Your network contains an Active Directory domain named contoso.com. The domain contains a file server
named Server1 that runs Windows Server 2012 R2. You create a user account named User1 in the domain.
You need to ensure that User1 can use Windows Server Backup to back up Server1.
The solution must minimize the number of administrative rights assigned to User1.
What should you do?
A.
Assign User1 the Back up files and directories user right.
B.
Add User1 to the Backup Operators group.
C.
Add User1 to the Power Users group.
D.
Assign User1 the Back up files and directories user right and the Restore files and directories user right.
Explanation:
Backup Operators have these permissions by default:
However the question explicitly says we need to minimize administrative rights. Since the requirement is for
backing up the data only no requirement to restore or shut down then assigning the “Back up files and
directories user right” would be the correct.
Even it seems you should grant backup operators, A) is correct.
EXAM TIP
For the 70-412 exam, remember that Backup Operators have more rights than just backing up a system. They can back up, restore, shutdown the system, log on locally, and access the computer from the network. If you want to assign a user just a few of those privileges, you should assign that user those rights through Local Computer policy or Group policy instead of adding her to the Backup Operators group.