Your network contains an Active Directory forest named contoso.com. The forest contains two sites
named Main and Branch. The Main site contains 400 desktop computers and the Branch site
contains 150 desktop computers. All of the desktop computers run Windows 8.
In Main, the network contains a member server named Server1 that runs Windows Server 2012.
You install the Windows Server Update Services server role on Server1.
You need to ensure that Windows updates obtained from Windows Server Update Services (WSUS)
are the same for the computers in each site.
You want to achieve this goal by using the minimum amount of administrative effort.
What should you do?
A.
From the Update Services console, create computer groups
B.
From the Update Services console, configure the Computers options
C.
From the Group Policy Management console, configure the Windows Update settings
D.
From the Group Policy Management console, configure the Windows Anytime Upgrade settings
E.
From the Update Services console, configure the Synchronization Schedule options
Maybe A
1
0
I think C ist correct. By using GPOs you are configuring all computers to connect to server1 in the first place. Without that, all computers will connect to MS WSUS online and download updates individually.
0
0
C is correct, you can create a gpo and set server name and update group.
0
0
But the goal is to obtain the same updates in each site; C will not achieve this because you are treating both sites the same. I believe the Answer is A.
1
0
I don’t think so, because creating separate groups for each site will not address the requirement, that all clients will retrieve the same updates either.
Of course, you can create two computer groups for each site in Update console, duplicate the WSUS gpo and configure both gpos to auto assign new computers to their respective groups.
IMHO, this does not meet the requirement for least amount of administrative effort.
So I’m with C. As Andreas has already said, computers must be notified that WSUS is the primary update source.
1
1
I agree with C.
Computer Settings > Policies > Administrative Templates > Windows Components > Windows Update – enable client-side targeting to create computer groups. Therefore the groups are notified that WSUS is the update source
1
0
Can be achieved through A and C but I believe C is the least effort:
Specify how you are going to assign computers to the computer groups. There are two options: server-side targeting and client-side targeting. Server-side targeting involves manually adding each computer to its group by using WSUS. Client-side targeting involves automatically adding the clients by using either Group Policy or registry keys.
0
0
The issue I have with the answer being C is that you are configuring to WSUS as the source of the updates.
However the questions states that ‘You need to ensure that Windows updates obtained from Windows Server Update Services (WSUS) are the same for the computers in each site.’ To me this means that the updates are already coming from WSUS so why are we configuring this again.
Because of this I believe the answer is A. You create a single Computer Group in WSUS and put all the computer in it.
1
0