DRAG DROP
A company has its main office in New York and branch offices in Miami and Quebec. All sites are
connected by reliable WAN links. You are designing a Windows Server Update Services (WSUS)
deployment strategy. The deployment strategy must meet the following requirements:
• Download updates from Windows Update only in the New York office.
• Ensure that the update language can be specified for the Quebec office.
You need to design a deployment strategy that meets the requirements. How should you configure
the servers and hierarchy types?
To answer, drag the appropriate server types and hierarchy types from the list to the correct
location or locations in the answer area.
Answer: 
Explanation:
The most basic WSUS deployment consists of a server inside the corporate firewall that serves client
computers on a private intranet, as shown in the “Simple WSUS Deployment” illustration below. The
WSUS server connects to Microsoft Update to download updates. This is known as synchronization.
During synchronization, WSUS determines if any new updates have been made available since the
last time you synchronized. If it is your first time synchronizing WSUS, all updates are made available
for download.
WSUS server hierarchies.
You can create complex hierarchies of WSUS servers. Since you can synchronize one WSUS server
with another WSUS server instead of with Microsoft Update, you need to have only a single WSUS
server that is connected to Microsoft Update. When you link WSUS servers together, there is an
upstream WSUS server and a downstream WSUS server, as shown in the “WSUS Server Hierarchy”
illustration below.
There are two ways to link WSUS servers together:
Autonomous mode: An upstream WSUS server shares updates with its downstream server or servers
during synchronization, but not update approval status or computer group information.
Downstream WSUS servers must be administered separately. Autonomous servers can also
synchronize updates for a set of languages that is a subset of the set synchronized by their upstream
server.
Replica mode: An upstream WSUS server shares updates, approval status, and computer groups with
its downstream server or servers. Downstream replica servers inherit update approvals and cannot
be administered apart from their upstream WSUS server.
Centralized management
Centrally managed WSUS servers utilize replica servers. Replica servers are not administered
separately, and are used only to distribute approvals, groups, and updates. The approvals and
targeting groups you create on the master server are replicated throughout the entire organization,
as shown in the “WSUS Centralized Management (Replica Servers)” illustration below. Remember
that computer group membership is not distributed throughout the replica group, only the
computer groups themselves. In other words, you always have to load client computers into
computer groups.
It is possible that not all the sites in your organization require the same computer groups. The
important thing is to create enough computer groups on the administered server to satisfy the
needs of the rest of the organization. Computers at different sites can be moved into a group
appropriate for the site. Meanwhile, computer groups inappropriate for a particular site simply
remain empty. All update approvals, like computer groups, must be created on the master server.
For step-by-step instructions, see Create Replica Servers later in this guide.
You should also make sure that the upstream server is configured for all the languages required by
its replica servers. If you add languages to the upstream server, you should copy the new updates to
its replica servers.
Changing language options on the upstream server alone might result in a mismatch between the
number of updates that are approved on the central server and the number of updates approved on
the replica servers.
Distributed management
Distributed management offers you full control over approvals and computer groups for the WSUS
server, as shown in the “WSUS Distributed Management” illustration below. With the distributed
management model, there is usually an administrator at each site who decides which update
languages are needed, creates computer groups, assigns computers to groups, tests and approves
updates, and ensures that the correct updates are installed on the right computer groups.
Distributed management is the default installation option for all WSUS installations.
