7.2 Identify and Describe Privileged Access Management (PAM) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A support engineer occasionally needs to reset a user's password, but the security team does not want the engineer to have permanent administrative rights. They want the engineer to be able to request elevated access only when needed, and have it automatically removed after the task. Which PAM approach best fits this requirement?

   • ASession recording, which records all sessions for audit.
   • BCredential vaulting, which stores the admin password in a secure vault.
   • CSession isolation, which runs sessions in a separate environment.
   • DJust-in-time access, which grants temporary elevated privileges that expire after a defined period.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is just-in-time (JIT) access in the context of PAM?

   • AProviding temporary, time-limited elevated privileges that are automatically revoked after use
   • BProviding permanent elevated privileges to all users
   • CProviding elevated privileges after a security incident
   • DProviding elevated privileges only during business hours
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary benefit of automatically rotating privileged account passwords on a regular schedule?

   • AIt reduces the window of opportunity for an attacker who has obtained a password
   • BIt ensures that all passwords are the same across the organization
   • CIt eliminates the need for multi-factor authentication
   • DIt permanently deletes old passwords from the system
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company has a shared admin account for a legacy application. They want to ensure that the password is not known by any individual and is changed regularly. Which PAM feature should they use?

   • ALeast privilege policies
   • BSession recording only
   • CCredential vaulting with automatic rotation
   • DSession monitoring only
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following best describes how a PAM credential vault controls access to stored credentials?

   • AIt stores passwords in plain text for easy retrieval
   • BIt allows any authenticated user to view all stored passwords
   • CIt only allows access during business hours
   • DIt grants access based on user identity, role, and policy, with full auditing of who accessed what
   Reveal Solution Discussion Select an answer first