A Penetration Tester Is Able to Move Laterally Throughout a Domain

Multiple Choice

A penetration tester is able to move laterally throughout a domain with minimal roadblocks after compromising a single workstation. Which of the following mitigation strategies would be BEST to recommend in the report? (Select THREE) .

A) Randomize local administrator credentials for each machine.
B) Disable remote logons for local administrators.
C) Require multifactor authentication for all logins.
D) Increase minimum password complexity requirements.
E) Apply additional network access control.
F) Enable full-disk encryption on every workstation.
G) Segment each host into its own VLAN.