Ace Your Exams with Our Notes and Mock Tests!

EC-Council: Computer Hacking Forensic Investigator(CHFI-V10)
Module 6 : Windows Forensics
Questions available : 94		You are not logged in. Please Login for track your learning progress

Q. No: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 |
		Go to Question No.

Question No 0

---

If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.

 

---

Bookmark this Question		QID: 416
Tasklist command displays a list of applications and services with their Process ID (PID) for all tasks running on either a local or a remote computer. Which of the following tasklist commands provides information about the listed processes, including the image name, PID, name, and number of the session for the process?
A:    tasklist /p
B:    tasklist /v
C:    tasklist /s
D:    tasklist /u
Explanation: tasklist[.exe] [/s computer] [/u domain∖user [/p password]] [/fo {TABLE|LIST|CSV}] [/nh] [/fi FilterName [/fi FilterName2 [ ... ]]] [/m [ModuleName] | /svc | /v] st[.exe] [/s computer] [/u domain∖user [/p password]] [/fo {TABLE|LIST|CSV}] [/nh] [/fi FilterName [/fi FilterName2 [ ... ]]] [/m [ModuleName] | /svc | /v] tasklist[.exe] [/s computer] [/u domain∖user [/p password]] [/fo {TABLE|LIST|CSV}] [/nh] [/fi FilterName [/fi FilterName2 [ ... ]]] [/m [ModuleName] | /svc | /v] Parameters: ▪ /s Computer: Specifies the name or IP address of a remote computer (do not use backslashes) ▪ /u Domain ∖ User: Runs the command with the account permissions of the user specified by User or Domain∖User ▪ /p Password: Specifies the password of the user account that is specified in the /u parameter ▪ /fi FilterName: Specifies the types of process (es) to include in or exclude from the query ▪ /m [ModuleName]: Shows module information for each process ▪ /svc: Lists all the service information for each process without truncation ▪ /v: Specifies that verbose task information be displayed in the output; it should not be used with the /svc or the /m parameter