CCSE: CrowdStrike Certified SIEM Engineer

By CrowdStrike · Question Mode

QuestionQ17

VerifiedCQL Querying and Data Analysis

Which scope-and-permission combination must be configured for an API token to create a query job and retrieve its results in Next-Gen SIEM?

Explanation

NGSIEM Write permission is required to create a Search Query Job, and NGSIEM Read permission is required to fetch the query job and its results. Both permissions are therefore necessary.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!