GCIH TEST QUESTIONS AND CORRECT ANSWERS
ANSWER network status with netstat -naob -o: process ID -b: listening to
DLLs and EXEs
ANSWER UNIX: what services are active? lsof -i
ANSWER UNIX/Windows: What services are active using netstat -a
ANSWER : What processes are active on the computer? C:\> tasklist
C:\> tasklist /v - ANSWER the machine's active processes (verbose)
C:\> wmic process list full - ANSWER which processes are active on the
system.
A list of active services may be found in C:\> services.msc.
C:\> net start- ANSWER list of services that are currently operating
C:\> sc search | additional - ANSWER gathers and presents data on the
designated driver, service, service type, or driver type.
C:\> tasklist /svc - ANSWER listing the services that each process is using
Run, Runonce, and RunonceEx are ANSWER registry keys found in
HKLM\Software\Microsoft\Windows\CurrentVersion that are used to launch
programs when a system boots up or a user logs on.
C:\> regedit- ANSWER GUI registry access
How to query reg keys in a certain location: C:\ reg query [reg key] -
ANSWER
View file shares in C:\> net view \\127.0.0.1 - ANSWER
C:> net session- ANSWER check who is currently using the machine.
ANSWER network status with netstat -naob -o: process ID -b: listening to
DLLs and EXEs
ANSWER UNIX: what services are active? lsof -i
ANSWER UNIX/Windows: What services are active using netstat -a
ANSWER : What processes are active on the computer? C:\> tasklist
C:\> tasklist /v - ANSWER the machine's active processes (verbose)
C:\> wmic process list full - ANSWER which processes are active on the
system.
A list of active services may be found in C:\> services.msc.
C:\> net start- ANSWER list of services that are currently operating
C:\> sc search | additional - ANSWER gathers and presents data on the
designated driver, service, service type, or driver type.
C:\> tasklist /svc - ANSWER listing the services that each process is using
Run, Runonce, and RunonceEx are ANSWER registry keys found in
HKLM\Software\Microsoft\Windows\CurrentVersion that are used to launch
programs when a system boots up or a user logs on.
C:\> regedit- ANSWER GUI registry access
How to query reg keys in a certain location: C:\ reg query [reg key] -
ANSWER
View file shares in C:\> net view \\127.0.0.1 - ANSWER
C:> net session- ANSWER check who is currently using the machine.