GSEC Windows as a Service Practice Question
An IT security team is auditing Windows Update for Business configurations across a multi-site enterprise. Which TWO methods can be utilized by administrators to successfully deploy and enforce these cloud-linked update policies? (Choose TWO)
⚠ Common exam trap
Candidates often overlook cloud-based MDM solutions and incorrectly select local registry edits or legacy batch scripts as enterprise deployment methods.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Group Policy Objects (GPOs) applied through Active Directory domains
Windows Update for Business policies can be administered flexibly through traditional enterprise Group Policy or modern cloud-based Mobile Device Management solutions like Microsoft Intune. Providing multiple management pathways enables organizations managing hybrid or fully cloud-native environments to enforce consistent update governance uniformly.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Group Policy Objects (GPOs) applied through Active Directory domains
Why this is correct
Windows Update for Business policies delivered through Group Policy Objects let Active Directory domain administrators centrally enforce cloud-linked update settings across sites, leveraging existing domain infrastructure and computer-scoped policy application rather than relying solely on Intune or MDM channels.
- ✓
Mobile Device Management (MDM) platforms such as Microsoft Intune
Why this is correct
Cloud-based MDM solutions like Microsoft Intune provide native configuration profiles specifically designed to manage Windows Update for Business rings. These platforms allow seamless policy enforcement for remote and cloud-only corporate devices without requiring line-of-sight to an Active Directory domain.
- ✗
Manual execution of local PowerShell scripts by end-users with standard privileges
Why it's wrong here
Standard users lack the necessary local administrative privileges to modify core Windows Update policy registry keys or execution parameters. Relying on manual user execution is insecure, unreliable, and undermines centralized enterprise security governance.
- ✗
Direct packet injection via public Wi-Fi access points during routine employee travel
Why it's wrong here
Injecting packets via public Wi-Fi access points is an attack technique, not a policy deployment channel, and provides no authenticated, auditable configuration path to clients. Packet injection belongs in penetration testing or traffic-capture scenarios, not update management.
- ✗
Editing local security policy templates manually on every individual client workstation
Why it's wrong here
Local security policy templates are per-device and unmanaged, so they cannot deliver cloud-linked Windows Update for Business settings consistently across a multi-site estate. Local policy editing is the right approach only for standalone machines outside any management authority.
About these practice questions
Courseiva writes every GSEC question from scratch — 351 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official GIAC exam blueprint
This GSEC practice question is part of Courseiva's free GIAC certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GSEC exam.