Admin1 is 100% available to preform, however how about the Admin 3. it is domain admin in child domain, I think Admin3 can preform create server in child domain.
Correct Answer: - C
Tested in LAB.
Reason -
As per the case study, Server3 is in canada.contoso.com so while authorizing DHCP in any other domain except the root admin. The account must be an Enterprise Admin.
For root domain: - The account can be a part of Domain Admin or Enterprise Admin.
So, answer is C. Admin 1 only.
As this is not a single domain environment, the following from MS....
"You must authorize the Windows Server DHCP Server role in AD DS before it can begin leasing IP addresses. It's possible to have a single DHCP server providing IP addresses for subnets that contain multiple AD DS domains. Because of this, you must use an Enterprise Administrator account to authorize the DHCP server. In a single-domain environment, membership in Domain Admins is sufficient to authorize a DHCP server."
https://learn.microsoft.com/en-us/training/modules/deploy-manage-dynamic-host-configuration-protocol/3-install-configure-dynamic-host-configuration-protocol
It's possible to have a single DHCP server providing IP addresses for subnets that contain multiple AD DS domains. Because of this, you must use an Enterprise Administrator account to authorize the DHCP server.
In a single-domain environment, membership in Domain Admins is sufficient to authorize a DHCP server.
C is true. I have tested this. even administrator account in child domain was not able to authorize the dhcp server. Only Enterprise admin, which is a group in the root forest.
C
By default, only a administrator which is member of “Enterprise Admins” group can authorize the DHCP which is installed in domain environment. If the other accounts would like to authorize the DHCP server which is a member server in child domain, you may get “Access is denied“.
Only enterprise admin can authorize dhcp. There are ways to delegate but isout of the scope of this question.
https://social.technet.microsoft.com/wiki/contents/articles/14456.windows-server-authorize-dhcp-server-without-enterprise-admin-privileges.aspx
Only an entreprice administrator can authorize a DHCP server
https://learn.microsoft.com/en-us/training/modules/deploy-manage-dynamic-host-configuration-protocol/3-install-configure-dynamic-host-configuration-protocol
Question of the quick review
No, it is not the default behavior that only Enterprise Admins can authorize DHCP servers. The authorization of DHCP servers is typically a domain-specific task, and it doesn't require Enterprise Admin privileges. In a multi-domain forest, Enterprise Admins have wide-ranging administrative rights across the entire forest, but DHCP authorization is not within the scope of their typical responsibilities.
Authorization of DHCP servers is usually handled at the domain level, and permissions for authorizing DHCP servers are delegated to Domain Admins or administrators with specific DHCP authorization rights. This delegation can be done within each domain without needing Enterprise Admin privileges.
The Domain Admins group of the child domain (canada.contoso.com) and the Enterprise Admins group of the parent domain (contoso.com) can authorize DHCP servers in the child domain. Since the DHCP server is located in the child domain, the authorization process will need to be performed by a member of the Domain Admins group of canada.contoso.com or the Enterprise Admins group of contoso.com.
Correct answer C, you need a member of enterprise administrator or delegate permissions to authorizate the dhcp
https://profadmins.com/2015/10/13/authorizing-dhcp-server-by-a-non-enterprise-administrator/
This section is not available anymore. Please use the main Exam Page.AZ-800 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
rimvydukas
Highly Voted 2 years, 8 months agoBlackCat9588
Most Recent 4 months, 3 weeks agomonisshk
10 months agoJoedn
12 months agoSIAMIANJI
1 year agoSanMan_NZ
1 year, 3 months agolucacose
1 year, 6 months agoMR_Eliot
1 year, 8 months agoahenriquez02
1 year, 9 months agoskycrap
1 year, 11 months agoala76nl
2 years agoTroy06
2 years agophi3nix
2 years agoRobs
2 years, 1 month agoNazerRazer
1 year, 6 months agoTylosh
2 years, 1 month agosyu31svc
2 years, 1 month agoraulgar
2 years, 2 months ago