Question 72

PAM controls access to certain services to ensure that administrators are not automatically given elevated permissions.

PAM, or Privileged Access Management, is designed to manage and monitor access to critical systems and resources, ensuring that administrators do not automatically receive elevated permissions that could lead to security vulnerabilities.

A) PAM

PAM is specifically focused on controlling and managing privileged accounts, which include administrators. It enforces the principle of least privilege, ensuring that users only have the permissions necessary to perform their tasks, thereby reducing the risk of unauthorized access or actions.

B) MFA

MFA, or Multi-Factor Authentication, enhances security by requiring multiple forms of verification before granting access to a system. While it provides an additional layer of protection, it does not directly control the permissions or access levels granted to administrators.

C) DLP

DLP, or Data Loss Prevention, is aimed at preventing sensitive data from being accessed or shared improperly. It does not focus on controlling administrative privileges or access to services, making it irrelevant to the question of elevated permissions.

D) SSO

SSO, or Single Sign-On, simplifies the user authentication process by allowing users to log in once to access multiple services. However, it does not govern the permissions assigned to users, including administrators, and thus does not prevent automatic elevation of privileges.

Conclusion

PAM is the only option that directly addresses the control of access to services to prevent administrators from automatically having elevated permissions. In contrast, MFA, DLP, and SSO serve different security functions that do not manage privileged access directly, making them unsuitable answers to the question.