Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2016. All client computers run Windows 10. The relevant objects in the domain are configured as shown in the following table.
You need to assign User1 the right to restore files and folders on Server1 and Server2 Solution: You add User1 to the Backup Operators group in contoso.com.
Does this meet the goal?
A. Yes
B. No
A. YES
At no time does the question ask to comply with the principle of least privilege.
In this matter Microsoft just wants to know if it meets the objective, even if it is not the best practice. And the answer is YES!
given answer is incorrect..
No, Server1 and Server2 uses local group “Backup Operators” for granting backup and restore rights to normal users.
The solution would let User1 to backup files and folders on domain controllers for contoso.com instead.
Solution : You create a Group Policy object (GPO), you link the GPO to the Servers OU, and then you modify the Users Rights Assignment in the GPO.
Solution: You add User1 to the Backup Operators group on Server1 and Server2.
Agree with K. Answer is B no.
The solution would let User1 to backup files and folders on domain controllers for contoso.com instead.
It should be B, because in contoso.com you will be able to restore files and folders across all server, tricky but we interested only in Server 1 and 2, so Local Backup Operators group on both servers.
Still its a because he is able to backup on server 1 and server 2
From Another site:
“backup operators will grant backup and restore of files on all servers. requirement is ONLY for restore on two servers. principle of least privilege applies”
So, answer should be B (ist incorrect solution for this case)