Free Preparation Discussions
MENU
Palo Alto Networks XSIAM-Engineer Exam - Topic 1 Question 1 Discussion
Topic #: 1
Administrators from Building 3 have been added to Cortex XSIAM to perform limited functions on a subset of endpoints. Custom roles have been created and applied to the administrators to limit their permissions, but their access should also be constrained through the principle of least privilege according to the endpoints they are allowed to manage. All endpoints are part of an endpoint group named "Building3," and some endpoints may also be members of other endpoint groups.
Which technical control will restrict the ability of the administrators to manage endpoints outside of their area of responsibility, while maintaining visibility to Building 3's endpoints?
To enforce least privilege for Building 3 administrators, SBAC must be enabled in Restrictive Mode and the administrators' scope must be limited to EG:Building3. This ensures they can only manage endpoints within the Building 3 group, even if those endpoints are also part of other groups, while blocking access to endpoints outside their responsibility.
Carry
1 day agoJustine
6 days agoPura
12 days agoAngelica
17 days agoCiara
22 days agoJesusita
27 days agoYuette
1 month agoTonette
1 month agoMozell
1 month agoLucy
2 months agoCheryl
2 months agoRuby
2 months agoMira
2 months agoKing
2 months agoAlberta
3 months agoJeannine
3 months agoJanet
3 months agoViva
3 months agoRodrigo
2 months ago