GIAC Exam GPEN Topic 7 Question 36 Discussion

Actual exam question for GIAC's GPEN exam

Question #: 36
Topic #: 7

[All GPEN Questions]

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?

AHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start

BHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto

CHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup

DHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

Show Suggested Answer

Suggested Answer: C

by Elly at Oct 20, 2023, 07:18 PM

Limited Time Offer

25%

Off

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Scot

18 hours ago

Wow, this is a pretty dark question. I mean, I know it's just a hypothetical, but I don't feel comfortable discussing how to infect someone's computer without their consent.

upvoted 0 times

...

Judy

2 days ago

Seriously? Inserting a Trojan on my friend's computer? That's just messed up. I'm not going to help with that kind of thing.

upvoted 0 times

...

Haydee

22 days ago

I'm not sure, but I think option A) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Start might also work.

upvoted 0 times

...

Teddy

23 days ago

I agree with Vince, editing the Startup registry entry will ensure the Trojan runs on startup.

upvoted 0 times

...

Vince

24 days ago

I think the correct registry entry to edit is C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.

upvoted 0 times

...