nerdexam
EC-Council

312-49 · Question #615

Which of the following registry hive gives the configuration information about which application was used to open various files on the system?

The correct answer is A. HKEY_CLASSES_ROOT. HKEY_CLASSES_ROOT (HKCR) stores file association and COM object registration data. It maps file extensions (e.g., .docx, .pdf) to the applications registered to open them, making it the primary hive for determining which application handles a given file type…

Submitted by yuki_2020· Apr 18, 2026Disk Forensics

Question

Which of the following registry hive gives the configuration information about which application was used to open various files on the system?

Options

  • AHKEY_CLASSES_ROOT
  • BHKEY_CURRENT_CONFIG
  • CHKEY_LOCAL_MACHINE
  • DHKEY_USERS

How the community answered

(32 responses)
  • A
    88% (28)
  • B
    3% (1)
  • C
    6% (2)
  • D
    3% (1)

Explanation

HKEY_CLASSES_ROOT (HKCR) stores file association and COM object registration data. It maps file extensions (e.g., .docx, .pdf) to the applications registered to open them, making it the primary hive for determining which application handles a given file type. HKEY_CURRENT_CONFIG holds hardware profile data, HKEY_LOCAL_MACHINE contains broad system configuration, and HKEY_USERS stores per-user settings - none of which directly govern file-to-application mappings.

Topics

#Windows Registry#Registry Hives#File Associations#System Configuration

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice