Logical Operations Exam CFR-210 Topic 3 Question 82 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 82
Topic #: 3

A Windows system user reports seeing a command prompt window pop up briefly during each login. In which of the following locations would an incident responder check to explain this activity?

Arc.d

BHKLM ''RunOnce'' key

Cc:\temp

D/etc/init.d/

Show Suggested Answer

Suggested Answer: A

by Arminda at Jan 23, 2025, 06:02 PM

Limited Time Offer

25%

Off

Get Premium CFR-210 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carman

1 days ago

I'm not sure, but I think checking the rc.d directory could also be helpful to find the cause of the pop-up window.

upvoted 0 times

...

Angelo

2 days ago

I agree with Rodney. The command prompt window might be triggered by a program set to run at login.

upvoted 0 times

...

Walker

4 days ago

B) HKLM 'RunOnce' key - that's where the real action happens! If there's a cheeky little program running at login, that's the place to look.

upvoted 0 times

...

Felton

7 days ago

Hmm, a command prompt window popping up during login? Looks like someone's been sneaking in some extra commands behind the scenes. Time to get that incident responder on the case!

upvoted 0 times

...

Rodney

12 days ago

I think the incident responder would check the HKLM 'RunOnce' key.

upvoted 0 times

...