Which practice is a key component of Privileged Access Management (PAM)?

Granting permanent privileged access to all IT staff

Storing privileged passwords in plain text in a shared spreadsheet

Allowing all administrators to share the same privileged account

Vaulting privileged credentials and rotating them regularly

A security architect is designing a privileged access management (PAM) solution for a large enterprise. The goal is to reduce the risk of credential theft and misuse of administrative accounts. Which practice should the architect include as a core component of the PAM design?

Credential vaulting and rotation

Mandatory access control (MAC) for all users

Periodic review of user access rights

Single sign-on (SSO) for all applications

What is the primary purpose of a Privileged Access Management (PAM) solution?

To secure, manage, and monitor accounts with elevated permissions

To enforce data loss prevention policies

To manage user passwords for standard accounts

To provide single sign-on for all users

A multinational corporation is implementing a new ERP system. The architect needs to define access rights for users based on their job function, such as accounts payable clerks having access to invoice processing and purchasing managers having access to purchase orders. Which authorization concept should be used to assign these permissions efficiently?

Certificate-based authorization

Digital Rights Management (DRM)

Information Systems Security Architecture Professional

Domain 4Objective 3

4.3 Architect Identity Authorization ISSAP Practice Questions (Page 4)

Part of the Identity and Access Management (IAM) Architecture domain, which accounts for 25% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 5–8 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

6concepts

25%of the exam

Questions 16–20

16foundation · easy
Which practice is a key component of Privileged Access Management (PAM)?
Select an answer first
17application · medium
A security architect is designing a privileged access management (PAM) solution for a large enterprise. The goal is to reduce the risk of credential theft and misuse of administrative accounts. Which practice should the architect include as a core component of the PAM design?
Select an answer first
18foundation · easy
In the authorization lifecycle, which phase involves verifying that a user's access rights are still appropriate for their current job responsibilities?
Select an answer first
19foundation · easy
What is the primary purpose of a Privileged Access Management (PAM) solution?
Select an answer first
20application · medium
A multinational corporation is implementing a new ERP system. The architect needs to define access rights for users based on their job function, such as accounts payable clerks having access to invoice processing and purchasing managers having access to purchase orders. Which authorization concept should be used to assign these permissions efficiently?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.

4.3 Architect Identity Authorization ISSAP Practice Questions (Page 4)

Questions 16–20

Which practice is a key component of Privileged Access Management (PAM)?

A security architect is designing a privileged access management (PAM) solution for a large enterprise. The goal is to reduce the risk of credential theft and misuse of administrative accounts. Which practice should the architect include as a core component of the PAM design?

In the authorization lifecycle, which phase involves verifying that a user's access rights are still appropriate for their current job responsibilities?

What is the primary purpose of a Privileged Access Management (PAM) solution?

Keep studying — Identity and Access Management (IAM) Architecture