Your network contains an Active Directory domain named contoso.com.
The domain contains a server named Servers that has the Windows Server Update Services server role
installed.You need to configure Windows Server Update Services (WSUS) on Servers to use SSL.
You install a certificate in the local Computer store. Which two tools should you use? Each correct answer
presents part of the solution.
A.
Wsusutil
B.
Netsh
C.
Internet Information Services (IIS) Manager
D.
Server Manager
E.
Update Services
Explanation:
By IIS Manager and “wsusutil configuressl” command
https://technet.microsoft.com/en-us/library/bb633246.aspx
To configure SSL on the WSUS server by using IIS 7.0
1) On the WSUS server, open Internet Information Services (IIS) Manager.
2) Expand Sites, and then expand the Web site for the WSUS server. We recommend that you use the WSUS
Administration custom Web site, but the default Web
site might have been chosen when WSUS was being installed.
3) Perform the following steps on the APIRemoting30, ClientWebService, DSSAuthWebService,
ServerSyncWebService, and SimpleAuthWebService virtual
directories that reside under the WSUS Web site.
In Features View, double-click SSL Settings.
On the SSL Settings page, select the Require SSL checkbox. Ensure that Client certificates is set to Ignore.
In the Actions pane, click Apply.
4) Close Internet Information Services (IIS) Manager.
5) Run the following command from <WSUS Installation Folder>\\Tools: WSUSUtil.exe configuressl <Intranet
FQDN of the software update point site
system>.
A and E ?
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh852346(v=ws.11)#35-secure-wsus-with-the-secure-sockets-layer-protocol
To configure SSL on the WSUS root server
Log on to the WSUS server by using an account that is a member of the WSUS Administrators group or the local Administrators group.
Go to Start, type CMD, right-click Command Prompt, and then click Run as administrator.
Navigate to the %ProgramFiles%\Update Services\Tools\ folder.
In the Command Prompt window, type the following command:
Wsusutil configuressl certificateName
where:
certificateName is the DNS name of the WSUS server.
3
3