You work as an administrator at ABC.com. The ABC.com network consists of a single domain
named ABC.com. All servers in the ABC.com domain have Windows Server 2012 R2 installed.
A ABC.com server named ABC_SR12 hosts a Windows Server 2012 R2 virtual machine named
ABC_VT02. A ABC.com user named RoyMoses must be allowed to add and remove Windows
features on ABC_VT02.
Which of the following options will allow RoyMoses to complete his duties without giving him too
much permissions?
A.
You should make RoyMoses a member of the Power Users group on ABC_SR12.
B.
You should make RoyMoses a member of the Administrators group on ABC_VT02.
C.
You should make RoyMoses a member of the Local Administrators group on ABC_SR12.
D.
You should make RoyMoses a member of the Hyper-V Administrators group on ABC_SR12.
E.
You should make RoyMoses a member of the Creator Owner group on ABC_VT02.
F.
You should assign RoyMoses the Allow log on locally permission to ABC_VT02.
G.
You should run the Delegation of Control Wizard on ABC_VT02.
Explanation:
I think the answer should be D.
You should make RoyMoses a member of the Hyper-V Administrators group on ABC_SR12.
specially it stressed on “without giving him too much permissions” in the question
It cannot be D, since that gives permissions to the Host server SR12, not the Virtual Server VT02.
Trick question. Roy only needs admin rights to perform his duties on the Virtual Machine. Giving Roy rights as a Hyper-V admin permits Roy to modify the memory, number of processors, etc. Best answer is B
B is the correct answer. Administrators group on the local machine would allow him the right to install and remove Role and Features.