GIAC Exam GSLC Topic 5 Question 40 Discussion

Actual exam question for GIAC's GSLC exam

Question #: 40
Topic #: 5

[All GSLC Questions]

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?

AHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

BHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto

CHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup

DHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start

Show Suggested Answer

Suggested Answer: A

by Carmelina at Feb 09, 2024, 03:30 PM

Limited Time Offer

25%

Off

Get Premium GSLC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Earleen

2 days ago

Haha, nice try, but I'm not falling for that one! I'm going to have to go with C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. Although, I have to say, I'm not sure I'd want to use that knowledge to infect my friend's computer. That's a bit of a dick move, if you ask me.

upvoted 0 times

...

Elvis

8 days ago

Hmm, this is a tricky one. I'd say the answer is C, but I can't help but feel a little uneasy about the whole 'inserting a Trojan' thing. Maybe we should be focusing on more ethical uses of our cybersecurity knowledge.

upvoted 0 times

...

Luann

13 days ago

Wow, this question is really testing our understanding of the Windows registry. I think the answer is C, HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup. That's where you'd want to put the Trojan to ensure it runs on startup.

upvoted 0 times

...

Tawanna

14 days ago

I think Leigha is right, C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup makes more sense for adding a program to startup. It's a common location for startup programs.

upvoted 0 times

...

Leigha

23 days ago

I disagree, I believe the correct registry entry to edit is C) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Startup because that's where startup programs are usually located.

upvoted 0 times

...

Celestina

26 days ago

I think the correct registry entry to edit is A) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices.

upvoted 0 times

...