CV0-002 · Question #544
The access control department creates a process to grant elevated administrator privileges for only a certain amount of time for a specific administrator task in an IaaS-hosted VM resource. Which of t
The correct answer is B. Policy-based. The access control method used to grant elevated administrator privileges for a specific task and a limited amount of time is known as policy-based access control (PBAC), often implemented as Just-in-Time (JIT) access.
Question
The access control department creates a process to grant elevated administrator privileges for only a certain amount of time for a specific administrator task in an IaaS-hosted VM resource. Which of the following access control method is used?
Options
- ASSO
- BPolicy-based
- CTwo-factor authentication
- DRBAC
How the community answered
(40 responses)- A3% (1)
- B88% (35)
- C3% (1)
- D8% (3)
Why each option
The access control method used to grant elevated administrator privileges for a specific task and a limited amount of time is known as policy-based access control (PBAC), often implemented as Just-in-Time (JIT) access.
Single Sign-On (SSO) is an authentication method allowing access to multiple applications with one credential set, but it does not define or enforce granular, time-limited elevated privileges.
Policy-based access control (PBAC) involves evaluating a set of policies to determine access rights, allowing for granular control based on attributes, context, and conditions such as time limits or specific tasks. This precisely matches the scenario of granting elevated privileges for a certain amount of time for a specific administrator task, also known as Just-in-Time (JIT) access.
Two-factor authentication (2FA) verifies a user's identity by requiring two different authentication factors, but it does not control the scope or duration of privileges granted.
Role-Based Access Control (RBAC) assigns permissions based on a user's role, but by itself, it does not inherently provide time-limited or task-specific elevation of privileges without additional policies.
Concept tested: Just-in-Time access and policy-based access control
Source: https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
Topics
Community Discussion
No community discussion yet for this question.