Exam 70-741 topic 1 question 21 discussion

Actual exam question from Microsoft's 70-741

Question #: 21
Topic #: 1

HOTSPOT -
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server
2016.
Server1 has Microsoft System Center 2016 Virtual Machine Manager (VMM) installed. Server2 has IP Address Management (IPAM) installed.
You create a domain user named User1.
You need to integrate IPAM and VMM. VMM must use the account of User1 to manage IPAM. The solution must use the principle of least privilege.
What should you do on each server? To answer, select the appropriate options in the answer area.
Hot Area:

Show Suggested Answer

Suggested Answer:

On Server1: Create a Run As Account that uses User1.
On Server2: Add User1 to IPAM ASM Administrator Role.
https://technet.microsoft.com/en-us/library/dn783349(v=ws.11).aspx https://technet.microsoft.com/en-us/library/jj878348(v=ws.11).aspx

by dritter at Feb. 17, 2019, 6:13 p.m.

Comments

Submit Cancel

MrRiver

Highly Voted 5 years, 2 months ago

Answer seems correct: The user needs no permission on server one (vmm) but vmm needs to connect to IPAM. So Run-As Account seems to fit that. Looking at exam Ref: You need to add the User to "IPAM ASM Administrator" Group so this is also correct

upvoted 6 times

...

Danuda

Highly Voted 4 years, 4 months ago

Integration of IPAM with VMM To integrate IPAM with VMM, you need to create a domain user account that is a member of the following local security groups on the IPAM server: • IPAM ASM Administrators. This is a local security group that exists on all IPAM servers. It provides the required permissions for IP address space management (ASM). • Remote Management Users. This is a Windows built-in group. It provides access to Windows Management Instrumentation (WMI) resources through the WS-Management protocol and the Windows Remote Management service.

upvoted 5 times

...

lofzee

Most Recent 3 years, 11 months ago

answer is correct the 'remote management users' group is there to confuse you. this group is needed on the IPAM server (server 2) not the VMM (server 1)

upvoted 1 times

...

Sampaiolc

4 years, 3 months ago

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn783349(v=ws.11)

upvoted 1 times

...

Nhan

4 years, 10 months ago

in all given answer/option the ASM Administrator has the least privilege https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj878314(v=ws.11)

upvoted 2 times

...

dritter

5 years, 10 months ago

User1 needs to be added to the Remote Management Users group - but on Server 2.