Exam AZ-800 topic 1 question 23 discussion

Correct answer: D Members of the Backup Operators group can back up and restore all files on A computer, regardless of the permissions that protect those files. This doesn't means that the member of Backup operators group can backup any computer and not just a Domain controller. They do have the permissions needed to replace files (including operating system files) on domain controllers. Because members of this group can replace files on domain controllers, they're considered service administrators.

Correct “Members of the Backup Operators group can back up and restore all files on a computer, regardless of the permissions that protect those files. Backup Operators also can log on to and shut down the computer. This group can't be renamed, deleted, or removed. By default, this built-in group has no members, and it can perform backup and restore operations on domain controllers.“

The Backup Operators group is DOMAIN specific - thus there permissions do not extend to other domains, even in the same forest, I think the answer D.

The correct answer is option C: DC1 and DC2 only. This is because User1, by being added to the Backup Operators group in the contoso.com domain, would have permissions to perform backups on the domain controllers (DC1 and DC2) within the Active Directory forest, as both are configured as domain controllers in their respective domains.

Tested this, as you can see in the link, a member of the group can logon to the server, i am not able to log on to my member server! But can log in to the DC. https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#backup-operators

1-The Backup Operators group at the domain level applies only to domain controllers within that specific domain. 2-Backup Operators cannot cross into child domains or other trusted domains unless explicitly added to the respective Backup Operators groups. 3-To back up member servers or workstations, a user must be added to the local Backup Operators group on each machine.

dddddddd

Correct answer is D. 100 % No Doubt

Backup Operators can perform backup/restore operations for domain controllers and member servers.

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#backup-operators "By default, this built-in group has no members, and it can perform backup and restore operations on domain controllers." Answer is A.

Backup Operators can backup DCs and Member Servers

The Correct answer is C: As a member of the Backup Operators group, you can back up and restore files and directories on all domain controllers within the domain, including child domain controllers. but not member servers. I was also confused. https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups

The Correct answer is A: Backup Operators group, you can only back up and restore files and directories on domain controllers within the domain. this doesn't include member server. I was also confused. https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups

members of the "Backup Operators" group in a domain can back up data on member servers within that domain. The "Backup Operators" group is a built-in group in Windows that has certain privileges related to backing up and restoring files and directories on computers running Windows operating systems.

It is clearly A. "Backup Operators" is a built-in group - this will present as a local group on member servers, and child domains will have their own "Backup Operators" group. See: https://serverfault.com/questions/1061814/how-to-make-domain-user-for-backup-be-part-of-backup-operators-group-on-one-clie

valid 27.11.23

Certmonk is correct, answer is D. Backup Operators can back up any server, including DCs.