StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 363 of 506 · medium

Helpdesk requests Backup Operators membership solely to reset ordinary user passwords. Which response best follows least privilege?

Choose the single best answer.

  1. A.Grant Enterprise Admins to cover future requests
  2. B.Delegate password reset on the intended OU instead
  3. C.Grant Schema Admins because users are schema objects
  4. D.Grant Backup Operators because backup rights are harmless
Show the answer and explanation

✓ Correct answer

  • Delegate password reset on the intended OU instead

Specific OU password-reset delegation matches the task. Backup rights can bypass data ACLs; Enterprise Admins and Schema Admins are far broader than ordinary account resets.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.