Identity with Windows Server 2016 — Question 164

Your network contains an Active Directory forest named adatum.com.
A partner organization has an Active Directory forest named contoso.com.
Adatum.com contains an Active Directory Rights Management Services (AD RMS) cluster installed on a server named adat1.adatum.com.
Contoso.com contains an Active Directory Rights Management Services (AD RMS) cluster installed on a server named cont1.contoso.com.
You need to allow the AD RMS cluster in adatum.com to accept rights account certificates (RACs) from contoso.com.
What should you do?

Answer options

• A. In contoso.com, import the trusted user domain file from adat1.adatum.com
• B. In adatum.com, import the trusted publishing domain file from adat1.adatum.com
• C. In contoso.com, import the trusted publishing domain file from cont1.contoso.com
• D. In adatum.com, import the trusted user domain file from cont1.contoso.com

Correct answer: D

Explanation

The correct answer is D because importing the trusted user domain file from cont1.contoso.com into adatum.com allows the AD RMS cluster in adatum.com to recognize users from contoso.com. The other options are incorrect as they involve importing files from the wrong domains or incorrect types of files that do not facilitate the acceptance of RACs.