Your network contains an Active Directory domain named contoso.com. The domain contains a file
server named Server1 that runs Windows Server 2012 R2.
You create a user account named User1 in the domain.
You need to ensure that User1 can use Windows Server Backup to back up Server1. The solution
must minimize the number of administrative rights assigned to User1.
What should you do?
A.
Add User1 to the Backup Operators group.
B.
Add User1 to the Power Users group.
C.
Assign User1 the Backup files and directories user right and the Restore files and directories user
right.
D.
Assign User1 the Backup files and directories user right.
Explanation:
Backup Operators have these permissions by default:
However the question explicitly says we need to minimize administrative rights. Since the
requirement is for backing up the data only–no requirement to restore or shutdown–then assigning
the “Back up files and directories user right” would be the correct answer.
Default local groups
http://technet.microsoft.com/en-us/library/cc787956(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc756898(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc771990.aspx
Has this worked for anyone?? I’ve tried this in a lab and I could load windows server backup but not use it!
Must be A.
For backing up a server user must be in Backup Operators group. D works only for file and folder backup.
Oops, I missed Server1 is a file server..well, it depends on. If User1 will back up only files and folders, it should be D.
Has been sed: “to back up Server1”. Not files, not data, not folders, but whole SERVER1. Even only for security reasons it has to be Backup Operator, not siple user. Additionally I did a test, and conclusionsn is nice, let mi do a citation. After openig by simple user Windows Server Backup console I have readed: “The Windows Server Backup engine is not accesible…. . Make sure that you are a member if the Administrators or Backup Operators group on that computer. …”.
Good answer – A.
D: Research this question and you will find the right answer.
Chrisjones is correct. To “minimize” rights assigned and still allow the user to use WSB, the user only needs the specified rights to the folders on Server1.
But Mist is right too because the question clearly state “to backup server 1” if you minimize the right assigned by giving only rights to specified folders you failed to achieve the objective which is to backup server 1?
Backup server1 could mean more than just backing up the file and folder?
Stupid Question, not specific enuff
kingces says:
March 19, 2016 at 7:35 pm
Absolutely 100% D:
Only members of the local Administrators group and the local Backup Operators group have
the right to perform backups of files and directories on a given machine. Backup Operators
are also granted the rights to restore files and directories and the right to shut down the
system.
All three of these rights (backing up, restoring, and shutting down the system) are rights
that can be assigned separately through User Rights Assignment in Local Computer Policy
or Group Policy. If, for example, you want to grant a user the right to back up files and
directories but not the right to restore files and directories, you need to assign the user that specific user right through Local Computer Policy or Group Policy. Don’t add the user to the Backup Operators group because you will be granting that user unwanted privileges.
EXAM TIP
For the 70-412 exam, remember that Backup Operators have more rights than just backing
up a system. They can back up, restore, shutdown the system, log on locally, and access the
computer from the network. If you want to assign a user just a few of those privileges, you
should assign that user those rights through Local Computer policy or Group policy instead
of adding her to the Backup Operators group.
Clearly it’s A
Considerations
You must be a member of the Administrators group or Backup Operators group to use Windows Server Backup.
source
https://technet.microsoft.com/en-us/us-en/library/cc772523(v=ws.11).aspx
the question doesn’t speak of backing up files just the use of Windows Server Backup for which you need to be a member of the Administrator or Backup operators group.
Have any of you tried that in Lab? Answer D let’s you open Windows Server Backup but won’t let you use it.
I was almost sure it was answer A but to be sure i tried it in lab, and i confirmed i was right.
This is the message you’ll get: https://www.google.pt/search?q=error+while+accessing+windows+server+backup&espv=2&biw=1280&bih=675&source=lnms&tbm=isch&sa=X&ved=0ahUKEwiusZjQxKDNAhVIWBoKHWKRBS4Q_AUICCgD#imgrc=IUBMaILcjpdgYM%3A.
MancaMulas is correct. The answer is A) Add User1 to the Backup Operators group..
I got tired of the back and forth answers so I tried this in my lab. I added a user with Backup files and directories user rights both GPO and Local on the server and he could not run the backup until I have applied Backup Operators permissions.
Further references:
https://technet.microsoft.com/en-us/library/cc772028(v=ws.11).aspx
https://technet.microsoft.com/en-us/library/dd277404.aspx
https://technet.microsoft.com/en-us/library/cc976463.aspx
thank you MancaMulas.