A security analyst is investigating a malware infection that occurred on a Windows system. The system was not connected to a network and had no wireless capability. Company policy prohibits using portable media or mobile storage. The security analyst is trying to determine which user caused the malware to get onto the system. Which of the following registry keys would MOST likely have this information? A) HKEY_USERS\\Software\Microsoft\Windows\CurrentVersion\Run B) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run C) HKEY_USERS\\Software\Microsoft\Windows\explorer\MountPoints2 D) HKEY_USERS\\Software\Microsoft\Internet Explorer\Typed URLs E) HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\eventlog\System\iusb3hub

Question

Quizplus · Accepted Answer

The Answer of A security analyst is investigating a malware infection that occurred on a Windows system. The system was not connected to a network and had no wireless capability. Company policy prohibits using portable media or mobile storage. The security analyst is trying to determine which user caused the malware to get onto the system. Which of the following registry keys would MOST likely have this information? A) HKEY_USERS\\Software\Microsoft\Windows\CurrentVersion\Run B) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run C) HKEY_USERS\\Software\Microsoft\Windows\explorer\MountPoints2 D) HKEY_USERS\\Software\Microsoft\Internet Explorer\Typed URLs E) HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\eventlog\System\iusb3hub

A Security Analyst Is Investigating a Malware Infection That Occurred