Intro: Software and Hardware Updates

Which Windows tool centrally manages and deploys updates across multiple networked computers?

• Windows Defender antivirus

• Task Scheduler service

• Windows Server Update Services

• Device Manager utility

Answer explanation

Windows Server Update Services (WSUS) lets administrators approve and push updates to networked machines from a central server. Windows Defender handles malware, not update distribution.

Tags

Blooms Level: Remember

A technician installs patches on a recurring weekly schedule. This practice is best described as which of the following?

• Driver update staging

• Scheduled patch management

• Patch rollback procedure

• Firmware deployment cycle

Answer explanation

Applying updates on a recurring, planned schedule is called scheduled patch management. Rollback reverses a patch; firmware and driver tasks are separate update categories.

Tags

Blooms Level: Remember

How does a device driver differ from firmware?

• Driver lets the OS communicate with hardware; firmware is low-level code stored on the device chip

• Driver runs on the hardware chip; firmware executes inside the OS kernel

• Driver is installed once permanently; firmware updates are always automatic

• Driver manages network routing; firmware controls application-level behavior

Answer explanation

A driver is OS-level software that translates commands to hardware; firmware is embedded code on the device chip. Many technicians confuse them because both relate to hardware.

Tags

Blooms Level: Understand

Which component is most likely updated using a manufacturer's flashing utility rather than Windows Update?

• Browser extension

• Antivirus signature file

• Motherboard firmware

• Network adapter driver

Answer explanation

Motherboard firmware (BIOS/UEFI) is flashed using a manufacturer-provided utility, not Windows Update. Drivers, browser extensions, and antivirus signatures use OS or application update channels.

Tags

Blooms Level: Remember

A critical CVE patch is released today. What is the recommended first action before deploying it to all production endpoints?

• Test the patch in a controlled environment before wide deployment

• Notify users and let each person install the patch manually

• Immediately push it to every endpoint to close the vulnerability

• Wait for the next scheduled maintenance window regardless of severity

Answer explanation

Testing in a lab or pilot ring first catches compatibility issues before the patch reaches all production systems. Skipping testing risks breaking critical services even when urgency is high.

Tags

Blooms Level: Apply

A patch causes application errors after deployment. Which action allows the technician to restore the previous working state?

• Reinstalling the operating system from scratch

• Updating device drivers to resolve the conflict

• Performing a patch rollback to the prior version

• Applying a newer patch to overwrite the broken one

Answer explanation

A patch rollback removes the problematic update and restores the previous software version. Reinstalling the OS is far more disruptive and is not the standard first response.

Tags

Blooms Level: Remember

What is the primary security reason for keeping device drivers up to date?

• Updated drivers automatically encrypt all device data

• Outdated drivers may contain vulnerabilities attackers can exploit

• Driver updates eliminate the need for antivirus software

• Drivers control user account permissions on the device

Answer explanation

Outdated drivers can have unpatched security flaws that attackers use to gain elevated system access. Drivers do not manage permissions, replace antivirus, or handle encryption independently.

Tags

Blooms Level: Understand