CIAM Privileged Access 2

Question 1

Which control specifically prevents a privileged user from reading their own audit logs within a PAM system?

Accepted Answer

Separation of duties

Answer

Separation of duties ensures that the person performing privileged actions is different from the person who audits those actions.

Question 2

A PAM solution records every keystroke and command executed during a privileged session. What is this capability called?

Accepted Answer

Privileged session management

Answer

Privileged session management (PSM) encompasses session recording, monitoring, and control of all privileged user activities.

Question 3

What is the primary purpose of a privileged access workstation (PAW)?

Accepted Answer

To provide a hardened, isolated environment for performing administrative tasks

Answer

A PAW is a dedicated, hardened workstation used exclusively for privileged tasks, reducing the attack surface for credential theft.

Question 4

Which attack technique involves an adversary extracting password hashes from the LSASS process to gain privileged access?

Accepted Answer

Pass-the-hash

Answer

Pass-the-hash allows attackers to authenticate using a stolen NTLM hash without knowing the plaintext password.

Question 5

In a PAM context, what does 'password vaulting' primarily accomplish?

Accepted Answer

Stores and rotates privileged credentials centrally so humans never see plaintext passwords

Answer

Password vaulting centralizes storage and automates rotation of privileged credentials, eliminating static, human-known passwords.

(CIAM) Certified Identity and Access Manager Practice Test