7.2 Identify and Describe Privileged Access Management (PAM) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company allows third-party contractors to perform maintenance on their servers. The contractors use their own laptops, which may not be fully managed. The company wants to ensure that any malware on the contractor's laptop cannot directly interact with the servers, and that the contractors only have the minimum access needed for the maintenance task. Which two PAM features should be used together?

   • ACredential vaulting and rotation
   • BSession recording and monitoring
   • CSession isolation and least privilege
   • DJust-in-time access and session recording
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security auditor has found that a service account password has not been changed in over two years. The company wants to implement a PAM solution to automatically change this password every 30 days. Which PAM feature should be configured?

   • ASession recording
   • BLeast privilege
   • CSession isolation
   • DCredential rotation with a 30-day schedule
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Why is least privilege important for security?

   • AIt eliminates the need for monitoring user activity
   • BIt makes it easier for users to access all resources
   • CIt limits the potential damage if a user's account is compromised
   • DIt guarantees that no security incidents will occur
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   How does just-in-time (JIT) access reduce security risk?

   • ABy eliminating the need for passwords
   • BBy reducing the amount of time that elevated privileges are available to be exploited
   • CBy granting all users the same level of access
   • DBy making elevated privileges permanent for trusted users
   Reveal Solution Discussion Select an answer first
6. 30expert · medium

   A company's IT team is implementing PAM to reduce the risk of excessive privileges. They want to ensure that administrators only have elevated rights when performing specific tasks, and that these rights are automatically removed after the task is complete. However, they also need to ensure that administrators can still perform emergency tasks without delay. Which approach best balances these requirements?

   • AGrant all administrators permanent elevated access to avoid any delays.
   • BImplement credential vaulting but allow administrators to check out credentials for an unlimited time.
   • CUse session recording to monitor all sessions and rely on post-hoc review.
   • DImplement JIT access with an approval workflow that allows for emergency access requests to be approved quickly.
   Reveal Solution Discussion Select an answer first