On a Windows network, why is it easier to break into a local account than an AD account?
Answer / chaitanya
Windows local accounts have a great deal of baggage tied to them, running back a long long way to keep compatibility for user accounts. If you are a user of passwords longer than 13 characters, you may have seen the message referring to this fact. However, Active Directory accounts have a great deal of security tied onto them, not the least of which is that the system actually doing the authenticating is not the one you are usually sitting at when you are a regular user. Breaking into a Windows system if you have physical access is actually not that difficult at all, as there are quite a few dedicated utilities for just such a purpose, however that is beyond the scope of what we’ll be getting into here.
| Is This Answer Correct ? | 2 Yes | 0 No |
You need to reset a password-protected BIOS configuration. What do you do?
Why would you bring in an outside contractor to perform a penetration test?
What are salted hashes?
What is SSL and why is it not enough when it comes to encryption?
You are remoted in to a headless system in a remote area. You have no physical access to the hardware and you need to perform an OS installation. What do you do?
What is the CIA triangle?
You are an employee for a tech department in a non-management position. A high-level executive demands that you break protocol and allow him to use his home laptop at work. What do you do?
How would you find out what a POST code means?
What is the difference between a virus and a trojan?
0 Answers Tavant Technologies, Zensar,
Why are internal threats oftentimes more successful than external threats?
I’m the CEO of a Fortune 500 company. I make more in an afternoon than you make in a year. I don’t care about this stupid security stuff, it just costs time and money and slows everything down. Why should I care about this junk?
I run an SMB. I have 4 people in my entire company and a web-based store. I don’t have the time, patience or manpower to have a computer guy. Why should I care about exploits and computer jibberish?