nerdexam
GIAC

GCFA · Question #104

Which of the following statements about registry is true? Each correct answer represents a complete solution. Choose three.

The correct answer is A. It is divided in many areas known as hives. B. It was first introduced with Windows 95 operating system. C. It is a centralized configuration database that stores information related to a Windows computer. The Windows Registry is a centralized hierarchical configuration database organized into hives, first broadly introduced with Windows 95 as a replacement for fragmented INI files.

File System & Registry Forensics

Question

Which of the following statements about registry is true? Each correct answer represents a complete solution. Choose three.

Options

  • AIt is divided in many areas known as hives.
  • BIt was first introduced with Windows 95 operating system.
  • CIt is a centralized configuration database that stores information related to a Windows computer.
  • DIt can be edited using SCANREG utility.

How the community answered

(30 responses)
  • A
    73% (22)
  • D
    27% (8)

Why each option

The Windows Registry is a centralized hierarchical configuration database organized into hives, first broadly introduced with Windows 95 as a replacement for fragmented INI files.

AIt is divided in many areas known as hives.Correct

The registry is physically and logically divided into sections called hives (e.g., HKEY_LOCAL_MACHINE, HKEY_CURRENT_USER), each stored as a discrete set of files on disk.

BIt was first introduced with Windows 95 operating system.Correct

Windows 95 was the operating system that introduced the registry as a comprehensive, centralized configuration store to replace the fragmented .ini file system used in earlier Windows versions.

CIt is a centralized configuration database that stores information related to a Windows computer.Correct

The registry functions as a centralized hierarchical database that stores all configuration settings for the operating system, installed hardware, installed software, and user preferences on a Windows computer.

DIt can be edited using SCANREG utility.

SCANREG was a registry backup and repair utility available in Windows 98 and ME; the correct tools for directly editing registry keys and values are regedit.exe and regedt32.exe.

Concept tested: Windows Registry structure, history, and editing tools

Source: https://learn.microsoft.com/en-us/windows/win32/sysinfo/registry

Topics

#Windows Registry#registry hives#registry structure#Windows configuration

Community Discussion

No community discussion yet for this question.

Full GCFA Practice