How to prepare for the demise of Windows NT LAN Manager

The video discusses the challenges of phasing out NTLM, an outdated network authentication protocol, in favor of more secure options like Kerberos. It explains how to identify NTLM usage in a network, audit NTLM traffic, and plan for its phase-out. The video emphasizes the importance of understanding NTLM's role in your network and preparing for future upgrades or migrations, especially when moving to cloud services.

What was the default network authentication protocol in Windows NT 4.0?

• NTLM

• LDAP

• Kerberos

• OAuth

Why is NTLM still used in some network scenarios?

• It is required for all cloud services

• It is the only protocol supported by Windows

• It allows authentication without direct access to a domain controller

• It is more secure than Kerberos

What is a major security risk associated with NTLM?

• It cannot be used with RDP

• It requires a direct connection to the domain controller

• It is vulnerable to spoofing attacks

• It is incompatible with modern operating systems

Which policy setting should be enabled to audit NTLM traffic?

• Network security: Disable NTLM

• Network security: Enable Kerberos

• Network security: Allow NTLM authentication

• Network security: Restrict NTLM audit incoming NTLM traffic

What does Microsoft recommend regarding the use of NTLM?

• Continue using NTLM for all network authentication

• Rely on NTLM for cloud services

• Avoid using NTLM and plan for its phase-out

• Use NTLM only for local accounts