You need to minimize the amount of administrative effort

You are the network administrator for your company. The network contains 20 Windows Server 2003 database servers.

The written security policy for your company requires that the following services must be disabled on all database server computers:

Computer Browser

File Replication

Indexing Service

Remote Registry

Server

Task Scheduler

The written security policy also requires that the database servers must be prohibited from having access to the Internet. You use a Windows XP Professional client computer named Admin1 that has access to the Internet. You need to perform a weekly analysis of the hotfix level of the database servers compared with the latest available updates.

You need to minimize the amount of administrative effort.

What should you do?

You are the network administrator for your company. The network contains 20 Windows Server 2003 database servers.

The written security policy for your company requires that the following services must be disabled on all database server computers:

Computer Browser

File Replication

Indexing Service

Remote Registry

Server

Task Scheduler

The written security policy also requires that the database servers must be prohibited from having access to the Internet. You use a Windows XP Professional client computer named Admin1 that has access to the Internet. You need to perform a weekly analysis of the hotfix level of the database servers compared with the latest available updates.

You need to minimize the amount of administrative effort.

What should you do?

A.
Schedule the mbsacli.exe command to run weekly on Admin1. Configure the mbsacli.exe parameters to use a file that contains the names of all database servers.

B.
Each week, initiate a Remote Desktop connection to each database server. Run the wmic.exe qfe command on each database server.

C.
Each week, initiate a Remote Desktop connection to each database server. Run the hotfix.exe command on each database server.

D.
Each week, copy the Mssecure.cab file from the Microsoft Web site to Admin1 and initiate a Remote Desktop connection to each database server. Run the mbsacli.exe command on each database server. Configure the mbsacli.exe parameters to reference Admin1 as a data source for the hotfix information.

Explanation:
The command-line program for running MBSA is mbsacli.exe. MBSA scans for security vulnerabilities in the operating system and other Microsoft components. MBSA gives administrators a report after a scan has been completed. This report explains what security issues were discovered and how to correct them.
/c domainname\computername performs a scan on the selected The mbsacli.exe parameter
computer.
The mbsacli.exe parameter -i ipaddress specifies the IP address of the computer to be scanned. If not specified, the default is the local computer.

Reference:

Laura E. Hunter, Brian Barber, and Melissa Craft; Planning, Implementing and Maintaining a Windows Server 2003 Environment for an MCSE Certified on Windows 2000 Study Guide & DVD Training System, Syngress Publishing, Rockland, MA, Chapter 8, pp. 480, 481 and 489.

Martin Grasdal, Laura E. Hunter, Michael Cross, Laura Hunter, Debra Littlejohn Shinder, and Dr. Thomas W. Shinder, Planning and Maintaining a Windows Server 2003 Network Infrastructur* Exam 70-293 Study Guide & DVD Training System, Syngress Publishing, Inc., Rockland, MA, Chapter 11, pp. 828.



Leave a Reply 0

Your email address will not be published. Required fields are marked *