ExamGecko
Question list
Search
Search

Question 75 - SPLK-2003 discussion

Report
Export

Which of the following is a reason to create a new role in SOAR?

A.

To define a set of users who have access to a special label.

Answers
A.

To define a set of users who have access to a special label.

B.

To define a set of users who have access to a restricted app.

Answers
B.

To define a set of users who have access to a restricted app.

C.

To define a set of users who have access to an event's reports.

Answers
C.

To define a set of users who have access to an event's reports.

D.

To define a set of users who have access to a sensitive tag.

Answers
D.

To define a set of users who have access to a sensitive tag.

Suggested answer: B

Explanation:

In Splunk SOAR, roles serve multiple purposes, including granting users permission to access system functionality or restricting access to parts of the system1. Creating a new role is often necessary when there is a need to define a specific set of users who have access to a restricted app. This allows for granular control over who can interact with certain apps, ensuring that only authorized users can use them.While roles can also be used to manage access to labels, reports, and tags, the primary reason for creating a new role is typically related to controlling access to apps and their associated functionalities within the SOAR platform1.

Splunk SOAR documentation on managing roles and permissions1.

asked 13/11/2024
Andrew Chan
37 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first