CompTIA Linux+ (XK0-005) — Question 279

An administrator thinks that the user Joe may be running an unauthorized process on a Linux server. Which of the following commands should the administrator run to confirm this idea?

Answer options

• A. lsof -p 'Joe'
• B. top -u 'Joe'
• C. jobs -n 'Joe'
• D. ps -ax 'Joe'

Correct answer: B

Explanation

The correct answer is B because the 'top -u' command displays running processes for a specific user, in this case, Joe. Option A, 'lsof', lists open files but does not directly show processes; C, 'jobs', is used for managing jobs in the current shell session which doesn't apply to user processes; D, 'ps -ax', shows all processes but does not filter by user.