ISC2 Systems Security Certified Practitioner (SSCP) Practice Question
An enterprise has a Windows Active Directory forest named corp.example.com. It recently acquired a company that runs its own forest, sub.example.com. Only users from sub.example.com must access shared folders in corp.example.com, and management wants to ensure that corp.example.com accounts can never access resources in sub.example.com. Which trust relationship should the administrator configure to satisfy this requirement while keeping administration simple?
Create an external, non-transitive trust with selective authentication enabled between the two forests.
Create a one-way incoming trust in corp.example.com so that corp.example.com trusts sub.example.com.
Create a one-way outgoing trust from corp.example.com to sub.example.com.
Create a two-way transitive forest trust between corp.example.com and sub.example.com.
A one-way incoming trust configured on the corp.example.com side means that corp.example.com (the trusting domain) accepts authentication decisions made by sub.example.com (the trusted domain). As a result, users in sub.example.com can be granted access to resources in corp.example.com, but the reverse is not possible because the trust is not bidirectional. A two-way transitive trust or a forest trust would permit access in both directions, violating the requirement. A one-way outgoing trust from corp to sub would invert the direction, preventing subsidiary users from reaching parent resources. An external, non-transitive trust with selective authentication still requires configuring the correct one-way direction; choosing it adds unnecessary complexity without additional benefit in this scenario.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a one-way incoming trust in Active Directory?
Open an interactive chat with Bash
How does selective authentication differ from other trust configurations?
Open an interactive chat with Bash
Why is a two-way transitive trust unsuitable for this situation?
Open an interactive chat with Bash
ISC2 Systems Security Certified Practitioner (SSCP)
Access Controls
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .