Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC Exam GSLC Topic 5 Question 40 Discussion

Actual exam question for GIAC's GSLC exam
Question #: 40
Topic #: 5
[All GSLC Questions]

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?

Show Suggested Answer Hide Answer
Suggested Answer: A

Contribute your Thoughts:

Janessa
1 months ago
Ah, the age-old question of where to hide a Trojan in the Windows registry. I'm going to have to go with C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. Although, I have to wonder, is this really the kind of thing we should be learning about in a certification exam? I mean, I'd hate to be the one responsible for a nasty Trojan outbreak!
upvoted 0 times
Skye
14 days ago
User 2: Yeah, that's where you would put it to run on startup.
upvoted 0 times
...
Sabina
17 days ago
User 1: I think C is the right choice, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.
upvoted 0 times
...
...
Earleen
2 months ago
Haha, nice try, but I'm not falling for that one! I'm going to have to go with C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. Although, I have to say, I'm not sure I'd want to use that knowledge to infect my friend's computer. That's a bit of a dick move, if you ask me.
upvoted 0 times
Hyun
9 hours ago
C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup
upvoted 0 times
...
Leota
10 days ago
Merlyn: Definitely, it's always best to use our knowledge for good rather than harm.
upvoted 0 times
...
German
10 days ago
B) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Auto
upvoted 0 times
...
Merlyn
11 days ago
User 2: Agreed, it's important to respect other people's privacy and property.
upvoted 0 times
...
Lawrence
1 months ago
A) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices
upvoted 0 times
...
Lovetta
1 months ago
User 1: Good choice, C is correct. And yeah, messing with someone's computer like that is not cool.
upvoted 0 times
...
...
Elvis
2 months ago
Hmm, this is a tricky one. I'd say the answer is C, but I can't help but feel a little uneasy about the whole 'inserting a Trojan' thing. Maybe we should be focusing on more ethical uses of our cybersecurity knowledge.
upvoted 0 times
...
Luann
2 months ago
Wow, this question is really testing our understanding of the Windows registry. I think the answer is C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. That's where you'd want to put the Trojan to ensure it runs on startup.
upvoted 0 times
Miles
29 days ago
User 2: Yeah, that's the correct registry entry to edit for the Trojan to run on startup.
upvoted 0 times
...
Alpha
1 months ago
User 1: I agree, the answer is C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.
upvoted 0 times
...
Justine
1 months ago
User 2: Yeah, that's the correct registry entry to edit for the Trojan to run on startup.
upvoted 0 times
...
Mozell
2 months ago
User 1: I agree, the answer is C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup.
upvoted 0 times
...
...
Tawanna
2 months ago
I think Leigha is right, C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup makes more sense for adding a program to startup. It's a common location for startup programs.
upvoted 0 times
...
Leigha
3 months ago
I disagree, I believe the correct registry entry to edit is C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup because that's where startup programs are usually located.
upvoted 0 times
...
Celestina
3 months ago
I think the correct registry entry to edit is A) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77