Cribl Security & Access Control Flashcards

Which authentication method does Cribl Stream support for integrating with enterprise identity providers?

Answer: SAML 2.0

Cribl Stream supports SAML 2.0 for SSO integration with enterprise identity providers like Okta and Azure AD.

In Cribl, what is the purpose of Role-Based Access Control (RBAC)?

Answer: Restricting user permissions to specific actions and resources

RBAC in Cribl allows administrators to assign roles that restrict what actions users can perform and which resources they can access.

Which built-in Cribl role grants full administrative access to all features and configurations?

Answer: admin

The built-in 'admin' role in Cribl provides full access to all system features, settings, and configurations.

How does Cribl Stream protect sensitive data fields such as credentials or PII within pipelines?

Answer: Using the Mask or Eval functions to redact or encrypt field values

Cribl Stream can use the Mask function or Eval expressions to redact, hash, or encrypt sensitive field values before forwarding.

What TLS configuration option in Cribl ensures that data in transit between sources and Cribl is encrypted?

Answer: Enabling TLS on the input listener

Enabling TLS on Cribl input listeners encrypts data in transit from sources to the Cribl deployment.

In Cribl's multi-tenant environment, what feature ensures one tenant's data is isolated from another?

Answer: Worker Groups with separate configurations and credentials

Worker Groups in Cribl allow separate configurations, credentials, and pipelines per tenant, ensuring data isolation in multi-tenant deployments.