Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreeIPA domain and an Active Directory domain?

Question

Options

• Aipa trust-add --type ad addom --admin Administrator --password
• Bipa-ad -add-trust --account ADDOM\Administrator--query-password
• Cnet ad ipajoin addom -U Administrator -p
• Dtrustmanager add --domain ad: //addom --user Administrator -w
• Eipa ad join addom -U Administrator -w

• A
  88% (43)
• B
  2% (1)
• D
  4% (2)
• E
  6% (3)

Explanation

ipa trust-add is the correct FreeIPA CLI subcommand for establishing cross-realm trusts, and option A uses the proper syntax: --type ad specifies an Active Directory trust, the positional argument is the AD domain name, and --admin/--password provide the AD admin credentials needed to negotiate the trust relationship.

The distractors are all fabricated commands: B invents ipa-ad -add-trust, which is not a real tool; C uses net ad ipajoin, which conflates Samba's net utility with IPA-specific operations in a non-existent way; D invents trustmanager, which doesn't exist in either FreeIPA or AD tooling; E uses ipa ad join, which is not a valid ipa subcommand structure.

Memory tip: Think "IPA trust-add, type ad" - you're adding a trust to an AD domain, and the command reads almost like plain English. If you remember that all FreeIPA CLI operations follow the pattern ipa <object>-<action>, you can eliminate anything that doesn't match that structure.

No community discussion yet for this question.