Privileged access management in Cybersecurity - Mini Project: Build & Apply

Understanding Privileged Access Management

📖 Scenario: You work in a company where some employees have special access to important systems. These special accesses are called privileged accesses. Managing who has these accesses and how they use them is very important to keep the company safe.

🎯 Goal: Build a simple list of privileged users, set a rule for access level, identify users who meet the rule, and finalize the list for review.

📋 What You'll Learn

Create a dictionary named privileged_users with exact user names and their access levels

Create a variable named minimum_access_level with the value 4

Use a dictionary comprehension named high_access_users to select users with access level greater than or equal to minimum_access_level

Add a final step to create a list named final_review_list containing only the user names from high_access_users

💡 Why This Matters

🌍 Real World

Privileged Access Management helps companies control who can access sensitive systems, reducing the risk of security breaches.

💼 Career

Understanding how to manage and filter privileged access is important for cybersecurity roles such as security analysts and system administrators.

1

Create the privileged users dictionary

Create a dictionary called privileged_users with these exact entries: 'Alice': 5, 'Bob': 3, 'Charlie': 4, 'Diana': 2, 'Eve': 6.

Cybersecurity

# Create the privileged_users dictionary with exact entries
# Your code here

Hint

Use curly braces {} to create a dictionary with user names as keys and access levels as values.

2

Set the minimum access level

Create a variable called minimum_access_level and set it to the number 4.

Cybersecurity

privileged_users = {'Alice': 5, 'Bob': 3, 'Charlie': 4, 'Diana': 2, 'Eve': 6}
# Set minimum_access_level to 4
# Your code here

Hint

Just assign the number 4 to the variable minimum_access_level.

3

Select users with high access

Use a dictionary comprehension named high_access_users to include only users from privileged_users whose access level is greater than or equal to minimum_access_level. Use user and level as the loop variables.

Cybersecurity

privileged_users = {'Alice': 5, 'Bob': 3, 'Charlie': 4, 'Diana': 2, 'Eve': 6}
minimum_access_level = 4
# Create high_access_users dictionary comprehension
# Your code here

Hint

Use {user: level for user, level in privileged_users.items() if level >= minimum_access_level} to filter the dictionary.

4

Create the final review list

Create a list called final_review_list that contains only the user names from the high_access_users dictionary.

Cybersecurity

privileged_users = {'Alice': 5, 'Bob': 3, 'Charlie': 4, 'Diana': 2, 'Eve': 6}
minimum_access_level = 4
high_access_users = {user: level for user, level in privileged_users.items() if level >= minimum_access_level}
# Create final_review_list with user names from high_access_users
# Your code here

Hint

Use list(high_access_users.keys()) to get the list of user names.

Practice

1. What is the main purpose of Privileged Access Management (PAM) in cybersecurity?

easy

A. To control and monitor access to powerful accounts

B. To speed up internet connections

C. To create new user accounts automatically

D. To backup all user data daily

Solution

1. Step 1: Understand the role of PAM

   PAM is designed to protect powerful accounts by controlling who can use them.

2. Step 2: Compare options with PAM's purpose

   Only To control and monitor access to powerful accounts matches PAM's goal of controlling and monitoring privileged access.

3. Final Answer:

   To control and monitor access to powerful accounts -> Option A

4. Quick Check:

   PAM purpose = Control privileged access [OK]

Hint: PAM = Protect powerful accounts by control [OK]

Common Mistakes:

• Confusing PAM with general user management
• Thinking PAM speeds up network or backups
• Assuming PAM creates accounts automatically

2. Which of the following is a correct example of a PAM feature?

easy

A. Allowing all users to access admin accounts without restrictions

B. Monitoring and logging all actions performed by privileged users

C. Disabling password requirements for privileged accounts

D. Sharing privileged account passwords openly among team members

Solution

1. Step 1: Identify PAM features

   PAM includes monitoring and logging privileged user actions to prevent misuse.

2. Step 2: Evaluate each option

   Only Monitoring and logging all actions performed by privileged users describes a correct PAM feature; others weaken security.

3. Final Answer:

   Monitoring and logging all actions performed by privileged users -> Option B

4. Quick Check:

   PAM feature = Monitoring privileged actions [OK]

Hint: PAM always logs privileged user actions [OK]

Common Mistakes:

• Thinking PAM removes password protections
• Believing unrestricted access is part of PAM
• Assuming password sharing is allowed

3. Consider this scenario: A company uses PAM to limit admin access. Which action would PAM most likely perform?

medium

A. Granting permanent admin access to all employees

B. Sharing admin passwords via email to all staff

C. Disabling all admin accounts to prevent misuse

D. Allowing an employee to use admin rights only during work hours

Solution

1. Step 1: Understand PAM's control over access

   PAM limits when and how privileged accounts are used, such as restricting access by time.

2. Step 2: Analyze each option

   Allowing an employee to use admin rights only during work hours fits PAM's role by allowing admin rights only during specific times; others reduce security or are unsafe.

3. Final Answer:

   Allowing an employee to use admin rights only during work hours -> Option D

4. Quick Check:

   PAM limits access by rules = Allowing an employee to use admin rights only during work hours [OK]

Hint: PAM controls when privileged access is allowed [OK]

Common Mistakes:

• Assuming PAM grants permanent access
• Thinking PAM disables all admin accounts
• Believing password sharing is safe

4. A company notices unauthorized use of privileged accounts. Which PAM practice is likely missing or faulty?

medium

A. Sharing passwords openly among users

B. Using multi-factor authentication for privileged accounts

C. Restricting access based on roles and time

D. Monitoring and logging privileged account activities

Solution

1. Step 1: Identify cause of unauthorized use

   Unauthorized use often happens if passwords are shared openly, weakening security.

2. Step 2: Match faulty practice

   Sharing passwords openly among users describes a bad practice that leads to unauthorized access; others improve security.

3. Final Answer:

   Sharing passwords openly among users -> Option A

4. Quick Check:

   Unauthorized use cause = Password sharing [OK]

Hint: Open password sharing causes unauthorized access [OK]

Common Mistakes:

• Confusing monitoring with password sharing
• Thinking restricting access causes unauthorized use
• Assuming multi-factor authentication causes issues

5. A company wants to improve security by applying PAM. Which combination of actions best applies PAM principles?

hard

A. Share admin passwords via email and allow access anytime

B. Grant all employees permanent admin rights and disable logging

C. Use multi-factor authentication, restrict access by role, and log all privileged actions

D. Disable all privileged accounts to avoid misuse completely

Solution

1. Step 1: Identify PAM best practices

   PAM includes multi-factor authentication, role-based access, and logging privileged actions.

2. Step 2: Evaluate each option

   Use multi-factor authentication, restrict access by role, and log all privileged actions combines all correct PAM actions; others weaken security or are impractical.

3. Final Answer:

   Use multi-factor authentication, restrict access by role, and log all privileged actions -> Option C

4. Quick Check:

   PAM best practices = MFA + role restriction + logging [OK]

Hint: PAM = MFA + role limits + logging [OK]

Common Mistakes:

• Granting permanent admin rights to all
• Sharing passwords openly
• Disabling privileged accounts entirely