparation Discussions
MENU
Palo Alto Networks SecOps-Pro Exam - Topic 1 Question 4 Discussion
Topic #: 1
What is enabled by Role-Based Access Control (RBAC) in Cortex XDR?
In Cortex XDR, Role-Based Access Control (RBAC) is the primary mechanism for enforcing the principle of least privilege within the management console. It allows organizations to define exactly what an administrator or analyst can see and do.
Permissions Management: RBAC allows the 'Account Admin' to create or use predefined roles (such as Security Admin, Instance Admin, or Viewer) that grant specific permissions for various actions like viewing alerts, performing remediation (isolating endpoints), or configuring malware profiles.
Assignment of Rights: These roles are then assigned to users or groups (often synced via SAML/Active Directory). This ensures that a Tier 1 analyst might have 'View Only' rights for certain logs, while a Tier 3 analyst or SOC Manager has the rights to execute scripts or initiate Live Terminal sessions.
Distinction from Network Policies: Unlike firewall rules (Option D), RBAC in Cortex XDR specifically governs administrative access to the platform itself, not the flow of user traffic across the network.
Veronika
1 hour agoDevorah
5 days agoAmber
10 days agoEulah
16 days agoGregg
21 days agoEzekiel
26 days agoAretha
1 month agoArletta
1 month agoThora
1 month agoCraig
2 months agoMartin
2 months agoYuriko
2 months agoCorazon
2 months agoRuby
2 months agoAbraham
2 months agoViola
3 months agoRuth
3 months agoTammara
3 months ago