You are an Enterprise administrator for contoso.com. The corporate network of the company consists of a single Active Directory domain. All the servers and the domain controllers on the domain run Windows Server 2008 and all client computers run Windows Vista.
You have been assigned the task to generate a monthly report on the status of software updates for the client computers. You report should display all the updates including operating system and Microsoft application updates that are installed successfully.
Your report should also display all the updates including the operating system and Microsoft application updates that are failed to install by putting minimum amount of administrative effort and in minimum cost.
Which of the following options would you choose to accomplish the desired task? (Select two. Each correct answer will present a part of the solution.)

A.
Install Microsoft System Center Essentials (Essentials) 2007.

B.
Install Microsoft System Center Configuration Manager (SCCM) 2007.

C.
Install Windows Software Update Services (WSUS) 3.0.

D.
Deploy management agents on all client computers.

E.
Configure Windows Update by using a Group Policy object (GPO).

F.
Deploy Microsoft Baseline Security Analyzer (MBSA) 2.1 on the client computers.

G.
Run MBSA on each client computer, and save the report to a shared folder on the network.

Explanation:

To generate the desired reports, you need to Install Windows Software Update Services (WSUS) 3.0. Configure Windows Update by using a Group Policy object (GPO).
The easiest way to configure automatic updates is through the group policy, in environments where this is possible. If group policies (AD) are not available, you can use the registry file which has to be deployed to every machine. This registry file, or group policy template if you’re using Active Directory, enables advanced features available with the new WSUS client.
Reports can be easily generated, but unfortunately only the WSUS server administrator can generate them. ITSS can generate reports per groups, so if your clients are properly configured to report their group, you can ask ITSS to schedule generation of reports for your groups.
You can also define the criteria of the report, so some events can be filtered. The criteria define status of updates for machines, so the following can be used:
Installed – lists updates which have been successfully installed on the client machines. Needed – lists updates which are needed, but have not been installed yet.
Not needed – lists updates which are available on the server, but are not needed for this particular client.
Unknown – lists updates with unknown status.
Failed – lists updates which were downloaded by the client, but whose installation failed.