GIAC
GCFA · Question #310
GCFA Question #310: Real Exam Question with Answer & Explanation
The correct answer is B. Pslist -d. The Pslist -d switch displays thread-level statistics for all active processes, grouping each thread with the process that owns it.
Question
Which of the following switches is used with Pslist command on the command line to show the statistics for all active threads on the system, grouping these threads with their owning process?
Options
- APslist -m
- BPslist -d
- CPslist -x
- DPslist -t
Explanation
The Pslist -d switch displays thread-level statistics for all active processes, grouping each thread with the process that owns it.
Common mistakes.
- A. Pslist -m displays memory detail - including working set size, virtual memory, and paged pool - for each process, not thread statistics.
- C. Pslist -x outputs extended information that combines both memory and thread details in a tabular format, not the grouped per-process thread listing.
- D. Pslist -t renders the process list as a parent-child hierarchy tree showing process relationships, not thread-level statistics.
Concept tested. Pslist Sysinternals switch for per-process thread detail
Reference. https://learn.microsoft.com/en-us/sysinternals/downloads/pslist
Community Discussion
No community discussion yet for this question.