13.4.6 Update Management

You have a Windows 10 system. You have used the Settings app to access Windows Update. From this location, how long can you pause updates? - 14 days - 30 days - 365 days - 7 days

7 days When you open the Settings app and navigate to Update & Security > Windows Update, you can pause new updates for a period of 7 days.

What is WindowsUpdate.log? - A log file that allows you to see enforced policies on your Windows 10 machine. - A log file that analyzes Windows Update Service, BITS, and Windows Network Diagnostics Service. - A log file that deploys updates to device groups over a deployment timeline. - A log or record of all notable changes made to a Windows system.

A log or record of all notable changes made to a Windows system. WindowsUpdate.log is a log or record of all notable changes made to a Windows system. Every detail of each update implemented by the Windows Update service is recorded by the Windows System in the log. Windows Update Troubleshooter is a tool that analyzes three different services, which are Windows Update Service, Background Intelligent Transfer Service (BITS), and Windows Network Diagnostics Service. This troubleshooter looks for problems, like pending restarts, and helps you to solve them. Update rings allow you to deploy updates to device groups over a deployment timeline. View configured updates is an option in the Windows Update settings you can use to see the policies enforced on your Windows machine.

What does the Windows Update Delivery Optimization function do? - Delivery Optimization lets you set active hours to indicate normal use for your device. The device will not reboot to install updates during this time. - Delivery Optimization lets you view the updates you have installed. It also lets you uninstall an update if needed. - Delivery Optimization lets you know when and if there are any urgent updates for your system and provides you with an option to download and install them. - Delivery Optimization provides you with Windows and Store app updates and other Microsoft products.

Delivery Optimization provides you with Windows and Store app updates and other Microsoft products. Delivery Optimization provides you with Windows and Store app updates and other Microsoft products. Clicking Advanced Options from here lets you throttle the bandwidth for downloading and uploading updates, including the monthly limit. From Windows Update, you would use View update history to view all the updates that have been applied to your system. You can also install updates from here. From Windows Update, you would use Change active hours to set active hours to indicate normal use for your device. The device will not reboot to install an update during this time. From Windows Update, you would use Check for updates to access Microsoft's site and see if any new updates are available for you system.

Your Windows system is a member of a domain. Windows Update settings are being controlled through Group Policy. How can you determine whether a specific security update from Windows Update is installed on the computer? - Check the Local Security Policy. - Go to Programs and Features in Control Panel. - Run the wuauclt.exe /listupdates command. - Run the netsh winhttp import proxy source command.

Go to Programs and Features in Control Panel. To check a computer for a specific update, you click the View update history link in Windows Update. You can also click View installed updates in Programs and Features (both available through the Control Panel). The Wuauclt.exe command is the client component for Windows Update. One of this program's functions is to check for updates using settings configured locally or through Group Policy. You can run the wuauclt /detectnow command to force the computer to check for updates immediately. However, there is no option for seeing which updates have been installed. The netsh winhttp import proxy source command imports Internet Explorer's Internet Options settings directly. The Local Security Policy shows you the update settings you can control locally. In this scenario, because Group Policy is being used, these settings wouldn't tell you anything about the computer's configuration.

Dan wants to implement reconnaissance countermeasures to help protect his DNS service. Which of the following actions should he take? - Install patches against known vulnerabilities and clean up out-of-date zones, files, users, and groups. - Limit the sharing of critical information in press releases, annual reports, product catalogs, or marketing materials. - Implement policies that restrict the sharing of sensitive company information on employees' personal social media pages. - Review company websites to see which type of sensitive information is being shared.

Install patches against known vulnerabilities and clean up out-of-date zones, files, users, and groups. Installing patches against known vulnerabilities and cleaning up out-of-date zones, files, users, and groups are good DNS reconnaissance countermeasures. Reviewing company websites to see which type of information is being shared about sensitive information is conforming to an Internet Information Sharing Policy. Implementing policies that restrict the sharing of sensitive company information on employees' personal social media pages is conforming to an Employee Social Media Information Sharing Policy. Limiting the sharing of critical information in press releases, annual reports, product catalogs, and marketing materials is conforming to a Printed Materials Information Sharing Policy.

Which of the following tools can you use to troubleshoot and validate Windows updates? (Select three.) - Windows Defender - Device Manager - PowerShell - Windows Transfer Service - Windows Server Troubleshooter - Windows Update Troubleshooter - Windows Server Update Service (WSUS)

PowerShell Windows Update Troubleshooter Windows Server Update Service (WSUS) You can use PowerShell to look at and compile Windows Update logs. Doing so creates a file that's deposited on to your desktop. Windows Server Update Service (WSUS) is a role you can add to a server to manage updates. Rather than have all your organization's PCs go to Microsoft to get their updates, you can have the updates deposited in to the WSUS server. Windows Update Troubleshooter analyzes Windows Update Service, Background Intelligent Transfer Service (BITS), and Windows Network Diagnostics Service. The other answers are not tools you can use to troubleshoot and validate Windows updates.

Windows Update for Business (WUfB) lets you keep your devices current with the latest security upgrades and features. Which operating system releases does WUfB support? - Windows 10 - Windows 8 Home - Windows 10 Home - Windows 8

Windows 10 Windows Update for Business allows you to keep Windows 10 devices in an organization current with the latest security upgrades and features. Except for Windows 10 Home, Windows Update for Business can be used with all versions of Windows 10. WUfB is not compatible with Windows 10 Home, Windows 8, Windows 8 Home, or any earlier operating system releases.

While deploying Windows updates, when would you use the critical update ring? - When deploying updates for any general user within the organization. - When deploying updates to users that want to stay on top of changes. - When deploying updates to most of the organization in order to monitor for feedback. - When deploying updates to important systems (only after the update has been vetted).

When deploying updates to important systems (only after the update has been vetted). The critical deployment ring is for critical machines that you don't want to update until the update has been vetted. These are machines that are critical to the running of your organization or that are running essential projects. You can defer feature updates for up six months and quality improvement updates for up to 30 days. The preview ring is for those users who want to stay on top of changes and are on the cutting edge. They want to see the latest and greatest. This is called the Windows Insider Program. It allows you to get the most recent updates for your system. The broad ring includes the Semi-Annual Channel and is broadly deployed to most of the organization to monitor for feedback.

When deploying Windows updates, when would you use the preview update ring? - When deploying updates to users that want to stay on top of changes. - When deploying updates to most of the organization in order to monitor for feedback. - When deploying updates to important machines (only after the update has been vetted). - When deploying updates for any general user within the organization.

When deploying updates to users that want to stay on top of changes. The preview ring is for those users who want to stay on top of changes and are on the cutting edge. They want to see the latest and greatest. This is called the Windows Insider Program. It allows you to get the most recent updates for your system. The critical deployment ring is for critical machines that you don't want to update until the update has been vetted. These are machines that are critical to the running of your organization or that are running important projects. You can defer feature updates for up six months and quality improvement updates for up to 30 days. The broad ring includes the Semi-Annual Channel and is broadly deployed to most of the organization to monitor for feedback.

Which of the following are true about Windows Update for Business? (Select three.) - Windows Update for Business provides the latest features for your Windows 10 devices, including security upgrades. - Windows Update for Business can only be configured with Group Policy. - Windows Update for Business is a Group Policy management tool. - Windows Update for Business provides the latest features for your Windows 10 devices, but it does not include security upgrades. - Windows Update for Business works with all versions of Windows 10. - Windows Update for Business can be configured with Group Policy, Mobile Device Management, or Systems Center Configuration Manager. - Windows Update for Business works with all versions of Windows 10 except Windows 10 Home.

Windows Update for Business provides the latest features for your Windows 10 devices, including security upgrades. Windows Update for Business works with all versions of Windows 10 except Windows 10 Home. Windows Update for Business can be configured with Group Policy, Mobile Device Management, or Systems Center Configuration Manager.