Certified Incident Handler (CIH) Practice Ecam

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the Certified Incident Handler (CIH) Exam. Enhance your knowledge with interactive quizzes and detailed insights into cyber incident handling. Boost your exam readiness with our expert-designed questions!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Identify the Linux-based command used by Harry to view the status of currently running processes.

  1. ps aux

  2. top

  3. killall

  4. cat /proc/stat

The correct answer is: ps aux

The command "ps aux" is a widely used Linux command that provides detailed information about all currently running processes on the system. The "ps" stands for process status. When used with the "aux" options, it displays a snapshot of the current processes along with various details such as the user who owns the process, the process identification (PID), CPU usage, memory usage, and the command that initiated the process. This command is especially useful for monitoring system activity and managing processes effectively. While similar commands like "top" also provide information about running processes, "ps aux" generates a static view at the moment the command is executed, whereas "top" provides a dynamic, continuously updating interface. The "killall" command is used for terminating processes, and "cat /proc/stat" displays detailed CPU statistics but does not specifically list running processes. Therefore, "ps aux" is the most suitable command for viewing the status of currently running processes.