The Active Directory (AD) database on Windows domain controllers contains critical directory

information, stored in a specific file format.

Why D is correct: The NTDS.DIT file (NT Directory Services Directory Information Tree) is the Active

Directory database file, located in C:\Windows\NTDS\ on domain controllers. It stores all AD objects

(users, groups, computers) and schema data in a hierarchical structure. CNSP identifies NTDS.DIT as

the key file for AD data extraction in security audits.

Why other options are incorrect:

A . NTDS.DAT: Not a valid AD database file; may be a confusion with other system files.

B . NTDS.MDB: Refers to an older Microsoft Access database format, not used for AD.

C . MSAD.MDB: Not a recognized file for AD; likely a misnomer.

Reference: CNSP "Windows Active Directory Security" (Section on Database Files) confirms NTDS.DIT

as the Active Directory database file.

Thank you for your visit.