New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GSLC Exam - Topic 5 Question 40 Discussion

Actual exam question for GIAC's GSLC exam
Question #: 40
Topic #: 5
[All GSLC Questions]

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?

Show Suggested Answer Hide Answer
Suggested Answer: A

Contribute your Thoughts:

0/2000 characters
Sherrell
3 months ago
Pretty sure it's not D, that one doesn't make sense.
upvoted 0 times
...
Stephanie
3 months ago
Wait, is this even legal?
upvoted 0 times
...
France
3 months ago
I thought it was Auto, but now I'm not so sure.
upvoted 0 times
...
Teresita
4 months ago
Nah, I think it's the Startup entry.
upvoted 0 times
...
Golda
4 months ago
It's definitely HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices.
upvoted 0 times
...
Elli
4 months ago
I’m leaning towards HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start, but I don't remember if that’s the correct path for what we need.
upvoted 0 times
...
Roosevelt
4 months ago
I feel like HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto could be a possibility, but I can't recall if that's the right one for startup items.
upvoted 0 times
...
Alverta
4 months ago
I remember practicing a similar question, and I think it was about the Run key. Maybe it's HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup?
upvoted 0 times
...
Jennifer
5 months ago
I think the right registry entry might be HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, but I'm not entirely sure.
upvoted 0 times
...
Reta
5 months ago
I feel pretty good about this one. The key is to look for the registry entry that deals with startup programs, and that would be C. I'm going to go with that as my final answer.
upvoted 0 times
...
Zona
5 months ago
This is a tricky one. I'm not super familiar with the Windows registry, so I'm not totally confident in my answer. But based on the options, C seems like the best choice to make the Trojan run on startup.
upvoted 0 times
...
Mabel
5 months ago
Hmm, I'm a little unsure about this one. I know the Trojan needs to run on startup, but I'm not 100% sure which registry entry is the right one. I'll have to think this through carefully.
upvoted 0 times
...
Lashawn
5 months ago
I'm pretty sure the answer is C. That registry entry is specifically for startup programs, so it seems like the best place to add the Trojan.
upvoted 0 times
...
Dorthy
5 months ago
Okay, I think I've got this. The question is asking where to put the Trojan to run on startup, so the answer has to be one of the "CurrentVersion\Run" entries. I'm leaning towards C since it's specifically for the Startup folder.
upvoted 0 times
...
Jacqueline
5 months ago
Okay, I think I've got a good handle on this. The code is querying the Cisco Umbrella Investigate API, so the response will likely contain security-related domain information. I'll analyze the options carefully.
upvoted 0 times
...
Stephanie
5 months ago
Wait, I'm confused. Is it just about the information and analysis itself, or does it also involve the technology and business factors? I'll need to re-read the question and options to make sure I understand what they're asking.
upvoted 0 times
...
Glory
5 months ago
Okay, I think I've got a strategy for this. The key is to focus on how management can actively promote the audit function and get buy-in from other departments. I'm leaning towards option D, but I'll double-check the other options just to be sure.
upvoted 0 times
...
Thurman
5 months ago
Hmm, I'm a bit unsure about this one. The options seem to be describing different quality-related concepts, but I'm not totally clear on the differences between them. I'll have to think this through carefully.
upvoted 0 times
...
Janessa
10 months ago
Ah, the age-old question of where to hide a Trojan in the Windows registry. I'm going to have to go with C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. Although, I have to wonder, is this really the kind of thing we should be learning about in a certification exam? I mean, I'd hate to be the one responsible for a nasty Trojan outbreak!
upvoted 0 times
Jovita
8 months ago
User 3: I agree, it's important to know how to protect against these things too.
upvoted 0 times
...
Skye
9 months ago
User 2: Yeah, that's where you would put it to run on startup.
upvoted 0 times
...
Sabina
9 months ago
User 1: I think C is the right choice, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.
upvoted 0 times
...
...
Earleen
10 months ago
Haha, nice try, but I'm not falling for that one! I'm going to have to go with C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. Although, I have to say, I'm not sure I'd want to use that knowledge to infect my friend's computer. That's a bit of a dick move, if you ask me.
upvoted 0 times
Kenneth
8 months ago
Haha, nice try, but I'm not falling for that one! I'm going to have to go with C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. Although, I have to say, I'm not sure I'd want to use that knowledge to infect my friend's computer. That's a bit of a dick move, if you ask me.
upvoted 0 times
...
Micah
8 months ago
D) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Start
upvoted 0 times
...
Hyun
8 months ago
C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup
upvoted 0 times
...
Leota
9 months ago
Merlyn: Definitely, it's always best to use our knowledge for good rather than harm.
upvoted 0 times
...
German
9 months ago
B) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Auto
upvoted 0 times
...
Merlyn
9 months ago
User 2: Agreed, it's important to respect other people's privacy and property.
upvoted 0 times
...
Lawrence
10 months ago
A) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices
upvoted 0 times
...
Lovetta
10 months ago
User 1: Good choice, C is correct. And yeah, messing with someone's computer like that is not cool.
upvoted 0 times
...
...
Elvis
10 months ago
Hmm, this is a tricky one. I'd say the answer is C, but I can't help but feel a little uneasy about the whole 'inserting a Trojan' thing. Maybe we should be focusing on more ethical uses of our cybersecurity knowledge.
upvoted 0 times
...
Luann
10 months ago
Wow, this question is really testing our understanding of the Windows registry. I think the answer is C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. That's where you'd want to put the Trojan to ensure it runs on startup.
upvoted 0 times
Miles
9 months ago
User 2: Yeah, that's the correct registry entry to edit for the Trojan to run on startup.
upvoted 0 times
...
Alpha
9 months ago
User 1: I agree, the answer is C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.
upvoted 0 times
...
Justine
9 months ago
User 2: Yeah, that's the correct registry entry to edit for the Trojan to run on startup.
upvoted 0 times
...
Mozell
10 months ago
User 1: I agree, the answer is C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.
upvoted 0 times
...
...
Tawanna
10 months ago
I think Leigha is right, C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup makes more sense for adding a program to startup. It's a common location for startup programs.
upvoted 0 times
...
Leigha
11 months ago
I disagree, I believe the correct registry entry to edit is C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup because that's where startup programs are usually located.
upvoted 0 times
...
Celestina
11 months ago
I think the correct registry entry to edit is A) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices.
upvoted 0 times
...

Save Cancel