Question
Your network contains two Active Directory forests and a domain trust as shown in the following exhibit.
The domain trust has the following configurations:
• Name: adatum.com
• Type: External
• Direction: One-way, outgoing
• Outgoing trust authentication level: Domain-wide authentication
The forests contain the users shown in the following table.
| Name | Domain |
| --- | --- |
| User1 | adatum.com |
| User2 | contoso.com |
| User3 | east.contoso.com |
The forests contain the network shares shown in the following table.
| Name | In domain |
| --- | --- |
| Share1 | adatum.com |
| Share2 | contoso.com |
| Share3 | east.contoso.com |
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Explanation
Statement 1 (Yes): The trust is configured in east.contoso.com and is named after the other domain, adatum.com. A one-way, outgoing trust means east.contoso.com (the trusting, resource domain) trusts adatum.com (the trusted, account domain). Accounts from adatum.com can therefore be resolved and granted access to resources in east.contoso.com. User1 is in adatum.com and Share3 is in east.contoso.com, so User1 can be assigned permissions for Share3. Because the authentication level is domain-wide, no per-server Allowed to Authenticate permission is needed.
Statement 2 (No): User2 is in contoso.com and Share1 is in adatum.com. adatum.com trusts neither contoso.com nor east.contoso.com, because the trust only goes one way. An external trust is also non-transitive, so it does not reach contoso.com through the parent-child trust. User2 cannot be assigned permissions for Share1.
Statement 3 (No): User3 is in east.contoso.com and Share1 is in adatum.com. Access flows in the opposite direction to the trust: adatum.com accounts can reach east.contoso.com resources, not the other way round. To let east.contoso.com users reach adatum.com resources, adatum.com would need its own outgoing trust to east.contoso.com, or the trust would need to be two-way. User3 cannot be assigned permissions for Share1.
