Exam GCIH All QuestionsBrowse all questions from this exam
Question 133

The provided screenshot shows output from running the SysInternals "Strings" command against a suspected malware executable. Which of the following strings indicate that the attacker is attempting to gain persistence on the target system?

    Correct Answer: C

    The correct option is 'Software\Microsoft\Windows\CurrentVersion\Run'. This registry key is commonly used by attackers to establish persistence on a target system, as it allows specified programs to run automatically when the user logs in.

Discussion
XBalOption: C

Answer should be "C" as it is ASEP registry key

SazeniyuOption: C

Answer is C

youngprinceton

did you take exam and is this dump valid