Back to Identity and Access Management

Privileged Access Management

5 minutes 5 Questions

Privileged Access Management (PAM) is a critical aspect of Identity and Access Management that focuses on monitoring, controlling, and securing access to sensitive resources by users with elevated privileges (e.g., system administrators). Privileged users often have the ability to modify critical s…

Test mode:
Start practice test
CompTIA Security+ - Privileged Access Management Example Questions

Test your knowledge of Privileged Access Management

Question 1

An organization is facing security issues with its IT administrators, as some of them have been found using their credentials for unauthorized purposes. What Privileged Access Management solution should be implemented to minimize this risk?

Correct Answer: Implement the Principle of Least Privilege (POLP)

The Principle of Least Privilege (POLP) ensures that users are granted only the permissions necessary to perform their job duties, minimizing the risk of unauthorized access. Disabling admin accounts would hinder the administrators' ability to perform their job functions. Providing all employees with admin rights or creating a shared admin account would increase the risk of unauthorized access. Encrypting admin passwords ensures password security but does not address the issue of unauthorized privileges or access. Antivirus scans help detect malicious software but do not directly address privileged access management.

Question 2

A company wants to implement a Privileged Access Management (PAM) solution for users connecting to a remote data center. Which solution will secure privileged accounts and monitor user access?

Correct Answer: Implement a Privileged Access Workstation (PAW)

Privileged Access Workstations (PAWs) provide a dedicated, secure environment for privileged users to access sensitive systems, keeping remote connections more secure and helping monitor user access. Unmonitored VPN access, allowing personal device connections, and providing access to a guest Wi-Fi network can all lead to unauthorized access and security risks. Providing users with a list of login credentials for all systems is both insecure and against privileged access management best practices. Not monitoring user access sacrifices security to maintain privacy.

Question 3

A managerial employee has requested access to sensitive financial data which isn't directly related to their job duties. How should the request be handled?

Correct Answer: Deny the request and offer access to alternative, related, and sanctioned information

To implement Privileged Access Management best practices, it is essential to deny unnecessary access requests and provide alternative information, if possible. Granting access without considering the Principle of Least Privilege may lead to unauthorized tasks and potential security risks. Transferring the employee to a role that has access or sharing privileged accounts should only be done when it aligns with the individual's job responsibilities and authorization is provided by management.

More Privileged Access Management questions
29 questions (total)
Start 29 question test