SK0-003 · Question #742
The company has two thousand servers located around the globe. Which of the following is the BEST method of patch management and deployment?
The correct answer is B. Install an internal patch management system and deploy from the system.. For a large, geographically dispersed server environment, an internal patch management system provides the most efficient, controlled, and scalable method for deploying patches. This centralized approach ensures consistent patch application and reporting across the entire infrast
Question
The company has two thousand servers located around the globe. Which of the following is the BEST method of patch management and deployment?
Options
- ASet all servers to automatically download patches from the manufacturer's website.
- BInstall an internal patch management system and deploy from the system.
- CInstall the patches on each server from a deployment disk.
- DRDP into each server, manually download and install the patches.
How the community answered
(22 responses)- A5% (1)
- B77% (17)
- C5% (1)
- D14% (3)
Why each option
For a large, geographically dispersed server environment, an internal patch management system provides the most efficient, controlled, and scalable method for deploying patches. This centralized approach ensures consistent patch application and reporting across the entire infrastructure.
Allowing all 2000 servers to automatically download patches directly from the manufacturer's website can consume significant internet bandwidth, lacks centralized control over patch testing, and could lead to widespread issues if a faulty patch is released.
Installing an internal patch management system, such as Windows Server Update Services (WSUS) or a third-party solution, allows for centralized control over patch approval, deployment scheduling, and reporting for a large number of servers globally. This approach ensures patches are tested before deployment, optimizes bandwidth by downloading patches once internally, and facilitates compliance monitoring across the entire server farm.
Installing patches on 2000 servers from individual deployment disks is an extremely manual, time-consuming, and logistically impossible task for a global environment of this size.
Remotely connecting via RDP to each of 2000 servers to manually download and install patches is incredibly inefficient, prone to human error, and not a scalable solution for an environment of this magnitude.
Concept tested: Centralized patch management for large scale environments
Source: https://learn.microsoft.com/en-us/windows-server/get-started/whats-new-in-windows-server-2016-update-management
Topics
Community Discussion
No community discussion yet for this question.