SK0-003 · Question #707
Which of the following is the BEST way to ensure that a server is up-to-date with all updates as soon as they are released?
The correct answer is B. Automatic updates set to install updates automatically. To ensure a server is up-to-date with updates as soon as they are released, automatic installation configured to apply updates immediately upon availability is the most effective method.
Question
Which of the following is the BEST way to ensure that a server is up-to-date with all updates as soon as they are released?
Options
- AAutomatic updates set to install once per week
- BAutomatic updates set to install updates automatically
- CAutomatic updates set to download all updates automatically
- DManual updates done daily at noon
How the community answered
(32 responses)- A3% (1)
- B91% (29)
- C6% (2)
Why each option
To ensure a server is up-to-date with updates as soon as they are released, automatic installation configured to apply updates immediately upon availability is the most effective method.
Installing updates only once per week means the server will not be up-to-date 'as soon as they are released' for potentially several days.
Setting automatic updates to install updates automatically ensures that patches and security fixes are applied to the server without manual intervention, typically very soon after they become available and are downloaded. This minimizes the window of vulnerability and keeps the server current.
Automatically downloading updates without automatically installing them leaves the server vulnerable until manual installation occurs.
Manual updates, even daily, depend on human action and might miss updates released between checks, making them less immediate and reliable than fully automatic installation.
Concept tested: Server update management best practices
Source: https://learn.microsoft.com/en-us/windows-server/get-started/whats-new-windows-server-2016-security
Topics
Community Discussion
No community discussion yet for this question.