7.2 Identify and Describe Privileged Access Management (PAM) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In a PAM system, when might credential rotation be triggered?

   • AOnly when an administrator manually requests it
   • BOnly when a security incident is detected
   • CWhenever a user logs in to the network
   • DOn a defined schedule, after a privileged session ends, or when a security event occurs
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A security team is investigating a potential breach that occurred during a privileged session two weeks ago. They need to determine exactly what commands were executed and whether any data was exfiltrated. They also want to know if similar activity is happening right now. Which combination of PAM features is most appropriate?

   • ASession isolation only
   • BSession recording for the past session and session monitoring for current sessions
   • CLeast privilege and JIT access
   • DCredential vaulting and rotation
   Reveal Solution Discussion Select an answer first
4. 8expert · medium

   A company has a policy that privileged account passwords must be changed after every use. However, some applications use service accounts that need to maintain a stable connection. The security team is concerned that frequent rotation might disrupt these applications. Which PAM approach best balances the policy with application stability?

   • AUse session recording to monitor service account activity instead of rotating.
   • BExempt all service accounts from rotation to avoid disruption.
   • CUse credential vaulting with rotation, but configure the rotation to occur during a maintenance window and ensure applications use the vault API to retrieve updated credentials.
   • DGrant the applications permanent access to the vault without rotation.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company must comply with an audit requirement that all privileged access to financial systems be reviewable after the fact. They need to prove what commands were executed and by whom. Which PAM feature is most essential for this compliance requirement?

   • ASession monitoring, which alerts on suspicious activity in real time.
   • BCredential vaulting, which stores passwords securely.
   • CJust-in-time access, which grants temporary privileges.
   • DSession recording, which captures the full session for later playback and analysis.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is an example of what session monitoring might detect?

   • AA user changing their own password
   • BA user accessing a shared folder
   • CA user typing an unusually large number of commands in a short time
   • DA user logging in during business hours
   Reveal Solution Discussion Select an answer first