Which of the following Windows-based tool displays who is logged onto a computer, either locally or remotely?

The correct answer is B. PSLoggedon. PSLoggedon is a Sysinternals utility that shows all users currently logged on to a local or remote computer - both interactive (console) and network (remote resource) sessions. It works by querying the registry and NetSessionEnum API. Tokenmon monitors security token usage…

Submitted by katya_ua· Apr 18, 2026Computer Forensics Investigation Process

Question

Options

ATokenmon
BPSLoggedon
CTCPView
DProcess Monitor

How the community answered

(66 responses)

A
3% (2)
B
88% (58)
C
2% (1)
D
8% (5)

Explanation

PSLoggedon is a Sysinternals utility that shows all users currently logged on to a local or remote computer - both interactive (console) and network (remote resource) sessions. It works by querying the registry and NetSessionEnum API. Tokenmon monitors security token usage, TCPView displays active TCP/UDP network connections, and Process Monitor tracks file system, registry, and process activity in real time. None of these show logged-on user sessions the way PSLoggedon does.

Topics

#Windows Tools#Sysinternals#User Sessions#Host Forensics

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice