Courseiva
mediumMultiple ChoiceObjective-mapped

220-1102 Practice Question: A company's security policy requires that all…

A company's security policy requires that all Windows 10 workstations automatically install critical updates as soon as they are released. However, users must not be forced to restart during work hours. Which Windows Update setting should you configure to meet these requirements?

⚠ Common exam trap

CompTIA often tests the distinction between controlling update installation versus controlling restart behavior; the trap here is that candidates may confuse 'deferring updates' with 'scheduling restarts,' or think that marking a connection as metered is a valid way to manage restart timing, when it actually blocks all automatic updates.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Set Active Hours to cover the workday

Configuring Active Hours in Windows Update allows you to specify the time range during which the system should not automatically restart after installing updates. By setting Active Hours to cover the entire workday, critical updates can be downloaded and installed automatically, but the required restart is deferred until outside those hours, meeting both the security policy and the user experience requirement.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Defer feature updates

    Why it's wrong here

    Deferring feature updates delays the installation of major Windows version upgrades, which often include significant security enhancements and cumulative updates. While feature updates are distinct from monthly security patches, a policy requiring immediate installation of all critical updates implies that no update type should be intentionally delayed. This setting would prevent the prompt deployment of potentially critical security fixes embedded within or dependent on newer feature releases, directly violating the immediacy requirement.

  • Set Active Hours to cover the workday

    Why this is correct

    Setting Active Hours allows Windows to understand when the user is actively using the computer, preventing automatic restarts during these specified times. Updates will still download and install automatically in the background throughout the day or night. The system will then perform the necessary restart outside of the defined Active Hours, ensuring updates are applied without disrupting user productivity during the workday, thus meeting the policy's requirement for automatic installation without user action.

  • Set the connection as metered

    Why it's wrong here

    Configuring a network connection as metered signals to Windows that data usage is limited, typically seen with cellular or satellite connections. When a connection is metered, Windows automatically restricts background data activities, including the automatic download and installation of Windows Updates. This action would directly prevent critical updates from being promptly acquired and installed, thereby violating the company's security policy that mandates immediate installation of such updates.

  • Configure Windows Update to 'Notify to schedule restart'

    Why it's wrong here

    This Windows Update setting instructs the system to download and install updates, but then requires explicit user interaction to schedule or initiate the necessary restart. While updates are installed, the crucial final step of applying them by restarting the system is left to the user's discretion. This directly contradicts a security policy demanding automatic installation without user action, as the update process is not fully automated to completion.

Go deeper

Related to this question

About these practice questions

Courseiva writes every 220-1202 question from scratch — 495 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.