You have configured a forest trust relationship between the Adatum forest and the Contoso
forest. You want to ensure that users from the Contoso forest can authenticate only when
needing to access resources in the Adatum forest using the username@secure.contoso.com
UPN rather than any other UPN that is available for them.
Which of the following should you use to accomplish this goal?
A.
SID filtering
B.
Name suffix routing
C.
Shortcut trust
D.
External trust
Answer is B.
http://www.rebeladmin.com/tag/name-suffix-routing/
“Name Suffix Routing
In an organization it may have different UPN (User Principle Name) suffixes used with in its forest. For example Contoso LTD. May use contoso.com, mycontoso.net, companyA.org as name suffixes. But when you creating a trust you may not need to allow users from all these suffixes. With Name suffix routing we can enable or disable the UPN suffixes which will involve with the trust operations.”
5
0