The server administrator discovers that a server, which has not been patched, is running extremely slow and suspects that the server may have been compromised. Which of the following commands should t

The netstat (network statistics) command-line utility is specifically designed to display active network connections (both incoming and outgoing), listening ports, routing tables, and various network interface statistics on a system. It is the primary tool to identify and count current network connections, which is crucial when suspecting a server compromise.

The ping command is used to test the reachability of a host on an IP network and measure latency, not to list the network connections originating from or terminating at the local server.

The nslookup command is used to query the Domain Name System (DNS) for domain names or IP address mappings and does not provide information about active network connections.

The grep command is a utility for searching text patterns within files or command output and is not a standalone tool for checking network connections, although it can filter netstat output.