CCSE: CrowdStrike Certified SIEM EngineerDemo

Question

Which default role follows the principle of least privilege while permitting the creation and management of parsers?

A NG SIEM Analyst
B NG SIEM Security Lead
C NG SIEM Administrator
D NG SIEM Analyst – Read Only

Explanation

NG SIEM Security Lead grants the Next-Gen SIEM content-management permissions needed to create and manage parsers without assigning the broader administrative privileges of NG SIEM Administrator. Analyst roles do not provide the required parser-management access.

CCSE: CrowdStrike Certified SIEM EngineerDemo

AstroTutor

Notes

Readiness

QuestionQ15

Community Discussion