Your network consists of one Active Directory domain that contains domain controllers that run
Windows Server 2008. You deploy Windows Server 2008 Enterprise Edition on 20 new computers.
You deploy a Server Core installation of Windows Server 2008 Standard Edition on 20 old computers.
You create a new organization unit (OU) named Servers OU. You move all server computer accounts
to Servers OU. You need to recommend a patch management solution for the new computers. The
solution must ensure that all computers automatically download and install updates approved by
administrators. What should you recommend?
A.
Implement a new Windows Server Update Services (WSUS) 3.0 server. Manually enable the
servers for Automatic Updates.
B.
Implement a new Windows Server Update Services (WSUS) 3.0 server. Create a new Group Policy
object (GPO) for Servers OU. Configure the GPO to enable Automatic Updates from a local server.
C.
Create a new Group Policy object (GPO) for Servers OU. Configure the GPO to enable Automatic
Updates from Microsoft Update.
D.
Create a new Group Policy object (GPO) for the Active Directory domain. Configure the GPO to
enable Automatic Updates from Microsoft Update.
Explanation:
To ensure that all new computers on which Windows Server 2008 Enterprise Edition was installed
should be able to automatically download and install updates on them, you need to implement a
new Windows Server Update Services (WSUS) 3.0 server that enables you to deploy the latest
Microsoft product updates to computers running Windows Operating systems. Next, you need to
create a new Group Policy object (GPO) for Servers OU so that all the new servers in the Servers OU
receive updates. You should not create a new Group Policy object (GPO) for the Active Directory
domain because you don’t want all the network computers, which include servers as well as desktop
computers to receive updates. Finally, you need to configure the GPO to enable Automatic Updates
from a local server so that all the servers receive updates automatically. You need to enable
Automatic Updates from a local server instead of Microsoft Update because you are using WSUS
server to receive updates.
Microsoft Windows Server Update Services 3.0 Overview
http://technet2.microsoft.com/windowsserver/en/library/632f98ac-9d45-480b-b801-
996b714cebd01033.mspx?mfr=true
GPO for installing Windows update through WSUS
http://www.petri.co.il/forums/showthread.php?t=22168
Configuring WSUS 3.0
http://netjammr.net/tech/2008/02/19/install-and-configure-windows-server-update-services-30-
part-2/