Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question

The DeviceProcesses table contains a row for every running process on the target Windows device. To return specific columns you use the project operator. The query DeviceProcesses | project FileName, ProcessId, CommandLine reads the table, then pipes the results to project, limiting the output to the FileName (process name), ProcessId, and CommandLine fields. The extend operator is used to create new calculated columns, while summarize aggregates rows. A where clause filters the data, which is not required when you need the full list of processes.