thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Systems & Data Center · Advanced

Credential Guard

A Windows security feature that uses virtualization-based security to isolate credential secrets from the operating system.

Definition

Credential Guard runs LSA secrets in an isolated LSAIso process protected by the hypervisor, preventing tools like Mimikatz from extracting NTLM hashes and Kerberos tickets. It requires UEFI, Secure Boot and virtualization extensions and is enabled by default on many current Windows versions.

Example

Enabling Credential Guard via Group Policy protects cached domain credentials on admin workstations.

Exam tip

Credential Guard mitigates pass-the-hash and pass-the-ticket attacks.

Related terms