Your network contains two Active Directory forestsnamed contoso.comand nwtraders.com.
A two-way forest trustexists between contoso.comand nwtraders.com.
The forest trustis configuredto use selective authentication.
Contoso.comcontains a servernamed Server1.
Server1contains a shared foldernamed Marketing.
Nwtraders.comcontains a global groupnamed G_Marketing.
The Change share permissionand the Modify NTFS permissionfor the Marketing folderare assigned to
the G_Marketing group.
Members of G_Marketing report that they cannot access the Marketing folder.
You need to ensure that the G_Marketing members can access the folder from the network.
What should you do?

A.
From Windows Explorer, modify the NTFS permissions of the folder.

B.
From Windows Explorer, modify the share permissions of the folder.

C.
From Active Directory Users and Computers, modifythe computer object for Server1.

D.
From Active Directory Users and Computers, modifythe group object for G_Marketing.

Explanation:
Reference:
MS Press – Self-Paced Training Kit (Exam 70-640) (2nd Edition, July 2012)
page 643-644
After you have selected Selective Authentication for the trust, no trusted users will be able to access resources
in the trusting domain, even if those users have been given permissions. The users must also be assigned the
Allowed To Authenticate permission on the computer object in the domain.
To assign this permission:
1. Open the Active Directory Users And Computers snap-in and make sure that Advanced Features is
selected on the View menu.
2. Open the properties of the computer to which trusted users should be allowed to authenticate—that
is, the computer that trusted users will log on to or that contains resources to which trusted users have been
given permissions.
3. On the Security tab, add the trusted users or a group that contains them and select the Allow check box for
the Allowed To Authenticate permission.