What solution secures external consultant access without sharing passwords?
A company hired an external consultant to assist with required system upgrades to a critical business application. A systems administrator needs to secure the consultant's access without sharing passwords to critical systems. Which of the following solutions should most likely be utilized?
Community Votes
100% of anonymous learners picked answer E. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
This question tests PAM's purpose of securing privileged accounts via credential vaulting and session monitoring, with the common trap being to confuse SSO or RBAC with privileged access control.
Privileged Access Management (PAM) software is the correct solution because it provides temporary, monitored access to critical systems without sharing passwords. Community consensus strongly supports PAM over SSO, SAML, or RBAC for this scenario.
Choosing an SSO platform (Option C) because it simplifies authentication, but SSO does not eliminate password sharing or provide the fine-grained, audited privileged access control needed for a consultant.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
PAM software is specifically designed to manage privileged accounts and credentials. It allows administrators to grant time-limited, session-based access to critical systems without exposing the underlying passwords. The consultant can access the system through a controlled, monitored session that is logged and audited, which directly addresses the requirement to secure access without sharing passwords.Why the Other Options Are Wrong
- TACACS+ (A) is a network authentication protocol for device administration, not a complete privileged access management solution for application access.
- SAML (B) is an authentication standard for federated identity, but it does not manage or vault credentials for critical systems.
- SSO platform (C) simplifies user authentication across applications but still requires credential management and does not provide the same level of strong audit and time-boxed access for consultants.
- Role-based access control (D) is an authorization model that assigns permissions based on roles, but it does not secure or manage the actual credentials and cannot prevent password sharing on its own.
Community Comment Notes
Comment [1] correctly explains that PAM software "helps manage and secure privileged accounts and access credentials" and allows "temporary, controlled access" while tracking, monitoring, and logging activities. Comment [2] simply verifies PAM as the answer, and comment [3] reinforces the choice with the acronym expansion. The community consensus is unanimous in favor of PAM, and no counterarguments were presented.Official Reference
Exam Strategy
When you see external consultants and critical systems without password sharing, immediately think PAM. Differentiate PAM from SSO and RBAC by noting that PAM specifically addresses credential vaulting and privileged session monitoring, while SSO and RBAC address authentication and authorization, respectively.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →