Question 72

PAM controls access to certain services to ensure that administrators are not automatically given elevated permissions.

Privileged Access Management (PAM) is specifically designed to manage and monitor accounts with elevated permissions, ensuring that administrative access is tightly controlled and not automatically granted.

A) PAM

PAM is focused on controlling and monitoring access to sensitive systems and data, specifically for users with elevated privileges. It mitigates risks associated with administrative accounts by enforcing policies that govern how and when these privileges can be used, thereby preventing unnecessary exposure to sensitive information.

B) MFA

Multi-Factor Authentication (MFA) enhances security by requiring multiple forms of verification before granting access but does not control permissions or access levels for administrators. While it is an important security measure, it does not specifically manage the elevation of privileges.

C) DLP

Data Loss Prevention (DLP) is aimed at protecting sensitive data from being lost or accessed without authorization. It does not deal with managing administrative permissions, thus failing to address the issue of elevated access for administrators.

D) SSO

Single Sign-On (SSO) simplifies the authentication process for users by allowing them to log in once and gain access to multiple services. However, it does not control or restrict elevated permissions for administrators, which is the focus of PAM.

Conclusion

PAM is the only option that specifically addresses the control of access to services by managing elevated permissions for administrators. In contrast, MFA, DLP, and SSO focus on different aspects of security and do not provide the same level of control over administrative privileges, making PAM the definitive choice for this question.