Computer Hacking Forensic Investigator (CHFI v10) — Question 450

In which registry does the system store the Microsoft security IDs?

Answer options

• A. HKEY_CLASSES_ROOT (HKCR)
• B. HKEY_CURRENT_CONFIG (HKCC)
• C. HKEY_CURRENT_USER (HKCU)
• D. HKEY_LOCAL_MACHINE (HKLM)

Correct answer: D

Explanation

The correct answer is D, HKEY_LOCAL_MACHINE (HKLM), as it contains information about the hardware and software of the local machine, including security IDs. The other options, such as HKEY_CLASSES_ROOT, HKEY_CURRENT_CONFIG, and HKEY_CURRENT_USER, serve different purposes related to user settings and system configuration, but do not store security IDs.