SY0-701 · General Security Concepts · Objective 1.2
A project team needs temporary administrative access to a cloud console for a migration weekend. Access should be approved, logged, and removed automatically. Which control best fits?
A. A shared administrator account
B. Just-in-time privileged access
C. A permanent global admin assignment
D. A disabled audit policy
Answer: B
Just-in-time privileged access limits elevated permissions to an approved window and preserves accountability. Shared or permanent admin access weakens least privilege.