7.2 Identify and Describe Privileged Access Management (PAM) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the main purpose of session monitoring in a PAM system?

   • ATo observe privileged sessions in real time to detect suspicious activity
   • BTo isolate the session from the user's endpoint
   • CTo automatically change passwords after each session
   • DTo record the session for later playback
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the principle of least privilege?

   • AGranting users only the minimum permissions necessary to perform their job functions
   • BGranting users all permissions by default and removing them when needed
   • CGranting users the same permissions as their manager
   • DGranting users permissions based on their seniority
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of session isolation in a PAM system?

   • ATo prevent malware on the user's endpoint from reaching the target system
   • BTo rotate the password after the session ends
   • CTo monitor the session for suspicious activity
   • DTo record the session for compliance purposes
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary purpose of a credential vault in a privileged access management (PAM) solution?

   • ATo monitor network traffic for malicious activity
   • BTo generate temporary passwords for every user on the network
   • CTo replace all user authentication with biometric verification
   • DTo store privileged account passwords in a centralized, encrypted repository with controlled access
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which of the following is a typical use of a recorded privileged session?

   • ABlocking the user from accessing the system
   • BEncrypting the target system's data
   • CAutomatically resetting the user's password
   • DReviewing the exact commands executed during a security incident
   Reveal Solution Discussion Select an answer first