Exam 70-744 topic 1 question 24 discussion

Actual exam question from Microsoft's 70-744

Question #: 24
Topic #: 1

Your network contains an Active Directory domain named contoso.com.
You install the Windows Server Update Services server role on a member server named Server1. Server1 runs Windows Server 2016.
You need to ensure that a user named User1 can perform the following tasks:
✑ View the Windows Server Update Services (WSUS) configuration.
✑ Generate WSUS update reports.
The solution must use the principle of least privilege.
What should you do on Server1?

A. Modify the permissions of the ReportWebService virtual folder from the WSUS Administration website.
B. Add User1 to the WSUS Reporters local group.
C. Add User1 to the WSUS Administrators local group.
D. Run wsusutil.exe and specify the postinstall parameter.

Show Suggested Answer

Suggested Answer: C 🗳️
References:
https://technet.microsoft.com/en-us/library/hh852346(v=ws.11).aspx#BKMK_ConfigComputerGroups

by phuckhacking at July 8, 2019, 3:24 a.m.

Comments

Submit Cancel

phuckhacking

Highly Voted 5 years, 12 months ago

B. Add User1 to the WSUS Reporters local group. WSUS Reporters group have read-only access to the WSUS Administration Console https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-update-services/hh334984(v%3dws.10) Open the WSUS Administration Console Members of the local Administrators group (or the WSUS Administrators group on the server on which WSUS is installed) can use all the features of the WSUS Administration Console. Members of the WSUS Reporters group have read-only access to the WSUS Administration Console, and read-only access to the WSUS data.

upvoted 11 times

...

RickSk

Highly Voted 5 years, 10 months ago

Phuckhacking is correct. The answer is option B. Here's another source for this: https://www.rootusers.com/configure-wsus-reporting-in-windows-server-2016/#targetText=Running%20WSUS%20Reports&targetText=Once%20you're%20happy%2C%20click,button%20to%20generate%20the%20report.&targetText=We%20can%20give%20other%20users,is%20a%20read%20only%20group. "We can give other users access to view and generate reports by putting them into the WSUS reporters group, this is a read only group."

upvoted 8 times

...