You are the network administrator for Company. The company consists of two subsidiaries named Contoso, Ltd, and City Power & Light. The network contains two Active Directory forests named contoso.com and cpand1.com. The functional level of each forest is Windows Server 2003. A two- way forest trust relationship exists between the forests. You need to achieve the following goals:

Users in the contoso.com forest must be able to access all resources in the cpand1.com forest.

Users in the cpand1.com forest must be able to access only resources on a server named

HRApps.contoso.com. You need to configure the forest trust relationship and the resources on HRApps.contoso.com to achieve the goals. Which three actions should you take? (Each correct answer presents part of the solution. Choose three)

A.
On a domain controller in the contoso.com forest, configure the properties of the incoming forest trust relationship to use selective authentication.

B.
On a domain controller in the contoso.com forest, configure the properties of the incoming forest trust relationship to use forest-wide authentication.

C.
On a domain controller in the cpand1.com forest, configure the properties of the incoming forest trust relationship to use selective authentication.

D.
On a domain controller in the cpand1.com forest, configure the properties of the incoming forest trust relationship to use forest-wide authentication.

E.
Modify the discretionary access control list (DACLs) on HRApps.contoso.com to allow access to the Other Organization security group.

F.
Modify the discretionary access control lists (DACLs) on HRApps.contoso.com to deny access to This Organization security group.