AZ-802 Practice Question: Implement and Manage On-Prem and Hybrid Networking
You are deploying IP Address Management (IPAM) on a Windows Server 2022 instance to manage your hybrid environment. You choose the Group Policy-based provisioning method. Which requirement must be met for the IPAM server to successfully manage the domain controllers and DHCP servers?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Invoke-IpamGpoProvisioning must be run with a unique GPO prefix.
IPAM requires specific permissions and firewall rules to collect data from managed servers. When using GPO-based provisioning, the IPAM server uses the GPOs to automate the configuration of these settings across the domain. Without the correct GPO prefix and security filtering, the managed servers will not allow the IPAM server to access their data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The IPAM server must be a Domain Controller.
Why it's wrong here
The IPAM feature should never be installed on a Domain Controller as it requires different security contexts and can lead to resource contention. Microsoft recommends installing IPAM on a standalone member server within the domain to ensure proper isolation of management functions and to adhere to security best practices.
- ✗
The GPOs must be manually linked to each individual server object.
Why it's wrong here
GPOs are typically linked at the domain level or to specific Organizational Units (OUs) rather than individual server objects. The IPAM provisioning process handles the creation and linking of these policies, and manual linking to individual objects is an inefficient administrative task that contradicts the automation benefits of using IPAM.
- ✓
Invoke-IpamGpoProvisioning must be run with a unique GPO prefix.
Why this is correct
The PowerShell cmdlet Invoke-IpamGpoProvisioning creates the necessary Group Policy Objects with a specified prefix. This prefix is used by the IPAM server to identify and apply settings to managed servers. This step is essential for establishing the security permissions and firewall exceptions required for centralized IP address management.
- ✗
The IPAM server must have the Web Server (IIS) role removed.
Why it's wrong here
IPAM actually requires several web-related components and internal Windows services to provide its management console and data collection capabilities. Removing the web components would break the IPAM functionality, as the management infrastructure relies on standard web protocols and services for communication between the management console and the underlying database.
Visual reference
About these practice questions
One of 116 original AZ-802 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This AZ-802 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-802 exam.