Exam 70-741 All Questions

View all questions & answers for the 70-741 exam

Exam 70-741 topic 1 question 117 discussion

Actual exam question from Microsoft's 70-741

Question #: 117
Topic #: 1

HOTSPOT -
Your company has a testing environment that contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs
Windows Server 2016. Server1 has IP Address Management (IPAM) installed. IPAM has the following configuration.

The IPAM Overview page from Server Manager is shown in the IPAM Overview exhibit. (Click the Exhibit button.)

The group policy configurations are shown in the GPO exhibit. (Click the Exhibit button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area:

Show Suggested Answer

Suggested Answer:

by dritter at March 3, 2019, 3:42 p.m.

Comments

Submit Cancel

coleman

Highly Voted 5 years, 7 months ago

NO NO NO

upvoted 13 times

musiman

4 years, 7 months ago

Sorry, coleman. You have it wrong this time. It's always possible to manually add a server to the server list. You don't need the domain selected. The domain selection is only for automatic discovery of the servers... So, the answer is: NO YES NO

upvoted 2 times

gd1f365

4 years, 7 months ago

You can manually add it, but the GPO still isn't applying to it. NO NO NO

upvoted 3 times

pepeold

4 years, 7 months ago

This is how I see it: If server3 is domain joined then NO YES NO (you can add it to ipam manually, server will then be added to security filtering IPAM_DHCP GPO by IPAM itself and you can manage it, tested in lab) If server3 is not part of domain NO NO NO (you won't be able to add it to the ipam at all) So I'm going for NO YES NO -> as they say you are adding, so it is domain joined

upvoted 2 times

...

musiman

4 years, 5 months ago

Sorry gd1f365, when you manually add a server to IPAM and set it to MANAGED, the IPAM server will add this server to the security filtering of the respected Group Policy.

upvoted 1 times

...

Bober77

Highly Voted 6 years, 1 month ago

On an IPAM server Tasks step 3 is incomplete (Domain is not added)

upvoted 12 times

hkshado

5 years, 8 months ago

Good observation, the image quantity is too bad for us to notify...

upvoted 4 times

...

Yebubbleman

Most Recent 4 years, 5 months ago

I would think that the critical omission here is whether or not Server3 is joined to AD. The option doesn't say that it is and with Microsoft exam questions, inferring things can be make or break.

upvoted 1 times

...

lofzee

4 years, 6 months ago

The Answers are - No, Yes, Yes without a doubt. 1. No - server discovery is not configured, therefore answer is no. 2. Yes - go read the Microsoft documentation, it clearly states this: "If the automatic, GPO-based provisioning method is used, a manageability status of Managed means that the server will automatically be added to security filtering in the appropriate IPAM GPO". Based on that, the answer is Yes, because the provisioning method in the question is set to Automatic (GPO). 3. No - domain controllers, dns and dhcp servers are all discoverable by IPAM, but - the important factor here is that server discovery has not been configured, so clicking 'Start Server Discovery' will achieve nothing. You need to complete Step 3 before clicking Step 4.

upvoted 2 times

lofzee

4 years, 6 months ago

Sorry. typo. Answers = No, Yes, No. confirmed by testing in lab. if you manually add a server where IPAM has been provisioned by GPO - that server automatically gets added to the GPO security filtering. If you click Start server discovery - IPAM tries to discover stuff but finds nothing, because you have not configured server discovery in step 3. if you have a dhcp, dns, or a dc to the domain, this will not be picked up automatically by IPAM until you have configured server discovery.

upvoted 3 times

...

panda

4 years, 6 months ago

I think NO.2 is Yes. "set the Manageability status to Managed" means that after you manually add a DHCP server named Serve3, you start server discovery and operate "Select add servers to manage and verify IPAM access". Then you finish that operation and IPAM will apply IPAM_DHCP automatically. http://www.trainingtech.net/how-to-configure-ipam-on-windows-server-2012/

upvoted 1 times

panda

4 years, 5 months ago

Question1 is NO. Since IPAM doesn't discover automatically. Question2 is NO. Since "Configure server discovery" doesn't have performed.

upvoted 1 times

...

panda

4 years, 5 months ago

I want to modify my understand. Question1 is NO. Since IPAM doesn't discover automatically. Question3 is NO. Since "Configure server discovery" doesn't have performed.

upvoted 1 times

...

elopez2207

4 years, 7 months ago

The right answer is NO-YES-NO This is how I see it: *If server3 is domain joined: NO-YES-NO : Because the GPO's name is <GPO-prefix>_DHCP: with these name the gpo is AUTOMATICALLY APPLIED by IPAM when a server in the server inventory is marked as managed URL: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj878306(v=ws.11) *If server3 is not part of domain: NO-YES-NO A domain ist not neccessary to add servers manually because you provide the FQDN and the server forest name. Also you choose the server type and set the manageability status (for example: Managed) If you have chosen the manual provisioning method, you can also create IPAM provisioning GPOs and use them to apply access settings to MANAGED SERVERS. In this case, specific GPO names are NOT REQUIRED. URL: https://protechgurus.com/configure-ipam-windows-server-2016/

upvoted 2 times

Pcservices

4 years, 6 months ago

Its all no go and test it gpo doesny apply itself !

upvoted 2 times

...

Sten111

4 years, 7 months ago

I agree with 1 and 2 being no, but I would disagree with 2 being no based on the information we have here. We cannot see the delegation tab for the GPO, this is where the security for the GPO is set and not in the security filtering. We cannot answer question 2 correctly unless we see the delegation tab. This is a huge oversight that everyone who has commented so far (That 2 is no) has made. Security filtering is for appying the policy, delegation is for access to the policy. It says this right under Security Filtering. It does not matter that nothing is in security filtering, this is expected.

upvoted 1 times

Sten111

4 years, 7 months ago

I meant 1 and 3 for the start of my first sentence. I tested this by doing the first two steps of the IPAM provisioning like we have here and creating the IPAM_DHCP group policy. Set Authenticated Users to have Edit settings, delete, modify security permissions in the DELEGATION tab. Added a DHCP server and it added it to the policy in the SECURITY FILTERING tab. The answer to question 2 is that we cannot answer it. But if it shows the delegation tab we can.

upvoted 1 times

gd1f365

4 years, 7 months ago

It just says Server 3. Not that Server 3 is in Contoso.com, or that the GPO is applied to it. If we just do as Q2 says, then the GPO will not be applied. If we do some other stuff, it might, but that isn't mentioned in the question, so you can't assume.

upvoted 1 times

...

gd1f365

4 years, 7 months ago

and also, the GPO isn't enforced.

upvoted 1 times

Sten111

4 years, 6 months ago

GPO enforcement has nothing to do with the GPO being applied unless you are overriding blocked inheritance.

upvoted 2 times

...

NickTim

4 years, 8 months ago

Got this in a exam

upvoted 3 times

...

jam7272

4 years, 9 months ago

No, No, No - for question 2, security filtering needs to be set in the GPO. IPAM will not do this for you.

upvoted 2 times

...

stefano1856

5 years, 1 month ago

Based on my tests second answer should be true

upvoted 3 times

...

GenjamBhai

5 years, 2 months ago

Server Discovery Domain is not set so no server (DNS or DC will be discovered). On top of this, the DHCP server is not on the domain, so GPO will not apply on it.

upvoted 2 times

stefano1856

5 years, 1 month ago

it is not written anywhere that dhcp is not in the domain

upvoted 2 times

...

lorenc77

5 years, 3 months ago

I think is something else, from the "Security Filtering" of Group Policy none of the groups are specified to be applied. So even we do group policy updated they will filter out (in second option).

upvoted 1 times

stefano1856

5 years, 1 month ago

Security Filtering is mangaged by IPAM itself if you select Managed for one server

upvoted 3 times

...

Nhan

5 years, 5 months ago

after you add a server you need to run the comandlet Invoke-IpamGpoprovisioning, then you need to go tho that server to authorize the IPam server collect information from that server, so Coleman is right the asnwer is NO, NO, NO

upvoted 1 times

stefano1856

5 years, 1 month ago

you run Invoke-IpamGpoprovisioning during server provisioning not after server discovery

upvoted 1 times

...

TMW

6 years ago

If you launch server discovery, in a domain where GPO provisioning is automatic, I believe it will discover domain controllers. It may require a gpupdate /force first, is that why the answer to the last one is no?

upvoted 2 times

rohw

5 years, 4 months ago

Step 3 has no domain selected.

upvoted 2 times

...

dritter

6 years, 3 months ago

A DNS isn't inventoried automatically. You need to use server discovery manually. The security filtering needs to be changed for the DHCP server to be manageable. I am pretty sure DCs are shown even though the group policy needs to be adjusted so it is not filtered out because of the security filtering.

upvoted 4 times

...