What is a privileged access management (PAM) concept in account management?

• A. Controls for high-risk accounts, requiring just-in-time access, approval workflows, session recording.
• B. A method to permanently grant admin rights without reviews.
• C. A system to store passwords in plain text.
• D. A policy to disable MFA for privileged users.

Answer: (A)

Privileged access management focuses on securing and governing privileged accounts through strict controls, time-limited access, formal approvals, and visibility into privileged activity. The described features—controls for high-risk accounts, just-in-time access, approval workflows, and session recording—best capture how PAM reduces risk by limiting when and how admin rights are used and by keeping auditable records. Granting admin rights permanently without reviews bypasses essential oversight and the principle of least privilege. Storing passwords in plain text violates basic security and proper vaulting practices PAM relies on. Disabling MFA for privileged users weakens authentication and goes against the strong access controls PAM enforces.