DRAG DROP
Contoso, Ltd. Recently merged with Fabrikam, Inc. Each company has an Active Directory Domain Services (AD
RS) domain. You are managing the SharePoint environment in each domain.
You need to enable users in the Fabrikam.com domain to access the Contoso SharePoint farm but prevent
users in the Contoso.com domain from accessing resources in the Fabrikam SharePoint farm event if they have
been explicitly granted access to a site.

Answer: See the explanation

Explanation:
On-way forest trust
Security groups
web application policy