You are the IT professional who work in an International company named Wiikigo. You are experienced in troubleshooting operating systems and applications that are not working correctly, identifying code defects and so on. You have enough knowledge on windows internals and you provide technical support for the company. According to the company requirement, a new device driver is installed and run by you. But the following error message pops up.
Event ID: 2020
Source: Srv
Description: The server was unable to allocate from the system paged pool because the pool was empty.
You notice that kernel memory pool leaks occur and this may be caused by a device driver.
You discover a kernel memory allocation tag named TAG1 that belongs to the leaked memory. Therefore, you have to find out the device driver and the corresponding call stack that is causing the memory leak. So what action should you perform?
A.
In order to achieve your goal, Findstr.exe TAG1 pooltag.txt should be run.
B.
In order to achieve your goal, Findstr.exe /m TAG1 *.sys should be run.
C.
In order to achieve your goal, you should issue the command ed nt!PoolHitTag ‘1GAT’by using WinDbg.
D.
In order to achieve your goal, Driver Verifier should be used and the Special Pool option should be enabled.