Your network contains an Active Directory domain named contoso.com.
The domain contains a domain controller named DC1 and a member server named Server1.
Server1 has the IP Address Management (IPAM) Server feature installed.
On Dc1, you configure Windows Firewall to allow all of the necessary inbound ports for IPAM.
On Server1, you open Server Manager as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that you can use IPAM on Server1 to manage DNS on DC1.
What should you do?

A.
Modify the outbound firewall rules on Server1.

B.
Modify the inbound firewall rules on Server1.

C.
Add Server1 to the Remote Management Users group.

D.
Add Server1 to the Event Log Readers group.

Explanation:
Since no exhibit, the guess here is it’s not using the GPO to manage the Event Log Readers group– evidenced by the fact that the firewall was configured manually
instead of with the GPO.
If the GPO was being used then the IPAM server would be in the Event Log Readers group due to restricted group settings in the GPO as shown below:

In the above example, the IPAM server is as member of the VDI\\IPAMUG group.
http://technet.microsoft.com/en-us/library/jj878313.aspx