Exam 70-412 topic 3 question 143 discussion

Actual exam question from Microsoft's 70-412

Question #: 143
Topic #: 3

You have two Windows Server Update Services (WSUS) servers named Server01 and Server02. Server01 synchronizes from Microsoft ??? Update. Server02 synchronizes updates from Server01. Both servers are members of the same Active Directory domain. You configure Server01 to require SSL for all WSUS metadata by using a certificate issued by an enterprise root certification authority (CA).
You need to ensure that Server02 synchronizes updates from Server01.
What should you do on Server02?

A. From a command prompt, run wsusutil.exe configuresslproxy server02 443.
B. From a command prompt, run wsusutil.exe configuressl server01.
C. From a command prompt, run wsusutil.exe configuresslproxy server01 443.
D. From the Update Services console, modify the Update Source and Proxy Server options.

Show Suggested Answer

Suggested Answer: C 🗳️
We configure server02 to use server01 as an proxy for the updates through the wsusutil.exe configuresslproxy <ssl_proxy_ip_or_name> <port>
Server01 is the ssl_proxy and the port is 443 (the sll port).
Reference: A work-around when using different proxies for HTTP and SSL in WSUS 3.0 SP1 http://blogs.technet.com/b/craigf/archive/2009/05/04/a-work-around-when-using-different- proxies-for-http-and-ssl-in-wsus-3-0-sp1.aspx

by wazmac at April 10, 2020, 6:52 a.m.

Comments

Submit Cancel

darioriso

4 years, 8 months ago

The correct answer should be "D". You have to configure a downstream WSUS server to synchronize to an upstream server that uses SSL. You can find a complete explanation here: https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus#bkmk_2.5.ConfigSSL To synchronize a downstream server to an upstream server that uses SSL 1) Log on to the computer by using a user account that is a member of the local Administrators group or the WSUS Administrators group. 2) Click start, click All Programs, click Administrative Tools, and then click Windows Server Update Service. 3) In the right pane, expand the server name. 4) Click Options, and then click Update Source and Proxy Server. 5) On the Update Source page, select Synchronize from another Windows Server Update Services server. 6) type the name of the upstream server into the Server name text box. type the port number that the server uses for SSL connections into the Port number text box. 7) select the Use SSL when synchronizing update information check box, and then click OK.

upvoted 2 times

...

wazmac

5 years, 2 months ago

Answer should be D.

upvoted 2 times

...