1. What simple thing for network-facing systems must be done to prevent Brute Force and Dictionary attacks from being feasible? (Throttle is a hint.)

2. Pass-the-hash and Mimikatz are mentioned in TestOut, but not described much. The idea for pass- the-hash is to dump the NTLM tokens from a compromised machine and then use them as authentication tokens to other machines until a machine is found that an elevated user had previously used. Dumping tokens out of memory requires DEBUG privileges, so a way to prevent pass-the-hash is to reduce user privileges. The source for Mimikatz is at https://github.com/gentilkiwi/mimikatz. Look at the page. What is the NTLM hash for Gentil Kiwi?