You administer a group of servers that run Windows Server 2012 R2.
You must install all updates. You must report on compliance with the update policy on a monthly basis.
You need to configure updates and compliance reporting for new devices.
What should you do?
A.
Deploy the Microsoft Baseline Security Analyzer. Scan the servers and specify the /apply switch.
B.
In Configuration Manager, deploy a new Desired Configuration Management baseline that includes all
required updates.
C.
Configure a new group policy to install updates monthly. Deploy the group policy to all servers.
D.
In Operations Manager, create an override that enables the software updates management pack.
Apply the new override to the servers.
i’d go for answer B
based on the following:
http://www.aiotestking.com/microsoft/you-need-to-configure-updates-and-compliance-reporting-for-new-devices/
I agree with veekay. I think ‘B’ is the correct answer.
SCCM gives you the ability to do the updates and report. With the baseline set in SCCM each month the systems will be updated to meet the latest patch level.
B:reason
Desired configuration management in Configuration Manager 2007 allows you to assess the compliance of computers with regard to a number of configurations, such as whether the correct Microsoft Windows operating system versions are installed and configured appropriately, whether all required applications are installed and configured correctly, whether optional applications are configured appropriately, and whether prohibited applications are installed. Additionally, you can check for compliance with software updates and security settings.