Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the DHCP Server server role installed. The network contains a Virtual
Desktop Infrastructure (VDI).
All virtual machines run Windows 8.
You identify the following requirements for allocating IPv4 addresses to client computers:
All virtual desktops must have static IP addresses.
All laptop computers must receive dynamic IP addresses.
All virtual desktops must be prevented from obtaining dynamic address.
You need to recommend a DHCP solution that meets the requirements for allocating IPv4 addresses.
The solution must use the least amount of administrative effort.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.
A.
Configure DHCP filtering.
B.
Configure DHCP policies.
C.
Create two physical subnets. Connect the laptop computers to the subnet that contains Server1.
D.
Create two physical subnets. Configure 802.1X authentication for each subnet.
Explanation:
The DHCP Server role in Windows Server 2012 introduces a new feature that allows you to create IPv4 policies that specify custom IP address and option
assignments for DHCP clients based on a set of conditions.
The policy based assignment (PBA) feature allows you to group DHCP clients by specific attributes based on fields contained in the DHCP client request packet.
PBA enables targeted administration and greater control of the configuration parameters delivered to network devices with DHCP.
Example: In a subnet which has a mix of wired and mobile computers, you might want to assign a shorter, 4 hour lease duration to mobile computers and longer, 4
day lease duration to wired computers.
Incorrect:
not A: DHCP filtering provides security by filtering untrusted DHCP messages. An untrusted message is a message that is received from outside the network or
firewall, and that can cause traffic attacks within network.
Introduction to DHCP Policies
A DHCP filters rule can block the virtual desktop MAC range, which prevents them from getting an IP address. Nothing needs to be configured for the laptop because they will get the IP from the DHCP server by default. “The solution must use the least amount of administrative effort”
0
0
I am 100 % sure that this must be Filters.
A DHCP server offers its services to the DHCP clients based on the availability of MAC address filtering. Once the Allow filter is set, all DHCP operations are based on the access controls (allow/deny). You could add a valid MAC address to Deny filters.
0
0
I believe the given answer is correct due to being able to specify mac address ranges when setting up the policy. Plus Microsoft is pushing more towards policies it appears than with the old filters method since policies can be so much more granular than a simple allow/deny filter
0
0
You can use wildcards in DHCP filters as well. Simply test it on DHCP server, some blog here https://www.dtonias.com/configure-dhcp-server-2016-filters/
The solution must use the least amount of administrative effort, so DHCP deny filter with VMs MAC range (Hyper-V or VmWare) is definitely the way to go.
0
0