Identity and Access Management

Correct Answer: Least Privilege Principle

Least Privilege Principle is the primary focus while setting up a PAM environment because it ensures users are assigned the minimum set of privileges needed to complete their tasks. Other types of access control focus on limiting access based on different factors but none are as important as the principle of least privilege for PAM.

Correct Answer: Ensure that cloud service providers support multi-factor authentication (MFA)

Multi-factor authentication (MFA) is a critical security measure that should be supported by the cloud service provider, as it adds an extra layer of protection for privileged users. Disabling administrator accounts during the migration may hinder migration efforts and monitoring. Migrating existing policies, maintaining current privileged access levels, or enabling high-complexity passwords are insufficient security measures for cloud-based privileged access management. Allowing users to create new accounts without oversight may lead to unauthorized access and security risks.

Correct Answer: Create strong, unique passwords for each privileged account

Using strong, unique passwords for each privileged account ensures that a breach in one account does not compromise all privileged accounts. The other options leave privileged accounts more vulnerable or fail to provide adequate protection.