Computer Hacking Forensic Investigator (CHFI v10) — Question 472

Hackers can gain access to Windows Registry and manipulate user passwords, DNS settings, access rights or others features that they may need in order to accomplish their objectives. One simple method for loading an application at startup is to add an entry (Key) to the following Registry Hive:

Answer options

• A. HKEY_LOCAL_MACHINE\hardware\windows\start
• B. HKEY_LOCAL_USERS\Software\Microsoft\old\Version\Load
• C. HKEY_CURRENT_USER\Microsoft\Default
• D. HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run

Correct answer: D

Explanation

The correct answer, D, is the appropriate Registry Hive for configuring applications to run at startup. The other options either point to incorrect paths or non-existent keys that do not serve the purpose of managing startup applications.