Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GSLC Exam - Topic 5 Question 40 Discussion

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?
A) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
B) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto
C) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup
D) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start

GIAC GSLC Exam - Topic 5 Question 40 Discussion

Actual exam question for GIAC's GSLC exam
Question #: 40
Topic #: 5
[All GSLC Questions]

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Carmelina at Feb 09, 2024, 03:30 PM

Limited Time Offer

25%

Off

Get Premium GSLC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Sherrell
8 months ago
Pretty sure it's not D, that one doesn't make sense.
upvoted 0 times
...
Stephanie
9 months ago
Wait, is this even legal?
upvoted 0 times
...
France
9 months ago
I thought it was Auto, but now I'm not so sure.
upvoted 0 times
...
Teresita
9 months ago
Nah, I think it's the Startup entry.
upvoted 0 times
...
Golda
9 months ago
It's definitely HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices.
upvoted 0 times
...
Elli
9 months ago
I’m leaning towards HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start, but I don't remember if that’s the correct path for what we need.
upvoted 0 times
...
Roosevelt
10 months ago
I feel like HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto could be a possibility, but I can't recall if that's the right one for startup items.
upvoted 0 times
...
Alverta
10 months ago
I remember practicing a similar question, and I think it was about the Run key. Maybe it's HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup?
upvoted 0 times
...
Jennifer
10 months ago
I think the right registry entry might be HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, but I'm not entirely sure.
upvoted 0 times
...
Reta
10 months ago
I feel pretty good about this one. The key is to look for the registry entry that deals with startup programs, and that would be C. I'm going to go with that as my final answer.
upvoted 0 times
...
Zona
10 months ago
This is a tricky one. I'm not super familiar with the Windows registry, so I'm not totally confident in my answer. But based on the options, C seems like the best choice to make the Trojan run on startup.
upvoted 0 times
...
Mabel
10 months ago
Hmm, I'm a little unsure about this one. I know the Trojan needs to run on startup, but I'm not 100% sure which registry entry is the right one. I'll have to think this through carefully.
upvoted 0 times
...
Lashawn
10 months ago
I'm pretty sure the answer is C. That registry entry is specifically for startup programs, so it seems like the best place to add the Trojan.
upvoted 0 times
...
Dorthy
10 months ago
Okay, I think I've got this. The question is asking where to put the Trojan to run on startup, so the answer has to be one of the "CurrentVersion\Run" entries. I'm leaning towards C since it's specifically for the Startup folder.
upvoted 0 times
...
Jacqueline
10 months ago
Okay, I think I've got a good handle on this. The code is querying the Cisco Umbrella Investigate API, so the response will likely contain security-related domain information. I'll analyze the options carefully.
upvoted 0 times
...
Stephanie
10 months ago
Wait, I'm confused. Is it just about the information and analysis itself, or does it also involve the technology and business factors? I'll need to re-read the question and options to make sure I understand what they're asking.
upvoted 0 times
...
Glory
10 months ago
Okay, I think I've got a strategy for this. The key is to focus on how management can actively promote the audit function and get buy-in from other departments. I'm leaning towards option D, but I'll double-check the other options just to be sure.
upvoted 0 times
...
Thurman
10 months ago
Hmm, I'm a bit unsure about this one. The options seem to be describing different quality-related concepts, but I'm not totally clear on the differences between them. I'll have to think this through carefully.
upvoted 0 times
...
Janessa
1 year ago
Ah, the age-old question of where to hide a Trojan in the Windows registry. I'm going to have to go with C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. Although, I have to wonder, is this really the kind of thing we should be learning about in a certification exam? I mean, I'd hate to be the one responsible for a nasty Trojan outbreak!
upvoted 0 times
Jovita
1 year ago
User 3: I agree, it's important to know how to protect against these things too.
upvoted 0 times
...
Skye
1 year ago
User 2: Yeah, that's where you would put it to run on startup.
upvoted 0 times
...
Sabina
1 year ago
User 1: I think C is the right choice, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.
upvoted 0 times
...
...
Earleen
1 year ago
Haha, nice try, but I'm not falling for that one! I'm going to have to go with C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. Although, I have to say, I'm not sure I'd want to use that knowledge to infect my friend's computer. That's a bit of a dick move, if you ask me.
upvoted 0 times
Kenneth
1 year ago
Haha, nice try, but I'm not falling for that one! I'm going to have to go with C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. Although, I have to say, I'm not sure I'd want to use that knowledge to infect my friend's computer. That's a bit of a dick move, if you ask me.
upvoted 0 times
...
Micah
1 year ago
D) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Start
upvoted 0 times
...
Hyun
1 year ago
C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup
upvoted 0 times
...
Leota
1 year ago
Merlyn: Definitely, it's always best to use our knowledge for good rather than harm.
upvoted 0 times
...
German
1 year ago
B) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Auto
upvoted 0 times
...
Merlyn
1 year ago
User 2: Agreed, it's important to respect other people's privacy and property.
upvoted 0 times
...
Lawrence
1 year ago
A) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices
upvoted 0 times
...
Lovetta
1 year ago
User 1: Good choice, C is correct. And yeah, messing with someone's computer like that is not cool.
upvoted 0 times
...
...
Elvis
1 year ago
Hmm, this is a tricky one. I'd say the answer is C, but I can't help but feel a little uneasy about the whole 'inserting a Trojan' thing. Maybe we should be focusing on more ethical uses of our cybersecurity knowledge.
upvoted 0 times
...
Luann
1 year ago
Wow, this question is really testing our understanding of the Windows registry. I think the answer is C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. That's where you'd want to put the Trojan to ensure it runs on startup.
upvoted 0 times
Miles
1 year ago
User 2: Yeah, that's the correct registry entry to edit for the Trojan to run on startup.
upvoted 0 times
...
Alpha
1 year ago
User 1: I agree, the answer is C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.
upvoted 0 times
...
Justine
1 year ago
User 2: Yeah, that's the correct registry entry to edit for the Trojan to run on startup.
upvoted 0 times
...
Mozell
1 year ago
User 1: I agree, the answer is C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.
upvoted 0 times
...
...
Tawanna
1 year ago
I think Leigha is right, C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup makes more sense for adding a program to startup. It's a common location for startup programs.
upvoted 0 times
...
Leigha
1 year ago
I disagree, I believe the correct registry entry to edit is C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup because that's where startup programs are usually located.
upvoted 0 times
...
Celestina
1 year ago
I think the correct registry entry to edit is A) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices.
upvoted 0 times
...

Save Cancel