You administer WSUS and want clients to install all security fixes published on Patch Tuesday and any emergency out-of-band security releases. You do not want clients to install optional preview (C/D week) quality updates. What should you approve (or auto-approve) in WSUS?
Choose an answer
Tap an option to check your answer.
Correct answer: Approve Security Updates and Critical Updates for the relevant Windows Server products; do not approve the Updates classification..
Why this is the answer
Approving Security Updates and Critical Updates ensures that all security fixes, including those released on Patch Tuesday and out-of-band, are deployed. These classifications specifically target security-related patches. The "Updates" classification includes optional preview (C/D week) quality updates, which the question explicitly states should not be installed. Approving the "Updates" classification would include unwanted preview updates. Feature Packs are for new features, not security fixes. Drivers are for hardware. Update Rollups are cumulative updates that include non-security fixes, which might include unwanted preview content if not carefully managed.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed