Question

A financial services company wants to reduce the risk associated with administrators holding standing access to production database servers. The security team needs a solution that grants elevated privileges only for the duration of an approved task and automatically revokes them afterward, while also recording all privileged sessions. Which approach best meets these requirements?

Accepted Answer

Implement a PAM solution with just-in-time permissions and password vaulting

Answer

Assign administrators to a permanent role-based access control group with least privilege applied

Answer

Enable time-of-day restrictions on all administrator accounts during business hours

Answer

Require multifactor authentication for all administrative logins to the database