CertNexus CyberSec First Responder (CFR) Exam CFR-410 Question # 15 Topic 2 Discussion

CertNexus CyberSec First Responder (CFR) Exam CFR-410 Question # 15 Topic 2 Discussion

CFR-410 Exam Topic 2 Question 15 Discussion:
Question #: 15
Topic #: 2

A Windows system administrator has received notification from a security analyst regarding new malware that executes under the process name of “armageddon.exe” along with a request to audit all department workstations for its presence. In the absence of GUI-based tools, what command could the administrator execute to complete this task?


A.

ps -ef | grep armageddon


B.

top | grep armageddon


C.

wmic process list brief | find “armageddon.exe”


D.

wmic startup list full | find “armageddon.exe”


Get Premium CFR-410 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.