Planning for M365 Windows 10 Deployment Flashcards Preview

O365 Mobility and Security > Planning for M365 Windows 10 Deployment > Flashcards

Flashcards in Planning for M365 Windows 10 Deployment Deck (29)
Loading flashcards...
1
Q

What Modern Servicing?

A

Windows Deployment methdod. Includes the following methods of deployment.
• SCCM (ConfigMgr)
○ On-premises device management solution used to fully manange updated deployed
• Windows Update for Business (WUFB)
○ Provide control over upddate deferment and provides centralised management using group policies
• Windows Server Update Server (WSUS)
○ Provides extensive control over updates and is natively available in Windows 10 OS
• MDT (Microsoft Deployment Toolkit)
Free Deployment tool used for Windows 10 Images and in-pace upgrades

2
Q

What are the requirement for windows analytics?

A
• Windows Telemetry 
		○ Set to basic for enrolled devices 
	• Operating system support
		○ Windows 7 SP1 & KB2952664
		○ Windows 8.1 & KB2976978
	• Target Operating system
		○ Specify build number of Windows 10 OS
	• Data Availability
		○  Can take up to 72 hours
Updates every 24 hours
3
Q

What are the windows 10 security feature types?

A

○ Identity and access management
○ Information protection
Threat protection

4
Q

What are the windows 10 security component?

A

○ Windows Hello for Business
○ Bitlocker
○ Windows Information protection
○ Windows Defender

5
Q

What are teh windows 10 security feature tools?

A

• Windows Defender Antivirus
○ Antimalware solution built into Windows 10. Provides security and antimalware.
• Windows Defender Exploit Guard
○ Set of host intrusion prevention capabilities. Works best with Defender ATP.
• Microsoft Defender ATP
○ Only available with M365 E5 plan. Provides security service to detect investigate and respond to threats.

6
Q

What is windows defender exploit guard?

A

Set of host intrusion prevention capabilities. Works best with Defender ATP.

7
Q

What is Microsoft Defender ATP?

A

○ Only available with M365 E5 plan. Provides security service to detect investigate and respond to threats.

8
Q

What is Windows Defender Antivirus?

A

Antimalware solution built into Windows 10. Provides security and antimalware.

9
Q

What are the system requirements for Windows 10?

A
• 1 GHz or faster
	• RAM
		○ Minimum 1GB for 32-bit
		○ Minimum 2GB for 64-bit
		○ Suggested to double this e.g 2GB for 32-bit and 4GB for 64-bit
	• 32GB or more storage
	• Windows Display Driver model 
		○ DirectX 9> WDDM 1.0 Driver
	• 800 x 600 Display/ Monitor 
Internet Connection
10
Q

What is an In-place windows grade used for?

A
For existing machines
	• More reliable than earlier in-place upgrade features
	• Current feature release to new features release 
	• Preserves current configurations
		○ Data 
		○ Settings
		○ Apps 
		○ Drivers
Can rollback to previous OS if issues
11
Q

What is a traditional windows upgrade used for?

A

• Bare Metal
○ Deploy a new device, or wipe an existing device and deploy a fresh image using MDT
• Refresh (wipe and load)
○ Redeploy a device by saving the user state, wiping the disk, then restoring the user state
• Replace
Out with the old in with the new. Completely replace old machine by saving the user state (snapshot) on old device and restoring to new machine.

12
Q

What is the most popular windows upgrade method?

A

Modern servicing.

13
Q

What is SCCM (ConfigMgr)?

A

On-premises device management solution used to fully manage updates deployed

14
Q

What is Windows Update for Business (WUFB)?

A

Provide control over update deferment and provides centralised management using group policies.

15
Q

What is windows server update service?

A

Provides extensive control over updates and is natively available in Windows 10 OS.

16
Q

What is MDT (Microsoft Deployment toolkit)?

A

Free Deployment tool used for Windows 10 Images and in-pace upgrades.

17
Q

What are the window 10 deployment formats?

A

This will determine the tool you use to upgrade.
• ESD (Electronic Software Delivery
○ Windows Update for Business (WUFB)
○ Windows Server Updates Service (WSUS)
○ System Center Config Manager (ConfigMgr)
• WIM (Windows Imaging)
○ System Center Config Manager (ConfigMgr)
○ Microsoft Deployment Toolkit (MDT)
Third-party management solutions

18
Q

What are the in-place upgrade steps?

A

1) Prepare for the upgrade
2) Perform upgrade of OS
3) Verify upgrade was successful
4) Rollback if necessary
Troubleshot any issues for reason of failures.

19
Q

What do windows 10 Feature updates provide?

A

Delivers new functionality to operating system

20
Q

What do windows 10 Quality update provide?

A

Delivers security and reliability fixes to operating systems

21
Q

What are windows 10 deployment rings?

A

○ Concept of deploying Windows 10 features in stages

If you have 10k employees you wouldn’t want the update to be all at once

22
Q

What is Windows insider?

A

○ Recommended for Devs

Provides option to test pre-released features in Windows 10

23
Q

What is the Fast ring?

A

Windows Insider program
○ Fast Ring (Weekly) Updates
First group of users to see new features

24
Q

What is the slow ring?

A

Windows Insider program
○ Slow Ring (Monthly)
New features arent seen as fast as fast ring

25
Q

What is the release preview ring?

A

Windows Insider program

Where released updates are seen before their general availability useful for Pilot users

26
Q

What is the semi-annual channel?

A

sas

27
Q

What is Longer term Channel?

A

Every 2-3 years)
§ Specialized Windows 10 Computers (Machinery or Medical would want these updated often)
§ Requires Windows 10 Enterprise LTSB (Long Term Servicing Branch)

28
Q

What is Identity protection?

A
Different tools and application you can use. 
	• Access Control 
	• Configure S/MIME
	• Credential Guard
	• Digital Certificates
	• User Account Control 
	• Virtual Smart cards
	• Smart Cards
	• Credential theft mitigation 
	• Hello for business
29
Q

What is Information protection?

A
Different tools and application you can use. 
	• Bitlocker
	• Encrypted hard drive
	• Kernel DMA (Direct Memory Access) Protection for Thunderbolt 3
	• Windows Information Protection (WIP)
	• Secure Windows 10 boot process
	• Trusted Platform Module
		○ TPM…