SY0-701 · General Security Concepts · Objective 1.2
Four engineers need administrator access for a two-hour migration. Each request must be approved, attributable to one engineer, and expire automatically. Which approach meets all three requirements?
A. Assign a permanent administrator role and review membership every quarter.
B. Activate each engineer's privileged role through an approved, time-limited access workflow.
C. Require MFA on each engineer's existing administrator account.
D. Allow administrator access only from the migration subnet.
Answer: B
Just-in-time privileged access combines least privilege with an approved time window. Authentication and network restrictions complement that workflow but cannot replace its approval and expiry controls.