Lateral Movement GDAT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Why is lateral movement considered a critical step in many advanced attacks?

   • AIt ensures the attacker's actions remain undetected by security monitoring
   • BIt is the only way to bypass endpoint protection on the initial host
   • CIt enables the attacker to reach high-value targets that are not directly accessible from the initial compromise
   • DIt allows the attacker to gain initial access to the network
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An organization is implementing controls to reduce lateral movement. They have a mix of Windows and Linux systems. Which strategy would be most effective in limiting the use of pass-the-hash across the environment?

   • AImplement a strict firewall policy that blocks all SMB traffic
   • BDisable LLMNR and NetBIOS name resolution
   • CUse only Linux servers for all sensitive workloads
   • DEnable Windows Defender Credential Guard on all Windows endpoints
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of network segmentation in mitigating lateral movement?

   • ATo provide a backup path for internet connectivity in case of failure
   • BTo allow all internal hosts to communicate freely without restrictions
   • CTo isolate sensitive systems and restrict communication paths between network segments
   • DTo increase the speed of network communication between critical servers
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is implementing a mitigation strategy for lateral movement. The security team has limited budget and must choose between two controls: implementing Credential Guard on all workstations or implementing network segmentation between the user VLAN and the server VLAN. The company has a mix of legacy Windows 7 systems and modern Windows 10 systems. Which control is the most effective given the constraint?

   • AImplement Credential Guard on all workstations
   • BImplement network segmentation between the user VLAN and the server VLAN
   • CUpgrade all Windows 7 systems to Windows 10 first, then implement Credential Guard
   • DImplement both controls simultaneously
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A security architect is designing a control to limit lateral movement in a large enterprise. The environment has many legacy applications that require NTLM authentication. The architect wants to reduce pass-the-hash risk without breaking legacy applications. Which approach best balances security and operational compatibility?

   • AImplement a SIEM to detect pass-the-hash attempts
   • BForce all users to use smart cards for authentication
   • CEnable Extended Protection for Authentication (EPA) and restrict NTLM to specific servers that require it
   • DDisable NTLM entirely across the domain
   Reveal Solution Discussion Select an answer first