CAS-004 Security Engineering Practice Question
An organization is deploying a just-in-time (JIT) privileged access management solution. What is a key benefit of JIT access compared to standing privileged accounts?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It reduces the window of exposure for privileged credentials.
JIT access provides temporary privileges that are automatically revoked after use, reducing the attack surface and limiting lateral movement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It allows users to permanently elevate privileges.
Why it's wrong here
That defeats the purpose of JIT.
- ✗
It eliminates the need for multi-factor authentication.
Why it's wrong here
MFA is still recommended even with JIT.
- ✗
It requires no audit logging.
Why it's wrong here
JIT systems typically log all access requests.
- ✓
It reduces the window of exposure for privileged credentials.
Why this is correct
JIT grants access only when needed and for a limited time.
Go deeper
Related to this question
About these practice questions
This CAS-005 question is part of Courseiva's 968-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.