Which of the following remediation’s are appropriate for the reported findings’?

A company received a report with the following finding . While on the internal network the penetration tester was able to successfully capture SMB broadcasted user ID and password information on the network and decode this information. This allowed the penetration tester to then join their own computer to the ABC domain.

Which of the following remediation’s are appropriate for the reported findings’? (Select TWO)
A . Set the Schedule Task Service from Automatic to Disabled
B . Enable network-level authentication
C . Remove the ability from Domain Users to join domain computers to the network
D . Set the netlogon service from Automatic to Disabled
E . Set up a SIEM alert to monitor Domain joined machines
F . Set "Digitally sign network communications" to Always

View Answer

Answer: B,C