220-1102 · Question #367
A systems administrator is monitoring an unusual amount of network traffic from a kiosk machine and needs to investigate to determine the source of the traffic. Which of the following tools can the…
The correct answer is C. Command Prompt. To investigate which processes on a kiosk machine are connecting to the internet, a systems administrator can utilize the Command Prompt with specific network utilities.
Question
A systems administrator is monitoring an unusual amount of network traffic from a kiosk machine and needs to investigate to determine the source of the traffic. Which of the following tools can the administrator use to view which processes on the kiosk machine are connecting to the internet?
Options
- AResource Monitor
- BPerformance Monitor
- CCommand Prompt
- DSystem Information
How the community answered
(38 responses)- A3% (1)
- B8% (3)
- C74% (28)
- D16% (6)
Why each option
To investigate which processes on a kiosk machine are connecting to the internet, a systems administrator can utilize the Command Prompt with specific network utilities.
While Resource Monitor provides graphical information about network activity by process, the Command Prompt offers a direct, text-based, and often scriptable method using `netstat -b` for process-to-connection mapping.
Performance Monitor tracks system performance counters over time, useful for trend analysis, but it does not directly list processes establishing real-time internet connections.
The Command Prompt can be used with utilities such as `netstat -b` (on Windows) to display active network connections, their associated executable (process), and listening ports. This provides direct, detailed information about which specific processes are actively establishing connections to the internet, which is crucial for identifying the source of unusual network traffic.
System Information (msinfo32) provides detailed hardware and software configuration data but does not display real-time network connections initiated by specific processes.
Concept tested: Identifying process network connections
Source: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/netstat
Topics
Community Discussion
No community discussion yet for this question.