Exam SC-200 topic 6 question 20 discussion

Actually Jobs and FG makes more sense https://learn.microsoft.com/en-us/defender-endpoint/live-response

jobs fg

jobs: In live response, background tasks (e.g., scripts or async commands) are tracked as jobs. Example: If you ran run File1.exe or a script to launch it in the background, jobs lists it with a Command ID (e.g., “Cmd_1234”). Assumption: “Background” implies a job-like execution, making jobs the best fit. fg: Defender live response borrows from job control concepts (e.g., Unix-like fg for foreground). Example: After identifying the Command ID (e.g., Cmd_1234 from jobs), run fg Cmd_1234 to interact with File1.exe. Assumption: “Interact” means resuming control of the background process.

Copilot says the answer should be processed and fg

Identify the command ID of File1.exe: Correct Answer: processes The processes command lists all running processes on the device, along with their associated command IDs. This command allows you to identify the specific command ID of the File1.exe process. Interact with File1.exe: Correct Answer: connect The connect command is used to attach to or interact with a specific running process, such as File1.exe. Once connected, you can perform actions like viewing the process's output or sending input to it.

Correct. https://learn.microsoft.com/en-us/defender-endpoint/live-response-command-examples