Set Quality and Feature Update Deadlines
You are designing a Windows Update for Business deployment for a hybrid environment with 5,000 devices. You need to ensure that critical security updates are deployed within 48 hours while allowing feature updates to be delayed up to 60 days. Which policy configuration should you use?
Quick Answer
The correct configuration is a Quality update deadline of 2 days and a Feature update deadline of 60 days. This works because Windows Update for Business deadline policies enforce when an update must be installed, whereas deferral periods only delay when it is first offered. By setting a quality deadline of 2 days, you force critical security updates to install within 48 hours, while a 60-day feature deadline gives you the flexibility to delay major feature releases. On the MD-102 exam, this question tests your ability to distinguish between deferral and deadline policies—a common trap is choosing deferral periods, which do not enforce installation timelines. Remember the key distinction: deadlines are for enforcement, deferrals are for postponement. A simple memory tip is “Deadlines demand installation; deferrals just delay the offer.”
⚠ Common exam trap
Many candidates confuse deferral periods with deadlines, assuming a deferral of 2 days achieves the same result as a 2-day deadline, but deferrals only delay the offer while deadlines enforce installation timing.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a 'Quality update deadline' of 2 days and a 'Feature update deadline' of 60 days.
Windows Update for Business uses 'deadline' policies to enforce when updates must be installed, not deferral periods. A 'Quality update deadline' of 2 days ensures critical security updates are installed within 48 hours, while a 'Feature update deadline' of 60 days allows feature updates to be delayed up to 60 days. Deferral periods only postpone when an update is offered, not when it must be installed, making deadlines the appropriate mechanism for enforcing installation timelines.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure a 'Quality update deadline' of 2 days and a 'Feature update deadline' of 60 days.
Why this is correct
Quality update deadlines enforce automatic installation once the deferral window lapses, guaranteeing critical security patches land within 48 hours regardless of user action. Feature update deadlines separately cap the 60-day delay, letting you defer upgrades while ensuring they eventually install. Both deadlines satisfy the stem's distinct timing constraints for security versus feature updates.
- ✗
Use a 'Quality update deferral period' of 48 hours and a 'Feature update deferral period' of 60 days in a Windows 10 update ring.
Why it's wrong here
Deferral periods are configured in days, not hours, so a 48-hour value is invalid and cannot enforce the 48-hour deadline. Hour-based deferral suits scenarios needing sub-day granularity, but Windows Update for Business rings only accept whole-day quality update deferrals.
- ✗
Set the 'Update notification level' to '2 - Disable all notifications' and configure active hours.
Why it's wrong here
Disabling notifications and setting active hours controls when devices reboot, not when updates are offered or installed, so the 48-hour deadline is unenforced. This configuration suits managing user disruption in kiosk or shift-worker scenarios, not meeting a security-update SLA.
- ✗
Configure a 'Quality update deferral period' of 2 days and a 'Feature update deferral period' of 60 days.
Why it's wrong here
A two-day quality update deferral delays updates by 48 hours before installation begins, so the 48-hour deadline is missed. Day-based deferral is correct when the requirement allows several days of staging, but here it breaches the mandated 48-hour window.
Go deeper
Related to this question
Learn chapter
Managing Device Configuration Profiles
Key term
Feature update
A Feature update is a major semiannual Windows release that introduces new capabilities, changes the OS build number, and requires careful planning for enterprise deployment.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
Courseiva writes every MD-102 question from scratch — 556 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
3 more ways this is tested on MD-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO Windows Update for Business policies can you configure using Microsoft Intune?
hard- ✓ A.Feature update version targeting
- ✓ B.Quality update deferral period
- C.Driver update deferral period
- D.Windows Defender definition update schedule
- E.Microsoft 365 Apps update channel
Why A: Microsoft Intune allows you to configure a 'Feature update version targeting' policy, which specifies a target feature update version (e.g., Windows 11 23H2) for devices. Option B is correct because you can configure a 'Quality update deferral period' within an update ring policy to delay quality updates. Option C is incorrect because, although a driver update deferral period can be configured in an update ring policy, it is not a separate Windows Update for Business policy type; the question expects the two distinct policy types: Feature update version targeting and Quality update deferral period. Option D is incorrect because Windows Defender definition update schedule is not a Windows Update for Business policy; it is managed via Microsoft Defender for Endpoint or other settings. Option E is incorrect because Microsoft 365 Apps update channel is not a Windows Update for Business policy; it is configured separately for Office applications.
Variation 2. You are designing a Windows 10 update strategy using Windows Update for Business and Intune. Which THREE settings should you configure to ensure updates are delivered efficiently while minimizing user disruption?
medium- ✓ A.Set active hours to prevent restarts during work.
- ✓ B.Configure a deadline for quality updates.
- C.Enable Delivery Optimization for update distribution.
- D.Configure a deferral period for driver updates.
- ✓ E.Set a grace period after the deadline.
Why A: Option A is correct because configuring active hours in Windows Update for Business prevents automatic restarts during the user's working period, directly minimizing disruption. Option B is correct because setting a deadline for quality updates ensures updates are installed within a defined timeframe, balancing timely patching with predictable enforcement. Option E is correct because a grace period after the deadline gives users additional time to save work and restart on their own terms before forced installation, reducing disruption while still meeting compliance. Option C is not among the marked correct answers, and while Delivery Optimization can help bandwidth efficiency, it is not one of the three settings identified here for this scenario. Option D is also not marked correct; deferring driver updates can reduce disruption from problematic drivers, but it does not directly address efficient delivery and controlled restart behavior in the way the correct options do.
Variation 3. Refer to the exhibit. The JSON snippet shows a Windows Update for Business policy assigned to a device group. Users report that quality updates are installed 7 days after release. Which setting controls this behavior?
easy- A.featureUpdateDeferralPeriodInDays
- B.businessReadyUpdatesOnly
- ✓ C.qualityUpdateDeferralPeriodInDays
- D.automaticUpdateMode
Why C: The setting `qualityUpdateDeferralPeriodInDays` controls how long quality updates (security fixes) are deferred after release. A value of 7 means updates are installed 7 days post-release, matching the user report. This is a Windows Update for Business policy configured via CSP (Policy CSP - Update).
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.