You can deploy an additional Patch Manager server with Application Server and Management Server roles to test your software packages before you deploy them to your environment. This scenario allows you to isolate the testing environment from the production environment.
This scenario shows a separate management group for the test environment resources. These resources should include the subdomain or workgroup for the environment and a dedicated WSUS server. A similar example would be to use an additional server for a special business or perimeter network (DMZ).