CompTIA Security+ (SY0-701)Security OperationsMedium
A security architect wants privileged accounts to receive elevated permissions only for the duration of a specific task, after which access automatically expires. Which concept does this describe?
- AJust-in-time access
- BDiscretionary access control
- CMandatory access control
- DRole-based access control
Show answer & explanationAnswer & explanation
Correct answer: A. Just-in-time access
Just-in-time (JIT) access grants temporary, time-bound elevated privileges for a specific task, then automatically revokes them, reducing the standing attack surface of privileged accounts.
Why the other options are wrong
- B. DAC allows resource owners to grant access, unrelated to time-bound elevation.
- C. MAC enforces access based on classification labels, not temporary elevation.
- D. RBAC assigns permissions based on job role, not temporary elevation.
Just-in-Time (JIT) Access
A privileged access management technique that grants elevated permissions only for the time needed to complete a task, then revokes them automatically.
- Reduces standing privileged account risk
- Common in PAM solutions
- Often paired with approval workflows
Memory trick: Access ticks away like a timer.