Implement Patch Management

Question 1

WSUS

Answer 1

Windows Server Update Services

Centralizes updates for Microsoft products

Question 2

Products WSUS maintains updates for

Answer 2

Windows ISes
Exchange
SQL Server
Office
System Center
Windows Defender

Question 3

Features of WSUS

Answer 3

Automatic download of updates
Administrative control over update approval
Update Rollbacks
Email notification of update progress / status

Question 4

You can use WSUS to download patches based on ____

Answer 4

Category (service pack, security update, driver)
Product (Windows 2012, Office 2007, etc)
Language

Question 5

Microsoft Update versus Windows Update

Answer 5

Microsoft Update includes updates for other products, like Office, Exchange, SQL, ect

Question 6

WSUS role prerequsites

Answer 6

IIS
BITS
Internal Database role or SQL Server 2005 or later (locally or remotely available)
.NET Framework 2.0 or later

Question 7

BITS

Answer 7

Background Intelligent Transfer Service
Uses idle bandwidth to transfer large files over time.
. BITS constantly monitors network traffic for any increase or decrease in network traffic and throttles its own transfers to ensure that other foreground applications (such as a web browser) get the bandwidth they need. BITS also supports resuming transfers in case of disruptions.

Question 8

zero-day exploitation

Answer 8

code written to take advantage of systems that are not updated. This is written within hours of when MSFT releases the patch.

Question 9

WSUS vulnerability

Answer 9

Does not target anything but MSFT products

Question 10

components required for WSUS

Answer 10

WSUS servers (database can be local or remote, IIS)
admin console
windows clients
group policy
update binaries and metadata

Question 11

deployment methods of WSUS

Answer 11

Simple Server Deployment

Multiple Server Deployment

Question 12

Simple Server Deployment

Answer 12

Single admin group has control over:
Updates
Service Packs
Driver Updates
AV Definitions

Question 13

Why would you have your clients download directly from MSFT servers instead of your WSUS server

Answer 13

Branch office

bad WAN link, good ISP link

Question 14

Multiple Server Deployment

Answer 14

Different groups can control different servers, thus impacting different groups of clients.

Alternatively, multiple servers can replicate data from a single master.

Question 15

WSUS hardware requirements

Answer 15

1.4GHz x64bit (2GHz recommended)
1.5 GB RAM over what the server requires
10GB min free space, 40 recommended
100Mbps network adapter or greater

Question 16

What permission requirements are there for WSUS

Answer 16

Dumb gotchas – NT Authority / Network Service account must have full control of:

%windir%\Microsoft.NET\Framework\v4.0….\Temperary ASP.NET files

Question 17

two different modes of multiple server deployment

Answer 17

Autonomous Mode

Replica Mode

Question 18

Administration hierarchy for WSUS

Answer 18

One administration team approving updates for downstream

Question 19

Database requirements for WSUS

Answer 19

SQL Server 2012
SQL Server 2008 R2 SP1
Windows Internal Database (This is included in Windows already)

Question 20

What port do clients connect to WSUS over?

Answer 20

8530

Question 21

add-WsusComputer

Answer 21

Adds a specified client computer to a specified target group.

Question 22

approve-wsusupdate

Answer 22

Approves an update to be applied to clients

Question 23

deny-wsusupdate

Answer 23

Declines the update for deployment.

Question 24

get-wsusclassification

Answer 24

Get the list of all Windows Server Update Services (WSUS) classifications currently available in the system.

Question 25

get-wsuscomputer

Answer 25

Gets the Windows Server Update Services (WSUS) computer object that represents the client computer.

Question 26

get-wsusproduct

Answer 26

Get the list of all products currently available on Windows Server Update Services (WSUS) by category.

Question 27

get-wsusserver

Answer 27

Gets the value of the Windows Server Update Services (WSUS) update server object.

Question 28

get-wsusupdate

Answer 28

Gets the Windows Server Update Services (WSUS) update object with details about the update.

Question 29

invoke-WsusServerCleanup

Answer 29

Performs the process of cleanup on a specified Windows Server Update Services (WSUS) server.

Question 30

set-wsusclassification

Answer 30

Sets whether the classifications of updates that Windows Server Update Services (WSUS) synchronizes are enabled or disabled.

Question 31

set-wsusproduct

Answer 31

Sets whether the product representing the category of updates to synchronize is enabled or disabled.

Question 32

set-wsusserversynchronization

Answer 32

Sets whether the Windows Server Update Services (WSUS) server synchronizes from Microsoft Update, or an upstream server and the upstream server properties.