where on the domain controllers are the passwords stored?

On an Active Directory network using NTLM authentication, where on the domain controllers are the passwords
stored?

A.
SAM

B.
AMS

C.
Shadow file

D.
Password.conf