D08 · Privileged Access Management (PAM)
Protection, governance, and monitoring of privileged identities, credentials, and sessions.
Key knowledge areas
- Privileged Accounts
- Privileged Access Management
- Privileged Identity Management (PIM)
- Credential Vaulting
- Password and Credential Rotation
- Privileged Session Management
- Session Recording and Monitoring
- Just-in-Time (JIT) Access
- Just Enough Administration (JEA)
- Break-Glass Access
- Privileged Account Discovery
- Privileged Non-Human Identities
- Secrets Management Integration
- PAM APIs and Automation
Representative technologies
- CyberArk
- Delinea
- BeyondTrust
- HashiCorp Vault
- Microsoft Entra PIM
Career alignment
- TRACK A — Identity Platform & CIAM Engineering: Supporting domain. View track
- TRACK B — Enterprise IAM / PAM / IGA Engineering: Core domain. View track
Suggested learning outcomes
- Design just-in-time privileged access and credential rotation.
- Test emergency access and privileged session evidence.
These prompts are editorial learning aids retained from the earlier textbook. They are not additional requirements in v0.4.
Connected questions
Build competency evidence
Explain a mechanism, analyze an implementation or failure, build a tested lab, and justify an architecture. Keep shared technical explanations in the Knowledge Base and link to them from research.
Domain name, scope, knowledge areas and representative technologies follow the authoritative Framework v0.4. Questions may span multiple domains.
D07 · Identity Governance & Administration (IGA)
Identity lifecycle management, access governance, provisioning, and compliance for human and non-human identities.
D09 · Non-Human Identity (NHI)
Identification, authentication, authorization, lifecycle management, and governance of non-human principals across enterprise environments.