Yournetwork contains an Active Directory forest.
The forest contains two domains named contoso.com and fabrikam.com.
The functional level of the forest is Windows Server 2003.
Youhave a domain outside the forest named litwareinc.com.
Youneed to configure an access solution to meet the following requirements:
Users in litwareinc.com must be able to access resources on a server named Server1 in
contoso.com.
Users in the contoso.com forest must be prevented from accessing any resources in
litwareinc.com.
Users in litwareinc.com must be prevented from accessing any other resources in the
contoso.com forest.
Which three actions should you perform? (Each correct answer presents part of the solution.
Choose three.)
A.
Configure SID filtering on the trust.
B.
Configure forest-wide authentication on the trust.
C.
Create a one-way forest trust.
D.
Create a one-way external trust
E.
Modify the permission on the Server1 object.
F.
Configure selective authentication on the trust.
The answer is correct
2
2
I don’t understand why an external trust is needed, the question states that both domains are part of the same forest.
According to this https://technet.microsoft.com/en-us/library/cc732859(v=ws.11).aspx “You can create an external trust to form a one-way or two-way, nontransitive trust with domains that are outside your forest”
Also check https://technet.microsoft.com/en-us/library/cc771397(v=ws.11).aspx and https://technet.microsoft.com/en-us/library/cc730798(v=ws.11).aspx
Confused 😐
0
0
2 are yes(contoso/fabrikam), but there’s a 3rd outside the forest (litwareinc)
1
0
When is there even any mention of “Server 1” ?
0
0
Users in litwareinc.com must be able to access resources on a server named Server1 in
contoso.com
3
0