A tester was able to leverage a pass-the-hash attack during a recent penetration test. The tester gained a foothold and moved laterally through the network.
Which of the following would prevent this type of attack from reoccurring?
A . Renaming all active service accounts and disabling all inactive service accounts
B . Creating separate accounts for privileged access that are not used to log on to local machines
C . Enabling full-disk encryption on all workstations that are used by administrators and disabling RDP
D . Increasing the password complexity requirements and setting account expiration dates
Answer: B