312-49 · Question #260
On an Active Directory network using NTLM authentication, where on the domain controllers are the passwords stored?
The correct answer is A. SAM. The Security Account Manager (SAM) database is where Windows stores user account credentials, including NTLM password hashes. On domain controllers, Active Directory extends this concept - credentials are stored in the NTDS.dit file, but the SAM is the foundational component…
Question
On an Active Directory network using NTLM authentication, where on the domain controllers are the passwords stored?
Options
- ASAM
- BAMS
- CShadow file
- DPassword.conf
How the community answered
(55 responses)- A93% (51)
- B2% (1)
- C2% (1)
- D4% (2)
Explanation
The Security Account Manager (SAM) database is where Windows stores user account credentials, including NTLM password hashes. On domain controllers, Active Directory extends this concept - credentials are stored in the NTDS.dit file, but the SAM is the foundational component responsible for password storage and NTLM hash management. The SAM database is protected by SYSKEY encryption and is locked by the OS during normal operation. 'AMS' is not a real Windows component, the 'Shadow file' is a Unix/Linux concept (/etc/shadow), and 'Password.conf' does not exist in Windows.
Topics
Community Discussion
No community discussion yet for this question.