What capability does a power user need to create a Log Event alert action?
What capability does a power user need to create a Log Event alert action?
To create a Log Event alert action, a power user needs the capability to manage and configure alerts. The capability that specifically allows this functionality is 'edit_alerts'. The other options 'edit_search_server', 'edit_udp', and 'edit_tcp' do not relate directly to the creation and management of alert actions.
It is C. If not admin, a power user should have edit_tcp to create a log event alert.
Correct answer is C. See Fundamentals 3 slide 108.