Which of the following BEST describes the two job functions of Microsoft Baseline Security Analyzer (MBSA)?

While MBSA does perform vulnerability scanning, it is not classified as an auditing tool because it does not generate audit logs or track user actions over time.

MBSA has no alerting system component and does not function as a traditional security audit tool that records and reviews system events.

MBSA does not perform active configuration management or provide real-time alerting - it passively scans and reports on security posture at the time of the scan.

Microsoft Baseline Security Analyzer identifies missing security patches for Windows and Microsoft applications, directly fulfilling the security patching function. It also scans for common security misconfigurations such as weak passwords, open file shares, and guest account status, functioning as a vulnerability scanner across networked systems. These two roles - patch identification and vulnerability scanning - are the core capabilities MBSA was designed to provide.