Configuring Advanced Windows Server 2012 Services — Question 76

You have configured a forest trust relationship between the Adatum forest and the Contoso forest. You want to ensure that users from the Contoso forest can authenticate only when needing to access resources in the Adatum forest using the[email protected]UPN rather than any other UPN that is available for them.
Which of the following should you use to accomplish this goal?

Answer options

• A. SID filtering
• B. Name suffix routing
• C. Shortcut trust
• D. External trust

Correct answer: B

Explanation

Using Name suffix routing allows you to specify how UPNs are resolved across forests. This ensures that Contoso users can only authenticate using the designated [email protected] UPN for access to Adatum resources. The other options, such as SID filtering and external trust, do not provide the specific UPN routing required for this scenario.