GIAC Certified Incident Handler (GCIH) — Question 61

Which PowerShell cmdlet will display the command line parameters used to launch a Windows process?

Answer options

• A. Get-Service
• B. Get-CimInstance
• C. Get-Process
• D. Get ChildItem

Correct answer: C

Explanation

The correct answer is C, Get-Process, which retrieves information about the processes running on a Windows system, including the command line parameters. The other options, such as Get-Service and Get-CimInstance, are used for different purposes and do not provide command line information for processes.