nerdexam
Microsoft

70-647 · Question #74

70-647 Question #74: Real Exam Question with Answer & Explanation

The correct answer is A. Create a one-way forest trust so that Contoso trusts Fabrikam.. To ensure that that the users of TechMasters.com can access resources only on the file servers of Contoso.com and the users of Contoso.com cannot access any resource on fabrikam.com, you need to create a one-way forest trust so that Contoso can trust fabrikam and allow the users

Question

Your company named Contoso and another company named Fabrikam establish a partnership. The Contoso network consists of one Active Directory domain named contoso.com. File servers are installed on the contoso.com domain. All file servers run Windows Server 2008. The Fabrikam network consists of one Active Directory forest named fabrikam.com. You need to plan a solution to enable Fabrikam users to access resources on the file servers. The solution must meet the following requirements: - Ensure that Fabrikam users can access resources only on the file servers. - Ensure that Contoso users are denied access to Fabrikam resources. What should you do first?

Options

  • ACreate a one-way forest trust so that Contoso trusts Fabrikam.
  • BCreate a one-way forest trust so that Fabrikam trusts Contoso.
  • CCreate a one-way forest trust so that Contoso trusts Fabrikam.
  • DCreate a one-way forest trust so that Fabrikam trusts Contoso.

Explanation

To ensure that that the users of TechMasters.com can access resources only on the file servers of Contoso.com and the users of Contoso.com cannot access any resource on fabrikam.com, you need to create a one-way forest trust so that Contoso can trust fabrikam and allow the users of Contoso to access its resources. Choosing Selective Authentication will allow you to specify which users in the remote domain have access to which of the local resources. You need to select this option so that you can restrict the access to only file server resources. Domain-Wide Authentication cannot be used because it will authenticate all users in the remote forest for all resources in the local forest. domain have access to local resources

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 70-647 Practice