CREST Practitioner Security Analyst (CPSA) Practice

What command retrieves the name of installed software using WMCI?

1. wmci software list

2. wmci product get name /value

3. wmci get installed software

4. wmci product get all

The correct answer is: wmci product get name /value

The command that retrieves the name of installed software using Windows Management Instrumentation Command-line Interface (WMIC) is 'wmic product get name /value'. This command specifically targets the installed software products on a Windows system and retrieves their names in a value format. The 'product' aspect of the command indicates that it is accessing information related to installed software products, while 'get name' specifies that the user wants to retrieve the names of those products. The '/value' switch is important because it formats the output to show the results in a more readable and usable manner as key-value pairs, which can be especially useful for scripting and automating tasks. In contrast, the other options do not provide the correct syntax or functionality to achieve the desired result. The first option attempted to list software but does not reflect the proper command structure for WMIC. The third option similarly fails to adhere to the correct syntax and would not yield the intended information. The fourth option also suggests a command that would retrieve more than just the name, which does not align with the specific need to isolate software names. Hence, the selected command effectively accomplishes the task of retrieving names of installed software products accurately and in a useful format.