Home » Microsoft » 70-742 » What should you do on each server?
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016.
Server1 has Microsoft System Center 2016 Virtual Machine Manager (VMM) installed. Server2 has IP Address Management (IPAM) installed.
You create a domain user named User1.
You need to integrate IPAM and VMM. VMM must use the account of User1 to manage IPAM. The solution must use the principle of least privilege.
What should you do on each server? To answer, select the appropriate options in the answer area.
Hot Area:
Correct Answer:
Explanation/Reference:
To enable IPAM and Virtual Machine Manager (VMM) integration, you must first configure a user account for VMM on the IPAM server and then configure the IPAM network service plugin in VMM.
VMM must be granted permission to view and modify IP address space in IPAM, and to perform remote management of the IPAM server. VMM uses a “Run As” account to provide these permissions to the IPAM network service plugin. The “Run As” account must be configured with appropriate permission on the IPAM server.
Any local or domain account can be used by VMM to access the IPAM server, but it is recommended to use a unique domain account that will only be used by VMM to connect to the IPAM server.
The minimum required permissions for this scenario is supplied by the IPAM ASM Administrator Role.
References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn783349(v=ws.11)
741174given answer is correct.
https://docs.microsoft.com/en-us/system-center/vmm/network-ipam?view=sc-vmm-1807
A Run-As type account on Server1-the SCVMM server served as the stored identity which Server1 repeatedly uses to connect to Server2 over the network.
On Server2, in order to integrate SCVMM with IPAM, the Run-As account “User1” must at least obtain “IPAM ASM Administrator” role as mentioned by the above
documentation.
70-741