MENU
Which of the following Windows event is logged every time when a user tries to access the "Registry" key?
Suggested Answer: D
Get Premium 312-39 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
34 comments · newest first
AB
Abel
11 months ago
Agreed, 4663 is the right one for access events!
CH
Cherry
11 months ago
Wait, are you sure about 4663?
JU
Justine
12 months ago
4660 is for object deletion, not access.
LO
Lovetta
12 months ago
I thought it was 4656.
VA
Valentin
1 year ago
It's definitely 4663!
AR
Arlene
1 year ago
I remember 4660 is about deletion events, so it can't be that one. I think it’s definitely between 4656 and 4663.
JU
Julian
1 year ago
I’m leaning towards 4657, but I can't recall exactly what it logs. This is tricky!
TA
Tamala
1 year ago
I practiced a similar question, and I feel like 4656 was mentioned in that context. Maybe it's the right one?
JA
Janine
1 year ago
I think it's 4663 because I remember it being related to object access, but I'm not entirely sure.
MA
Margurite
1 year ago
This is a tricky one. I'm not entirely sure which approach would be best. I might need to do some additional research or ask the instructor for clarification before committing to an answer.
ME
Melissia
1 year ago
I'm a little confused by the wording of the question. Is there anything specific I should be looking for to determine the right access control model?
CH
Chauncey
1 year ago
Hmm, I'm a bit unsure about this one. I know the recommended steps involve preserving evidence and not altering the suspected device, but I'm not 100% sure which one is the odd one out. I'll have to think this through carefully.
MA
Magnolia
1 year ago
I'm just here to cause a little chaos. Maybe the answer is C) 4660 - the 'Registry Key Deleted' event. Who knows?
AN
Anissa
1 year ago
I'm sticking with C) 4660 - 'Registry key deleted.'
MA
Marjory
1 year ago
I'm going with D) 4657 - 'A registry value was modified.'
TE
Telma
1 year ago
No, I believe it's A) 4656 - 'A handle to an object was requested.'
AI
Aimee
1 year ago
I think it might be B) 4663 - 'An attempt was made to access an object.'
RA
Raul
1 year ago
Let's see if chaos theory works, I'll pick C) 4660 - the 'Registry Key Deleted' event.
MA
Marva
1 year ago
I'm not sure, but I'll go with D) 4657 - the 'Registry Value Deleted' event.
MA
Macy
1 year ago
I'm going with B) 4663 - the 'An attempt was made to access an object' event.
KR
Kris
1 year ago
I think it might be A) 4656 - the 'Registry Object Opened' event.
LE
Leatha
1 year ago
I'm gonna go with B) 4663. It just makes the most sense to me for this scenario.
KA
Katheryn
2 years ago
I'm leaning towards A) 4656. That's the generic event for any type of access to the registry, isn't it?
RE
Renay
1 year ago
Yeah, that's the one I would go with too. It's the most common event for registry access.
ST
Stefania
1 year ago
I think you're right, A) 4656 is the one that logs any access to the registry.
EL
Elza
2 years ago
I'm not sure, but I think it might be C) 4660 because it also involves accessing objects.
MA
Margurite
2 years ago
I'm pretty sure it's D) 4657. That's the event for registry key modifications, which sounds like what the question is asking for.
PE
Penney
2 years ago
I agree with German, because event 4663 is related to accessing objects like Registry keys.
GE
German
2 years ago
I think the answer is B) 4663.
ME
Melita
2 years ago
Hmm, I think the answer is B) 4663. That's the one for accessing registry keys, right?
BR
Brice
1 year ago
Thanks for clarifying. I'll remember that for next time.
AL
Alease
1 year ago
Yes, I'm sure. B) 4663 is the correct event for accessing the Registry key.
OR
Oretha
1 year ago
I thought it was C) 4660. Are you sure it's B) 4663?
RE
Regenia
1 year ago
Yes, you are correct. B) 4663 is the Windows event logged for accessing the Registry key.