Windows Registry Hive for Password Storage
Which part of the Windows Registry contains the user's password file?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests knowledge of registry hives, specifically distinguishing between user-specific settings and system-wide security databases like SAM.
This question examines the structure of the Windows Registry and identifies which hive stores user credentials. The correct location is HKEY_LOCAL_MACHINE, where the Security Account Manager (SAM) database resides.
Candidates often select HKEY_CURRENT_USER, mistakenly believing that because passwords relate to users, they must be stored in the current user's specific hive.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
The Security Account Manager (SAM) database contains the hashed passwords for local user accounts. This database is physically stored in the file C:\Windows\System32\config\SAM but is loaded into the registry under the HKEY_LOCAL_MACHINE hive as HKLM\SAM. Therefore, HKEY_LOCAL_MACHINE is the correct answer.Why the Other Options Are Wrong
HKEY_CURRENT_USER is a pointer to the specific user's branch under HKEY_USERS; it does not contain the master password database. HKEY_USERS contains profiles for all users but is distinct from the SAM data store. HKEY_CURRENT_CONFIGURATION maps to hardware configuration data and has no relation to user credentials.Community Comment Notes
Community comments correctly identify that the SAM database is located under HKEY_LOCAL_MACHINE. One commenter noted that "The Security Account Manager (SAM) is a critical Windows database... Stored in the c:\windows\system32\config\SAM directory and HKEY_LOCAL_MACHINE". Another added that LSA secrets are also under HKLM, reinforcing that sensitive system data resides there.Exam Strategy
When asked about system security data or SAM, always look for HKEY_LOCAL_MACHINE. User-specific preferences go to HKEY_CURRENT_USER, but authentication credentials are system-level resources managed by the Local Security Authority.
Frequently Asked Questions
Why isn't the password stored in HKEY_CURRENT_USER?
HKEY_CURRENT_USER only holds settings for the logged-in user. Password hashes are stored centrally in the SAM database under HKLM for system-wide authentication.
What is the physical file for the SAM database?
The SAM data is physically stored in the file C:\Windows\System32\config\SAM on the local drive.