Computer Hacking Forensic Investigator (CHFI) — Question 117

Which part of the Windows Registry contains the user's password file?

Answer options

• A. HKEY_LOCAL_MACHINE
• B. HKEY_CURRENT_CONFIGURATION
• C. HKEY_USER
• D. HKEY_CURRENT_USER

Correct answer: A

Explanation

The correct answer is A, HKEY_LOCAL_MACHINE, as it contains information about the local machine, including security settings and user credentials. The other options, such as HKEY_CURRENT_CONFIGURATION, HKEY_USER, and HKEY_CURRENT_USER, do not store the user's password file but rather hold configuration settings and user-specific data.