Your company has an Active Directory Domain Services (AD DS) domain that includes an
AD security group named Monitoring. You are configuring a Windows Server 2008 R2
Hyper-V server that hosts several virtual machines (VMs). You need to ensure that members
of the Monitoring group can only stop and start VMs on the host server. What should you
do?
A.
Add the Monitoring group to the Server Operators AD security group.
B.
In Authorization Manager, add the Monitoring group to the Administrator role in the default
scope.
C.
In Authorization Manager, create a task that includes the Stop Virtual Machine and Start
Virtual Machine operations. Add the task to the Administrator role.
D.
In Authorization Manager, create a role in the default scope. Add the Stop Virtual Machine
and Start Virtual Machine operations to the role. Assign the Monitoring group to the role.
Explanation:
Adding administrator role to Montoring group will gain access to create a VM.
Server Operators is a local group that allows a user to perform general administrator tasks.
These tasks include sharing server resources, performing file backup and recovery, and
more. As with other operator accounts, Server Operators can also log on to a server locally
and shut it down. Server Operators can perform most common server administration tasks.
On domain controllers, members of this group can log on interactively, create and delete
shared resources, start and stop some services, back up and restore files, format the hard
disk, and shut down the computer. This group has no default members. Because this group
has significant power on domain controllers, add users with caution. Back up files and
directories; Change the system time; Force shutdown from a remote system; Allow log on
locally; Restore files and directories; Shut down the system.
http://technet.microsoft.com/en-us/library/cc756898(v=ws.10).aspx