Examkin

Question

Difficulty: EasyIdentity and Access Management Operations

An enterprise administrator requires short-term elevated permissions to perform maintenance on a critical domain controller. Rather than assigning a permanent administrative account, the security operations team uses a Privileged Access Management (PAM) solution that temporarily grants rights and automatically revokes them when the maintenance window expires. Which of the following identity and access management operational concepts is best demonstrated in this scenario?

  1. Just-In-Time (JIT) access elevationAnswer
  2. B
    Perimeter-based implicit trust authorization
  3. C
    Static discretionary access control delegation
  4. D
    Detective credential harvesting log analysis

Answer

Just-In-Time (JIT) access elevation
Just-In-Time (JIT) access elevation provides temporary administrative privileges only when needed for a specific task, reducing standing privileges and mitigating account compromise risk.

Step-by-Step Solution

1
Analyze the operational access requirement in the scenario
The administrator requires temporary elevated permissions exclusively for an emergency maintenance window.
Persistent administrative access creates unnecessary attack surface and risk.
2
Identify the PAM privilege management mechanism applied
The PAM system provisions temporary elevated rights and revokes them automatically after maintenance.
Dynamic, time-bound privilege assignment corresponds directly to Just-In-Time (JIT) access control.

Key Concept

Privileged Access Management (PAM) and Just-In-Time (JIT) Provisioning
Rate this question

Topics

Identity and Access Management Operations

More questions from this topic