Which permission should you grant?

You are the database administrator for a company that hosts Microsoft SQL Server. You manage both onpremises and Microsoft Azure SQL Database environments. A service account has the required permissions to backup all databases.

You have a user database named HRDB that contains sensitive human resources data. The HRDB backup files must be encrypted.

You need to grant the service account that backs up the HRDB database the permission necessary to access the encryption key. Your solution must use the principle of least privilege.

Which permission should you grant?
A . DDLAdmin
B . db_datawriter
C . dbcreator
D . dbo
E . View Database State
F . View ServerState
G . View Definition
H . sysadmin

Answer: G

Explanation:

The user account performing the restore must have VIEW DEFINITION permissions on the certificate or key.

References: https://docs.microsoft.com/en-us/sql/relational-databases/backup-restore/backup-encryption