Your network contains several Windows Server 2008 R2 servers that run Windows Server Update Services
(WSUS).
The WSUS servers distribute updates to all computers on the internal network.
Remote users connect from their personal computers to the internal network by using a split-tunnel VPN
connection.
You need to plan a strategy for patch management that deploys updates on the remote users’ computers.
Your strategy must meet the following requirements:
Minimize bandwidth use over the VPN connections.
Require updates to be approved on the WSUS servers before they are installed on the client computers.
What should you include in your plan?
A.
Create a Group Policy object (GPO) to perform client-side targeting.
B.
Create a computer group for the remote users’ computers. Configure the remote users’ computers to use
the internal WSUS server.
C.
Create a custom connection by using the Connection Manager Administration Kit (CMAK). Deploy the
custom connection to all of the remote users’ computers.
D.
Deploy an additional WSUS server. Configure the remote users’ computers to use the additional WSUS
server. Configure the additional WSUS server to leave the updates on the Microsoft Update Web site.
Explanation:
WSUS CONFIGURATION
Note: Splittunnelingis a computer networking concept which allows a VPN user to access a public network (e.
g., the Internet) and a private LAN or WAN at the same time, using the same physical network connection. It
alleviates bottlenecks and conserves bandwidth as Internet traffic does not have to pass through the VPN
server.
You can store update files on the local WSUS server, or you can leave approved updates on the Microsoft
Update Web servers. The second option is useful if the client computer connects to the WSUS server over a
slow WAN/VPN connection, but it connects to the Internet over a high-bandwidth connection. The WSUS
server synchronizes with Microsoft Update and receives the update metadata. After the updates are approved
centrally on WSUS, the client computer downloads the approved updates from Microsoft Update servers.
http://technet.microsoft.com/en-us/library/dd939812(v=ws.10).aspx#updatestorage