You are doing an internal security audit and intend to find out what ports are open on all the servers. What is the best way to find out?

Nmap (Network Mapper) is purpose-built for port scanning and can scan entire subnets or server ranges simultaneously, reporting open, closed, and filtered ports with service version details. It is the most efficient and accurate method for an internal security audit of this nature.

MBSA (Microsoft Baseline Security Analyzer) checks for security misconfigurations and missing patches on Windows systems - it is not a dedicated port scanner and does not provide comprehensive open port enumeration.

Telneting to every port manually is extremely time-consuming, impractical at scale, and only works on ports that respond to text-based protocols.

Physically visiting each server provides no automated insight into open network ports and is entirely impractical for auditing server network exposure.