Your network contains an Active Directory domain named contoso.com. The domain contains a file
server named Server1 that runs Windows Server 2012 R2. You create a user account named User1 in
the domain.
You need to ensure that User1 can use Windows Server Backup to back up Server1.
The solution must minimize the number of administrative rights assigned to User1.
What should you do?
A.
Assign User1 the Back up files and directories user right.
B.
Add User1 to the Backup Operators group.
C.
Add User1 to the Power Users group.
D.
Assign User1 the Back up files and directories user right and the Restore files and directories user
right.
Explanation:
Backup Operators have these permissions by default:
However the question explicitly says we need to minimize administrative rights. Since the
requirement is for backing up the data onlyno requirement to restore or shutdownthen assigning
the “Back up files and directories user right” would be the correct.
Incorrect
Answer is B
https://technet.microsoft.com/en-us/library/cc772523.aspx
“You must be a member of the Administrators group or Backup Operators group to use Windows Server Backup.”
As a high level, yes, they should be part of those groups. However User Right Assignments are really the things that give particular access to a user. Adding the user to Backup Operators also gives them the right to also restore files, shutdown and reboot the server. Since they wanted the user to have the least amount of rights, the given answer is correct.