312-49 Question #500: Real Exam Question with Answer & Explanation

The correct answer is A: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList. User Security Identifiers (SIDs) in Windows 7 are stored under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList. Each subkey under ProfileList is named with the full SID of a user account and contains values pointing to that user's profile path, among o

Submitted by packet_pusher· Apr 18, 2026Disk Forensics

Question

Microsoft Security IDs are available in Windows Registry Editor. The path to locate IDs in Windows 7 is:

Options

AHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
BHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProfileList
CHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegList
DHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Regedit

Explanation

User Security Identifiers (SIDs) in Windows 7 are stored under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList. Each subkey under ProfileList is named with the full SID of a user account and contains values pointing to that user's profile path, among other details. The 'Windows NT' segment is critical â€” omitting it (as in option B) leads to a different, incorrect path. Options C and D reference non-existent keys (RegList, Regedit) under this path.

Topics

#Windows Registry#Security ID (SID)#User Profiles#Registry Paths

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice Browse All 312-49 Questions