Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Logical Operations Exam CFR-210 Topic 3 Question 33 Discussion

Actual exam question for Logical Operations's CFR-210 exam
Question #: 33
Topic #: 3
[All CFR-210 Questions]

A UNIX workstation has been compromised. The security analyst discovers high CPU usage during off-hours on the workstation. Which of the following UNIX programs can be used to detect the rogue process? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

Maryann
2 months ago
If the rogue process is really good, it might even disguise itself as top to throw off the security analyst. Better bring some garlic and silver bullets just in case.
upvoted 0 times
...
Ernie
2 months ago
C) who? Sure, that'll tell me who's logged in, but it won't show me what's hogging the CPU. I need tools that actually monitor processes.
upvoted 0 times
Sharika
1 months ago
E) top is another useful tool to monitor processes and CPU usage.
upvoted 0 times
...
Malcolm
1 months ago
B) ps is a good option to check running processes and CPU usage.
upvoted 0 times
...
Muriel
1 months ago
A) arp? No, that won't help us detect the rogue process.
upvoted 0 times
...
...
Karan
3 months ago
D) dd? What, is the rogue process going to try and copy the whole hard drive? Hilarious!
upvoted 0 times
Luisa
2 months ago
E) top is also a good choice, it provides a dynamic real-time view of running processes.
upvoted 0 times
...
Arlyne
2 months ago
B) ps is the correct option, it shows information about processes running on the system.
upvoted 0 times
...
Elouise
2 months ago
A) arp is used for address resolution protocol, not for detecting rogue processes.
upvoted 0 times
...
...
Stefan
3 months ago
A) arp? Really? That's for network address resolution, not process monitoring. This exam question is trying to trick us.
upvoted 0 times
Laurena
30 days ago
C) who is used to display information about users currently logged in. It's not helpful for detecting rogue processes.
upvoted 0 times
...
Jaime
1 months ago
A) arp is definitely not the right choice here. It's used for mapping IP addresses to MAC addresses.
upvoted 0 times
...
Paris
1 months ago
E) top is another good choice. It provides a dynamic real-time view of running processes.
upvoted 0 times
...
Val
2 months ago
B) ps is definitely one of the options we should consider. It shows information about processes running on the system.
upvoted 0 times
...
Helene
2 months ago
C) who is for displaying information about users, not processes. We should focus on ps and top.
upvoted 0 times
...
Georgeanna
2 months ago
A) arp is definitely not the right choice here. It's for network address resolution, not process monitoring.
upvoted 0 times
...
Darrin
2 months ago
E) top is another good choice. It provides a dynamic real-time view of running processes.
upvoted 0 times
...
France
3 months ago
B) ps is definitely one of the options we should choose. It shows running processes.
upvoted 0 times
...
...
Cherry
3 months ago
I'm not sure about E) top. I think C) who can also be used to check for rogue processes.
upvoted 0 times
...
Curtis
3 months ago
B) ps and E) top are the correct answers. They can help identify high CPU usage and running processes on the system.
upvoted 0 times
Franchesca
2 months ago
Yeah, and we can also use top to see which process is using the most CPU.
upvoted 0 times
...
Katy
2 months ago
I think we should use ps to check for running processes.
upvoted 0 times
...
...
Sueann
3 months ago
I agree with Ronnie. Ps can show the running processes and top can display the CPU usage.
upvoted 0 times
...
Ronnie
4 months ago
I think the answer is B) ps and E) top.
upvoted 0 times
...

Save Cancel