nerdexam
Microsoft

70-243 · Question #10

Local client computers receive software updates from Configuration Manager. You need to ensure that remote client computers that connect to the virtual private network (VPN) are able to receive…

The correct answer is D. Create a new site boundary, and add the IP subnets that the VPN uses to the site boundary. Remote VPN clients must belong to a configured site boundary so Configuration Manager can assign them to a site and deliver software updates to them.

Managing Updates

Question

Local client computers receive software updates from Configuration Manager. You need to ensure that remote client computers that connect to the virtual private network (VPN) are able to receive software updates. What should you do?

Options

  • ACreate a new site system, and configure it with the Software Update Point role.
  • BCreate a new site system, and configure it with the SMS Provider role.
  • CAdd the IP subnets that the VPN uses to the network discovery.
  • DCreate a new site boundary, and add the IP subnets that the VPN uses to the site boundary.

How the community answered

(49 responses)
  • A
    14% (7)
  • B
    8% (4)
  • C
    2% (1)
  • D
    76% (37)

Why each option

Remote VPN clients must belong to a configured site boundary so Configuration Manager can assign them to a site and deliver software updates to them.

ACreate a new site system, and configure it with the Software Update Point role.

Adding a second software update point would create redundancy or load balancing but does not solve the root problem, which is that remote VPN clients are not within any defined site boundary.

BCreate a new site system, and configure it with the SMS Provider role.

The SMS Provider role is used by the Configuration Manager console and scripts to communicate with the site database and is unrelated to client software update delivery.

CAdd the IP subnets that the VPN uses to the network discovery.

Adding subnets to network discovery only helps Configuration Manager find devices on those subnets; it does not place those clients within a site boundary so they can receive updates.

DCreate a new site boundary, and add the IP subnets that the VPN uses to the site boundary.Correct

Configuration Manager uses site boundaries to determine which clients are managed by which site. VPN clients receive IP addresses from VPN subnets that are not automatically included in existing boundaries; adding those IP subnets to a site boundary allows Configuration Manager to recognize and serve those clients with software updates through the existing software update point.

Concept tested: Configuration Manager site boundaries for VPN client update delivery

Source: https://learn.microsoft.com/en-us/mem/configmgr/core/servers/deploy/configure/boundaries-and-boundary-groups

Topics

#site boundaries#VPN clients#software updates#IP subnets

Community Discussion

No community discussion yet for this question.

Full 70-243 Practice