A security administrator wants to reduce the risk of pass-the-hash attacks in a Windows environment. The organization uses NTLM authentication for legacy applications. Which control is most effective at mitigating pass-the-hash attacks while maintaining compatibility with legacy applications?

Increase the password length to 20 characters.

Use the same local administrator password on all machines.

Enable Local Security Authority (LSA) protection and restrict access to LSASS.

Disable NTLM authentication entirely and require Kerberos.

CompTIAPenTest+

Domain 4Objective 2

Authentication Attacks PT0-003 Practice Questions (Page 6)

Part of the Attacks and exploits domain, which accounts for 35% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

9concepts

35%of the exam

Questions 26–26

26application · medium
A security administrator wants to reduce the risk of pass-the-hash attacks in a Windows environment. The organization uses NTLM authentication for legacy applications. Which control is most effective at mitigating pass-the-hash attacks while maintaining compatibility with legacy applications?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.

Authentication Attacks PT0-003 Practice Questions (Page 6)

Questions 26–26

A security administrator wants to reduce the risk of pass-the-hash attacks in a Windows environment. The organization uses NTLM authentication for legacy applications. Which control is most effective at mitigating pass-the-hash attacks while maintaining compatibility with legacy applications?

Keep studying — Attacks and exploits