A Windows 10 Enterprise device is configured to receive updates from WSUS. The administrator notices that a critical security patch was released on Patch Tuesday, but the device has not installed it after several days. The device is in the correct WSUS target group and the patch was approved. What is the most likely cause?

The device is not connected to the internet.

The client is set to defer quality updates by 7 days.

The patch was a feature update, not a quality update.

The WSUS server has not synchronized with Microsoft Update.

A company is running Windows 10 Enterprise 21H2 on all devices. They are planning to upgrade to Windows 11 but need to ensure that all devices are compatible. They have a mix of hardware, some of which does not meet Windows 11 requirements. What is the best approach to maintain security while planning the upgrade?

Upgrade all devices to Windows 10 22H2 first, then plan for hardware replacement for incompatible devices.

Force upgrade to Windows 11 on all devices, even if they are incompatible.

Switch all devices to the Long-Term Servicing Channel to avoid the need to upgrade.

Keep devices on 21H2 and purchase Extended Security Updates (ESU) for all devices.

A company has a set of Windows 10 devices that are used for point-of-sale (POS) systems. They need to minimize changes but also need to comply with PCI DSS, which requires timely security updates. They are considering using the Long-Term Servicing Channel. What is the best recommendation?

Use the Semi-Annual Channel with feature updates deferred for 365 days.

Disable Windows Update and manually install security updates after testing.

Use the Windows Insider Program to get the latest security updates.

Use LTSC for the POS devices, as it provides security updates without feature changes, and ensure they are configured to receive quality updates promptly.

An organization uses WSUS to manage updates for 1,000 Windows 10 devices. They want to ensure that only approved updates are installed and that updates are deployed in waves to avoid network congestion. Which two features should they use together?

Update rings and deferral policies

Computer groups and update approvals

Client-side targeting and peer caching

Automatic approvals and Delivery Optimization

What is the recommended action for an organization when a Windows version they are using reaches end of servicing?

Purchase an extended support contract from Microsoft.

Continue using the version and rely on third-party security tools.

Upgrade to a newer, supported version of Windows.

Disconnect the devices from the network to avoid threats.

GIAC Security Essentials

Domain 4Objective 6

Windows as a Service GSEC Practice Questions (Page 2)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

5concepts

Questions 6–10

6application · medium
A Windows 10 Enterprise device is configured to receive updates from WSUS. The administrator notices that a critical security patch was released on Patch Tuesday, but the device has not installed it after several days. The device is in the correct WSUS target group and the patch was approved. What is the most likely cause?
Select an answer first
7expert · medium
A company is running Windows 10 Enterprise 21H2 on all devices. They are planning to upgrade to Windows 11 but need to ensure that all devices are compatible. They have a mix of hardware, some of which does not meet Windows 11 requirements. What is the best approach to maintain security while planning the upgrade?
Select an answer first
8expert · medium
A company has a set of Windows 10 devices that are used for point-of-sale (POS) systems. They need to minimize changes but also need to comply with PCI DSS, which requires timely security updates. They are considering using the Long-Term Servicing Channel. What is the best recommendation?
Select an answer first
9application · medium
An organization uses WSUS to manage updates for 1,000 Windows 10 devices. They want to ensure that only approved updates are installed and that updates are deployed in waves to avoid network congestion. Which two features should they use together?
Select an answer first
10foundation · easy
What is the recommended action for an organization when a Windows version they are using reaches end of servicing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Windows as a Service GSEC Practice Questions (Page 2)

Questions 6–10

A company has a set of Windows 10 devices that are used for point-of-sale (POS) systems. They need to minimize changes but also need to comply with PCI DSS, which requires timely security updates. They are considering using the Long-Term Servicing Channel. What is the best recommendation?

An organization uses WSUS to manage updates for 1,000 Windows 10 devices. They want to ensure that only approved updates are installed and that updates are deployed in waves to avoid network congestion. Which two features should they use together?

What is the recommended action for an organization when a Windows version they are using reaches end of servicing?

Keep studying — Endpoint and Platform Security