Which type of information does a Windows SAM file contain?
A.
Hash of network passwords
B.
Encrypted network passwords
C.
Hash of local Windows passwords
D.
Encrypted local Windows passwords
The Answer Is:
C
This question includes an explanation.
Explanation:
Comprehensive and Detailed Explanation From Exact Extract:
The Windows Security Account Manager (SAM) file stores hashed passwords for local Windows user accounts. These hashes are used to authenticate users without storing plaintext passwords.
The SAM file stores local account password hashes, not network passwords.
Passwords are hashed (not encrypted) using algorithms like NTLM or LM hashes.
Network password management occurs elsewhere (e.g., Active Directory).
[Reference:NIST SP 800-86 and standard Windows forensics texts explain that the SAM file contains hashed local account credentials critical for forensic investigations involving Windows systems.]
Digital-Forensics-in-Cybersecurity PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 75% Discount on All Products,
Use Coupon: "ac75sure"