Digital Forensic Certification Practice Exam

Which of the following is NOT a valid parameter for the 'tasklist' command?

1. /s

2. /m

3. -p

4. /fi

The correct answer is: -p

The 'tasklist' command is a built-in command-line utility in Windows used to display a list of currently running processes on the local or a remote machine. It accepts various parameters that modify its behavior and output. The parameters include: - The "/s" option allows you to specify a remote system to query. - The "/m" option provides a list of modules for the specified process. - The "/fi" option enables filtering of the tasklist output based on specific criteria. On the other hand, the "-p" parameter is not a valid option for the 'tasklist' command. Command-line parameters in Windows commands typically do not use a hyphen when specifying options; they use a forward slash. Moreover, each parameter is distinct in its purpose, and using the incorrect format can lead to errors or no output at all. Understanding the correct usage of these parameters is essential for effectively managing processes through the command line in Windows environments.