Palo_Alto_Networks
XSIAM-ENGINEER · Question #32
XSIAM-ENGINEER Question #32: Real Exam Question with Answer & Explanation
Sign in or unlock XSIAM-ENGINEER to reveal the answer and full explanation for question #32. The question stem and answer options stay visible for context.
Question
Administrators from Building 3 have been added to Cortex XSIAM to perform limited functions on a subset of endpoints. Custom roles have been created and applied to the administrators to limit their permissions, but their access should also be constrained through the principle of least privilege according to the endpoints they are allowed to manage. All endpoints are part of an endpoint group named "Building3," and some endpoints may also be members of other endpoint groups. Which technical control will restrict the ability of the administrators to manage endpoints outside of their area of responsibility, while maintaining visibility to Building 3's endpoints?
Options
- ASBAC enabled in Building 3's IP range with the "EG:Building3" tag assigned to each
- BSBAC enabled in Permissive Mode with the "EG:Building3" tag assigned to each administrator's
- CSBAC enabled in Restrictive Mode with the "EG:Building3" tag assigned to each administrator's
- DSBAC enabled globally with the "EG:Building3" tag assigned to each administrator's scope
Unlock XSIAM-ENGINEER to see the answer
You've previewed enough free XSIAM-ENGINEER questions. Unlock XSIAM-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.