New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Eccouncil 312-39 Exam - Topic 10 Question 65 Discussion

Actual exam question for Eccouncil's 312-39 exam
Question #: 65
Topic #: 10
[All 312-39 Questions]

Which of the following Windows event is logged every time when a user tries to access the "Registry" key?

Show Suggested Answer Hide Answer
Suggested Answer: D


Contribute your Thoughts:

0/2000 characters
Abel
4 months ago
Agreed, 4663 is the right one for access events!
upvoted 0 times
...
Cherry
4 months ago
Wait, are you sure about 4663?
upvoted 0 times
...
Justine
4 months ago
4660 is for object deletion, not access.
upvoted 0 times
...
Lovetta
4 months ago
I thought it was 4656.
upvoted 0 times
...
Valentin
4 months ago
It's definitely 4663!
upvoted 0 times
...
Arlene
5 months ago
I remember 4660 is about deletion events, so it can't be that one. I think it’s definitely between 4656 and 4663.
upvoted 0 times
...
Julian
5 months ago
I’m leaning towards 4657, but I can't recall exactly what it logs. This is tricky!
upvoted 0 times
...
Tamala
5 months ago
I practiced a similar question, and I feel like 4656 was mentioned in that context. Maybe it's the right one?
upvoted 0 times
...
Janine
5 months ago
I think it's 4663 because I remember it being related to object access, but I'm not entirely sure.
upvoted 0 times
...
Margurite
5 months ago
This is a tricky one. I'm not entirely sure which approach would be best. I might need to do some additional research or ask the instructor for clarification before committing to an answer.
upvoted 0 times
...
Melissia
5 months ago
I'm a little confused by the wording of the question. Is there anything specific I should be looking for to determine the right access control model?
upvoted 0 times
...
Chauncey
5 months ago
Hmm, I'm a bit unsure about this one. I know the recommended steps involve preserving evidence and not altering the suspected device, but I'm not 100% sure which one is the odd one out. I'll have to think this through carefully.
upvoted 0 times
...
Magnolia
10 months ago
I'm just here to cause a little chaos. Maybe the answer is C) 4660 - the 'Registry Key Deleted' event. Who knows?
upvoted 0 times
Anissa
8 months ago
I'm sticking with C) 4660 - 'Registry key deleted.'
upvoted 0 times
...
Marjory
8 months ago
I'm going with D) 4657 - 'A registry value was modified.'
upvoted 0 times
...
Telma
8 months ago
No, I believe it's A) 4656 - 'A handle to an object was requested.'
upvoted 0 times
...
Aimee
9 months ago
I think it might be B) 4663 - 'An attempt was made to access an object.'
upvoted 0 times
...
Raul
9 months ago
Let's see if chaos theory works, I'll pick C) 4660 - the 'Registry Key Deleted' event.
upvoted 0 times
...
Marva
9 months ago
I'm not sure, but I'll go with D) 4657 - the 'Registry Value Deleted' event.
upvoted 0 times
...
Macy
9 months ago
I'm going with B) 4663 - the 'An attempt was made to access an object' event.
upvoted 0 times
...
Kris
9 months ago
I think it might be A) 4656 - the 'Registry Object Opened' event.
upvoted 0 times
...
...
Leatha
10 months ago
I'm gonna go with B) 4663. It just makes the most sense to me for this scenario.
upvoted 0 times
...
Katheryn
10 months ago
I'm leaning towards A) 4656. That's the generic event for any type of access to the registry, isn't it?
upvoted 0 times
Renay
9 months ago
Yeah, that's the one I would go with too. It's the most common event for registry access.
upvoted 0 times
...
Stefania
10 months ago
I think you're right, A) 4656 is the one that logs any access to the registry.
upvoted 0 times
...
...
Elza
10 months ago
I'm not sure, but I think it might be C) 4660 because it also involves accessing objects.
upvoted 0 times
...
Margurite
10 months ago
I'm pretty sure it's D) 4657. That's the event for registry key modifications, which sounds like what the question is asking for.
upvoted 0 times
...
Penney
10 months ago
I agree with German, because event 4663 is related to accessing objects like Registry keys.
upvoted 0 times
...
German
11 months ago
I think the answer is B) 4663.
upvoted 0 times
...
Melita
11 months ago
Hmm, I think the answer is B) 4663. That's the one for accessing registry keys, right?
upvoted 0 times
Brice
9 months ago
Thanks for clarifying. I'll remember that for next time.
upvoted 0 times
...
Alease
9 months ago
Yes, I'm sure. B) 4663 is the correct event for accessing the Registry key.
upvoted 0 times
...
Oretha
9 months ago
I thought it was C) 4660. Are you sure it's B) 4663?
upvoted 0 times
...
Regenia
9 months ago
Yes, you are correct. B) 4663 is the Windows event logged for accessing the Registry key.
upvoted 0 times
...
...

Save Cancel