Server administrators for a city’s identity directory currently share a standing admin password on a sticky note. Which privileged-account operations practice should replace that approach?
Select an answer to reveal the explanation.
Short Explanation
Sticky-note domain admin is a gift to attackers. Check out elevates access when needed, slap on MFA, and record the session—then the keys go back in the vault.
Full Explanation
Privileged account management in security operations favors just-in-time or check-out access, MFA, and session recording or detailed logging rather than standing shared passwords. Municipal identity systems are high-value targets; shared credentials destroy accountability. Broad permanent domain-admin grants and disabled logging increase blast radius and hinder investigation. Operational PAM practices enforce need-to-know and separation of duties for administrators.