Your network contains one Active Directory domain named contoso.com. The domain contains an IP
Address Management (IPAM) server named Server1. Server1 manages several DHCP and DNS
servers.
From Server Manager on Server1, you create a custom role for IPAM.
You need to assign the role to a group named IP_Admins.
What should you do?
A.
From Windows PowerShell, run the Add-Member cmdlet.
B.
From Server Manager, create an access policy.
C.
From Windows PowerShell, run the Set-IpamConfiguration cmdlet.
D.
From Server Manager, create an access scope.
Explanation:
A role is a collection of IPAM operations. You can associate a role with a user or group in Windows
using an access policy. Several built-in roles are provided, but you can also create customized roles
to meet your business requirements.Manage IPAM, Access Control
https://technet.microsoft.com/en-us/library/dn741281.aspx
Roles: A role is a collection of IPAM operations. You can associate a role with a user or group in Windows using an access policy. Several built-in roles are provided, but you can also create customized roles to meet your business requirements.
Access policies: An access policy combines a role with an access scope to assign permission to a user or group. For example, you might define an access policy for user1 with a role of IP Block Admin and an access scope of Global\Asia. Therefore, user1 will have permission to edit and delete IP address blocks that are associated to the Asia access scope. This user will not have permission to edit or delete any other IP address blocks in IPAM.
https://technet.microsoft.com/en-us/library/dn741281(v=ws.11).aspx
Answer seems to be the right, “B”
That is a great tip particularly to those new to the blogosphere. Brief but very accurate information… Many thanks for sharing this one. A must read post!|