Your network contains an Active Directory domain named contoso.com. The domain contains two
servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the IP
Address Management (IPAM) Server feature installed. Server2 has the DHCP Server server role
installed. A user named User1 is a member of the IPAM Users group on Server1.
You need to ensure that User1 can use IPAM to modify the DHCP scopes on Server2.
The solution must minimize the number of permissions assigned to User1.
To which group should you add User1?
A.
DHCP Administrators on Server2
B.
IPAM ASM Administrators on Server1
C.
IPAMUG in Active Directory
D.
IPAM MSM Administrators on Server1
Explanation:
The user need rights to change DHCP not IPAM
C)
Members of the DHCP Administrators group can view and modify any data at the DHCP server.
http://technet.microsoft.com/en-us/library/jj878348.aspx
http://technet.microsoft.com/en-us/library/cc737716(v=ws.10).aspx
B?
Answer is D.
see:
http://www.aiotestking.com/microsoft/which-group-should-you-add-user1-5/
The answer is A in this question, because the question specifically requests “The solution must minimize the number of permissions assigned to User1.” and the MSM admin group gives you DNS access https://technet.microsoft.com/en-au/library/jj878348.aspx
A.
DHCP Administrators on Server2
User1 definitely needs DHCP administrative rights on server2. But how can he manage anything while being just an ‘ipam user’ on server1?
I agree, but he also needs ASM rights on server1
My “disconnect” on this question is that User1 is a member of “IPAM users” (which carries no true powers). I need to ensure User1 can use IPAM on Server 1 to manage DHCP on server 2. Once you start using IPAM, you want to use the IPAM console to manage the services and not the native DHCP or DNS tools resident on the respective servers.
Thus, I don’t believe A: DHCP admins on server2. solves the problem of “use IPAM to manage DHCP on server 2” I believe B IPAM ASM Administrators on Server1 will.
correct answer is D
Adding the user to the IPAM MSM Administrators group on Server1 would violate the criteria of minimizing the number of privileges assigned to the user because the MSM Administrators group grants administrative privileges over DNS in addition to DHCP.
Correct answer is B. IPAM ASM Administrators on Server1
You right Grifter, B is the correct one answer, as the name states: IPAM address space management (ASM) administrators , what they can or can not do you can see there: https://technet.microsoft.com/en-us/library/jj878348.aspx
okay i was wrong answer is DHCP Administrators just saw it in the CBT training nugget
You need to ensure that User1 can use IPAM to modify the DHCP scopes on Server2, use IPAM so it has to be D
スーパコピー通販専門店
当店はいろいろな高品質ブランドコピー品をそろっているスーパーコピー専門店です。
業内スーパーコピールイヴィトン専門店を目指し、
品質第一、信用第一、ユーザー第一の原則を守り
心地よい親切で最高のインターネットサービス、
最高品質商品を低価格で ご提供することです
ブランドキーケース レディース人気 http://www.bestevance.com/shf/index.htm
日本超人気S品N品コピーブランド時計激安通販専門店
2017年最高品質時計コピー、国際ブランド腕時計コピー、
業界唯一無二.世界一流の高品質ブランドコピー時計。