Lesson 2: Implementing Patch Management

Question 1

Windows Update program

Answer 1

scans your system to determine the updates and fixes your system needs. You then have the oppor- tunity to select, download, and install each update.

Question 2

Patch Tuesday

Answer 2

second Tuesday of each month when MSFT releases patches

Question 3

out-of-band patches

Answer 3

MSFT patches not released on patch Tuesday – released at other times because they are critical or time-sensitive

Question 4

3 classifications for updates

Answer 4

Important updates
Recommended updates
Optional updates

Question 5

Important Updates

Answer 5

significant benefits, such as improved security, privacy, and reliability. They should be installed as they become available and can be installed automatically with Windows Update.

Question 6

Recommended Updates

Answer 6

address noncritical problems or help enhance your computing experience.

Question 7

Optional Updates

Answer 7

include updates, drivers, or new software from Microsoft to enhance your computing experience. You need to install these manually.

Question 8

Three types of updates

Answer 8

Security Update
Critical Update
Service Packs

Question 9

Security Update

Answer 9

broadly released fix for a product-specific, security-related vulnerability.

Question 10

How are security updates rated?

Answer 10

Based on severity – critical, important, moderate or low

Question 11

Critical Updates

Answer 11

broadly released fix for a specific problem addressing a critical, non-security related bug.

Question 12

Service Packs

Answer 12

a tested, cumulative set of hotfixes, security updates, critical updates, and updates, as well as additional fixes for problems found internally since the release of the product.

Question 13

Hotfix

Answer 13

a single, cumulative package that includes one or more files that are used to address a problem in a software product, such as a software bug.

Not usually available via Win Update

Question 14

What separates hotfixes from other updates

Answer 14

made to address a specific customer situation, and they often have not gone through the same extensive testing as patches retrieved through Windows Updates.

Question 15

cumulative patch

Answer 15

multiple hotfixes combined into a single package

Question 16

Types of updates not available via Windows Update

Answer 16

hotfix

cumulative patch

Question 17

BITS

Answer 17

Background Intelligent Transfer Service

Performs the download when the computer’s network band- width is idle

Question 18

Automatic Updates Group Policy Setting: Automatic Update Detection Frequency

Answer 18

Specifies how frequently the Windows Update client checks for new updates. The default is a random time between 17 and 22 hours.

Question 19

Automatic Updates Group Policy Setting: Allow Automatic Updates Immediate Installation

Answer 19

Specifies whether Windows Updates will immediately install updates that don’t require the computer to be restarted.

Question 20

Automatic Updates Group Policy Setting: Turn On Recommended Updates Via Automatic Updates:

Answer 20

Determines whether client computers install both critical and recommended updates.

Question 21

Automatic Updates Group Policy Setting: No Auto-Restart for Scheduled Automatic Installations

Answer 21

Specifies that if a computer needs a restart, it will wait for a user to perform the restart.

Question 22

Automatic Updates Group Policy Setting: Re-Prompt for Restart Scheduled Installations

Answer 22

Specifies how often the Windows Update client prompts the user to restart the computer.

Question 23

Automatic Updates Group Policy Setting: Delay Restart for Scheduled Installations

Answer 23

Specifies how long the Windows Update client waits before automatically restarting.

Question 24

Automatic Updates Group Policy Setting: Reschedule Automatic Updates Scheduled Installations

Answer 24

Specifies how long Windows Update waits after a reboot before continuing with a scheduled installation that was missed previously.

Question 25

Automatic Updates Group Policy Setting: Enable Client-Side Targeting

Answer 25

Specifies which group the computer is a member of.

Question 26

Automatic Updates Group Policy Setting: Enables Windows Update Power Management to Automatically Wake up the System to Install Scheduled Updates

Answer 26

If a computer supports Wake On LAN, it automatically starts up and installs an update at the scheduled time.

Question 27

Automatic Updates Group Policy Setting: Allow Signed Updates from an Intranet Microsoft Update Services Location:

Answer 27

Specifies if Windows will install an update that is signed even if the certificate is not from Microsoft.

Question 28

WSUS

Answer 28

Windows Server Update Services allows administrators to manage the testing & distribution of updates and other patches to computers within an organization

Question 29

Simplest WSUS configuration

Answer 29

single WSUS that downloads updates directly from Microsoft. Then the client computers get updates from the WSUS server.

Question 30

Two WSUS modes

Answer 30

Autonomous mode | Replica mode

Question 31

WSUS Mode -- Autonomous mode

Answer 31

Distributed management. Updates are approved on each WSUS server, even if one WSUS server is downstream from another.

Question 32

WSUS Mode -- Replica Mode

Answer 32

Central management. All downstream WSUS servers take instructions from a single upstream WSUS server. Updates approved on that server are approved on all servers.

Question 33

Computer Groups

Answer 33

Placing PCs into these allow you to specify which PCs get updates, when.

Question 34

Two ways to assign a computer to a group

Answer 34

Client-side targeting | server-side targeting

Question 35

server-side targeting

Answer 35

you manually assign the computer to a group.

Question 36

client-side targeting

Answer 36

computers are automatically assigned to a computer group by using group policies or whereby someone manually modifies the registry.

Question 37

3 WSUS logs

Answer 37

application event log C:\Program Files\Update Services\LogFiles\Change.txt: C:\Program Files\Update Services\LogFiles\softwareDistribution.txt:

Question 38

What does WSUS place in the WSUS logs

Answer 38

errors related to synchronization, Update Services console errors, and WSUS database errors.

Question 39

What does WSUS place in the Change.txt logs?

Answer 39

This log stores the record of every update installation, synchronization, and WSUS configuration change.

Question 40

What does WSUS place in the softwareDistribution.txt log?

Answer 40

This is a detailed log file usually used by Microsoft Support to debug a problem.

Question 41

Restarting the WSUS server on the CLI

Answer 41

Net stop wuauserv | Net start wuauserv

Question 42

SCCM

Answer 42

System Center Configuration Manager a more versatile system that can provide remote control, patch management, software distribution, operating system deployment, network access protection, hardware inventory, and software inventory. Of course, while WSUS is free, there is a cost in deploying SCCM.