NSE6-FSR-7-3: Fortinet NSE 6 - FortiSOAR 7.3 AdministratorDemo

By Fortinet · Question Mode

QuestionQ37

Security Orchestration and Automation

A security analyst has identified unauthorized access to System Configuration. You must examine the user’s current access level and restrict that access in line with your organization’s requirements.

As part of the audit process, which two actions should you take?

Choose two
  • A Remove the create, read, update, and delete (CRUD) permissions or roles that the user does not require.
  • B View the user’s effective role permissions, and then investigate which role is providing that access.
  • C Remove all record ownership that is assigned to the user.
  • D Review the user’s team hierarchy to ensure that the appropriate relationships are configured.
Explanation

Role-based access is evaluated through the permissions and access controls that apply to the user. Reviewing effective permissions identifies the role responsible for the unauthorized access, and removing roles or CRUD permissions that are not required enforces least privilege. Record ownership and team hierarchy are not the direct remediation for excessive role-based access to System Configuration.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!