7.2 Identify and Describe Privileged Access Management (PAM) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How does session isolation typically protect the target system?

   • ABy running the session in a secure, separate environment that does not rely on the user's endpoint
   • BBy encrypting all data on the user's hard drive
   • CBy disabling the user's keyboard and mouse
   • DBy requiring the user to use a VPN
   Reveal Solution Discussion Select an answer first
2. 12expert · medium

   A company is implementing PAM to reduce the risk of standing privileges. They want to ensure that administrators only have elevated access when they request it and that the access is automatically revoked after a short period. However, they are concerned that some administrators might forget to request access and then be locked out during critical times. Which approach best addresses this concern while still maintaining the principle of least privilege?

   • AUse session recording to monitor all sessions and rely on post-hoc review.
   • BImplement JIT access with a self-service request portal that allows administrators to request access quickly when needed.
   • CImplement credential vaulting but allow administrators to check out credentials for an unlimited time.
   • DGrant all administrators permanent elevated access to avoid any lockout.
   Reveal Solution Discussion Select an answer first
4. 13expert · medium

   A managed security service provider (MSSP) remotely administers multiple client environments. They are concerned that a compromised workstation at the MSSP could be used to attack client servers. They also need to provide clients with evidence of all actions taken. Which PAM features should the MSSP implement?

   • ALeast privilege and JIT access
   • BSession isolation for all remote sessions and session recording for audit evidence
   • CSession monitoring only
   • DCredential vaulting and rotation
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A hospital's IT team manages servers that contain sensitive patient data. They are concerned that a compromised admin laptop could allow malware to interact with the servers during a remote session. Which PAM feature would best prevent malware on the laptop from directly affecting the server?

   • ASession isolation, which runs the privileged session in a separate, controlled environment rather than directly from the laptop.
   • BLeast privilege, which limits the commands the admin can run.
   • CSession recording, which captures the session for later review.
   • DCredential rotation, which changes the password after each session.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A new system administrator is responsible for user account management. The security team wants to ensure the admin can only perform user management tasks and cannot access other privileged functions like firewall configuration. Which PAM principle should be applied?

   • ASession recording, recording all admin sessions.
   • BCredential rotation, changing the admin's password frequently.
   • CSession isolation, running admin sessions in a separate environment.
   • DLeast privilege, granting only the permissions needed for user management.
   Reveal Solution Discussion Select an answer first