Which of the following is true about microsoft baseline security analyzer (mbsa)