CompTIA Security+

Una pregunta de práctica de Security+ Security Operations

An auditor at a logistics firm finds 14 cloud administrators who hold global administrator rights permanently, although each uses those rights for about two hours a week. One admin's workstation was recently infected by a drive-by download. The IT director must reduce the exposure without removing the admins' ability to do their jobs. Which privileged access management approach fits?

• ARequire the admins to sign an acceptable-use agreement covering privileged accounts
• BSplit the global administrator role across two people so no single admin can act alone
• CMove the admin rights to a shared break-glass account whose password is kept in a sealed envelope
• DMake the admins eligible for the role, with just-in-time activation using MFA and a time limit