27In an internal network assessment, how does a single foothold usually turn into domain control, and which controls break that path?▼hardNewMicrosoftCrowdStrikePalo Alto Networks◆ premiumInternal assessments rarely need exotic exploits. They follow the credentials, and the controls that matter are the ones that stop credentials from spreading.Open full answer →
28How do real intrusions unfold from first access to impact, and where should a defender spend effort to stay ahead of attackers?▼mediumNewCrowdStrikeGoogleMicrosoft◆ premiumAttackers are not wizards; they repeat a small number of moves because those moves keep working. The answer names the moves and the choke points where one control breaks many intrusions.Open full answer →
15How do attackers steal and reuse credentials in a Windows enterprise, and how do you reduce the damage when an endpoint is compromised?▼hardNewMicrosoftCrowdStrikePalo Alto Networks◆ premiumYou cannot stop every laptop being compromised. You can decide what that laptop holds. The strong answer is about which credentials live where, and making stolen ones useless elsewhere.Open full answer →
07Why does network segmentation matter, and how would you segment an environment, from VLANs to microsegmentation?▼mediumNewPalo Alto NetworksCiscoMicrosoft○ sign inFlat networks turn one infected laptop into a company-wide incident. The scored answer draws zones from what talks to what, and shows how identity-based policy replaces IP lists as the network grows.Open full answer →