Exam 70-743 topic 2 question 24 discussion

Actual exam question from Microsoft's 70-743

Question #: 24
Topic #: 2

You have a server named Server1 that runs Windows Server 2016.
Server1 is an IP Address Management (IPAM) server that collects DHCP and DNS logs and events for your entire network.
You need to enable a user named TECH1 to create pointer (PTR), host (A) and service location (SRV) records on all of the DNS servers on the network.
What should you do on Server1?

A. From the IPAM node in Server Manager, create a new user role and a new access policy.
B. From the IPAM node in Server Manager, create a new user role and a new access scope.
C. Run the Set-IpamCustomField cmdlet, and then run the Set-IpamAccessScope cmdlet.
D. Run the Set-IpamRange cmdlet, and then run the Set-IpamAccessScope cmdlet.

Show Suggested Answer

Suggested Answer: B 🗳️
References:
https://docs.microsoft.com/en-us/windows-server/networking/technologies/ipam/view-roles-and-role-permissions

by blackjack89 at Jan. 2, 2020, 3:12 p.m.

Comments

Submit Cancel

blackjack89

Highly Voted 5 years, 5 months ago

I think it's A. The question not mention a part of the network, but I suppose the entire network. For me A is correct.

upvoted 10 times

...

JayHall

Most Recent 4 years, 8 months ago

Agree. Believe A is the correct answer. First you must create the user role as indicated the reference URL: https://docs.microsoft.com/en-us/windows-server/networking/technologies/ipam/create-a-user-role-for-access-control Then you must create an access policy and assign the user role to that access policy, reference URL: https://docs.microsoft.com/en-us/windows-server/networking/technologies/ipam/create-an-access-policy#:~:text=%20To%20create%20an%20access%20policy%20%201,Click%20Locations.%205%20Click%20Add%20Setting.%20More%20

upvoted 2 times

...

Kode

4 years, 11 months ago

Correct answer is A First, you create the role which will determine what DNS resource records can be managed. Then create an access policy to assign the user TECH1 to the new role. An access scope is incorrect because that would limit what zones the tech could manage, when they should be managing all zones.

upvoted 3 times

...