Your network contains an Active Directory forest. The forest contains two domains named contoso.com and east.contoso.com and the servers shown in the following table. Contoso.com contains a user…

The correct answer is A. DC1 only. The built-in Backup Operators group in a domain is a domain local security group that grants backup and restore rights specifically to the domain controllers within that domain. User1 is added to the Backup Operators group in contoso.com, so User1 can back up DC1 (a domain…

Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments

Question

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and east.contoso.com and the servers shown in the following table. Contoso.com contains a user named User1. You add User1 to the built-in Backup Operators group in contoso.com. Which servers can User1 back up?

Exhibit

Options

ADC1 only
BServer1 only
CDC1 and DC2 only
DDC1 and Server1 only
EDC1, DC2, Server1, and Server2

How the community answered

(19 responses)

A
84% (16)
D
5% (1)
E
11% (2)

Explanation

The built-in Backup Operators group in a domain is a domain local security group that grants backup and restore rights specifically to the domain controllers within that domain. User1 is added to the Backup Operators group in contoso.com, so User1 can back up DC1 (a domain controller in contoso.com). DC2 resides in east.contoso.com (a child domain) - the contoso.com Backup Operators group has no authority there. Member servers (Server1, Server2) each have their own local Backup Operators group; domain-level Backup Operators membership does not automatically grant rights on member servers. Therefore, User1 can only back up DC1.

Topics

#Active Directory groups#AD DS permissions#Backup Operators#Domain controllers

Community Discussion

No community discussion yet for this question.

Full AZ-800 Practice