GIAC
GCIH · Question #737
GCIH Question #737: Real Exam Question with Answer & Explanation
The correct answer is D: autoruns. See the full explanation below for the reasoning.
Question
What tool would an incident handler use to search for all autostart extensibility points (ASEPs) on a Windows host?
Options
- AWindows Firewall
- BWindows Event Viewer
- Cregedit
- Dautoruns
Community Discussion
No community discussion yet for this question.