scenario
hard
Analyze
incident-response
2 points
Question 43. CSCD240-E1-C
PID 2211 spawns thousands of sh processes/min. Steps to stop without killing vital processes.
Work the drill
Answer on paper or in a terminal before revealing the ideal answer.
Ideal answer
Steps: (1) ps -ef --forest to confirm PID 2211 is the parent; (2) kill -STOP 2211 to freeze the parent (children stop spawning); (3) pgrep -P 2211 to list children; (4) pkill -P 2211 (or loop kill) to clean children; (5) kill 2211 when clear.
Misconception bank
Each row below is a plausible wrong answer, the thinking that produces it, and the remedy that corrects the misconception. These are the foundation of the multiple-choice framing and the targeted feedback a student receives after answering.
kill -9 2211
Misconception. Kills parent but child tree may re-parent to init and keep running.
Remedy. Use STOP first to halt spawning, then clean tree.
Authority mappings
Hover any chip for the mapping justification; click to open the authority record.
DCWF tasks:
T0279