Examkin

Soru

Zorluk: OrtaMicrosoft Command-Line Tools

A tier 2 helpdesk technician is investigating a suspicious outbound network connection originating from a Windows 11 workstation. The technician needs to identify the exact Process Identifier (PID) associated with the active network connections directly from the command prompt. Which command and switch combination should the technician execute?

  1. netstat -oCevap
  2. B
    netstat -r
  3. C
    lsof -i
  4. D
    taskmgr.exe /net

Cevap

The command 'netstat -o' displays active network connections along with their corresponding Process IDs (PIDs).
The 'netstat -o' command displays active TCP connections and includes the PID associated with each connection, allowing the administrator to trace network traffic directly to specific software processes.

Adım Adım Çözüm

1
Identify the diagnostic objective
The technician needs to map open network sockets to their specific owning application Process ID (PID) via the Windows Command Prompt.
Tracking PIDs allows the technician to correlate suspicious network traffic with specific running executable files.
2
Evaluate native Windows command-line utilities for network statistics
The netstat utility is designed to display active network connections, listening ports, and protocol statistics.
Using native Windows CLI tools satisfies command-line troubleshooting requirements without launching graphical tools or third-party software.
3
Select the appropriate utility parameter flag
Appending the -o parameter instructs netstat to output the PID for each listed connection.
The PID column output can subsequently be cross-referenced using tasklist or Task Manager to terminate unauthorized processes.

Anahtar Kavram

Windows CLI Network Troubleshooting Utilities (netstat parameters)
Bu soruyu puanla

Konular

Microsoft Command-Line Tools

Bu konudan daha fazla soru