After cracking one standard user hash, a municipal stakeholder asks whether that automatically equals Domain Admin. What is the correct response?
Select an answer to reveal the explanation.
Short Explanation
One cracked badge gets you into the lobby — not automatically into the CEO suite. Domain Admin is a path question: groups, ACLs, and hops still matter. Keep mapping instead of assuming the finish line.
Full Explanation
A single compromised user credential is a foothold, not proof of directory dominance. Effective AD assessment continues with enumeration of group membership, ACL rights, and reachable privilege edges. Stopping early or claiming automatic Domain Admin misrepresents impact. Conversely, dismissing all further path potential from a user foothold is equally incorrect.