What describes a just-in-time access model?

• A. Access is granted permanently after initial approval.
• B. Access is granted for a limited window when needed; often requires approval and session controls.
• C. Access is granted only after a full background check.
• D. Access is granted on a per-application basis with no time limits.

Answer: (B)

Just-in-time access provides temporary, time-bound privileges that are granted only for the moment they’re needed and then revoked automatically. The option described fits this model because it specifies a limited window for access and typically includes an approval step plus session controls to manage and monitor that access while it’s active. This combination minimizes risk by ensuring privileges aren’t left open longer than necessary and by providing accountability through controlled sessions and eventual expiration.

Think about why the other scenarios don’t match: granting access permanently after initial approval keeps privileges around indefinitely, increasing exposure. Requiring a full background check addresses pre-screening, not the duration of access. Granting access on a per-application basis with no time limits ignores the time-bound nature that defines just-in-time access and can lead to broader, longer-than-necessary access.