ISC2 CISSP Practice Question

A Privileged Access Management (PAM) solution provides the most comprehensive set of security controls for managing high-risk privileged accounts. PAM solutions go beyond simple credential storage by offering a suite of features including secure vaulting, automated password rotation to limit the lifespan of a credential, and session monitoring or recording to audit all privileged activities. While an enterprise password vault offers secure storage, it typically lacks the advanced monitoring and automated lifecycle management features of a full PAM system. Enforcing MFA is a critical control for authenticating administrators but does not manage the credential's lifecycle or monitor its use during a session. A strong password policy is a fundamental baseline but does not provide the active management, monitoring, and automated controls necessary to adequately protect privileged access.