What is kept in the registry key HKLM\SECURITY\Policy\Secrets?

What is kept in the registry key HKLM\SECURITY\Policy\Secrets?

• A. IAS account names and passwords
• B. Service account passwords in plain text
• C. Local store PKI Kerberos certificates
• D. Cached password hashes for the past 20 users

Answer: (B)

The registry path HKLM\SECURITY\Policy\Secrets is where the Local Security Authority stores secrets that the system uses to run and authenticate services. These secrets include the passwords for service accounts that Windows uses when services start or access network resources. That makes this location the place where service account credentials are kept, which is exactly what the question is asking about. Other options don’t fit because IAS account names and passwords aren’t kept in this Secrets area, Kerberos certificates live in certificate stores rather than this secret store, and cached password hashes for previous users are stored in SAM/credential caches rather than in the Secrets registry path.

The registry path HKLM\SECURITY\Policy\Secrets is where the Local Security Authority stores secrets that the system uses to run and authenticate services. These secrets include the passwords for service accounts that Windows uses when services start or access network resources. That makes this location the place where service account credentials are kept, which is exactly what the question is asking about.

Other options don’t fit because IAS account names and passwords aren’t kept in this Secrets area, Kerberos certificates live in certificate stores rather than this secret store, and cached password hashes for previous users are stored in SAM/credential caches rather than in the Secrets registry path.