CertNexus Certified Cyber Secure Coder (CSC) — Question 86

A security administrator is investigating a compromised host. Which of the following commands could the investigator use to display executing processes in real time?

Answer options

• A. ps
• B. top
• C. nice
• D. pstree

Correct answer: B

Explanation

The correct answer is B, 'top', as this command provides a real-time, dynamic view of the running processes and their resource usage. Options A ('ps') and D ('pstree') display processes but do not update in real-time, while C ('nice') is used to set process priority and does not display processes.