A tester was able to leverage a pass-the-hash attack during a recent penetration test. The tester gained a foothold and moved laterally through the network. Which of the following would prevent this type of attack from reoccurring?

Question

Quizplus · Accepted Answer

Creating separate accounts for privileged access that are not used to log on to local machines can prevent pass-the-hash attacks by ensuring that hashes of privileged accounts are not stored on local machines, reducing the risk of lateral movement using stolen hashes.

A Tester Was Able to Leverage a Pass-The-Hash Attack During