You administer Windows 10 Enterprise client computers in your company network. A user reports
that her Internet connection is slower than usual. You need to identify the Process Identifiers (PIDs)
of applications that are making connections to the Internet. Which command should you run?

A.
netstat -an

B.
jpconfig /showclassid

C.
netstat -o

D.
netsh set audit-logging

E.
netsh show netdlls

Explanation:
http://technet.microsoft.com/en-us/library/bb490947.aspx
Netstat
Displays active TCP connections, ports on which the computer is listening, Ethernet statistics, the
IP routing table, IPv4 statistics (for the IP, ICMP, TCP, and UDP protocols), and IPv6 statistics (for
the IPv6, ICMPv6, TCP over IPv6, and UDP over IPv6 protocols). Used without parameters, netstat
displays active TCP connections.
Syntax
netstat [-a] [-e] [-n] [-o] [-p Protocol] [-r] [-s] [Interval]
Parameters
-a : Displays all active TCP connections and the TCP and UDP ports on which the computer is
listening.
-n : Displays active TCP connections, however, addresses and port numbers are expressed
numerically and no attempt is made to determine names.
-o : Displays active TCP connections and includes the process ID (PID) for each connection. You
can find the application based on the PID on the Processes tab in Windows Task Manager. This
parameter can be combined with -a, -n, and -p.
Further Information: netstat -an – there is no “an” parameter.
http://technet.microsoft.com/en-us/library/cc940124.aspx