Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GSLC Exam - Topic 5 Question 40 Discussion

Posted by Carmelina on Feb 09, 2024 at 03:30 PM

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?

Suggested Answer: A

Get Premium GSLC Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
40 comments · newest first
SH
Sherrell 10 months ago
Pretty sure it's not D, that one doesn't make sense.
ST
Stephanie 11 months ago
Wait, is this even legal?
FR
France 11 months ago
I thought it was Auto, but now I'm not so sure.
TE
Teresita 11 months ago
Nah, I think it's the Startup entry.
GO
Golda 11 months ago
It's definitely HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices.
EL
Elli 11 months ago
I’m leaning towards HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start, but I don't remember if that’s the correct path for what we need.
RO
Roosevelt 12 months ago
I feel like HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto could be a possibility, but I can't recall if that's the right one for startup items.
AL
Alverta 12 months ago
I remember practicing a similar question, and I think it was about the Run key. Maybe it's HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup?
JE
Jennifer 12 months ago
I think the right registry entry might be HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, but I'm not entirely sure.
RE
Reta 12 months ago
I feel pretty good about this one. The key is to look for the registry entry that deals with startup programs, and that would be C. I'm going to go with that as my final answer.
ZO
Zona 1 year ago
This is a tricky one. I'm not super familiar with the Windows registry, so I'm not totally confident in my answer. But based on the options, C seems like the best choice to make the Trojan run on startup.
MA
Mabel 1 year ago
Hmm, I'm a little unsure about this one. I know the Trojan needs to run on startup, but I'm not 100% sure which registry entry is the right one. I'll have to think this through carefully.
LA
Lashawn 1 year ago
I'm pretty sure the answer is C. That registry entry is specifically for startup programs, so it seems like the best place to add the Trojan.
DO
Dorthy 1 year ago
Okay, I think I've got this. The question is asking where to put the Trojan to run on startup, so the answer has to be one of the "CurrentVersion\Run" entries. I'm leaning towards C since it's specifically for the Startup folder.
JA
Jacqueline 1 year ago
Okay, I think I've got a good handle on this. The code is querying the Cisco Umbrella Investigate API, so the response will likely contain security-related domain information. I'll analyze the options carefully.
ST
Stephanie 1 year ago
Wait, I'm confused. Is it just about the information and analysis itself, or does it also involve the technology and business factors? I'll need to re-read the question and options to make sure I understand what they're asking.
GL
Glory 1 year ago
Okay, I think I've got a strategy for this. The key is to focus on how management can actively promote the audit function and get buy-in from other departments. I'm leaning towards option D, but I'll double-check the other options just to be sure.
TH
Thurman 1 year ago
Hmm, I'm a bit unsure about this one. The options seem to be describing different quality-related concepts, but I'm not totally clear on the differences between them. I'll have to think this through carefully.
JA
Janessa 1 year ago
Ah, the age-old question of where to hide a Trojan in the Windows registry. I'm going to have to go with C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. Although, I have to wonder, is this really the kind of thing we should be learning about in a certification exam? I mean, I'd hate to be the one responsible for a nasty Trojan outbreak!
JO
Jovita 1 year ago
↳ replying to Janessa
User 3: I agree, it's important to know how to protect against these things too.
SK
Skye 1 year ago
↳ replying to Janessa
User 2: Yeah, that's where you would put it to run on startup.
SA
Sabina 1 year ago
↳ replying to Janessa
User 1: I think C is the right choice, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.
EA
Earleen 1 year ago
Haha, nice try, but I'm not falling for that one! I'm going to have to go with C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. Although, I have to say, I'm not sure I'd want to use that knowledge to infect my friend's computer. That's a bit of a dick move, if you ask me.
KE
Kenneth 1 year ago
↳ replying to Earleen
Haha, nice try, but I'm not falling for that one! I'm going to have to go with C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. Although, I have to say, I'm not sure I'd want to use that knowledge to infect my friend's computer. That's a bit of a dick move, if you ask me.
MI
Micah 1 year ago
↳ replying to Earleen
D) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Start
HY
Hyun 1 year ago
↳ replying to Earleen
C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup
LE
Leota 1 year ago
↳ replying to Earleen
Merlyn: Definitely, it's always best to use our knowledge for good rather than harm.
GE
German 1 year ago
↳ replying to Earleen
B) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Auto
ME
Merlyn 1 year ago
↳ replying to Earleen
User 2: Agreed, it's important to respect other people's privacy and property.
LA
Lawrence 1 year ago
↳ replying to Earleen
A) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices
LO
Lovetta 1 year ago
↳ replying to Earleen
User 1: Good choice, C is correct. And yeah, messing with someone's computer like that is not cool.
EL
Elvis 1 year ago
Hmm, this is a tricky one. I'd say the answer is C, but I can't help but feel a little uneasy about the whole 'inserting a Trojan' thing. Maybe we should be focusing on more ethical uses of our cybersecurity knowledge.
LU
Luann 1 year ago
Wow, this question is really testing our understanding of the Windows registry. I think the answer is C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. That's where you'd want to put the Trojan to ensure it runs on startup.
MI
Miles 1 year ago
↳ replying to Luann
User 2: Yeah, that's the correct registry entry to edit for the Trojan to run on startup.
AL
Alpha 1 year ago
↳ replying to Luann
User 1: I agree, the answer is C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.
JU
Justine 1 year ago
↳ replying to Luann
User 2: Yeah, that's the correct registry entry to edit for the Trojan to run on startup.
MO
Mozell 1 year ago
↳ replying to Luann
User 1: I agree, the answer is C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.
TA
Tawanna 1 year ago
I think Leigha is right, C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup makes more sense for adding a program to startup. It's a common location for startup programs.
LE
Leigha 2 years ago
I disagree, I believe the correct registry entry to edit is C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup because that's where startup programs are usually located.
CE
Celestina 2 years ago
I think the correct registry entry to edit is A) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices.
0/2000 characters

Save Cancel