QuestionQ77Verified/Risk Management with Policy RulesCopy linkReport a problemAsk AstroTutorSave questionWhich of the following is a valid use case for disabling a detection-based risk?AOrganization has a manual process for changing local administrator passwords for new endpoints, so they disabled detections for Duplicated Local AdministratorBOrganization uses a 3rd-party software for domain password management which does not leverage Active Directory Password Policies, so they disabled the detection-based risk for "Inadequate Password Policy"CUser disabled detections for NTLMv2 Compatibility due to the presence of legacy operating systems in their environmentDUser disabled detections for GPO Exposed Password to prevent other Identity Protection administrators from seeing unintended informationShow AnswerAnswerExplanationLegacy client devices that do not support NTLMv2 cannot authenticate to domain resources when NTLMv2-only authentication is required. Retaining compatibility while those systems remain in use can therefore justify disabling an NTLMv2 Compatibility detection-based risk temporarily.Learn moreNetwork security: LAN Manager authentication levelShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion