Upgrading Your Skills to MCSA: Windows Server 2016 — Question 59

You have a server named Server1 that runs Windows Server 2016.
Server1 is an IP Address Management (IPAM) server that collects DHCP and DNS logs and events for your entire network.
You need to enable a user named TECH1 to create pointer (PTR), host (A) and service location (SRV) records on all of the DNS servers on the network.
What should you do on Server1?

Answer options

• A. From the IPAM node in Server Manager, create a new user role and a new access policy.
• B. From the IPAM node in Server Manager, create a new user role and a new access scope.
• C. Run the Set-IpamCustomField cmdlet, and then run the Set-IpamAccessScope cmdlet.
• D. Run the Set-IpamRange cmdlet, and then run the Set-IpamAccessScope cmdlet.

Correct answer: B

Explanation

The correct answer is B because creating a new access scope allows you to define the permissions for TECH1 to manage DNS records on all DNS servers. Option A is incorrect as access policies do not specifically grant the necessary permissions for record creation. Options C and D involve cmdlets that do not directly address the requirement to establish user permissions for creating DNS records.