CCFA-200B · Question #41
On a Windows host, what is the best command to determine if the sensor is currently running?
The correct answer is A. sc query csagent. On a Windows host, the best command to determine if the sensor is currently running is sc query csagent. This command will show the status of the csagent service, which is responsible for running the sensor on Windows systems. The output of this command will indicate if the…
Question
On a Windows host, what is the best command to determine if the sensor is currently running?
Options
- Asc query csagent
- Bnetstat -a
- CThis cannot be accomplished with a command
- Dping falcon.crowdstrike.com
How the community answered
(33 responses)- A88% (29)
- B6% (2)
- C3% (1)
- D3% (1)
Explanation
On a Windows host, the best command to determine if the sensor is currently running is sc query csagent. This command will show the status of the csagent service, which is responsible for running the sensor on Windows systems. The output of this command will indicate if the service is running, stopped, or paused. If the service is running, the sensor is also running.
Topics
Community Discussion
No community discussion yet for this question.