Implementing Update Management

Question 1

What does the following PowerShell CmdLet Do?

Add-WsusComputer

Answer 1

Adds a client computer to a target group.

Question 2

What does the following PowerShell CmdLet Do?

Add-WsusDynamicCategory

Answer 2

Adds a dynamic category to a WSUS server.

Question 3

What does the following PowerShell CmdLet Do?

Approve-WsusUpdate

Answer 3

Approves an update to be applied to clients.

Question 4

What does the following PowerShell CmdLet Do?

Deny-WsusUpdate

Answer 4

Declines the update for deployment.

Question 5

What does the following PowerShell CmdLet Do?

Get-WsusClassification

Answer 5

Gets the list of all WSUS classifications currently available in the system.

Question 6

What does the following PowerShell CmdLet Do?

Get-WsusComputer

Answer 6

Gets the WSUS computer object that represents the client computer.

Question 7

What does the following PowerShell CmdLet Do?

Get-WsusDynamicCategory

Answer 7

Gets dynamic categories on a WSUS server.

Question 8

What does the following PowerShell CmdLet Do?

Get-WsusProduct

Answer 8

Gets the list of all products currently available on WSUS.

Question 9

What does the following PowerShell CmdLet Do?

Get-WsusServer

Answer 9

Gets the WSUS update server object.

Question 10

What does the following PowerShell CmdLet Do?

Get-WsusUpdate

Answer 10

Gets the WSUS update object with details about the update.

Question 11

What does the following PowerShell CmdLet Do?

Invoke-WsusServerCleanup

Answer 11

Performs the process of cleanup on a WSUS server.

Question 12

What does the following PowerShell CmdLet Do?

Remove-WsusDynamicCategory

Answer 12

Removes a dynamic category from a WSUS server.

Question 13

What does the following PowerShell CmdLet Do?

Set-WsusClassification

Answer 13

Sets whether the classifications of updates that WSUS synchronizes are enabled.

Question 14

What does the following PowerShell CmdLet Do?

Set-WsusDynamicCategory

Answer 14

Sets the synchronization status of a dynamic category.

Question 15

What does the following PowerShell CmdLet Do?

Set-WsusProduct

Answer 15

Sets whether the product (application or Operating System) has updates synced to the WSUS server

Question 16

What does the following PowerShell CmdLet Do?

Set-WsusServerSynchronization

Answer 16

Sets whether the WSUS server synchronizes from Microsoft Update or an upstream server.

Question 17

How do you install WSUS using PowerShell?

What does it install by default?

Answer 17

Install-WindowsFeature -Name UpdateServices -IncludeManagementTools

It installs WSUS, a WID Database, and WSUS Services

Question 18

How do you configure WSUS once the feature has been installed?

Answer 18

1. Set which upstream server the WSUS server synchonizes from
   
   1. Either Microsoft
   2. From another WSUS
   3. From another WSUS server as a replica
2. Provide any proxy info
3. Select the languages you want to download
4. Select Products
   
   1. Anything you would like updates for
5. Classifications
   
   1. Types of updates
6. Sync Schedule
   
   1. Either Manual
   2. At a specified time

Question 19

1. What is a Product in WSUS?
2. What is a Classification in WSUS?

Answer 19

1. The application updates to be downloaded to your server
2. The type of udpates you want. (i.e. do you only want critical updates or do you want update roll ups or both )

Question 20

What are the two ways you can manage computers in WSUS?

Answer 20

1. Group Policy
2. WSUS Console

Question 21

Are WSUS Groups AD Groups?

Answer 21

No

Question 22

Where would you go to change settings of your WSUS Server?

Answer 22

1. Select Update Services
2. Expand the Server in Question (I.E the HOSTNAME)
3. You would change settings in the Options tab

Question 23

What do you need to have installed in order to view reports?

Answer 23

The Microsoft report viewer 2008 redistributable

Question 24

1. What group policy would you set to auto assign a computer to a WSUS group?
2. What is the path?

Answer 24

1. Client Side Targeting
2. Computer Policies -> Administrative Templates -> Windows Componets -> Windows Update

Question 25

1. What group policy would you set to specify updates behavior? 2. What settings can you configure? 3. What is the path?

Answer 25

1. Configure Automatic Updates 2. Settings: 1. ​The download and install behavior 1. ​If you select schedule install you will also need to: 1. Select a time and date for window 2. Install during automatic maintenance window 3. Computer Policies -\> Administrative Templates -\> Windows Componets -\> Windows Update

Question 26

1. What group policy would you set to specify that computers use your internal WSUS server? 2. What settings can you configure? 3. What is the path?

Answer 26

1. Specify intranet Microsoft Update Service Location 2. The intranet Update Service Address and the statistics server 3. Computer Policies -\> Administrative Templates -\> Windows Componets -\> Windows Update

Question 27

How would you get a computer to check in to WSUS?

Answer 27

wuauclt.exe /detectnow /reportnow