GIAC Exam GCIH Topic 6 Question 42 Discussion

Actual exam question for GIAC's GCIH exam

Question #: 42
Topic #: 6

[All GCIH Questions]

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?

AHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup

BHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto

CHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

DHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start

Show Suggested Answer

Suggested Answer: C

by Isabella at Jun 16, 2025, 01:56 PM

Limited Time Offer

25%

Off

Get Premium GCIH Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Harrison

4 days ago

I agree with Lindsey. Editing the Startup registry entry would make the Trojan run on startup without the user's knowledge.

upvoted 0 times

...

Lindsey

6 days ago

I think the correct answer is A) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup because that's where startup programs are usually located.

upvoted 0 times

...