Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 87

An engineer received an alert affecting the degraded performance of a critical server. Analysis showed a heavy CPU and memory load. What is the next step the engineer should take to investigate this resource usage?

Answer options

• A. Run ג€ps -uג€ to find out who executed additional processes that caused a high load on a server
• B. Run ג€ps -efג€ to understand which processes are taking a high amount of resources
• C. Run ג€ps -dג€ to decrease the priority state of high load processes to avoid resource exhaustion
• D. Run ג€ps -mג€ to capture the existing state of daemons and map required processes to find the gap

Correct answer: B

Explanation

The correct answer is B because running 'ps -ef' provides a comprehensive list of all processes along with their resource usage, helping to identify the ones putting a strain on the system. Option A is incorrect as 'ps -u' does not provide a complete overview of resource consumption. Option C is misleading since lowering the priority of processes does not investigate resource usage, and Option D does not directly address identifying high resource consumers.