MENU
While doing a penetration test, auditors found an old credential hash for a privileged user. To prevent a privileged user's hash from being cached, what is the MOST appropriate policy to mandate?
Suggested Answer: B
Get Premium CPIM-8.0 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
TA
Tamekia
3 months ago
Option C could work too, but B is more comprehensive.
VI
Viva
3 months ago
I agree, option B makes sense. It helps prevent credential caching.
WI
Wilda
3 months ago
I think option B is the best choice. Protected users group adds extra security.
EL
Elina
3 months ago
C sounds good, but is it really the most appropriate?
AN
Andree
3 months ago
Wait, I thought enabling security options was enough?
AL
Alisha
4 months ago
I think A could lead to more issues, not a good idea.
LA
Lacey
5 months ago
Totally agree, B makes the most sense!
EA
Earlean
5 months ago
B is the best choice for protecting hashes.
MA
Ma
6 months ago
I thought placing users in a separate Kerberos policy was more about access control rather than preventing hash caching, so I'm leaning towards B as well.
HA
Haydee
6 months ago
I feel like option C could be relevant, but it seems too vague compared to the others.
VA
Vallie
6 months ago
I remember a similar question about user privileges and security policies, but I can't recall if enabling security options is enough.
CH
Chuck
6 months ago
I think the answer might be B, adding privileged users to the protected users group, but I'm not entirely sure how that works in practice.