312-49 · Question #664
Which of the following commands shows you the username and IP address used to access the system via a remote login session and the type of client from which they are accessing the system?
The correct answer is B. Net sessions. The 'net sessions' command on Windows displays all active SMB sessions established with the local computer. Its output includes the computer name/IP address of the remote client, the username used to authenticate, session duration, idle time, and the client software type (e.g…
Question
Which of the following commands shows you the username and IP address used to access the system via a remote login session and the type of client from which they are accessing the system?
Options
- ANet config
- BNet sessions
- CNet share
- DNet stat
How the community answered
(42 responses)- A2% (1)
- B93% (39)
- D5% (2)
Explanation
The 'net sessions' command on Windows displays all active SMB sessions established with the local computer. Its output includes the computer name/IP address of the remote client, the username used to authenticate, session duration, idle time, and the client software type (e.g., Windows version). This makes it highly valuable for detecting unauthorized remote access during incident response. 'Net config' shows server/workstation configuration, 'net share' lists shared resources, and 'netstat' (not 'net stat') shows network connections but does not provide session-level user attribution.
Topics
Community Discussion
No community discussion yet for this question.