GSEC Windows as a Service Practice Question
A security administrator is troubleshooting a Windows 10 Enterprise device that is not receiving feature updates from Windows Update for Business. The administrator confirms that the device is connected to the network and has the correct Windows Update for Business policies applied. The administrator suspects that a Group Policy setting is overriding the Windows Update for Business configuration. Which Group Policy setting should the administrator check first?
⚠ Common exam trap
The trap here is assuming that any update-related Group Policy will override Windows Update for Business, when in fact only specific policies that block connectivity or disable the service will prevent updates.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Do not connect to any Windows Update Internet locations.
The correct answer is 'Do not connect to any Windows Update Internet locations.' This Group Policy setting prevents the device from connecting to Windows Update or Windows Update for Business, blocking feature updates. It can override Windows Update for Business configurations by cutting off access to the update service. Other policies either do not directly block updates or are part of Windows Update for Business itself.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Turn off Automatic Updates.
Why it's wrong here
The 'Turn off Automatic Updates' policy, if enabled, disables automatic updates entirely. However, this policy is deprecated and may not affect Windows Update for Business in Windows 10. It is less specific than the policy that blocks connections to Windows Update Internet locations. While it could prevent updates, it is not the most likely override in a Windows Update for Business scenario.
- ✗
Configure Automatic Updates.
Why it's wrong here
The 'Configure Automatic Updates' policy controls how updates are downloaded and installed, but it does not specifically override Windows Update for Business deferrals. If set to disabled, it might prevent updates, but the scenario indicates policies are applied and the device is not receiving updates, so this is less likely the primary override. Other policies are more directly related to feature update management.
- ✗
Select when Feature Updates are received.
Why it's wrong here
The 'Select when Feature Updates are received' policy is actually a Windows Update for Business setting that can be configured via Group Policy. It allows you to set deferrals and pauses. If this policy is configured, it might be the intended setting, but it does not override Windows Update for Business; it is part of it. The question asks for a Group Policy setting that could override the configuration, so this is not the best answer.
- ✓
Do not connect to any Windows Update Internet locations.
Why this is correct
This policy, when enabled, prevents the device from connecting to Windows Update or Windows Update for Business servers, effectively blocking updates. It can override Windows Update for Business settings by preventing the device from reaching the update service. If this policy is set, the device will not receive feature updates even if Windows Update for Business policies are correctly applied. This is a common cause of update failure in managed environments.
About these practice questions
One of 351 original GSEC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official GIAC exam blueprint
This GSEC practice question is part of Courseiva's free GIAC certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GSEC exam.