Domain admins currently hold standing privileges all year. The county wants just-in-time elevation and short-lived credentials checked out of a vault. Which discipline delivers that model?
Select an answer to reveal the explanation.
Short Explanation
PAM is the courthouse evidence locker for admin power: check out a temporary key when you need it, turn it back in, and do not walk around with standing god-mode all year.
Full Explanation
Privileged access management reduces standing admin rights through vaulting, just-in-time elevation, and ephemeral credentials. Shared taped passwords, permanent broad admin membership, and disabled auditing increase privileged-account risk.