You have a server named Server1.
You install the IP Address Management (IPAM) Server feature on Server1.
You need to provide a user named User1 with the ability to set the access scope of all the
DHCP servers that are managed by IPAM. The solution must use the principle of least
privilege.
Which user role should you assign to User1?
A.
IP Address Record Administrator Role
B.
IPAM Administrator Role
C.
IPAM MSM Administrator Role
D.
IPAM DHCP Scope Administrator Role
In my Opinion it is probably always an IPAM Administrator. The Question is to set the access scopes, which is related to configure the Access Based Control in IPAM. This can only be done by an IPAM Administrator or a member of the local IPAM Administrator Group.
I do agree.It is IPAM Administrator…
Correct answer is C. IPAM MSM administrator because B. IPAM administrator will give many unnecessary permissions, although C. IPAM MSM administrator will give many unnecessary permissions such as manages DNS servers but it is lower permissions than manages all settings and objects in IPAM.
Another correct and more suitable answer is “IPAM DHCP administrator” but it is not an option in this question but it is an option for other version of the same question I have seen.
I do agree.
C is correct. Can set Access Scope of DHCP Scope, Superscope, and server
B has more privileges than C
D can only set Access Scope of DHCP Scope and Superscope, but CANNOT set Access Scope of DHCP server.
A. Can only create and delete Address Records.
I think it’s B:
Question, IMO, isn’t talking about DHCP SCOPES, it’s talking about ACCESS SCOPES of all DHCP servers…
Only “IPAM Administrator Role” under description has:
This built-in role provides all permissions that are provided by IPAM ASM Administrators and IPAM MSM Administrators role in addition to permissions to manage access scopes, access policies and logical groups.
*****
“IPAM MSM Administrator role” CAN COMPLETELY manage DHCP servers, DHCP superscopes, DHCP scopes, MAC address filters, DHCP policies, DNS zones and DNS resource records.
It doesn’t says that it can manage ACCESS SCOPES…
Taken from IPAN console…