nerdexam
CompTIA

CV0-002 · Question #544

The access control department creates a process to grant elevated administrator privileges for only a certain amount of time for a specific administrator task in an IaaS-hosted VM resource. Which of t

The correct answer is B. Policy-based. The access control method used to grant elevated administrator privileges for a specific task and a limited amount of time is known as policy-based access control (PBAC), often implemented as Just-in-Time (JIT) access.

Security

Question

The access control department creates a process to grant elevated administrator privileges for only a certain amount of time for a specific administrator task in an IaaS-hosted VM resource. Which of the following access control method is used?

Options

  • ASSO
  • BPolicy-based
  • CTwo-factor authentication
  • DRBAC

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    88% (35)
  • C
    3% (1)
  • D
    8% (3)

Why each option

The access control method used to grant elevated administrator privileges for a specific task and a limited amount of time is known as policy-based access control (PBAC), often implemented as Just-in-Time (JIT) access.

ASSO

Single Sign-On (SSO) is an authentication method allowing access to multiple applications with one credential set, but it does not define or enforce granular, time-limited elevated privileges.

BPolicy-basedCorrect

Policy-based access control (PBAC) involves evaluating a set of policies to determine access rights, allowing for granular control based on attributes, context, and conditions such as time limits or specific tasks. This precisely matches the scenario of granting elevated privileges for a certain amount of time for a specific administrator task, also known as Just-in-Time (JIT) access.

CTwo-factor authentication

Two-factor authentication (2FA) verifies a user's identity by requiring two different authentication factors, but it does not control the scope or duration of privileges granted.

DRBAC

Role-Based Access Control (RBAC) assigns permissions based on a user's role, but by itself, it does not inherently provide time-limited or task-specific elevation of privileges without additional policies.

Concept tested: Just-in-Time access and policy-based access control

Source: https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

Topics

#access control#privilege escalation#IaaS security#policy management

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice