Computer Hacking Forensic Investigator (CHFI v10) — Question 461

Microsoft Security IDs are available in Windows Registry Editor. The path to locate IDs in Windows 7 is:

Answer options

• A. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
• B. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProfileList
• C. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegList
• D. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Regedit

Correct answer: A

Explanation

The correct location for Microsoft Security IDs in Windows 7 is A, as it points to the ProfileList under Windows NT, which contains user profile information. Option B is incorrect because it refers to the Windows version instead of Windows NT. Options C and D are also wrong as they reference non-existent paths in the registry for security IDs.