Question

Difficulty: HardMicrosoft Command-Line Tools

A systems administrator is troubleshooting a Windows 11 Enterprise workstation experiencing unauthorized network activity and local policy application discrepancies. The administrator opens an elevated Command Prompt and must perform two specific tasks: first, display all active TCP/UDP connections along with listening ports and their associated numerical Process IDs (PIDs); second, generate and display a summary of the Resultant Set of Policy (RSoP) data directly in the console output. Which TWO of the following commands should the administrator execute?

  1. netstat -anoAnswer
  2. gpresult /rAnswer
  3. C
    lsof -i
  4. D
    rsop.msc

Answer

The administrator should execute 'netstat -ano' to list active network connections with Process IDs and 'gpresult /r' to display the Resultant Set of Policy summary in the console.
The command 'netstat -ano' accurately displays active network connections, listening ports, and associated process IDs numerically. The command 'gpresult /r' generates a comprehensive summary of applied Group Policy settings directly within the command-line interface.

Step-by-Step Solution

1
Identify the command required to display active network connections, listening ports, and associated Process IDs (PIDs) in the Windows console.
Determine that 'netstat' with the -a (all connections/ports), -n (numerical addresses/ports), and -o (owning process ID) switches fulfills the network diagnostic requirement.
The -o switch is specifically required to map network connections to process identifiers for process isolation.
2
Identify the command required to view Resultant Set of Policy summary data directly inside the Command Prompt window.
Determine that 'gpresult' with the /r switch generates a summary RSoP text output directly in the console.
The /r switch formats and outputs GPO application details directly within the command line.

Key Concept

Windows Command-Line Network and Group Policy Diagnostics
Rate this question