CCSE: CrowdStrike Certified SIEM Engineer

By CrowdStrike · Question Mode

QuestionQ35

VerifiedCorrelation Rules and Falcon Fusion SOAR

You need to grant a colleague the appropriate role to configure connectors and create SOAR automations in Next-Gen SIEM.

Which role provides these permissions while maintaining least privilege?

Explanation

NG SIEM Security Lead provides the Next-Gen SIEM administrative permissions needed to configure connectors and create SOAR automations without assigning the broader Falcon-wide privileges of the Falcon Security Lead role.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!