PrepAway - Latest Free Exam Questions & Answers

What should you create?

Your network contains an Active Directory forest. The forest contains two domains named
contoso.com and fabrikam.com. The functional level of the forest is Windows Server 2003.
You have a domain outside the forest named adatum.com.
You need to configure an access solution to meet the following requirements:
Users in adatum.com must be able to access resources in contoso.com.
Users in adatum.com must be prevented from accessing resources in fabrikam.com.
Users in both contoso.com and fabrikam.com must be prevented from accessing resources
in adatum.com.
What should you create?

PrepAway - Latest Free Exam Questions & Answers

A.
a one-way realm trust from contoso.com to adatum.com

B.
a one-way realm trust from adatum.com to contoso.com

C.
a one-way external trust from contoso.com to adatum.com

D.
a one-way external trust from adatum.com to contoso.com

Explanation:
In a One-way: incoming trust, users in your (trusted) domain can be authenticated in the
other (trusting) domain. Users in the other domain cannot be authenticated in your domain.

22 Comments on “What should you create?

  1. bob says:

    A forest trust will create either a one or two-way transitive trust between both forests, so any domains within the trusted forest will also be trusted by the trusting forest. While the external trust will create either a one or two-way non-transitive trust between two domains, so only the trusted domain will be able to authenticate to the trusting domain.




    0



    0
  2. Joe says:

    “Users in adatum.com must be able to access resources in contoso.com”

    You would create an external trust from contoso.com to trust adatum.com

    External trust is a trust between 2 domains only (forest trust is between 2 entire forests), and it will be 1 way because you only need Adatum.com users to access contoso.com




    0



    0
  3. lucasdrums says:

    Answer is = C
    We must remember that trust direction is opposite to access direction.

    One way trust since users in contoso.com must be prevented from accessing resources in adatum.com




    1



    0

Leave a Reply