A security operations team is implementing a Just-In-Time (JIT) Privileged Access Management (PAM) workflow to enforce least privilege for emergency system administration. Place the operational steps of the JIT access lifecycle in the correct sequential order from initial request submission to final audit completion.
- 1The administrator submits a time-bound access request detailing the target server, elevated role required, and change ticket number via the PAM portal.
- 2The PAM engine evaluates contextual policies and routes the request for multi-party or manager approval.
- 3The PAM system checks out ephemeral credentials and initiates a brokered, monitored session to the target asset.
- 4The administrator performs the approved maintenance actions strictly within the active time window.
- 5Upon session timer expiration, the PAM proxy terminates connection, rotates temporary credentials, and archives session video recordings and keystroke logs.
Cevap
The correct sequential order for the JIT PAM access lifecycle is: 1) Submission of a time-bound request with justification, 2) Policy evaluation and approval routing, 3) Provisioning of ephemeral credentials and session brokering, 4) Execution of administrative duties within the active session window, and 5) Session termination, credential rotation, and audit log archiving upon expiration.
The proper operational sequence follows standard IAM lifecycle controls: submitting a justified request, obtaining policy authorization, issuing ephemeral credentials with monitoring, performing work within the window, and automatically revoking access while archiving audit logs upon expiration.
Adım Adım Çözüm
Anahtar Kavram
Just-In-Time (JIT) Privileged Access Management (PAM) Operational Sequence