Home » Microsoft » 70-647 » What should you recommend?
Your network consists of one Active Directory domain that contains domain controllers that run Windows Server 2008.
You deploy Windows Server 2008 Enterprise Edition on 20 new computers. You deploy a Server Core installation of Windows Server 2008 Standard Edition on 20 old computers.
You create a new organization unit (OU) named Servers OU. You move all server computer accounts to Servers OU.
You need to recommend a patch management solution for the new computers. The solution must ensure that all computers automatically download and install updates approved by administrators.
What should you recommend?
A. Implement a new Windows Server Update Services (WSUS) 3.0 server. Manually enable the servers for Automatic Updates.
B. Implement a new Windows Server Update Services (WSUS) 3.0 server. Create a new Group Policy object (GPO) for Servers OU. Configure the GPO to enable Automatic Updates from a local server.
C. Create a new Group Policy object (GPO) for Servers OU. Configure the GPO to enable Automatic Updates from Microsoft Update.
D. Create a new Group Policy object (GPO) for the Active Directory domain. Configure the GPO to enable Automatic Updates from Microsoft Update.
Correct Answer: B
Explanation/Reference:
Explanation:
To ensure that all new computers on which Windows Server 2008 Enterprise Edition was installed should be able to automatically download and install updates on them, you need to implement a new Windows Server Update Services (WSUS) 3.0 server that enables you to deploy the latest Microsoft product updates to computers running Windows Operating systems.
Next, you need to create a new Group Policy object (GPO) for Servers OU so that all the new servers in the Servers OU receive updates. You should not create a new Group Policy object don’t want all the network computers, which
(GPO) for the Active Directory domain because you
include servers as well as desktop computers to receive updates.
Finally, you need to configure the GPO to enable Automatic Updates from a local server so that all the servers receive updates automatically. You need to enable Automatic Updates from a local server instead of Microsoft Update because you are using WSUS server to receive updates.
Reference: Microsoft Windows Server Update Services 3.0 Overview
http://technet2.microsoft.com/windowsserver/en/library/632f98ac-9d45-480b-b801- 996b714cebd01033.mspx?mfr=true
Reference: GPO for installing Windows update through WSUS
www.certify-me.co.uk 80
Microsoft 70-647 Exam
http://www.petri.co.il/forums/showthread.php?t=22168
Reference: Configuring WSUS 3.0
http://netjammr.net/tech/2008/02/19/install-and-configure-windows-server-update-services-30-part- 2/
