You have Windows 7 images that are rebuilt quarterly and sported to System Center 2012 Configuration Manager.
The Microsoft Deployment Toolkit (MDT) 2012 is integrated with Configuration Manager.
You need to reduce the network security risks when the images are deployed by using Operating System Deployment (OSD).
What should you do? (Choose all that Apply.)
A. After the Apply Operating System Image task sequence step, add a step to install software updates offline.
B. Before the Apply Operating System image task sequence step, add a step to install Deployment Imaging Servicing and Management (DISM).
C. After the installation of the final Application, add an Install Software Updates task sequence step.
D. After the Apply Operating System Image task sequence step, add a Run Command line step that runs wuauclt.exe /detectnow
E. Before the Apply Operating System image task sequence step, add a step to install the Windows Automated Installation Kit (Windows AIK).
Correct Answer: AC
Explanation/Reference:
Explanation:
A: To do the updates offline to reduce network security risks.
C: Install software updates to minimize network security risks
Note:
Configuration Manager 2012: Offline Servicing for Operating System Images
In Configuration Manager 2012 there is a new feature for applying updates to operating system images while they are in the Configuration Manager library. This means any operating system image you see in the Operating Systems > Operating Systems Images node from the Software Library wunderbar can be updated with Component Based Servicing (CBS) updates. By updating an image in the Software Library instead of performing a new build and capture of the operating system image you will gain a few distinct advantages. You will be able to reduce the risk of vulnerabilities during operating system deployments and reduce the overall operating system deployment to the end user. You will also reduce the administrative effort to maintain your operating system images.
Task Sequence Steps in Configuration Manager
The following task sequence steps can be added to a System Center 2012 Configuration Manager task sequence:
Install Software Updates
Use the Install Software Updates task sequence step to install software updates on the destination computer. The destination computer is not evaluated for applicable software updates until this task sequence step runs. At that time, the destination computer is evaluated for software updates like any other Configuration Manager-managed client. In particular, this step installs only the software updates that are targeted to collections of which the computer is currently a member.
This task sequence step runs only in a standard operating system. It does not run in Windows PE.
Further information:
http://technet.microsoft.com/en-us/library/hh824821.aspx
Deployment Image Servicing and Management (DISM) Technical Reference
Deployment Image Servicing and Management (DISM) is a command-line tool that is used to mount and service Windows® images before deployment. You can use DISM image management commands to mount, and get information about, Windows image (.wim) files or virtual hard disks (VHD) and to capture, split, and otherwise manage .wim files.
Reference:
http://blogs.technet.com/b/inside_osd/archive/2011/04/18/configuration-manager-2012-offline-servicing-foroperating-system-images.aspx
http://technet.microsoft.com/en-us/library/hh846237.aspx
Incorrect:
wuauclt.exe /detectnow
The detectnow switch will force a relatively immediate query to the WSUS server to see if there are any updates that are needed. If there are, the yellow shield will appear in the system tray. This is usually pretty quick, within 20-30 seconds.
