An attacker wants to maintain persistent access to a compromised Windows host across reboots. Which location is commonly abused for autostart persistence?

Remaining questions and full explanations are VIP-exclusive.