A pentester gains access to a Windows application server and needs to determine the settings of the built- in Windows firewall. Which command would be used?

The 'netsh firewall show config' command (or its modern equivalent 'netsh advfirewall show allprofiles') is the built-in Windows utility for displaying firewall configuration, including enabled rules, exceptions, and profiles. It is part of the Network Shell (netsh) toolset included in all modern Windows versions and provides detailed firewall state information accessible from any command prompt.

WMIC (Windows Management Instrumentation Command-line) does not have a 'firewall' verb or subcommand for querying Windows Firewall settings.

The 'net' command is used for network share and service management and has no 'firewall' subcommand.

'Ipconfig' is used to display and manage IP address configuration for network interfaces and has no firewall querying capability.