In an effort to reduce standing privileges, a security architect is redesigning the company's privileged access management workflow. Administrators should receive elevated rights only after submitting an on-demand request that specifies the resource and task, and those rights must automatically expire within one hour of approval. Which strategy BEST satisfies these requirements?
Enforce multi-factor authentication at every privileged logon
Just-in-time provisioning issues elevated privileges only when a user requests them for a defined task or resource. The PAM system creates a temporary account or elevates group membership at that moment and automatically revokes the access when the time window expires, greatly reducing the attack surface. Permanent break-glass groups, broad RBAC roles, or simply adding MFA do not eliminate standing privileges.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
How does JIT provisioning minimize security risks?
Open an interactive chat with Bash
What are some examples of tasks that require JIT provisioning?
Open an interactive chat with Bash
How does JIT provisioning differ from traditional access models?
Open an interactive chat with Bash
ISC2 CISSP
Identity and Access Management (IAM)
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .