A security operations team is reviewing identity and access management controls after an internal audit revealed two major vulnerabilities: third-party contractor sessions remain active for 24 hours without re-validation, and administrative users are executing high-risk privilege escalations from non-standard locations without step-up authentication. Which of the following IAM operational solutions should the security team implement to remediate these specific findings? (Select TWO.)
- Implement Conditional Access policies with Continuous Access Evaluation (CAE) to re-evaluate session risk and enforce real-time revocation.Cevap
- Deploy a Privileged Access Management (PAM) solution enforcing Just-in-Time (JIT) access elevation and time-bound session limits for administrative functions.Cevap
- CConfigure an internal IP address allowlist on the network perimeter firewall to grant trusted SSO access to all internal network segments.
- DReplace the identity provider authentication mechanism with a local authorization database on each target server.
Cevap
The security team should implement Conditional Access policies with Continuous Access Evaluation (CAE) and deploy a Privileged Access Management (PAM) solution enforcing Just-in-Time (JIT) access.
Implementing Conditional Access with Continuous Access Evaluation (CAE) directly addresses long-lived session risks by continuously evaluating context (such as location and device compliance) during active sessions. Deploying Privileged Access Management (PAM) with Just-in-Time (JIT) access restricts standing administrative privileges by granting temporary, elevated permissions only when needed.
Adım Adım Çözüm
Anahtar Kavram
Operational IAM lifecycle controls including Conditional Access, Continuous Access Evaluation, and Privileged Access Management (PAM) JIT access.