StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · AD DS · AD DS | Configure and manage multi-site, multi-domain, and multi-forest environments · AD DS | Create and manage AD DS security principals · Storage and file services · Storage and file services | Configure and manage Windows Server file shares

Practice question 469 of 506 · hard

Forest A contains employee accounts; Forest B hosts a Windows file server. A trust is configured so B trusts A, with selective authentication. An A user has been added through approved group nesting to a B resource group that has share and NTFS access, but authentication to the server is still denied. What is the missing trust-specific authorization?

Choose the single best answer.

  1. A.Grant the user Full Control on the share and folder again, without changing selective-authentication rights
  2. B.A second reverse trust so A also trusts B, regardless of the required direction of access
  3. C.A DNS CNAME that makes the file server appear to reside in Forest A
  4. D.Allowed to authenticate permission for the approved A principal on the B file-server computer object
Show the answer and explanation

✓ Correct answer

  • Allowed to authenticate permission for the approved A principal on the B file-server computer object

Selective authentication requires Allowed to authenticate on the target computer in addition to existing share and NTFS access. A reverse trust supports the opposite access direction; granting the same resource ACL again does not pass the authentication gate; a DNS alias does not grant that right.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.