Which statement describes a just-in-time access practice?

• A. Just-in-time access often requires approval before granting access.
• B. It eliminates the need for any approvals.
• C. It grants access permanently after initial login.
• D. It avoids session controls.

Answer: (A)

Just-in-time access means giving someone access only when they have a defined need, for a limited period, and with oversight. Requiring approval before granting access fits this approach because it confirms the requester has a legitimate reason and brings an authorization check into the process, helping enforce least privilege and maintain auditability. This prevents permanent or broad access and ensures access is time-bound and accountable. The other statements contradict the essence of just-in-time access: it isn’t about removing approvals, it isn’t about granting permanent access after initial login, and it doesn’t skip session controls—these controls are often part of ensuring the temporary, monitored nature of JIT access.