CertNova
Menu
← Back to PBQ types

PowerShell PBQs: Implementing and Operating Cisco Security Core Technologies (SCOR 350-701)

easy

Question 1 of 3

You are a network security engineer at a managed services provider. Your Cisco Firepower Management Center has flagged an alert indicating that a Windows network management server (NMS-WIN-01) may be running an unauthorized service. Your manager has asked you to remotely connect to the server and review the running services to determine whether any unauthorized or suspicious services are active on the host.

Objectives

  • List all Windows services to identify any unauthorized or suspicious entries
PowerShell
PS C:\Users\NetAdmin> 

Type cmdlets and press Enter to execute. Use ↑↓ to navigate history. Tab to autocomplete. Ctrl+C to cancel, Ctrl+L to clear.

Progress

0 of 1 steps detected

Run at least one command to mark this question complete

0 of 3 marked complete