GCIH practice questions 211–213

1. Question 211 · 213 in bank

   Which command produced the following output?

   

   • Anet session \\10.0.0.5
   • Bnet view\\10.0.0.5
   • Cnet use\\10.0.0.5
   • Dnet share \\10.0.0.5

   Show answer

   Answer: D

   Next question

2. Question 212 · 213 in bank

   Which of the processes, shown in the output below, should be prioritized for examination during live response? Command run: C:\> netstat -naob - Output: see screen capture (irrelevant lines of output omitted for space)

   

   • ARpcSs
   • Bcalc.exe
   • CW32Time
   • Dfirefox.exe

   Show answer

   Answer: B

   Next question

3. Question 213 · 213 in bank

   Which of the following statements describes the Volatility pstree plugin data shown in the image?

   

   • ANotepad.exe was launched with Administrative privileges
   • BFirefox.exe was the parent process for Explorer.exe
   • CCmd.exe was used to launch Powershell.exe
   • DCmd.exe was the child process of OneDrive.exe

   Show answer

   Answer: B

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

GCIH practice, question 211. 213 questions available.