Just-in-time access in privileged access management refers to:

• A. Granting permanent admin rights to trusted users
• B. Requiring multi-factor authentication only during login
• C. Providing time-bound access after approval and session recording
• D. Access granted by default to all administrators

Answer: (C)

Just-in-time access means you don’t have standing elevated rights. Privileged access is granted only for a short, defined period after an explicit approval, and the session is recorded for auditing. This setup directly reduces the risk window because credentials aren’t active long-term, and every action is traceable.

For example, a sysadmin requests access to perform a patch. After the request is approved, they get elevated access for a limited duration and their session is logged. When the time expires or the task finishes, the privileges are revoked automatically and the activity is recorded for review. This approach embodies least privilege and strong accountability.

That’s why this option fits JIT best: it emphasizes time-limited access, an approval step, and session recording. It isn’t about permanent rights, default access, or MFA alone during login.