Examkin

Soru

Zorluk: KolayIdentity and Access Management Operations

An enterprise administrator requires short-term elevated permissions to perform maintenance on a critical domain controller. Rather than assigning a permanent administrative account, the security operations team uses a Privileged Access Management (PAM) solution that temporarily grants rights and automatically revokes them when the maintenance window expires. Which of the following identity and access management operational concepts is best demonstrated in this scenario?

  1. Just-In-Time (JIT) access elevationCevap
  2. B
    Perimeter-based implicit trust authorization
  3. C
    Static discretionary access control delegation
  4. D
    Detective credential harvesting log analysis

Cevap

Just-In-Time (JIT) access elevation
Just-In-Time (JIT) access elevation provides temporary administrative privileges only when needed for a specific task, reducing standing privileges and mitigating account compromise risk.

Adım Adım Çözüm

1
Analyze the operational access requirement in the scenario
The administrator requires temporary elevated permissions exclusively for an emergency maintenance window.
Persistent administrative access creates unnecessary attack surface and risk.
2
Identify the PAM privilege management mechanism applied
The PAM system provisions temporary elevated rights and revokes them automatically after maintenance.
Dynamic, time-bound privilege assignment corresponds directly to Just-In-Time (JIT) access control.

Anahtar Kavram

Privileged Access Management (PAM) and Just-In-Time (JIT) Provisioning
Bu soruyu puanla

Konular

Identity and Access Management Operations

Bu konudan daha fazla soru