Your network contains an Active Directory forest.
The forest contains two domains named contoso.com and fabrikam.com.
The functional level of the forest is Windows Server 2003.
You have a domain outside the forest named adatum.com.
You need to configure an access solution to meet the following requirements:
– Users in adatum.com must be able to access resources in contoso.com.
– Users in adatum.com must be prevented from accessing resources in fabrikam.com.
– Users in both contoso.com and fabrikam.com must be prevented from accessing resources in adatum.com.
What should you create?
A.
a one-way external trust from adatum.com to fabrikam.com
B.
a one-way realm trust from fabrikam.com to adatum.com
C.
a one-way realm trust from adatum.com to fabrikam.com
D.
a one-way external trust from fabrikam.com to adatum.com
Explanation:
A)
A one-way trust is a unidirectional authentication path that is created between two domains. This means that in a one-way trust between Domain A and Domain
B, users in Domain A can access resources in Domain B. However, users in Domain B cannot access resources in Domain A. This would allow adatum.com users
access to contoso which is desired. B. This would allow contoso.com users access to adatum which must be prevented and used for non windows realm to AD.
C)
This would allow adatum.com users access to contoso which is desired but realm trust types are used for non windows realm to AD.
D)
This would allow adatum users access to contoso which must be prevented and You need to make trust relationship where domain contoso.com trusts
adatum.com. NOTE: On exam the domain names were changed, so understand the question well
http://technet.microsoft.com/en-us/library/cc728024(v=ws.10).aspx
As far as I see it all given options are wrong.
Task is to allow users in adatum to access resources on contoso domain and prevent them access to fabrikam domain.
What am I missing here?
0
0
All answers are wrong.
We expect to see: a one-way external trust from contoso.com to adatum.com
8
0
@Rwing, remember the questions are not always right, but the solution is missing. The correct answer is: a one-way external trust from contoso.com to adatum.com
It is ONLY users inadatum.com that require access to contoso.com and fabricam.com.
2
0
All answers are wrong.
Correct Answer would be One way external trust from contoso.com to adatum.com.
3
0
Chris is wrong, did the 70-412 today and this is one of the question
0
3
You sure? I notice a lot of questions where the wording is off in the problem that you need to solve. I’m wondering if the person who posted these questions are getting the questions and answers mixed up.
There’s no correct answer within the given choices. Chris is correct, it needs to be a one-way external trust from contoso.com to Adatum.com.
The way to remember this (how I would figure this out at first), would be to think of someone who has a car that someone else wants to borrow. The person with the resource (i.e. the car) would have to trust the person who wants to borrow it. The car owner is the TRUSTING party, the other person is the TRUSTED party. Therefore, it would be a one-way trust from the person who owns the car to the person who wants to borrow the car.
3
0