chapter 4

An administrator has noticed that a GPO containing new update settings has not yet applied to one of the computers on the network. What command can the administrator run to force the GPO to be applied?

gpupdate /force

A WSUS server that utilizes centralized administration of update approvals and client groups uses what WSUS administration mode?

Replica mode

How can an administrator force a client computer that is set to install updates manually to automatically apply a specific update?

ReplSet an approval deadline for the updateica mode

How much RAM should be available on a server that will function as a WSUS server?

At least 2 GB

If a server is using manual synchronization, how often should the server be manually synchronized?

At least once a week

If you need to use a WSUS server and your client computers are not part of a domain, what can you use to configure clients separately?

Local Group Policy Editor

If you need to view a WSUS report that will show a summary or detailed information about each update, including which computers received each update, what WSUS report should you choose?

Update reports

If you need WSUS clients to download and install feature updates as soon as they are available, what branch readiness level should you choose?

Current Branch

The configuration of a proxy server utilizes what port by default?

80

The Windows Internal Database requires a minimum of how much free space on the volume where it is stored?

2 GB

What are the default HTTP/HTTPS ports used by WSUS server for client access?

8530/8531

What command below must be used to tell WSUS to utilize SSL?

wsusutil.exe configuressl

What is the maximum number of synchronizations that can be performed automatically per day?

24

What is the minimum recommended amount of disk space that should be used for storing WSUS updates?

40 GB

What MMC can be used for configuring clients for client-side targeting?

gpedit.msc

What option illustrates the best example of server-side targeting?

Moving computers within the WSUS console to custom groups

What options does an administrator have to configure Windows Defender?

PowerShell

Group Policy

What PowerShell cmdlet will approve a WSUS update?

Approve-WsusUpdate

What PowerShell command can be used to clean up old update files on a WSUS server, including unused update files, old revisions, superseded updates, and inactive computer accounts?

Invoke-WsusServerCleanup

What specific option in WSUS enables you to approve specific types of updates for groups of computers automatically?

Automatic Approvals

What specific side effect can occur if you disable the Windows Update service?

intermittent high CPU utilization

What specific Windows Defender policy setting will allow you to disable scanning and real-time protection for specific files or all files in specified folders?

Exclusions

What type of Windows update will fix software defects and enhance overall security?

quality

What Windows Update policy will allow WSUS clients to restart outside of active hours when an update requires a restart?

Turn off auto-restart for updates during active hours

Which command can be used to successfully move the WSUS update files location?

wsusutil movecontent

Which of the following groups hold all the computers that have not been assigned to a WSUS custom group?

Unassigned Computers

Which of the following is an update to Windows that fixes a bug that has a limited scope and affects specific usage scenarios?

hotfix

Which of the following is a WSUS server that downloads updates from another WSUS server?

Downstream server

Which of the following terms best describes the data patterns used by Windows Defender to identify known malware?

signatures

Which protocol does WSUS use by default to collect updates from Microsoft Update servers?

HTTPS

A computer that is set to apply updates manually may still automatically install updates if the updates are configured with an approval deadline.

True

Group policy or registry settings can be used to configure client-side targeting.

True

The Configure Automatic Updates policy allows you to turn automatic updates off in Windows 10 and Windows Server 2016.

False

The Current Branch for Business feature update option causes WSUS clients to download and install feature updates as

soon as they are available.

False

The update source for a WSUS server must be the Microsoft Update server.

False

When patch management is done with WSUS, administrators cannot control which product updates are allowed.

False

When using a multiple-server deployment strategy with WSUS, the replica mode provides distributed administration requiring an administrator for each WSUS server to approve updates on that server.

False

WSUS can be configured to approve Windows Defender updates automatically.

True

WSUS clients can download and install only approved updates from the WSUS server.

True

WSUS configuration data must be configured to use SQL Server Express.

False