VCP-310, 350-001 testking and 640-802 dumps

You need to design a patch management system to meet requirements of the System
Administrator.

What should you do?

A. Install Software Update Services (SUS) on three servers named TL-SR08, TL-SR-09
and TL-SR10.
Deploy TL-SR08 to a test network in the Chicago office, TL-SR09 to the production
network in the Chicago office and TL-SR10 to the Detroit office.
Configure TL-SR09 and TL-SR10 to download administrator-approved updates from
TL-SR08.
B. Install Software Update Services (SUS) on two servers named TL-SR08, TL-SR-09.
Deploy TL-SR08 to the Chicago office and TL-SR09 to the Detroit office.
Configure TL-SR09 to download administrator-approved updates from TL-SR08.
C. Install MBSA on a server named TL-SR08 and deploy TL-SR08 to a test network in
the Chicago office.


Leading the way in IT testing and certification tools, www.certifyme.com
- 36 -

Deploy MBSA as a Windows Installer package to all computers in the Chicago OU and
the Detroit OU.
Configure MBSA to scan for updates from TL-SR08.
D. Install Software Update Services (SUS) on a server named TL-SR08.350-001 Deploy
TL-SR08 to a test network.
Create a Web site named ApprovedUpdates on TL-SR07 that contains
administrator-approved updates.
Configure an autoupdate policy in the testlabs.com domain to download and deploy
updates from the ApprovedUpdates Web site
Answer: A
Explanation: Software Update Services (SUS) is used to leverage the features of
Windows Update within a corporate environment by downloading Windows Update to a
corporate server, which in turn provides the updates to the internal corporate clients.640-802 This
allows administrators to test and have full control over what updates are deployed within
the corporate environment.

Deploying a Windows Server 2003 computer to run the SUS in the test network and then
deploying SUS servers in each office for downloading of approved updates is the
solution.

Incorrect answers:
B: Making use of Autoupdate policies in each child domain as described in this option is
not the solution since it does not mention that the downloads will be administrator
approved updates from the test network SUS server.
C: MBSA verifies whether your computer has the latest security updates and whether
there are any common security violation configurations that have been applied to your
computer. This is not what is required in this question.
D: You could create a website on the Web server to distribute approved updates, but this
would not reduce the bandwidth required to apply the updates to computers in the Detroit
office.350-001 It would be better to configure one server in the Detroit office to download the
approved updates and distribute it to the reset of the computers in the Detroit office.

Reference:
James Chellis, Paul Robichaux & Matthew Sheltz, MCSA/MCSE: Windows Server 2003
Network Infrastructure Implementation, Management, and Maintenance Study Guide, p.
477
Elias N. Khnaser, Susan Snedak, Chris Peiris and Rob Amini, MCSE Designing Security
for a Windows Server 2003 Network Exam 70-298 Study Guide, Chapter 2, p. 51
Lisa Donald, Suzan Sage London & James Chellis, MCSA/MCSE: Windows Server
2003 Environment Management and Maintenance Study Guide, p. 55


Leading the way in IT testing and certification tools, www.certifyme.com
- 37 -