Exam 70-741 topic 2 question 36 discussion

In the Topic2 question 32 looks like similar. Question #32 You have a server named Server1 that runs Windows Server 2016. Server1 is an IP Address Management (IPAM) server that collects DHCP and DNS logs and events for your entire network. You need to enable a user named TECH1 to create pointer (PTR), host (A) and service location (SRV) records on all of the DNS servers on the network. What should you do on Server1? A. Run the Set-IpamRange cmdlet, and then run the Set-IpamAddressSpace cmdlet. B. Run the Set-IpamCustomField cmdlet, and then run the Set-IpamAccessScope cmdlet. C. From the IPAM node in Server Manager, assign the IPAM DNS Administrator Role to TECH1 and create a new access policy. D. From the IPAM node in Server Manager, assign the IPAM DNS Administrator Role to TECH1 and create a new access scope. As in question 32, I think that correct answer is C. From the IPAM node in Server Manager, assign the IPAM DNS Administrator Role to TECH1 and create a new access policy.

From the IPAM node in Server Manager, create a new user role and a new access policy.

don't know if this going to help anyone. but to create and or manage DNS recourses record, you need to use access scope.

D is the correct answer because: You need to enable a user named TECH1 to create pointer (PTR), host (A) and service location (SRV) records. C would grant Tech1 the ability to create any DNS record type, instead of limiting it as requested.

Also D is a strange answer: Run the Set-IpamRange. The Set-IpamRange cmdlet modifies an existing IP address range that an IP Address Management (IPAM) server manages. Why we have to modify Ipam Range to let TECH1 add a record on a DNS?

C is correct. In any case why would you run Set-IpamRange - that modifies the IP address range that is managed by IPAM. D is wrong by all counts.

Answer is C.

C. From the IPAM node in Server Manager, assign the IPAM DNS Administrator Role to TECH1 and create a new access policy.

D. is probably the correct answer because Microsoft is to stupid to just manage access from using a preconfigured group for this (e.g, answer C). Nobody should have to memorize this kind of crap to administer a system in the real world. If you product is convoluted, then include a checklist so I don't miss a step and bring down the company.

Correct answer is : C . The same question is Q32.

C is correct answer

Answer is C. https://docs.microsoft.com/en-us/windows-server/networking/technologies/ipam/create-an-access-policy

Answer is C

Why D is the correct answer, anyone can explain? What are the actual commands? If B end with creating a new access scope, I think B may be the correct answer.