Certified SOC Analyst (CSA) — Question 26

Which of the following Windows event is logged every time when a user tries to access the "Registry" key?

Answer options

• A. 4656
• B. 4663
• C. 4660
• D. 4657

Correct answer: A

Explanation

Event 4656 is logged whenever an access attempt is made on an object, such as a Registry key. The other events listed (4663, 4660, and 4657) pertain to different types of access or object modifications, but do not specifically indicate an access attempt like event 4656 does.