Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

APICS CPIM-8.0 Exam - Topic 4 Question 21 Discussion

While doing a penetration test, auditors found an old credential hash for a privileged user. To prevent a privileged user's hash from being cached, what is the MOST appropriate policy to mandate?
B) Add privileged users to the protected users group.
A) Add privileged user to the domain admin group.
C) Enable security options for each privileged user.
D) Place each privileged user in a separate Kerberos policy.

APICS CPIM-8.0 Exam - Topic 4 Question 21 Discussion

Actual exam question for APICS's CPIM-8.0 exam
Question #: 21
Topic #: 4
[All CPIM-8.0 Questions]

While doing a penetration test, auditors found an old credential hash for a privileged user. To prevent a privileged user's hash from being cached, what is the MOST appropriate policy to mandate?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Lashandra at Mar 31, 2026, 04:00 PM

Limited Time Offer

25%

Off

Get Premium CPIM-8.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Tamekia
1 month ago
Option C could work too, but B is more comprehensive.
upvoted 0 times
...
Viva
1 month ago
I agree, option B makes sense. It helps prevent credential caching.
upvoted 0 times
...
Wilda
1 month ago
I think option B is the best choice. Protected users group adds extra security.
upvoted 0 times
...
Elina
2 months ago
C sounds good, but is it really the most appropriate?
upvoted 0 times
...
Andree
2 months ago
Wait, I thought enabling security options was enough?
upvoted 0 times
...
Alisha
2 months ago
I think A could lead to more issues, not a good idea.
upvoted 0 times
...
Lacey
4 months ago
Totally agree, B makes the most sense!
upvoted 0 times
...
Earlean
4 months ago
B is the best choice for protecting hashes.
upvoted 0 times
...
Ma
4 months ago
I thought placing users in a separate Kerberos policy was more about access control rather than preventing hash caching, so I'm leaning towards B as well.
upvoted 0 times
...
Haydee
5 months ago
I feel like option C could be relevant, but it seems too vague compared to the others.
upvoted 0 times
...
Vallie
5 months ago
I remember a similar question about user privileges and security policies, but I can't recall if enabling security options is enough.
upvoted 0 times
...
Chuck
5 months ago
I think the answer might be B, adding privileged users to the protected users group, but I'm not entirely sure how that works in practice.
upvoted 0 times
...

Save Cancel