CHAPTER 7 (III)

NOTE

ANSWERS

Answers to these questions and explanations of why each answer choice is correct or incorrect are located in the “Answers” section at the end of the book.

1. Which of the following actions would you recommend for distributing updates to a small business with five client computers running Windows 7?

A. Instructing employees to start Windows Update manually when they experience problems

B. Configuring Windows Update on each computer to download updates directly from Microsoft

C. Installing WSUS and configuring Windows Update to download updates from the WSUS server

D. Deploying updates using SMS and WSUS

2. You are working for a medium-size organization that manages about 100 client computers. The IT department insists on testing all updates before they are applied to computers. Which of the following actions would you recommend for distributing updates within this organization?

A. Instructing employees to start Windows Update manually when they experience problems

B. Configuring Windows Update on each computer to download updates directly from Microsoft

C. Installing WSUS and configuring Windows Update to download updates from the WSUS server

D. Deploying updates using SMS and WSUS

3. You are creating a batch file that installs updates when a computer running Windows 7 starts for the first time. How should you do this?

A. Call Update.exe and provide the path to the update file.

B. Call Msiexec.exe and provide the path to the update file.

C. Run the executable file included with the update.

D. Call Wusa.exe and provide the path to the update file.

Chapter Review

To further practice and reinforce the skills you learned in this chapter, you can perform the following tasks:

■ Review the chapter summary.

■ Review the list of key terms introduced in this chapter.

■ Complete the case scenarios. These scenarios set up real-world situations involving the topics of this chapter and ask you to create a solution.

■ Complete the suggested practices.

■ Take a practice test.

Chapter Summary

■ Small offices that do not need to test updates prior to deployment can configure Windows Update to download and install updates from Microsoft automatically as they become available. If an update causes problems, administrators can then remove the update manually. Larger organizations can use WSUS to test and approve updates prior to deployment. Enterprises that require additional management capabilities can use Configuration Manager 2007 to completely control update management.

■ When deploying new computers, you should plan to install updates immediately to prevent the computer from being compromised by a network attack. Fortunately, Microsoft provides a variety of approaches. If computers are on an isolated network and protected from attack, they can download and install updates the conventional way, using Microsoft Update. To reduce deployment time, you can add update packages to a Windows 7 image or script the installation of updates after setup completes.

■ Occasionally, Windows might encounter problems installing updates. To give administrators the information they need to identify the cause of the problem, Windows Update records detailed information in the %Windir%\WindowsUpdate.log text log file and in the event log.

Key Terms

Do you know what these key terms mean? You can check your answers by looking up the terms in the glossary at the end of the book.

■ critical update

■ Microsoft Systems Center Configuration Manager 2007 (Configuration Manager 2007)

■ pilot group

■ Quality Assurance (QA)

■ Restart Manager

■ service pack

■ Windows Server Update Services (WSUS)

Case Scenarios

In the following case scenarios, you apply what you’ve learned about subjects covered in this chapter. You can find answers to these questions in the “Answers” section at the end of  this book.

Case Scenario 1: Distribute Updates

You are a systems administrator working at the administrative offices of Fourth Coffee, a small shop with three computers running Windows XP, three computers running Windows 7, and a domain controller running Windows Server 2008 R2. Recently, an update caused a compatibility problem with Fourth Coffee’s internal accounting program. Currently, all computers are configured to download updates from Microsoft and automatically install them overnight.

Your manager has asked you to find a way to test updates before they’re deployed to the computers in your organization.

Questions

Answer the following questions for your manager:

1. How can you test updates before they’re deployed?

2. Would your recommended deployment technology require any infrastructure?

3. Will your recommended deployment technology work with both the computers running Windows XP and the computers running Windows 7?

4. How can you configure the client computers to use your new deployment technology?

Case Scenario 2: Audit Updates

You are a systems administrator for Fabrikam, Inc. Last month, Microsoft released a security update that fixes a vulnerability in Windows 7. Yesterday, an attacker released an exploit for the vulnerability on the Internet. The exploit has already infected tens of thousands of unpatched computers on the Internet.

You deployed the update last week from your WSUS server; however, your manager needs additional assurance that all the computers in your organization are protected.

Questions

Answer the following questions for your manager:

1. What’s the quickest way to identify any computers that failed to install the update?

2. Is there a tool we can use to scan the network for computers that might not have the update installed, even if they are configured to download updates directly from Microsoft? What is the tool?

3. If users call and ask, I’d like to tell them how to check their own computer to make sure the update is installed. How can users determine if the update is installed?

Suggested Practices

To help you master the exam objectives presented in this chapter, complete the first four practices. Practice 5 gives you experience with MBSA, which might not be covered on

the exam but is a valuable tool for managing computers in the real world. To gain more experience deploying updates with WSUS, complete the last two practices.

Identify and Resolve Software Update Issues

For this task, you should complete all seven practices to gain experience analyzing update installations.

■ Practice 1 Uninstall a recent update and then reinstall it.

■ Practice 2 Examine the System event log and identify any updates that have been installed recently.

■ Practice 3 Examine the %Windir%\WindowsUpdate.log file and identify any updates that have been recently installed.

■ Practice 4 Read the Windows Update Team Blog at http://blogs.technet.com/mu/ and the WSUS Product Team Blog at http://blogs.technet.com/wsus/.

■ Practice 5 Use MBSA to scan the computers in your network for missing updates or other potential security vulnerabilities.

■ Practice 6 Configure all the computers in your lab environment to download updates from your WSUS server. Use Group Policy settings to configure computers to install updates automatically and restart the computer forcibly. Approve several new updates and wait for the updates to install.

■ Practice 7 Configure a second WSUS server to download updates directly from your first WSUS server.

Take a Practice Test

The practice tests on this book’s companion CD offer many options. For example, you can test yourself on just one exam objective, or you can test yourself on all the 70-685 certification exam content. You can set up the test so that it closely simulates the experience of taking a certification exam, or you can set it up in study mode so that you can look at the correct answers and explanations after you answer each question.

MORE INFO

PRACTICE TESTS

For details about all the practice test options available, see the section entitled “How to Use the Practice Tests,” in the Introduction to this book.