nerdexam
CompTIA

220-1102 · Question #367

A systems administrator is monitoring an unusual amount of network traffic from a kiosk machine and needs to investigate to determine the source of the traffic. Which of the following tools can the…

The correct answer is C. Command Prompt. To investigate which processes on a kiosk machine are connecting to the internet, a systems administrator can utilize the Command Prompt with specific network utilities.

Hardware and network troubleshooting

Question

A systems administrator is monitoring an unusual amount of network traffic from a kiosk machine and needs to investigate to determine the source of the traffic. Which of the following tools can the administrator use to view which processes on the kiosk machine are connecting to the internet?

Options

  • AResource Monitor
  • BPerformance Monitor
  • CCommand Prompt
  • DSystem Information

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    8% (3)
  • C
    74% (28)
  • D
    16% (6)

Why each option

To investigate which processes on a kiosk machine are connecting to the internet, a systems administrator can utilize the Command Prompt with specific network utilities.

AResource Monitor

While Resource Monitor provides graphical information about network activity by process, the Command Prompt offers a direct, text-based, and often scriptable method using `netstat -b` for process-to-connection mapping.

BPerformance Monitor

Performance Monitor tracks system performance counters over time, useful for trend analysis, but it does not directly list processes establishing real-time internet connections.

CCommand PromptCorrect

The Command Prompt can be used with utilities such as `netstat -b` (on Windows) to display active network connections, their associated executable (process), and listening ports. This provides direct, detailed information about which specific processes are actively establishing connections to the internet, which is crucial for identifying the source of unusual network traffic.

DSystem Information

System Information (msinfo32) provides detailed hardware and software configuration data but does not display real-time network connections initiated by specific processes.

Concept tested: Identifying process network connections

Source: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/netstat

Topics

#Network Troubleshooting#Command Line Interface#Process Monitoring#Network Connections

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice