A penetration test has demonstrated that domain administrator accounts were vulnerable to pass- the-hash attacks. Which of the following would have been the best strategy to prevent the threat actor…

The correct answer is B. Implement a privileged access management solution. Privileged access management (PAM) solutions effectively mitigate pass-the-hash attacks by enforcing least privilege and session management for administrative accounts. These tools restrict how and when credentials can be accessed, thereby reducing attack surfaces.

Submitted by the_admin· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

A penetration test has demonstrated that domain administrator accounts were vulnerable to pass- the-hash attacks. Which of the following would have been the best strategy to prevent the threat actor from using domain administrator accounts?

Options

AAudit each domain administrator account weekly for password compliance.
BImplement a privileged access management solution.
CCreate IDS policies to monitor domain controller access.
DUse Group Policy to enforce password expiration.

How the community answered

(41 responses)

A
24% (10)
B
56% (23)
C
12% (5)
D
7% (3)

Explanation

Privileged access management (PAM) solutions effectively mitigate pass-the-hash attacks by enforcing least privilege and session management for administrative accounts. These tools restrict how and when credentials can be accessed, thereby reducing attack surfaces.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice