Incident simulations
Exit

INC-3404 · P3

At Mutuelle Souss Prévoyance, the WSUS console has not seen a single workstation for a month

Agadir · PC-IT-01 · Mutuelle Souss Prévoyance · Wednesday 14:10

Mutuelle Souss Prévoyance (head office in Agadir, branches in Inezgane and Taroudant) manages its Windows updates with WSUS. In mid-September, the contractor replaced the old server srv-wsus-01 (Windows Server 2016) with a new one, srv-wsus-02, then shut down and decommissioned the old one.

This morning, the internal auditor asks for the monthly compliance report. In the WSUS console on srv-wsus-02, the 142 workstations appear… with a last status report on 14/09/2026. None of the October fixes is installed, although the cumulative update fixes an actively exploited vulnerability.

You are on your technician workstation, PC-IT-01 (member of the souss-prev.local domain, in the same OU as the other workstations, RSAT tools installed), as domain administrator.

This simulation is reserved for students enrolled in a course.

Already enrolled? Log in.