GIAC GPEN Exam - Topic 7 Question 36 Discussion

Actual exam question for GIAC's GPEN exam

Question #: 36
Topic #: 7

[All GPEN Questions]

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?

AHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start

BHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto

CHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup

DHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

Show Suggested Answer

Suggested Answer: C

by Elly at Oct 20, 2023, 07:18 PM

Limited Time Offer

25%

Off

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kaycee

3 months ago

Are you sure this works? Sounds kinda sketchy.

upvoted 0 times

...

Julene

3 months ago

I agree with C, that's where all the startup stuff goes.

upvoted 0 times

...

Tammara

3 months ago

Wait, is this even legal?

upvoted 0 times

...

Jani

4 months ago

Nah, I think it's A. That sounds right.

upvoted 0 times

...

Fletcher

4 months ago

It's definitely C, that's the startup key!

upvoted 0 times

...

Svetlana

4 months ago

I believe the right answer is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, but I might be mixing it up with another topic.

upvoted 0 times

...

Geraldo

4 months ago

I’m a bit confused; I thought it was HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, but that’s not an option here.

upvoted 0 times

...

Valentine

4 months ago

I remember practicing with similar questions, and I feel like the correct one is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup.

upvoted 0 times

...

Karol

5 months ago

I think it might be HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, but I'm not entirely sure.

upvoted 0 times

...

Ashlyn

5 months ago

Okay, I've got this. The key you want to edit is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup. That's where you can add the Trojan to make it run automatically on startup. Piece of cake!

upvoted 0 times

...

Lilli

5 months ago

Ah, this is a tricky one. I remember learning about the different registry keys for startup programs, but I'm drawing a blank right now. I'll have to review my notes and try to recall the right one.

upvoted 0 times

...

Diane

5 months ago

Hmm, I'm a little unsure about this one. I know the registry is where you can edit startup programs, but I'm not totally sure which specific key is the right one. I'll have to think this through carefully.

upvoted 0 times

...

Carman

5 months ago

This one seems pretty straightforward. I'd go with option C - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup. That's where you'd want to add the Trojan to make it run on startup.

upvoted 0 times

...

Wenona

5 months ago

This question seems pretty straightforward, but I want to double-check a couple of things. I know we need to configure the parent/child relationships between the main accounts and subaccounts, but I'm not sure if that's the only step or if there are other settings we need to adjust in the cash flow forecasting setup. I'll need to review the documentation carefully.

upvoted 0 times

...

Dacia

5 months ago

I remember the Service Facade pattern being useful for managing complex service interactions, but I'm not sure it's enough on its own.

upvoted 0 times

...

Vincenza

5 months ago

I think updating the agenda is too indirect. People might not check it before traveling. I'd lean towards texting, but what if someone doesn't have their phone?

upvoted 0 times

...

Micaela

5 months ago

I think it might be the management IP of the virtual switch because similar questions discussed the virtual aspects in configurations.

upvoted 0 times

...

Ashton

10 months ago

Hmm, let me think about this... Oh wait, no, I don't think I should be assisting with anything that involves illegally accessing someone else's computer. Hard pass on this one.

upvoted 0 times

Candida

9 months ago

Let's just stick to ethical ways of using technology and not get involved in anything shady.

upvoted 0 times

...

Belen

9 months ago

I agree, it's important to respect other people's privacy and not do anything illegal.

upvoted 0 times

...

Reynalda

9 months ago

Yeah, it's definitely not a good idea to mess with someone's computer like that.

upvoted 0 times

...

Lonny

10 months ago

Haha, I'm not falling for that one! Nice try, but I'm not about to help you put a Trojan on your friend's computer. That's just asking for trouble.

upvoted 0 times

Carman

9 months ago

C) Let's just stick to ethical hacking, okay?

upvoted 0 times

...

Samuel

9 months ago

B) Yeah, that's definitely not a good idea.

upvoted 0 times

...

Lindsey

9 months ago

A) Haha, no way! I'm not getting involved in that.

upvoted 0 times

...

Scot

10 months ago

Wow, this is a pretty dark question. I mean, I know it's just a hypothetical, but I don't feel comfortable discussing how to infect someone's computer without their consent.

upvoted 0 times

...