CrowdStrike Certified Security Engineer (CCSE) — Question 7

Which default role will maintain least privilege and allow for creation and management of parsers?

Answer options

• A. NG SIEM Analyst
• B. NG SIEM Security Lead
• C. NG SIEM Administrator
• D. NG SIEM Analyst – Read Only

Correct answer: B

Explanation

The NG SIEM Security Lead role is designed to maintain least privilege while providing the necessary permissions for creating and managing parsers. The other roles, such as NG SIEM Administrator and NG SIEM Analyst – Read Only, may have broader permissions or restrictions that do not align with the least privilege principle.