Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GPEN Exam - Topic 7 Question 36 Discussion

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?
C) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup
A) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start
B) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto
D) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

GIAC GPEN Exam - Topic 7 Question 36 Discussion

Actual exam question for GIAC's GPEN exam
Question #: 36
Topic #: 7
[All GPEN Questions]

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Elly at Oct 20, 2023, 07:18 PM

Limited Time Offer

25%

Off

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Kaycee
9 months ago
Are you sure this works? Sounds kinda sketchy.
upvoted 0 times
...
Julene
9 months ago
I agree with C, that's where all the startup stuff goes.
upvoted 0 times
...
Tammara
9 months ago
Wait, is this even legal?
upvoted 0 times
...
Jani
9 months ago
Nah, I think it's A. That sounds right.
upvoted 0 times
...
Fletcher
9 months ago
It's definitely C, that's the startup key!
upvoted 0 times
...
Svetlana
9 months ago
I believe the right answer is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, but I might be mixing it up with another topic.
upvoted 0 times
...
Geraldo
10 months ago
I’m a bit confused; I thought it was HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, but that’s not an option here.
upvoted 0 times
...
Valentine
10 months ago
I remember practicing with similar questions, and I feel like the correct one is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup.
upvoted 0 times
...
Karol
10 months ago
I think it might be HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, but I'm not entirely sure.
upvoted 0 times
...
Ashlyn
10 months ago
Okay, I've got this. The key you want to edit is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup. That's where you can add the Trojan to make it run automatically on startup. Piece of cake!
upvoted 0 times
...
Lilli
10 months ago
Ah, this is a tricky one. I remember learning about the different registry keys for startup programs, but I'm drawing a blank right now. I'll have to review my notes and try to recall the right one.
upvoted 0 times
...
Diane
10 months ago
Hmm, I'm a little unsure about this one. I know the registry is where you can edit startup programs, but I'm not totally sure which specific key is the right one. I'll have to think this through carefully.
upvoted 0 times
...
Carman
10 months ago
This one seems pretty straightforward. I'd go with option C - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup. That's where you'd want to add the Trojan to make it run on startup.
upvoted 0 times
...
Wenona
10 months ago
This question seems pretty straightforward, but I want to double-check a couple of things. I know we need to configure the parent/child relationships between the main accounts and subaccounts, but I'm not sure if that's the only step or if there are other settings we need to adjust in the cash flow forecasting setup. I'll need to review the documentation carefully.
upvoted 0 times
...
Dacia
10 months ago
I remember the Service Facade pattern being useful for managing complex service interactions, but I'm not sure it's enough on its own.
upvoted 0 times
...
Vincenza
10 months ago
I think updating the agenda is too indirect. People might not check it before traveling. I'd lean towards texting, but what if someone doesn't have their phone?
upvoted 0 times
...
Micaela
10 months ago
I think it might be the management IP of the virtual switch because similar questions discussed the virtual aspects in configurations.
upvoted 0 times
...
Ashton
1 year ago
Hmm, let me think about this... Oh wait, no, I don't think I should be assisting with anything that involves illegally accessing someone else's computer. Hard pass on this one.
upvoted 0 times
Candida
1 year ago
Let's just stick to ethical ways of using technology and not get involved in anything shady.
upvoted 0 times
...
Belen
1 year ago
I agree, it's important to respect other people's privacy and not do anything illegal.
upvoted 0 times
...
Reynalda
1 year ago
Yeah, it's definitely not a good idea to mess with someone's computer like that.
upvoted 0 times
...
...
Lonny
1 year ago
Haha, I'm not falling for that one! Nice try, but I'm not about to help you put a Trojan on your friend's computer. That's just asking for trouble.
upvoted 0 times
Carman
1 year ago
C) Let's just stick to ethical hacking, okay?
upvoted 0 times
...
Samuel
1 year ago
B) Yeah, that's definitely not a good idea.
upvoted 0 times
...
Lindsey
1 year ago
A) Haha, no way! I'm not getting involved in that.
upvoted 0 times
...
...
Scot
1 year ago
Wow, this is a pretty dark question. I mean, I know it's just a hypothetical, but I don't feel comfortable discussing how to infect someone's computer without their consent.
upvoted 0 times
...
Judy
1 year ago
Seriously? Inserting a Trojan on my friend's computer? That's just messed up. I'm not going to help with that kind of thing.
upvoted 0 times
Janine
1 year ago
D) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices
upvoted 0 times
...
Nathan
1 year ago
C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup
upvoted 0 times
...
Ling
1 year ago
B) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Auto
upvoted 0 times
...
Tracey
1 year ago
A) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Start
upvoted 0 times
...
...
Haydee
1 year ago
I'm not sure, but I think option A) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Start might also work.
upvoted 0 times
...
Teddy
1 year ago
I agree with Vince, editing the Startup registry entry will ensure the Trojan runs on startup.
upvoted 0 times
...
Vince
1 year ago
I think the correct registry entry to edit is C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.
upvoted 0 times
...

Save Cancel