Question

At the command prompt, enter the following command and press enter. tasklist

This command displays the currently running tasks (programs). You will see one specific program that appears over and over again in the list of running programs. This program is actually a wrapper program that runs computer instructions found in .DLL files.

Based on the output of the command, which of the following programs is the wrapper program?

A. lsass.exe

B. winlogon.exe

C. svchost.exe

D. cmd.exe

Answer 1

SOLUTION

At the command prompt, enter the following command and press enter tasklist. This command displays the currently running tasks (programs). You will see one specific program that appears over and over again in the list of running programs. This program is actually a wrapper program that runs computer instructions found in .DLL files.

Based on the output of the command, which of the following programs is the wrapper program?

ANSWER

(C) svchost.exe

Svchost (Svchost.exe) is a generic host process name for services that run from dynamic-link libraries (DLL). Here a shell that is loaded from a executable file is used to host the DLL services. Svchost is essential in the implementation of so-called shared service processes, where a number of services can share a process in order to reduce resource consumption

Notes:

LSASS (lsass.exe) is responsible for management of local security authority (LSA) domain authentication and Active Directory management. LSASS handles authentication for both the client and the server, and it also governs the Active Directory engine.

The Winlogon (winlogon.exe) process is responsible for loading your user profile into the registry. This allows programs to use the keys under HKEY_CURRENT_USER. The Windows Logon Application also monitors you keyboard and mouse activity and is responsible for locking your PC.

The Windows Command Prompt (cmd.exe) is the command line interpreter on several Windows and other operating systems including OS/2 and eComStation operating systems. It interacts with the user via the command line interface, which in Windows is implemented through Win32 console.

SCREENSHOT

Service Occurance Count

Note:

It can be clearly seen from the output that the "svchost" process occurs n number of times. In this case 83. The rest of the services occur only once or twice(in the case of cmd).

Hope it helps.