During a penetration test, a team discovers that the Windows hosts share the same local administrator account password. Which of the following is the best remediation recommendation?

The correct answer is D. Using a technical solution to randomize the password per host. Having the same local administrator password across multiple Windows hosts is a significant security risk, as it enables attacks like lateral movement or pass-the-hash attacks. The best remediation is to implement a technical solution such as Microsoft's Local Administrator…

Vulnerability discovery and analysis

Question

Options

AUsing a multifactor authentication solution
BGiving a team or person the responsibility of managing unique passwords per host
CCreating a new local administration account with a different name
DUsing a technical solution to randomize the password per host

How the community answered

(30 responses)

A
10% (3)
B
20% (6)
C
7% (2)
D
63% (19)

Explanation

Having the same local administrator password across multiple Windows hosts is a significant security risk, as it enables attacks like lateral movement or pass-the-hash attacks. The best remediation is to implement a technical solution such as Microsoft's Local Administrator Password Solution (LAPS), which automates the management of unique, randomized passwords for local administrator accounts on each host. - Eliminates the risk of shared passwords being exploited across multiple systems. - Simplifies password management while maintaining security. - Ensures passwords are regularly updated and securely stored.

Topics

#Remediation#Password Security#Vulnerability Management#Lateral Movement Prevention

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice