Securing Windows Server 2016 — Question 1

Your network contains an Active Directory domain named contoso.com.
You install the Windows Server Update Services server role on a member server named Server1. Server1 runs Windows Server 2016.
You need to ensure that a user named User1 can perform the following tasks:
✑ View the Windows Server Update Services (WSUS) configuration.
✑ Generate WSUS update reports.
The solution must use the principle of least privilege.
What should you do on Server1?

Answer options

• A. Modify the permissions of the ReportWebService virtual folder from the WSUS Administration website.
• B. Add User1 to the WSUS Reporters local group.
• C. Add User1 to the WSUS Administrators local group.
• D. Run wsusutil.exe and specify the postinstall parameter.

Correct answer: C

Explanation

The correct answer is C because adding User1 to the WSUS Administrators local group grants the necessary permissions to view the WSUS configuration and generate reports while adhering to the principle of least privilege. Option A is incorrect as modifying permissions of the ReportWebService folder does not directly grant the required capabilities. Option B does not provide sufficient permissions for the tasks, and option D is unrelated to user permissions and does not help in this context.