Chapter 2: Active Directory Domain Services 2022

Question 1

How does PAM work with AD 2022?

Answer 1

A user is added to a group with a Time-to-Live (TTL) value and, once it expires, the user is removed from the group automatically.

Question 2

Describe JEA (Just enough administration)

Answer 2

Enables delegated PAM for anything managed by PowerShell for a set amount of time.

Question 3

What are the four steps of implementing privileged access management?

Answer 3

1. Prepare
2. Protect
3. Operate
4. Monitor

Question 4

Describe how PAM is prepared?

Answer 4

Identify the privileged access groups in your
existing AD forest and start to remove users from them

Question 5

How does PAM protect authentication and authorization?

Answer 5

By defining how a user can request privileged
access when required and how the requests
will be handled

Question 6

Describe how PAM operates

Answer 6

Once the privileged access request is approved, the user account
will be added to the security group and will only be valid for the time defined by the authorization policy