A pentester gains access to a Windows application server and needs to determine the settings of the built- in Windows firewall. Which command would be used?

netsh (Network Shell) is the native Windows command-line scripting utility that interfaces with network components including Windows Firewall. The subcommand 'netsh firewall show config' retrieves the current firewall profile settings, exceptions, and enabled/disabled state on older Windows versions, making it the correct tool for this task.

WMIC (Windows Management Instrumentation Command-line) does not have a 'firewall' alias or subcommand and cannot be used to query firewall configuration directly in this syntax.

The 'net' command manages network shares, services, and user accounts but has no firewall subcommand and cannot display firewall configuration.

ipconfig is used exclusively to display and manage IP address configuration such as IP, subnet, and gateway - it has no firewall functionality.