Digital Forensic Certification Practice Exam

What PsList parameter displays processes along with memory information and threads?

1. -x

2. -m

3. -p

4. -t

The correct answer is: -x

The correct parameter to display processes along with memory information and threads in PsList is the option that specifies this capability directly. PsList is a command-line utility found within the Sysinternals Suite, which is used for listing detailed information about processes running on a system. When using PsList, the parameter that requests a detailed view of the processes, including their memory usage and associated threads, is designed to provide comprehensive insights. This allows users to not only see the active processes but also understand their memory consumption and the number of threads they are utilizing, which is vital for performance analysis and troubleshooting. The other options either focus on different aspects of process information or are not valid parameters for retrieving the requested details. Thus, the parameter that provides an extensive overview encompassing memory information and threads is essential for someone delving into digital forensics and system monitoring.