You have a server named Server1 that runs Windows Server 2016. Server1 is an IP Address Management (IPAM) server that collects DHCP and DNS logs and events for your entire network.
You need to get the IP addresses that
were assigned to a client computer named Computer1 during the last week.
What should you do on Server1?
A. From the IPAM node in Server Manager, click IP Address Space, and then review the IP Address Inventory.
B. Open Event Viewer and click Windows Logs
. Filter the Security log for Computer1.
C. Run the
Get-IpamDhcpConfigurationEvent
cmdlet.
D. Run the
Get-IpamIpAddressAuditEvent
cmdlet.
E. Open
Event Viewer
and click
Windows Logs.
Filter the Forwarded Events log for Computer1.
F. Run the
Get-IpamAddress
cmdlet.
The answer is correct.
https://docs.microsoft.com/en-us/powershell/module/ipamserver/get-ipamipaddressauditevent?view=win10-ps
The Get-IpamIpAddressAuditEvent cmdlet gets all IP address audit events from an IP Address management (IPAM) server over a time interval. IPAM enables IP address tracking through correlation of Dynamic Host Configuration Protocol (DHCP) lease events on managed DHCP servers with user and computer authentication events on managed domain controllers and Network Policy Server (NPS) servers. You can search correlated events by IP address, client ID, hostname, or username. Use DCHP events between a start date and an end date to correlate data. The data returned includes data for both the start date and the end date.
3
0