Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Where does Windows store password hashes?
DFS
etc. directory
SAM
For a domain-joined machine, there are three places that you could find credentials stored. 1.SAM file (need both C:\windows\system32\config\SAM, and C:\windows\system32\config\system) 2.Registry (HKEYLOCALMACHINE\Security\Cache for domain credentials, HKEYLOCALMACHINE\SAM for local credentials) 3.In-memory (dump with mimikatz) -- however this last one isn't "stored" as in written-to-disk.
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.