You are an Enterprise administrator for contoso.com. All the servers on the network run Windows Server 2008.
The corporate network contains a Windows Server 2008 server that runs Windows Server Update Services (WSUS), which was configured to store updates locally.
The company has recently opened a few satellite offices that are connected to the main office using a dedicated WAN link.
Which of the following options would you choose to design a patch management strategy to ensure that WSUS updates are approved from a central location and WAN traffic is minimized between the branch office and the satellite offices?
A.
For each satellite office, create organizational units (OUs). Create and link the Group Policy objects (GPOs) to the OUs.
B.
In each satellite office, install a WSUS server.
C.
Configure each satellite office WSUS server as a replica of the main office WSUS server.
D.
Configure each satellite office WSUS server as an autonomous server.
E.
Configure different schedules to download updates from the main office WSUS server to the client computers in each satellite office.
F.
Configure each satellite office WSUS server to use the main office WSUS server as an upstream server.
Explanation:
To design a patch management strategy to ensure that WSUS updates are approved from a central location and WAN traffic is minimized between the branch office and the satellite offices, you need to install a WSUS server in each satellite office and configure each satellite office WSUS server as a replica of the branch office WSUS server. A WSUS hierarchy supports two modes, autonomous mode and replica mode. In replica mode, the upstream server is the only WSUS server that downloads its updates from Microsoft Update. It is also the only server that an administrator has to manually configure computer groups and update approvals on. All information downloaded and configured on to an upstream server is replicated directly to all of the devices configured as downstream servers.
Using this method you will save a great deal of bandwidth as only one computer is constantly updating from the Internet. More importantly however, you will save a countless amount of time since you are only managing one server now from a software standpoint.
Reference: Deploying Microsoft Windows Server Update Serviceshttp://www.windowsnetworking.com/articles_tutorials/Deploying-Microsoft-Windows-Server-Update-Services.html