HOTSPOT
Your network contains three Active Directory forests. The forests are configured as shown in the following table.
A two-way forest trust exists between contoso.com and divisionl.contoso.com. A two-way forest trust also exists
between contoso.com and division2.contoso.com.
You plan to create a one-way forest trust from divisionl.contoso.com to division2.contoso.com.
You need to ensure that any cross-forest authentication requests are sent to the domain controllers in the
appropriate forest after the trust is created.
How should you configure the existing forest trust settings?
In the table below, identify which configuration must be performed in each forest. Make only one selection in
each column. Each correct selection is worth one point.
Hot Area:
Answer: 
Explanation:
There will be a one-way forest trust from division1.contoso.com to division2.contoso.com
Division1 trusts Division2. Division2 must be able to access resources in Division1.
Division1 should not be able to access resources in Division2.
Incorrect. Answers will be
NULL
NULL
Div2
Div1
and name suffix routing is automatically added when you create a trust, so you only need to make exclusions to correct it.
https://www.briefmenow.org/microsoft/how-should-you-configure-the-existing-forest-trust-settings-in-the-table-below-identify-which-configuration-must-be-performed-in-each-forest/
https://blogs.technet.microsoft.com/askds/2009/04/10/name-suffix-routing/
When more than two Forest reside in the same DNS namespace, and the root of that DNS tree is also an Active Directory forest, logic must be added to the Name Suffix Route to ensure authentication traffic is routed to the correct forest root. This can be accomplished by adding Exclusions to the Name Suffix Routes.
1. Exclusions were added to the existing forest trust between REALM and CONTOSO. On the REALM side of the trust properties the following Exclusion had to be added to the *.CONTOSO.COM Name Suffix Route:
TOWN.COUNTY.CONTOSO.COM
NOTE: The * is automatically added in front of the suffix
2. After the new two-way forest trust was created between TOWN and CONTOSO we added the following Exclusion to the *.CONTOSO.COM Name Suffix Route on the TOWN side of the trust:
REALM.COUNTY.CONTOSO.COM
NOTE: The * was automatically added in front of the suffix
1
2