Your network contains a single Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server
2012. Server1 has the Windows Server Updates Services server role installed and is configured to download updates from the Microsoft Update servers. You need
to ensure that Server1 only downloads Critical Updates from the Microsoft Update servers. What should you do from the Update Services console?
A.
From the Automatic Approvals options, configure the Update Rules settings.
B.
From the Products and Classifications options, configure the Classifications settings.
C.
From the Products and Classifications options, configure the Products settings.
D.
From the Update Files and Languages options, configure the Update Files settings.
B. From the Products and Classifications options, configure the Classifications settings.
You can filter updates by update classifications. By default, Critical Updates, Definition Updates, and Security Updates are selected.
https://technet.microsoft.com/en-us/library/hh328574