Exam 70-741 topic 2 question 32 discussion

I think the correct answer is "C. From the IPAM node in Server Manager, assign the IPAM DNS Administrator Role to TECH1 and create a new access policy." First: When we want enable user to get more permissions, we must assign him granular permission. We can customize the permission in Control Access\Role. There if the permission doesnt exist, we create it. Second: In Control Access\access scope we crete the scope that we want assign to user. In this case, tell us "on all of the DNS servers on the network.", so the scope is Golobal and created by default. Third: In Control Access\access policy we create the policy and we associate the user with the granular permission and scope. If we don create the access policy, the user cant cant create register PTR ,A or SRV because he will not have permissions. So, I think the correct answer is C.

Answer is C

The default and only scope in IPAM when it is first installed is the 'Global' scope. So if you assign the role for DNS admin to the user by creating a policy you don't need to do anythign else. Because in this case you want to give them access to ALL DNS servers (i.e. Global scope is fine) and they are restricted from other admin tasks because they are only DNS admins. So that will restrict them to DNS servers only.

C. From the IPAM node in Server Manager, assign the IPAM DNS Administrator Role to TECH1 and create a new access policy.

I agree with @Person

iwe need create scope and assign to specific zone before creating policy - here we dont need to create any scope as talking about entire network and only we need create new policy and assign to tech1 so correct answer is C

its doesnt make sense for TECH to create a new scope therefore C is correct answer.

D. seems wrong. I don't think you need to create a new access scope, because you have to give TECH1 permissions to administer all the dns servers. I would just use global scope. But C. sounds weird as well: "C. From the IPAM node in Server Manager, assign the IPAM DNS Administrator Role to TECH1 and create a new access policy. " "assign the IPAM DNS Administrator Role to TECH1" - what does it mean? how do you assign a role? you create an access policy. Assign tech1 DNS administrator role and then create an access policy doesn't make sense to me. It would make sense if it sounded like this: "From the IPAM node in Server Manager create a new access policy and assing the IPAM DNS Administrator Role to TECH1".

I think answer is C Because IPAM Access Scopes has no management function, but IPAM Access Policies can create access role permissions

From the IPAM node in Server Manager, create a new user role and a new access policy.