Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012. The forest contains 20 member servers that are configured as file servers. All domain controllers run Windows Server 2016.
You create a new forest named contosoadmin.com.
You need to use the Enhanced Security Administrative Environment (ESAE) approach for the administration of the resources in contoso.com.
Which two actions should you perform? Each correct answer presents part of the solution.
A . Configure contoso.com to trust contosoadmin.com.
B . From the properties of the trust, enable selective authentication.
C . Configure contosoadmin.com to trust contoso.com.
D . From the properties of the trust, enable forest-wide authentication.
E . Configure a two-way trust between both forests.
Answer: AB
Explanation:
References:
https://docs.microsoft.com/en-us/windows-server/identity/securing-privileged-access/securing-privilegedaccess-reference-material#esae-administrative-forest-design-approach
Leave a Reply