70-296 Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Environment for a W2K MCSE Training Boot Camp

Demo Question 8.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a forest that contains three Active Directory domains named EliteCertify.com, us. EliteCertify.com and uk. EliteCertify.com respectively. These three domains are located in one site. EliteCertify.com in involved in a joint venture with a partner company named TestLab.com. Similarly to EliteCertify.com, the TestLab.com network consists of a forest that contains three Active Directory domains named testlab.com, east.testlab.com and west.testlab.com respectively. These three domains are located in one site. The functional levels of both forests are set at Windows Server 2003. The following exhibit illustrates the EliteCertify.com and TestLab.com networks: Exhibit: You have been given instruction to set up the appropriate trust relationship between the two forests. Following is a list of requirements for the trust relationship that you should set up for the joint venture: 1. The us. EliteCertify.com users require access to resources that are located in the west.testlab.com domain. 2. The TestLab.com administrators must have the ability to assign permissions for resources in west.testlab.com only to users from the us. EliteCertify.com domain. 3. The EliteCertify.com administrators should not have the ability to assign permissions in the TestLab.com domains to the TestLab.com users. You now need to set up a trust relationship with the appropriate characteristic that will comply with all the requirements with the cooperation of a TestLab.com administrator. What should you do? (Each correct answer presents part of the solution. Choose three.)

A. You should configure an external trust relationship.
B. You should configure a forest trust relationship.
C. You should configure a transitive trust relationship.
D. You should configure a non-transitive trust relationship.
E. You should configure an outgoing trust relationship.
F. You should configure an incoming trust relationship.


Display Answer

Answer: A, D, F

Explanation: Type, Direction, and transitivity are the three main attributes of trusts that can exist in a Windows server 2003 forest. An external trust is a trust between a domain in a forest and another domain outside the forest. This second domain can belong to another forest A trust, per definition, is named from the trusting domain to the trusted domain, i.e. from resources toward security principals. Thus you should configure an incoming trust relationship. Transitivity means that two or more separate trusts can be chained. In this scenario you would require a non-transitive trust. An External trust is by definition non-transitive. Incorrect answers: B. A forest trust is a trust between all domains in one forest and all domains in another forest. This would not comply with all the requirements. C. A transitive trust relationship would mean an internal trust relationship and this scenario requires an external trust relationship which by definition is non-transitive. E. You should be configuring an incoming trust relationship rather than an outgoing one because the direction of a trust relationship is from resources toward security principals.