Exam 312-49v10 topic 1 question 61 discussion

D. review of SIDs in the Registry

anyone can explain why the answer is checking MD5? my only thought is only checking the MD5 to compare passwords but that sounds trivial. most probable answer is checking SIDs through registry

D. review of SIDs in the Registry Citation: EC Council Official Curricula Computer Hacking Forensic Investigator https://bookshelf.vitalsource.com/reader/books/9781635676969/ Module 06 Pages 594-595 "HKEY_USERS, abbreviated as HKU, contains information about all the currently active user profiles on the computer. Each registry key under HKEY_USERS hive relates to a user on the computer, which is named after the user security identifier (SID). The registry keys and registry values under each SID control the user specific mapped drives, installed printers, environmental variables, and so on."

Examtopics please take note of all the answer and comment when users did. Obviously the answer provided by examtpoic were wrong but after the first comment until now the answer still no changes at all. Quite upset since a lot of people buying this for study and exam use but the answer could be so many errors and non-updated.

Registry Analysis: The Windows Registry can contain information about user accounts and their profiles. You can examine the registry to find historical data about user accounts, especially in the "HKEY_LOCAL_MACHINE\SAM" and "HKEY_LOCAL_MACHINE\SOFTWARE" hives. In Windows 2000 Server, the Security Identifier (SID) for the local machine can be found in the Windows Registry. The SID is a unique identifier for a Windows system, and it is stored in the registry in the following location: "HKEY_LOCAL_MACHINE\SECURITY\SAM\Domains\Account" Inside the "Account" key, you will find a subkey named "Users." Within the "Users" key, you can locate a list of user accounts and their corresponding SIDs. The SIDs for user accounts are stored as registry values, and you can identify them by looking at the data associated with these values. --> review of SIDs in the Registry

SIDs makes sense. 6 of us agree. Wish they'd update this.

D. Review of SIDs in the Registry

D. review of SIDs in the Registry