GSEC · Question #185
Mark works as a Network Administrator for NetTech Inc. The company has a Windows 2003 domain- based network. The network contains ten Windows 2003 member servers, 150 Windows XP Professional client…
The correct answer is C. He will be able to accomplish all the tasks. MBSACLI.EXE (the command-line version of Microsoft Baseline Security Analyzer) can scan remote computers for missing security updates, shared folders, and file system type information, making all three tasks achievable in a single run.
Question
Mark works as a Network Administrator for NetTech Inc. The company has a Windows 2003 domain- based network. The network contains ten Windows 2003 member servers, 150 Windows XP Professional client computers. According to the company's security policy, Mark needs to check whether all the computers in the network have all available security updates and shared folders. He also needs to check the file system type on each computer's hard disk. Mark installs and runs MBSACLI.EXE with the appropriate switches on a server. Which of the following tasks will he accomplish?
Options
- ANone of the tasks will be accomplished.
- BHe will be able to check the file system type on each computer's hard disk.
- CHe will be able to accomplish all the tasks.
- DHe will be able to check all available security updates and shared folders.
How the community answered
(36 responses)- A8% (3)
- B3% (1)
- C72% (26)
- D17% (6)
Why each option
MBSACLI.EXE (the command-line version of Microsoft Baseline Security Analyzer) can scan remote computers for missing security updates, shared folders, and file system type information, making all three tasks achievable in a single run.
This is incorrect because MBSACLI.EXE is specifically designed to perform security audits including update checks, shared folder enumeration, and file system reporting.
Checking the file system type is only one of the tasks MBSACLI.EXE can accomplish - it also checks security updates and shared folders, so this answer is incomplete.
MBSA and its command-line counterpart MBSACLI.EXE perform a broad security assessment that includes checking for missing Windows security updates, enumerating shared folders, and reporting the file system type (FAT vs. NTFS) on each scanned computer's volumes. When run with appropriate switches such as /hf for hotfix checks and /n for network checks, it can scan multiple computers across the domain. All three tasks listed in the scenario fall within MBSACLI's documented scanning capabilities.
Checking security updates and shared folders is only two of the three tasks; MBSACLI.EXE also reports file system types, making this answer incomplete.
Concept tested: MBSA command-line tool capabilities and scope
Source: https://learn.microsoft.com/en-us/previous-versions/tn-archive/dd900877(v=technet.10)
Topics
Community Discussion
No community discussion yet for this question.