Best Way to Secure a Shared Backup Account?

A group of developers has a shared backup account to access the source code repository. Which of the following is best way to secure the backup account if there is an SSO failure?

  1. RAS
  2. EAP
  3. SAML
  4. PAM Source Reference Answer

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

This question tests the ability to select the appropriate control for privileged shared accounts, avoiding the trap of choosing SAML (an SSO protocol) over PAM (the management solution).

Privileged Access Management (PAM) is the optimal solution for securing shared backup accounts, especially during Single Sign-On (SSO) failures. Consensus confirms PAM provides essential auditing, credential rotation, and access control for privileged accounts.

Selecting SAML is a common mistake because it relates to SSO, but it is the protocol that failed, whereas PAM is the specific tool designed to secure the account itself.

Community Discussion (5 comments)

9149f41 👍 1 Selected: D
popular PAM tools: 1. Azure Active Directory (Azure AD) Privileged Identity Management (PIM) as part of its Microsoft Entra suite 2. Keeper 3. CyberArk, 4. BeyondTrust 5. Thycotic (now part of Delinea)
Anyio 👍 1 Selected: D
The correct answer is: D. PAM (Privileged Access Management) Explanation: Privileged Access Management (PAM) is the best approach to securing a shared backup account. PAM helps enforce security practices like access controls, session monitoring, and audit logs for privileged accounts. In the event of an SSO failure, PAM can secure and manage access to the shared account, ensuring only authorized users can access the backup account. Other Options: A. RAS (Remote Access Service): This provides remote access functionality but does not offer the specific access control and management needed for securing a shared account. B. EAP (Extensible Authentication Protocol): A framework used for network authentication, not for managing privileged accounts. C. SAML (Security Assertion Markup Language): Used for Single Sign-On (SSO) and federated authentication, but it does not directly secure a shared backup account in case of SSO failure.
ProudFather 👍 1 Selected: D
A Privileged Access Management (PAM) solution is the best way to secure the backup account. It provides a centralized platform to manage and control access to privileged accounts, such as the shared backup account. PAM can enforce strong authentication methods, such as multi-factor authentication, and monitor user activity to detect suspicious behavior.
Segunmx 👍 4 Selected: D
D. PAM (Privileged Access Management) Explanation: PAM (Privileged Access Management) is a security solution designed to manage and control access to privileged accounts, such as shared accounts for administrative purposes or critical systems like a source code repository.
AriGarcia 👍 2 Selected: D
PAM solutions are designed to manage and secure privileged accounts, such as the shared backup account. It ensures: Strict control over access to shared accounts. Auditing and monitoring of access activities. Enforcement of strong authentication mechanisms, even in the absence of SSO functionality. Temporary access and rotation of account credentials to reduce the risk of unauthorized use.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

PAM (Privileged Access Management) is the correct choice because it is specifically designed to secure, monitor, and manage privileged accounts like shared backup credentials. It provides features such as credential vaulting, automatic rotation, and session recording, which ensure the account remains secure even if the primary SSO mechanism is down. This centralized control prevents unauthorized access and maintains an audit trail.

Why the Other Options Are Wrong

RAS (Remote Access Service) is an obsolete technology primarily associated with dial-up networking and does not provide account management security. EAP (Extensible Authentication Protocol) is a framework for authentication transport (often used in Wi-Fi), not a system for managing shared account privileges. SAML (Security Assertion Markup Language) is the protocol used for SSO; since the question states there is an SSO failure, SAML is part of the problem context, not the solution for securing the account independently.

Community Comment Notes

Community members unanimously support PAM, emphasizing its role in enforcing strict access controls and auditing for shared accounts. Several comments noted that PAM allows for the enforcement of strong authentication and temporary access grants, which mitigates the risks associated with shared credentials. Users also referenced industry-standard tools like CyberArk and Azure AD PIM to illustrate the practical application of PAM in such scenarios.

Official Reference

Exam Strategy

Look for keywords like "shared," "backup," or "privileged" to immediately identify the need for PAM. Remember that PAM is the specific security control for high-risk accounts, distinct from general authentication protocols.

Related Analysis

A new employee logs in to the email system for the first tim

S-Grade

An organization recently started hosting a new service that

A-Grade

A company prevented direct access from the database administ

A-Grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide