Exercise 3: Finding All notepad.exe Processes via CIM — Possible Solution ==================================================================== THE QUERY (USING -Filter) ------------------------------ Get-CimInstance -ClassName Win32_Process -Filter "Name='notepad.exe'" WHY -Filter WAS CHOSEN ------------------------------ Per this chapter, -Filter is a simplified, single-condition shorthand, well suited to exactly this kind of query - one simple equality check against a single property (Name). Since the task only requires matching one condition with no additional criteria, -Filter reads more directly and simply than writing out full WQL syntax would. THE EQUIVALENT -Query FORM ------------------------------ Get-CimInstance -Query "SELECT * FROM Win32_Process WHERE Name='notepad.exe'" This would work identically. Per this chapter, -Query (full WQL) is better reserved for genuinely more complex conditions that -Filter's simpler shorthand can't express - since this task is a single simple condition, -Filter is the more appropriate, simpler choice, matching this chapter's own "simplified first, script-block/full-query only when needed" guidance. WHY THIS WORKS AS AN ANSWER ------------------------------ It provides a correct, working query using -Filter, correctly explains why -Filter suits this single-condition task better than full WQL, and additionally shows the equivalent -Query form for comparison.