You have a server named Server1.
You install the IP Address Management (IPAM) Server feature on Server1.
You need to provide a user named User1 with the ability to set the access scope of all the DHCP
servers that are managed by IPAM. The solution must use the principle of least privilege.
Which user role should you assign to User1?
A.
IP Address Record Administrator Role
B.
IPAM Administrator Role
C.
IPAM MSM Administrator Role
D.
IPAM DHCP Scope Administrator Role
Explanation:
IPAM ASM Administrators
IPAM ASM Administrators is a local security group on an IPAM server that is created when you install
the IPAM feature. Members of this group have all the privileges of the IPAM Users security group,
and can perform IP address space tasks in addition to IPAM common management tasks.
Note: When you install IPAM Server, the following local role-based IPAM security groups are
created:
IPAM Users
IPAM MSM Administrators
IPAM ASM Administrators
IPAM IP Audit Administrators
IPAM Administrators
D is the correct answer.
Can set Access Scope of DHCP Scope, Superscope, and server.
A can only create and delete Address reservations.
The other two have too many privileges.
0
0
It also appears to me that D is the corret answer.
Because :
Role IPAM DHCP scope administrator manages DHCP scopes.
https://technet.microsoft.com/en-us/library/dn268500.aspx
0
0
D is correct
0
0
Correct answer C , it is MSM, is the option that came in the exam along with ASM
0
0
Agreed that it is C. MSM = “Multi Server Management”.
The question here states…
“You need to provide a user named User1 with the ability to set the access scope of all the DHCP servers that are managed by IPAM”
DHCP serverS. From the options given, the answer is C.
More info on IPAM Roles are here, and you’ll see the description for IPAM MSM Administrators. https://technet.microsoft.com/en-au/library/jj878348.aspx
0
0
Why would it be C over D? Yes both can perform the function as required but D does it with fewest privileges.
Yes, MSM is “multi server” but AFAIK the “IPAM DHCP Scope Administrator” Role is not just a one server wonder, it would manage ALL DHCP servers that are added to the IPAM feature console in Server Manager
0
0
IPAM MSM administrator
Completely manages DHCP and DNS servers
The solution must use the principle of least privilege. So D: Then
IPAM DHCP scope administrator
Manages DHCP scopes
https://technet.microsoft.com/en-us/library/dn268500(v=ws.11).aspx
0
0