Exam 70-744 All Questions

View all questions & answers for the 70-744 exam

Exam 70-744 topic 1 question 8 discussion

Actual exam question from Microsoft's 70-744

Question #: 8
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2016. All client computers run Windows 10.
The relevant objects in the domain are configured as shown in the following table.

You need to assign User1 the right to restore files and folders on Server1 and Server2.
Solution: You add User1 to the Backup Operators group in contoso.com.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️
References:
https://technet.microsoft.com/en-us/library/cc771990(v=ws.11).aspx

by Slaughter at March 31, 2020, 9:24 p.m.

Comments

Submit Cancel

Slaughter

Highly Voted 5 years, 3 months ago

I don't believe this is correct, unless Server1 and Server2 are domain controllers. The CONTOSO\Backup Operaters group should grant backup and restore rights to users on domain controllers only.

upvoted 5 times

...

idaemon

Most Recent 4 years, 5 months ago

Correct Answer is B! Backup Operators domain group is for DCs, but not for member servers. To be sure this I have tested this in my lab today.

upvoted 2 times

...

Jardani

4 years, 5 months ago

The correct answer is B) No. There is another very similar question on this site that is around question 125. This would only be correct if the user was added to the Backup Operators group specifically on Server1 and Server2, not the DC. So the answer for this question is no.

upvoted 2 times

...

SamsOtro

4 years, 7 months ago

Backup Operators is a BuiltIn Local Group on DCs, member servers, etc. Adding a user to this group on a DC doesn't provide backup rights on member servers. Question is poorly written as there is no Backup Operators domain group, which it implies.

upvoted 3 times

...

Tal007

4 years, 9 months ago

Correct answer is B. backup operators will grant backup and restore of files on all servers. requirement is ONLY for restore on two servers. principle of least privilege applies

upvoted 3 times

palermo

4 years, 7 months ago

I don't see the word ONLY. So the solution met the goal

upvoted 4 times

FNavarro

4 years, 5 months ago

Nor is there any mention of the principle of least privilege

upvoted 2 times

c3r3br4l

4 years, 5 months ago

The domain has a builtin "Backup Operators" group. Adding the user to this will only give them backup operator rights on domain controllers. "For example, a user who is added to the Backup Operators group in Active Directory has the ability to back up and restore files and directories that are located on each domain controller in the domain." https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups

upvoted 1 times

...

Kamikazekiller

4 years, 11 months ago

Correct answer is A-YES Solution: You create a Group Policy object (GPO), you link the GPO to the Servers OU, and then you modify the Users Rights Assignment in the GPO. Solution: You add User1 to the Backup Operators group on Server1 and Server2.

upvoted 1 times

Jardani

4 years, 5 months ago

Both of your provided solutions are correct, but read THIS solution carefully. It says: You add User1 to the Backup Operators group in Contoso.com (DC). So the answer is No.

upvoted 1 times

...

Ario

5 years, 2 months ago

Correct Answer is B

upvoted 2 times

...