GSEC Windows as a Service Practice Question
A security administrator manages a fleet of Windows 10 Enterprise devices that must remain on version 1809 because a critical line-of-business application is only certified for that build. The organization uses Windows Update for Business (WUfB) and wants to prevent these devices from receiving feature updates for 18 months while still receiving quality updates. Which WUfB setting should the administrator configure?
⚠ Common exam trap
Many candidates confuse temporary deferral or pause settings with a persistent version pin, which is the only WUfB mechanism that blocks feature updates indefinitely while allowing quality updates.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a Windows Update for Business target version using the TargetReleaseVersion and TargetReleaseVersionInfo policies.
TargetReleaseVersion and TargetReleaseVersionInfo allow an administrator to pin Windows 10 devices to a specific feature update version, such as 1809, while continuing to receive quality updates. This is the supported method in Windows Update for Business to prevent feature updates for an extended period without disabling updates entirely. Deferrals and pauses are temporary and do not meet the 18-month requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Disable the Windows Update service and manage quality updates through a third-party patch management tool.
Why it's wrong here
Disabling the Windows Update service stops all updates, including quality updates, and is not a supported WUfB configuration. The requirement is to keep receiving quality updates while blocking feature updates. Disabling the service would leave the device unpatched for security vulnerabilities and could break other update mechanisms.
- ✗
Set the feature update deferral period to 365 days and enable Pause feature updates for 35 days.
Why it's wrong here
Deferral periods and Pause are temporary controls. Deferral only delays a feature update until the deferral window expires, after which the device will install the next eligible feature update. Pause also expires after 35 days. Neither prevents feature updates for 18 months, and they do not provide a persistent block for an unsupported build.
- ✗
Assign the devices to the Semi-Annual Channel (Targeted) ring and set a 365-day feature update deferral.
Why it's wrong here
The Semi-Annual Channel (Targeted) ring is for early adopters and does not block feature updates. A 365-day deferral only postpones the update for a year; after that, the device will still receive the next feature update. This does not satisfy the 18-month requirement and could expose the device to unsupported builds.
- ✓
Configure a Windows Update for Business target version using the TargetReleaseVersion and TargetReleaseVersionInfo policies.
Why this is correct
TargetReleaseVersion and TargetReleaseVersionInfo are the supported WUfB policies to pin a device to a specific Windows feature update version. Setting the target version to 1809 prevents the device from moving to a later feature update while still allowing quality updates. This is the correct way to keep devices on a specific build for compatibility.
About these practice questions
One of 351 original GSEC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official GIAC exam blueprint
This GSEC practice question is part of Courseiva's free GIAC certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GSEC exam.