Windows Update Ring for Immediate Updates — Deferral and Deadline Settings
You need to ensure that Windows 11 devices automatically install critical updates as soon as they are released by Microsoft. Which update ring setting should you configure?
Quick Answer
The answer is to set both the 'Update deferral period (days)' to 0 and the 'Update deadline' to 0 in the Windows update ring. This configuration works because the deferral period of zero removes any delay before the update is offered to devices, while the deadline of zero forces immediate installation without any grace period, ensuring that critical updates are applied as soon as Microsoft releases them. On the MD-102 exam, this scenario tests your understanding of how update ring policies control the timing of Windows 11 updates, often appearing as a direct question about achieving "update ring immediate updates" for security patches. A common trap is confusing the deferral period with the deadline—remember that deferral controls when the update is *offered*, while the deadline controls when it must be *installed*. For memory, think "zero delay, zero grace" for instant compliance.
⚠ Common exam trap
Many exam-takers confuse 'Update deferral period' with 'Feature update deferral' or think that setting a deferral to 0 is unnecessary, but the question specifically requires immediate installation, which mandates both deferral and deadline to be 0.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Set 'Update deferral period (days)' to 0 and 'Update deadline' to 0.
Setting both 'Update deferral period (days)' to 0 and 'Update deadline' to 0 in a Windows 11 update ring ensures that critical updates are installed immediately upon release. The deferral period of 0 removes any delay before the update is offered, and the deadline of 0 forces the update to be installed without any grace period, achieving automatic and immediate installation of critical updates.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Set 'Update deferral period (days)' to 0 and 'Update deadline' to 0.
Why this is correct
No deferral, immediate deadline.
- ✗
Set 'Update deferral period (days)' to 0 and 'Feature update deferral' to 7.
Why it's wrong here
Feature deferral is not for critical updates.
- ✗
Set 'Update deferral period (days)' to 7.
Why it's wrong here
Delays by 7 days.
- ✗
Set 'Update deferral period (days)' to 30.
Why it's wrong here
Delays updates by 30 days.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Quality update policy
A quality update policy is a set of rules and schedules that IT administrators use to control which Windows updates are deployed to devices to ensure stability, security, and compatibility.
Key term
Update ring
An Update ring is a policy-based group in Windows 10/11 deployment that controls the timing, pace, and scope of feature updates and quality updates pushed to devices across an organization.
About these practice questions
This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MD-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. You need to ensure that all corporate-owned Windows devices automatically receive security updates as soon as they are released by Microsoft. Which update ring policy setting should you configure in Microsoft Intune?
easy- A.Set the 'Microsoft product updates' setting to 'Allow'.
- ✓ B.Set 'Defer quality updates' to 0 days.
- C.Select the 'Windows Insider' channel for quality updates.
- D.Select the 'Semi-Annual Channel' for feature updates.
Why B: Setting 'Defer quality updates' to 0 days in a Microsoft Intune update ring policy ensures that quality (security) updates are applied immediately upon release by Microsoft, with no deferral period. This configuration forces Windows devices to download and install security updates as soon as they are available from Windows Update, meeting the requirement for automatic and immediate security patching.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.