Hotspot Question
Your network contains an Active Directory domain named contoso.com. The domain contains a
domain controller named Server1 and a member server named Server2. Server1 has the DNS
Server role installed Server2 has IP Address Management lPAM installed. The IPAM server
retrieves zones from Server1 as shown in the following table.
The IPAM server has one access policy configured as shown in the exhibit.
For each of following statements, select Yes, if the statement is true. Otherwise, select No.
Answer: 
The answer is incorrect.
Correct answer is:
1) YES
2) YES
3) NO
Since Server 2016, the DNS can be managed through IPAM.
And the DNS Administrator role does have permission to create DNS records.
Source: https://docs.microsoft.com/en-us/windows-server/networking/technologies/ipam/view-roles-and-role-permissions
18
0
Box 1: Yes As a member of the IPAM DNS Administrator Role of the ADatum zone, User1 can add DNS records to it.
Box 2: Yes As a member of the DNS Record Administrator Role of the Fabrikam zone, User1 can add DNS records to it.
Box 3: No DNS Record Administrators cannot delete zones, only administer DNS records.
9
0