IPAM Flashcards
What does IPAM stand for?
IP Address Management
What is IPAM?
A Windows Server feature used to deploy, monitor, and administer the IP infrastructure as well as manage all the DHCP and DNS servers their records.
IPAM can only be installed on a domain controller. True or False?
False. IPAM can not be installed on a domain controller but it needs to be installed on a server that is a member of the domain.
What are the options regarding IPAM’s use of a database.
- Windows Internal Database
2. Microsoft SQL server
What are the 6 tasks to properly configure IPAM within the IPAM Overview screen?
- Connect to IPAM Server
- Provision the IPAM Server
- Configure server discovery
- Start server discovery
- Select or add servers to manage and verify IPAM access
- Retrieve data from managed servers
How do you complete the 1st task within IPAM Overview?
The 1st task , Connect to IPAM Server, is completed by clicking on the task link and choosing the designated server with IPAM installed.
How do you complete the 2nd task within IPAM Overview?
The 2nd task, Provision the IPAM Server, is completed by clicking on the task link and going through the “Provision IPAM” wizard.
Within the wizard, you’ll choose which database options you want, either Windows Internal Database or Microsoft SQL Server. *Note: The SQL server must be running SQL Server 2008R2 or later.
On the next screen, you’ll select the provisioning method, either Manual or Group Policy Based. With Group Policy selected, you’ll also type in a GPO name prefix.
After completing the 2nd task within IPAM Overview, what is the next step in configuring IPAM?
- Applying the newly updated group policy to the managed servers by:
- Using the “Invoke-IpamGpoProvisioning” PowerShell cmdlet on the IPAM server.
- Restricting the IPAM group policies to only those managed by IPAM by using the Security Filtering section of each IPAM policy.
- Forcing the group policy on the managed (DHCP, DNS) servers by using a “gpupdate /force” command.
How do you complete the 3rd task within IPAM Overview?
The 3rd task, Configure server discovery, is completed by clicking on the task link and clicking on “Get forests” to initiate a background discovery of trusted forests. Progress of this discovery can be checked by clicking on the “more” link within the yellow bar pop-up in IPAM Overview.
Once the discovery is complete, you’ll click on the link again to add the domain and specify which server roles you want to be discovered; DNS, DHCP, or Domain Controllers and click OK.
How do you complete the 4th task within IPAM Overview?
The 4th task, Start server discovery, is completed by clicking on the task link to start the discovery which was configured in task 3. Progress can be viewed by clicking on “more” in the yellow bar pop-up in IPAM Overview.
How do you complete the 5th task within IPAM Overview?
The 5th task, Select or add servers to manage and verify IPAM access, is completed by clicking on the task link and changing the discovered servers’ “Manageability Status” to “Managed”.
How do you complete the 6th task within IPAM Overview?
The 6th task, Retrieve data from managed servers, is completed by clicking on the task link to start the data collection process.
How do you open IPAM?
Open Server Manager and select IPAM on the left pane.
How do you create a zone in IPAM?
From the IPAM overview screen, select DNS and DHCP Servers on the left IPAM column.
Right cick on the DNS server you want to create the zone in and select Create DNS Zone.
What are the steps in updating DNS zone status in IPAM?
- Within the DNS Zones IPAM column, r-click on each zone and select “Reset Zone Status”
- In the same DNS Zones screen, click TASKS on the top right and in the drop down menu select “Retrieve Server Data”. Progress can be viewed with the Flag icon at the top.
- Select the Refresh icon at the top next to the Flag icon.
Within IPAM, how do you configure zone settings such as name servers, SoA, and zone transfers?
R-click on the zone and select “Edit DNS Zone”.
IPAM can do virtually everything that DNS Manager can do. True or False?
True.
You can launch the original DHCP Manager tool directly from the IPAM interface, if needed. True or False?
True.
How do you confirm you are looking at the most current information when using IPAM?
Click on TASKS, then Retrieve Server Data, then Refresh.
How do you configure Failover for DHCP using IPAM?
Right click on the scope, then select Configure DHCP Failover.
What are 3 main components to IPAM’s Role Based Access Control?
Roles, Access Scopes, and Access Policies
How many IPAM address “blocks” are there by default?
None.
IPAM can attempt a PING and DNS lookup to assist in verifying an IP address that isn’t currently in use, before allocating an address. True or False?
True.
What is a .csv file?
Comma Seperated Value.
Which type of file format can be used to import address information directly into IPAM?
A .csv file. (Comma Seperated Value)
What is the format within a .csv file?
First row is headers comma seperated with the following rows being the data comma seperated.
To view auditing information within IPAM, you would select “Audit Catalog”. True or False?
False. You would click on “Event Catalog”.
What permissions do the IPAM Users group have?
The group can view all information in server inventory, view IP address space, but cannot view IP address tracking data.
What permissions do the IPAM IP Audit Administrators group have?
The group has IPAM Users privileges and can perform IPAM common management tasks and view IP address tracking information.
What permissions do the IPAM ASM Administrators group have?
The group has IPAM Users privileges and can perform IP address space tasks, such as creating an IP address block, in addition to performing other common IPAM management tasks.
What permissions do the IPAM MSM Administrators group have?
The group has IPAM Users privileges and can perform server monitoring and management tasks in addition to common IPAM management tasks.
What permissions do the IPAM Administrators group have?
The group has permissions to view all IPAM data and to perform all tasks.
What PowerShell IPAM cmdlet is used to retrieve information about all the conditional forwarders found on a server (DNS1)?
Get-IpamDnsConditionalForwarder -ServerFqdn “DNS1”
What PowerShell command can be used to retrieve all IP address audit events in IPAM?
Get-IpamIpAuditEvent
What PowerShell cmdlet imports IP address range objects from the specified .csv file into the IPAM server?
Import-IpamRange
What PowerShell cmdlet retrieves information about all the conditional forwarders found on a DNS server?
Get-IpamDnsConditionalForwarder -DnsName dns1.example.com