During an assessment, a penetration tester was able to get access on all target servers by attempting authentication using a service account key that was published on the intranet site as part of a…

Password encryption is generally applied to user passwords, but the problem states a "service account key" and its exposure on an intranet site, which encryption alone for the key doesn't fully solve the insecure storage problem.

Role-based access control (RBAC) manages permissions for users and roles, but it does not directly address the secure storage and distribution of service account keys themselves.

A secrets management solution provides a secure, centralized way to store, distribute, and manage sensitive information like API keys, database credentials, and service account keys. This prevents the need to hardcode secrets or store them in insecure locations like an intranet site, significantly reducing the risk of exposure and unauthorized access.

Time-of-day restrictions limit when an account can be used, but they do not prevent an exposed key from being used during permitted hours or address the insecure storage of the key.