Where is the Windows Security Accounts Manager (SAM) file typically located?

Unlock all questions

This demo includes only 20 questions. Upgrade to access hundreds of questions, flashcards, exam simulations, and disable ads.

Full question bankExam simulationsFlashcards
From $24.99Unlock all

Prepare for the Computer Hacking Forensic Investigator v11 exam. Study with flashcards and multiple choice questions. Each question includes hints and explanations. Get exam-ready efficiently!

Multiple Choice

Where is the Windows Security Accounts Manager (SAM) file typically located?

Explanation:
The main idea here is that the Windows SAM file is a registry hive that stores user account information and password hashes used by the Local Security Authority. It sits in the Registry hives folder within the Windows system directory: C:\Windows\System32\Config\SAM. It isn’t located in the boot or drivers directories, and the path with con is not a real file location. The SAM file is loaded into memory during boot and is protected, so access typically requires offline analysis of a disk image or offline registry access.

The main idea here is that the Windows SAM file is a registry hive that stores user account information and password hashes used by the Local Security Authority. It sits in the Registry hives folder within the Windows system directory: C:\Windows\System32\Config\SAM. It isn’t located in the boot or drivers directories, and the path with con is not a real file location. The SAM file is loaded into memory during boot and is protected, so access typically requires offline analysis of a disk image or offline registry access.

More Multiple Choice Questions
Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy