What is the primary purpose of the Windows Service Controller command (sc) in a security test?

• A. To enumerate user accounts
• B. To monitor CPU usage
• C. To modify registry keys
• D. To query, start, and stop services as an administrator

Answer: (D)

The Windows Service Controller tool is all about interacting with the Service Control Manager to manage services. In a security test, the main use is to query a service’s status and control its lifecycle—starting, stopping, or restarting services as an administrator. This lets you inspect how services are configured (what account they run under, startup type, binary path) and test how the system responds to service state changes, which can reveal misconfigurations or potential abuse paths.

Other tasks like enumerating user accounts, monitoring CPU usage, or changing registry keys aren’t the primary function of this tool, and those responsibilities belong to other utilities. The focus of the service controller command is specifically on services: querying their status and controlling their operation.