An organization has 5,000 Windows 10 Enterprise devices. They currently use WSUS, but the WSUS server is aging and they want to move to a cloud-only management model. They also need to support devices that are occasionally offline for weeks. Which update management approach best meets these needs?

Use Microsoft Intune with update rings and Delivery Optimization.

Deploy a new on-premises WSUS server.

Use Windows Update for Business with no deferral policies.

Continue using WSUS until all devices are replaced.

A company has a mix of Windows 10 Pro and Enterprise devices. They are currently using WSUS to manage updates, but they are considering moving to Windows Update for Business to reduce infrastructure. However, they have some devices that are not Azure AD joined and are not managed by Intune. What is the best approach to manage updates for these devices?

Use Group Policy to configure Windows Update for Business on the non-Azure AD devices and continue using WSUS for those that are not eligible.

Use only WSUS for all devices because WUfB requires Azure AD.

Manually install updates on non-Azure AD devices.

Use Intune to manage all devices, including non-Azure AD devices.

An organization uses Intune to manage Windows 10 devices. They want to ensure that feature updates are deployed to a pilot group first, then to the rest of the organization after a 2-week validation period. They also want to pause updates during the company's annual shutdown. What is the best way to configure this in Intune?

Use a single update ring for all devices and rely on the built-in validation period.

Use WSUS to manage the pilot group and Intune for the rest.

Create two update rings: one for the pilot group with a deferral of 0 days, and another for the rest with a deferral of 14 days. Use the pause feature during the shutdown.

Deploy feature updates manually to the pilot group and use Intune for the rest.

GIAC Security Essentials

Domain 4Objective 6

Windows as a Service GSEC Practice Questions (Page 4)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

5concepts

Questions 16–20

16expert · hard
An organization has 5,000 Windows 10 Enterprise devices. They currently use WSUS, but the WSUS server is aging and they want to move to a cloud-only management model. They also need to support devices that are occasionally offline for weeks. Which update management approach best meets these needs?
Select an answer first
17expert · medium
A company has a mix of Windows 10 Pro and Enterprise devices. They are currently using WSUS to manage updates, but they are considering moving to Windows Update for Business to reduce infrastructure. However, they have some devices that are not Azure AD joined and are not managed by Intune. What is the best approach to manage updates for these devices?
Select an answer first
18expert · medium
An organization uses Intune to manage Windows 10 devices. They want to ensure that feature updates are deployed to a pilot group first, then to the rest of the organization after a 2-week validation period. They also want to pause updates during the company's annual shutdown. What is the best way to configure this in Intune?
Select an answer first
19foundation · easy
What is the primary cadence of feature updates in the Windows as a Service model?
Select an answer first
20foundation · easy
Which update type is typically released on the second Tuesday of each month and includes security patches?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Windows as a Service GSEC Practice Questions (Page 4)

Questions 16–20

An organization has 5,000 Windows 10 Enterprise devices. They currently use WSUS, but the WSUS server is aging and they want to move to a cloud-only management model. They also need to support devices that are occasionally offline for weeks. Which update management approach best meets these needs?

What is the primary cadence of feature updates in the Windows as a Service model?

Which update type is typically released on the second Tuesday of each month and includes security patches?

Keep studying — Endpoint and Platform Security