An organization is establishing a secure onboarding process for system administrators to enforce least privilege and privileged access management (PAM). In what order should the administrative security operations team perform the following operational tasks during user onboarding?
- 1Verify the candidate's employment details and authorization with Human Resources.
- 2Provision a baseline user account with non-administrative permissions in the central Identity Provider (IdP).
- 3Enroll the identity into the Privileged Access Management (PAM) solution for checked-out administrative access.
- 4Enforce Multi-Factor Authentication (MFA) registration and perform an audit of initial access permissions.
Cevap
The correct operational sequence begins with identity verification via HR records, followed by provisioning a standard baseline account in the Identity Provider, then integrating the user into the Privileged Access Management solution, and concluding with enforcing Multi-Factor Authentication and conducting a final permission audit.
The correct sequence starts with identity verification against authoritative HR records to validate authorization. Next, a basic non-privileged account is created in the central Identity Provider to enforce least privilege. The account is subsequently registered in the Privileged Access Management (PAM) vault to manage temporary elevation securely. Finally, Multi-Factor Authentication (MFA) registration is completed and initial permissions are audited to finalize secure onboarding.
Adım Adım Çözüm
Anahtar Kavram
Identity Lifecycle Management and PAM Onboarding Operations