7.2 Identify and Describe Privileged Access Management (PAM) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of session recording in a PAM system?

   • ATo isolate the session from the user's endpoint
   • BTo automatically terminate sessions that violate policy
   • CTo rotate the password after the session
   • DTo provide an audit trail for compliance and forensic analysis
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A financial firm has a policy that any privileged account password that has been used must be changed immediately to prevent replay attacks. They are implementing a PAM solution. Which PAM feature directly enforces this policy?

   • ALeast privilege policies that limit what commands can be run.
   • BSession isolation that runs the session in a separate environment.
   • CSession recording that captures all keystrokes during the session.
   • DCredential rotation that triggers after each check-out or session ends.
   Reveal Solution Discussion Select an answer first
4. 3expert · medium

   A company is under regulatory pressure to prove that only authorized personnel accessed a critical system and what they did. They have implemented a PAM solution, but the auditor is asking for evidence that the credentials used were not shared and that the sessions can be replayed. Which two PAM features are most directly needed to satisfy the auditor?

   • ACredential vaulting with unique credentials per user and session recording
   • BLeast privilege and JIT access
   • CCredential rotation and session monitoring
   • DSession monitoring and session isolation
   Reveal Solution Discussion Select an answer first
5. 4expert · medium

   A security operations center (SOC) is monitoring privileged sessions for a large enterprise. They have noticed that some sessions are being initiated from unmanaged endpoints. The SOC wants to be able to see what is happening in these sessions in real time and also terminate them if they detect malicious activity. Which PAM features are most directly needed?

   • ASession monitoring with the ability to terminate sessions, and session isolation to contain the session
   • BSession recording only
   • CLeast privilege and JIT access
   • DCredential vaulting and rotation
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company's database administrators frequently need elevated access to production databases, but the security team is concerned about credentials being exposed on admin laptops. They want to ensure admins only get the access they need for a specific task and that the credentials are never stored on the local machine. Which PAM approach best meets these requirements?

   • AGive each admin a unique password for the database and require them to change it every 90 days.
   • BUse a shared service account with a complex password that is distributed to all admins via a secure email.
   • CConfigure the database to use Windows authentication and rely on Active Directory group membership for access.
   • DStore the database passwords in a centralized vault and require admins to check them out for a limited time, with the vault automatically rotating the password after the check-out period.
   Reveal Solution Discussion Select an answer first