1. A process for facilitating a client system defense training exercise implemented over a client-server architecture comprising: sending a protocol version identification message by a client system including at least one computer to a first server for determining a the protocol version common to both the client computer and the first server; sending a registration request message by the client system to a first server for registering the client computer with the first server; sending a system identification message by the client system to a first server for tracking the client identity; sending a profile message by the first server to the client system in response to successful registration by the client system, the profile message including a list of vulnerabilities with associated vulnerability identifiers (IDs) that the client is to monitor; sending a health message by the client system to the first server at predetermined intervals, the health message including information regarding at least one of client system CPU, memory, hard disk, network and interfaces; sending a vulnerability fixed message by the client system to the first server each time one of the vulnerabilities on the list of vulnerabilities has been fixed, the vulnerability fixed messages including the associated vulnerability ID for each fixed vulnerability; sending a list vulnerabilities message by the first server to the client system, requesting a listing of all current client system vulnerabilities by associated vulnerability ID; sending a list of current vulnerabilities message by the client system to the first server in response to the list vulnerabilities message from the first server; storing details from the profile message, one or more health messages, one or more vulnerability fixed messages and one or more list of current vulnerabilities messages in at least one database associated with the first server; accessing the details stored in the at least one database by a second server; applying a set of scoring rules to the accessed details by the second server to determine an objective score for a client system administrator that is indicative of the client system administrator's ability to defend the client system against vulnerabilities.