CCSE: CrowdStrike Certified SIEM Engineer

By CrowdStrike · Question Mode

QuestionQ15

VerifiedParsing and Normalization

Which default role follows the principle of least privilege while permitting the creation and management of parsers?

Explanation

NG SIEM Security Lead grants the Next-Gen SIEM content-management permissions needed to create and manage parsers without assigning the broader administrative privileges of NG SIEM Administrator. Analyst roles do not provide the required parser-management access.

Community Discussion

No comments yet. Be the first to start the discussion!