nerdexam
GIAC

GSEC · Question #43

What is the name of the registry key that is used to manage remote registry share permissions for the whole registry?

The correct answer is C. winreg. The WINREG registry key controls remote access permissions to the entire Windows registry.

Windows and Malware

Question

What is the name of the registry key that is used to manage remote registry share permissions for the whole registry?

Options

  • Aregkey
  • Bregmng
  • Cwinreg
  • Drrsreg

How the community answered

(21 responses)
  • B
    10% (2)
  • C
    86% (18)
  • D
    5% (1)

Why each option

The WINREG registry key controls remote access permissions to the entire Windows registry.

Aregkey

regkey is not a recognized Windows registry key name used for managing remote registry share permissions.

Bregmng

regmng is not a valid or recognized Windows registry key associated with remote registry access control.

CwinregCorrect

The WINREG key, located at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg, is the Windows registry entry that governs who can connect to and access the registry remotely. Setting permissions on this key restricts or grants remote registry access for the entire registry hive, making it the central control point for remote registry share permissions.

Drrsreg

rrsreg is not a recognized Windows registry key name and does not exist as a remote registry permission control entry.

Concept tested: Windows registry remote access control via WINREG key

Source: https://learn.microsoft.com/en-us/windows/win32/sysinfo/registry-key-security-and-access-rights

Topics

#Windows registry#winreg#remote registry#registry permissions

Community Discussion

No community discussion yet for this question.

Full GSEC Practice