Exam 70-742 topic 1 question 19 discussion

HOTSPOT -
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server
2016.
Server1 has Microsoft System Center 2016 Virtual Machine Manager (VMM) installed. Server2 has IP Address Management (IPAM) installed.
You create a domain user named User1.
You need to integrate IPAM and VMM. VMM must use the account of User1 to manage IPAM. The solution must use the principle of least privilege.
What should you do on each server? To answer, select the appropriate options in the answer area.
Hot Area:

Suggested Answer:
To enable IPAM and Virtual Machine Manager (VMM) integration, you must first configure a user account for VMM on the IPAM server and then configure the
IPAM network service plugin in VMM.
VMM must be granted permission to view and modify IP address space in IPAM, and to perform remote management of the IPAM server. VMM uses a ג€Run Asג€ account to provide these permissions to the IPAM network service plugin. The ג€Run Asג€ account must be configured with appropriate permission on the IPAM server.
Any local or domain account can be used by VMM to access the IPAM server, but it is recommended to use a unique domain account that will only be used by
VMM to connect to the IPAM server.
The minimum required permissions for this scenario is supplied by the IPAM ASM Administrator Role.
References:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn783349(v=ws.11)