Yournetwork contains an Active Directory domain named contoso.com. The domain contains a
domain controller named DC1 that runs Windows Server 2012 R2. DC1 has the DHCP Server server
role installed.
DHCP is configured as shown in the exhibit. (Click the Exhibit button.)
You discover that client computers cannot obtain IPv4 addresses from DC1.
You need to ensure that the client computers can obtain IPv4 addresses from DC1.
What should you do?
A.
Activate the scope.
B.
Authorize DC1.
C.
Disable the Allow filters.
D.
Disable the Deny filters.
Explanation:
You have enabled the Allow list but haven’t entered any MAC addresses, thus everyone is denied.
Either Disable the Allow filters or start adding MAC addresses to the Allow filter.
Note: MAC address based filtering allows specific control over which clients have access to DHCP
addresses. You can create a list of computers that are allowed to obtain DHCP addresses from the
server by adding the client MAC address to the list of allowed client computers. By enabling the
allow list, you automatically deny access to the DHCP server addresses to any client computer not
on the list. DHCP: If the allow list is enabled, MAC address filtering should be populated
https://technet.microsoft.com/en-us/library/ee956897(v=ws.10)
Answer is correct.
WHY? do I hear people cry out. We look at the Deny list and there is no-one in there.
How do we know it is the Allow and not the Deny list we need to disable.
If you look at the Exhibit, you see that both the Allow and the Deny list are enabled. Yu can see this because there is no longer a downward Arrow in the icon.
If we Enable a Deny list and leave it empty (as seen in the exhibit) we deny no-one. So disabling this, does not solve anything.
If we Enable a Allow list and leave it empty, we Allow no-one. So disabling the Allow list, will again Allow all.
for your info
4
1
Perfect explanation. BTW, there’s another variation to this question, where IPV4 and the ALLOW filter are disabled.
0
0
in your mentioned variation IPv4 looks disabled because the DHCP server is not (yet) authorized, so no rocket science, can easily be verified in lab…
here you go:
http://www.aiotestking.com/microsoft/you-need-to-ensure-that-the-client-computers-can-obtain-ipv4-addresses-from-dc2-6/
0
0
Dang! I’m learning more from Franc than the MS books I purchased!
1
0
I had this in december in my 412 exam, now i know the correct answer 🙂
0
0