Yournetwork contains one Active Directory forest named contoso.com. The forest contains two
child domains and six domain controllers. The domain controllers are configured as shown in the
following table.
You create a trust between contoso.com and a domain in another forest at a partner company.
You need to prevent the sales.contoso.com and the manufacturing.contoso.com names from being
used in authentication requests across the forest trust.
What should you use?
A.
Set-ADSite
B.
Set-ADReplicationSite
C.
Set-ADDomain
D.
Set-ADReplicationSiteLink
E.
Set-ADGroup
F.
Set-ADForest
G.
Netdom
Explanation:
The Netdom trust command establishes, verifies, or resets a trust relationship between domains.
Parameters include /RemoveTLNEX:
Removes the specified top level name exclusion (DNS Name Suffix) from the forest trust info from
the specified trust. Valid only for a forest transitive non-Windows realm trust and can only be
performed on the root domain for a forest. Netdom trust
https://technet.microsoft.com/sv-se/library/Cc835085(v=WS.10).aspx
This is correct
1
0
what I find a bit confusing is this “Valid only for a forest transitive non-Windows realm trust” in the explanation…the questions does not sound to me that we are talking about non-Windows realm trust, because forest trust is explicitely stated.
Also the explanation is about “Removes the specified top level name exclusion…”, but correct me if I’m wrong, the question asks about the definite opposite.
Maybe this article is more helpful:
http://windowsitpro.com/networking/using-netdom-control-name-suffix-routing-cross-forest-trust
0
0
The wording is confusing, but I have verified in lab environment that the netdom /addTLNEX does work on a Windows Forest Trust.
Additional note: You would use /addTLNEX to add the exclusion.
/RemoveTLNEX will remove an existing exclusion.
netdom trust partnerdomain.com /d:contoso.com /AddTLNEx:sales.contoso.com
netdom trust partnerdomain.com /d:contoso.com /AddTLNEx:manufacturing.contoso.com
0
0