A company is planning to deploy Windows 11 to its workforce. The IT manager wants to ensure that devices receive feature updates twice a year and quality updates monthly, but also wants to control the rollout to avoid issues. Which approach aligns with the Windows as a Service model?

Switch all devices to the Long-Term Servicing Channel.

Use Windows Update for Business to create deployment rings for feature updates.

Disable Windows Update and manually install updates from the Microsoft Update Catalog.

Use WSUS to approve only quality updates and skip feature updates.

A company uses WSUS to manage updates for its Windows 10 devices. They want to ensure that feature updates are deployed only after they have been tested in a pilot group. What is the best way to achieve this with WSUS?

Disable feature updates in WSUS and install them manually on each device.

Approve the feature update for all devices at once and rely on the update being stable.

Use Windows Update for Business to defer feature updates for all devices.

Create a separate computer group for the pilot, approve the feature update for that group first, and then approve for the remaining groups after testing.

A company uses WSUS to manage updates. They have a group of devices that must not receive feature updates because of a legacy application. They also need to ensure that quality updates are installed within 7 days of approval. The WSUS administrator has configured the group to decline all feature updates. However, some devices are still receiving feature updates. What is the most likely cause?

The devices are configured to receive updates from Windows Update directly.

The WSUS server has not synchronized with Microsoft Update.

The quality update deferral policy is set to 0 days.

The devices are also enrolled in the Windows Insider Program.

A software vendor develops a line-of-business application and wants to test it against upcoming Windows 10 features before they are released to the general public. They need early access to feature updates but must avoid unstable builds that could corrupt their test environment. Which Windows servicing option should they use?

Windows Insider Program - Release Preview ring

Windows Insider Program - Dev Channel

Which tool is an on-premises server role that downloads updates from Microsoft and distributes them to client computers within an organization?

Windows Server Update Services (WSUS)

GIAC Security Essentials

Domain 4Objective 6

Windows as a Service GSEC Practice Questions (Page 5)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

5concepts

Questions 21–25

21application · medium
A company is planning to deploy Windows 11 to its workforce. The IT manager wants to ensure that devices receive feature updates twice a year and quality updates monthly, but also wants to control the rollout to avoid issues. Which approach aligns with the Windows as a Service model?
Select an answer first
22application · medium
A company uses WSUS to manage updates for its Windows 10 devices. They want to ensure that feature updates are deployed only after they have been tested in a pilot group. What is the best way to achieve this with WSUS?
Select an answer first
23expert · hard
A company uses WSUS to manage updates. They have a group of devices that must not receive feature updates because of a legacy application. They also need to ensure that quality updates are installed within 7 days of approval. The WSUS administrator has configured the group to decline all feature updates. However, some devices are still receiving feature updates. What is the most likely cause?
Select an answer first
24application · medium
A software vendor develops a line-of-business application and wants to test it against upcoming Windows 10 features before they are released to the general public. They need early access to feature updates but must avoid unstable builds that could corrupt their test environment. Which Windows servicing option should they use?
Select an answer first
25foundation · easy
Which tool is an on-premises server role that downloads updates from Microsoft and distributes them to client computers within an organization?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Windows as a Service GSEC Practice Questions (Page 5)

Questions 21–25

A company is planning to deploy Windows 11 to its workforce. The IT manager wants to ensure that devices receive feature updates twice a year and quality updates monthly, but also wants to control the rollout to avoid issues. Which approach aligns with the Windows as a Service model?

A company uses WSUS to manage updates for its Windows 10 devices. They want to ensure that feature updates are deployed only after they have been tested in a pilot group. What is the best way to achieve this with WSUS?

Which tool is an on-premises server role that downloads updates from Microsoft and distributes them to client computers within an organization?

Keep studying — Endpoint and Platform Security