Microsoft
70-647 · Question #104
70-647 Question #104: Real Exam Question with Answer & Explanation
Sign in or unlock 70-647 to reveal the answer and full explanation for question #104. The question stem and answer options stay visible for context.
Question
Your network consists of two Active Directory forests. The Active Directory forests are configured as shown in the following table. (Click the Exhibit) The servers in both forests run Windows Server 2008. A forest trust exists between the fabrikam.com forest and the contoso.com forest. Fabrikam.com has a server named server1.fabrikam.com. Contoso.com has a global group named ContosoSales. Users in the ContosoSales global group access an application on server1.fabrikam.com. You discover that users from other groups in the contoso.com domain can log on to servers in the fabrikam.com domain. You need to implement an authentication solution to meet the following requirements: - Users in the ContosoSales global group must be able to access server1.fabrikam.com. - Users in the ContosoSales global group must be denied access to all other servers in the fabrikam.com forest. - All other users in the contoso.com domain must be able to access only resources in the contoso.com forest. What should you do?
Options
- AReplace the existing forest trust with an external trust between the contoso.com domain and
- BReplace the existing forest trust with an external trust between the contoso.com domain and
- CSet the authentication scope of the existing forest trust in the fabrikam.com domain to Allow
- DSet the authentication scope of the existing forest trust in the fabrikam.com domain to Allow
Unlock 70-647 to see the answer
You've previewed enough free 70-647 questions. Unlock 70-647 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.