70-296 Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Environment for a W2K MCSE Training Course

Demo Question 7.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a forest that contains three Active Directory domains named EliteCertify.com, us. EliteCertify.com and uk. EliteCertify.com respectively. These three domains are located in one site. EliteCertify.com in involved in a joint venture with a partner company named TestLab.com. Similarly to EliteCertify.com, the TestLab.com network consists of a forest that contains three Active Directory domains named testlab.com, east.testlab.com and west.testlab.com respectively. These three domains are located in one site. The functional levels of both forests are set at Windows Server 2003. The following exhibit illustrates the EliteCertify.com and TestLab.com networks: Exhibit: You have been given instruction to set up the appropriate trust relationship between the two forests. Following is a list of requirements for the trust relationship that you should set up for the joint venture: 1. The us. EliteCertify.com users require access to resources that are located in the west.testlab.com domain. 2. The TestLab.com administrators must have the ability to assign permissions for resources in west.testlab.com only to users from the us. EliteCertify.com domain. 3. The EliteCertify.com administrators should NOT have the ability to assign permissions in their domains to the TestLab.com users. You now need to set up an appropriate trust relationship that will comply with all the requirements in cooperation with a TestLab.com administrator. What should you do?

A. You should configure a forest trust with TestLab.com forest trusting EliteCertify.com forest.
B. You should configure a forest trust with EliteCertify.com forest trusting TestLab.com forest.
C. You should configure an external trust with west.testlab.com domain trusting us. EliteCertify.com domain.
D. You should configure an external trust with us. EliteCertify.com domain trusting west.testlab.com domain.


Display Answer

Answer: C

Explanation: An external trust is a trust between a domain in a forest and another domain outside the forest. This second domain can belong to another forest. A trust, per definition, is named from the trusting domain to the trusted domain, i.e. from resources toward security principals. Thus you should configure the external trust relationship where west.testlab.com, trusts the account domain which is us. EliteCertify.com. Incorrect answers: A. A forest trust is a trust between all domains in one forest and all domains in another forest. This would not comply with all the requirements. B. A forest trust is a trust between all domains in one forest and all domains in another forest. This would not comply with all the requirements. D. You should be configuring an incoming trust relationship rather than an incoming one because the direction of a trust relationship is from resources toward security principals.