A county gold image used for fleet builds embeds a domain-join credential in the template. What AD-adjacent risk should the assessment highlight?
Select an answer to reveal the explanation.
Short Explanation
Stuffing a join password into the master image is like printing the building code on every keycard blank. Every machine cloned from that gold image may inherit the same secret. That is AD hygiene risk sitting in the imaging pipeline.
Full Explanation
Domain-join and administrative credentials embedded in gold images or deployment templates can be recovered from many cloned systems, amplifying compromise once one image is inspected. The risk is not limited to cosmetic settings and is not a Kerberos protocol requirement. Hardening guidance focuses on removing static secrets from templates, using short-lived or managed join methods, and rotating any credentials that were baked into historical images.