CCSE: CrowdStrike Certified SIEM EngineerDemo

Question

You need to grant a colleague the appropriate role to configure connectors and create SOAR automations in Next-Gen SIEM.

Which role provides these permissions while maintaining least privilege?

A NG SIEM Security Lead
B NG SIEM Analyst
C Falcon Security Lead
D Custom role

Explanation

NG SIEM Security Lead provides the Next-Gen SIEM administrative permissions needed to configure connectors and create SOAR automations without assigning the broader Falcon-wide privileges of the Falcon Security Lead role.

Learn more

Falcon Next-Gen SIEM

CCSE: CrowdStrike Certified SIEM EngineerDemo

AstroTutor

Notes

Readiness

QuestionQ35

Community Discussion