Pop Quiz: Windows Server 2008 R2 Forest Trust
Applies to the "Configuring the Active Directory Infrastructure" objective of Exam 70-640.
Q: A company's directory services team needs to create a forest trust to support selective authentication between the sales.contoso.com and marketing.fabrikam.com user domains.
Which domains of each forest need to participate in the trust? (Choose all that apply.)
Answers are B and D. The Contoso.com and Fabrikam.com are the forest root domains and are used to create the trust for the sales.contoso.com and marketing.fabrikam.com user child domains.
Quick Tip: The command-line tool Netdom can be used to create trusts, as well at the Active Directory Domains and Trusts console.
Reference: Enable Selective Authentication over a Forest Trust
Bonus Question: Which Windows Server 2008 R2 role when installed supports the protection and usage rights assignment of network data? (The answer, of course, will be revealed next time!)
Answer to bonus question from last week:
The Active Directory Migration Tool (ADMT) can be used to restructure domains in a Windows Server 2008 R2 forest.
Andy Barkl, MCT/MCITP/MCSA, A+, Network+, Security+, CCNA has been studying technology for 30 years. Of the last 15 years, he has spent much of his time parting the knowledge and experience he has gained through IT exams, over 300, to help others be prepared and successful. He teaches classes in Phoenix, Ariz. where he has lived most of his life. He can be reached by e-mail at firstname.lastname@example.org.