Your network contains an Active Directory domain named contoso.com. The domain contains a file
server named Server1 that runs Windows Server 2012 R2.
You create a user account named User1 in the domain.
You need to ensure that User1 can use Windows Server Backup to back up Server1. The solution
must minimize the number of administrative rights assigned to User1.
What should you do?
A.
Add User1 to the Backup Operators group.
B.
Add User1 to the Power Users group.
C.
Assign User1 the Backup files and directories user right and the Restore files and directories user
right.
D.
Assign User1 the Backup files and directories user right.
Explanation:
Backup Operators have these permissions by default:
However the question explicitly says we need to minimize administrative rights. Since the
requirement is for backing up the data only–no requirement to restore or shutdown–then assigning
the “Back up files and directories user right” would be the correct answer.
Default local groups
http://technet.microsoft.com/en-us/library/cc787956(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc756898(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc771990.aspx
I would go with A here.
0
0
i was just going to say that i don’t agree… but after reading the discuss on others dumps… and testing in my lab, the WSB just dont work without beeing backup operator
0
0
but i’m starting to think that even having the problem with the use of the windows backup tool, microsoft is asking to minimize the rights, so i would go with D
0
0
I’m agreeing with the answer.
More info “Backup files and directories user right” as it relates to Windows Server 2012 is here: https://technet.microsoft.com/en-au/library/dn221961.aspx
0
0
Agree:
Best practices
Restrict the Back up files and directories user right to members of the IT team who must back up organizational data as part of their daily job responsibilities. Because there is no way to be sure that a user is backing up data, stealing data, or copying data to be distributed, only assign this user right to trusted users.
If you are using backup software that runs under specific service accounts, only these accounts (and not the IT staff) should have the Back up files and directories user right.
0
0
I also go with D
0
0