Home
41.
Which of the following resource records is returned when a zone protected by DNSSEC does not contain the record queried by the client?
  • A.
    NSEC
  • B.
    PTR
  • C.
    RRSIG
  • D.
    CNAME
  • Answer & Explanation
  • Report
Answer : [A]
Explanation :
  • A. Correct: NSEC records are returned when a host record does not exist in a DNSSEC secured zone.
  • B. Incorrect: PTR records are used in reverse lookup zones to point to host records.
  • C. Incorrect: Each record in a DNSSEC secured DNS zone has an associated RRSIG record that allows a DNS client to verify the authenticity of the record.
  • D. Incorrect: A CNAME record, also known as an alias record, points at a host record and allows for an alternate name to be associated with the host record.
Report
Name Email  
42.
You have installed the IPAM feature on a server named IPAM1 that is a member of the Contoso.com domain. You want to confgure the IPAM server to retrieve data from all DHCP servers, DNS servers, and domain controllers in the domain.
You choose the option to use the Group Policy–based provisioning method to discover the servers and you select all three server roles to discover. You start server discovery and all of the DHCP servers, DNS servers, and domain controllers in the domain are discovered. However, they appear in the Server Manager with an IPAM Access Status of Blocked.
You want the IPAM Access Status of the discovered infrastructure servers to appear as Unblocked. What should you do? (Choose all that apply.)
  • A.
    Run the Invoke-IpamGpoProvisioning cmdlet.
  • B.
    Mark the servers as managed.
  • C.
    Add the IPAM server to the local Event Log Readers security group.
  • D.
    Refresh Group Policy on the discovered servers.
  • Answer & Explanation
  • Report
Answer : [A,B and D]
Explanation :
  • A. Correct: Use the Invoke-IpamGpoProvisioning cmdlet to create the GPOs needed to confgure discovered servers for IPAM management.
  • B. Correct: The GPOs created by running the Invoke-IpamGpoProvisioning cmdlet apply only to servers you mark as Managed in IPAM.
  • C. Incorrect: This setting needs to be confgured on the domain controller you want to manage in IPAM, but it is automatically confgured by the GPO created by the Invoke-IpamGpoProvisioning cmdlet. You therefore don’t need to take this step.
  • D. Correct: After running the Invoke-IpamGpoProvisioning cmdlet, you need to refresh Group Policy on the discovered infrastructure servers so that the settings in the newly created GPOs are applied to these servers.
Report
Name Email  
43.
You work as a network administrator for Fabrikam.com, a company with 2,500 employees and offces in New York, London, Paris, and Munich. Each offce site includes its own Active Directory Domain Services domain within the Fabrikam.com forest.
As an administrator, you occasionally need to know the IP address ranges used in various parts of your organization. You want to be able to browse the IP address ranges assigned to each city.
You install IPAM on a server running Windows Server 2012 R2 named IPAM2 in your local offce. You then confgure IPAM; you perform server discovery of the DHCP servers, DNS servers, and domain controllers in your organization; and, fnally, you retrieve addressing data from these servers.
Your goal is to be able to use Server Manager to browse the IP address ranges assigned to each city. Which of the following steps do you need to take? (Choose all that apply.)
  • A.
    Confgure a custom feld.
  • B.
    Create an IP address range group.
  • C.
    Assign custom values to IP address ranges.
  • D.
    Edit the Description feld in IP address ranges.
  • Answer & Explanation
  • Report
Answer : [A, B and C]
Explanation :
  • A. Correct: You need to confgure a custom feld that includes the values New York, London, Paris, or Munich. You can create a new custom feld for these values and name it City or you can use an existing custom feld such as Location and add the four cities as new custom values.]
  • B. Correct: An IP address range group allows you to sort and browse your IP address ranges by any feld you choose.
  • C. Correct: You need to tag each IP address range with the City (or Location) value of New York, London, Paris, or Munich.
  • D. Incorrect: You cannot browse IP addresses based on the values included in the Description tag. To accomplish that, you need an IP address range group.
Report
Name Email  
44.
You have installed the IPAM feature on a server named IPAM3 that is a member of the Litwareinc.com domain. You want to allow a certain user named Pam to manage DHCP servers but not DNS servers through IPAM. You don’t want to assign any additional rights to Pam. Which role should you assign to Pam?
  • A.
    DNS record administrators
  • B.
    IPAM MSM administrators
  • C.
    IPAM ASM administrators
  • D.
    IPAM DHCP administrators
  • Answer & Explanation
  • Report
Answer : [D]
Explanation :
  • A. Incorrect: The DNS record administrator is able to manage DNS resource records through IPAM.
  • B. Incorrect: While the IPAM MSM administrator role allows managing of DHCP servers, it also allows management of DNS servers.
  • C. Incorrect: The IPAM ASM administrator role allows management of address space, not DHCP servers.
  • D. Correct: The IPAM DHCP administrator role allows users assigned the role the ability to manage DHCP servers through IPAM.
Report
Name Email  
45.
You have installed the IPAM feature on a server named IPAM2 that is a member of the margiestravel.com domain. You want to allow a certain user named Chris to manage IP addresses, but he shouldn’t be able to manage IP address spaces, ranges, blocks, or subnets. Which IPAM role should you assign Chris?
  • A.
    IP address record administrator
  • B.
    IPAM ASM administrator
  • C.
    IPAM DHCP reservations administrator
  • D.
    IPAM DHCP scope administrator
  • Answer & Explanation
  • Report
Answer : [A]
Explanation :
  • A. Correct: The IP address record administrator role will allow Chris to manage IP address spaces without giving him permission to manage IP ranges, blocks, or subnets.
  • B. Incorrect: The IPAM ASM administrator role allows a user to manage IP addresses, address spaces, ranges, blocks, and subnets.
  • C. Incorrect: The IPAM DHCP reservations administrator role allows a user to create DHCP reservations.
  • D. Incorrect: The IPAM DHCP scope administrator role allows a user to manage DHCP scopes.
Report
Name Email