Exam 70-742 topic 1 question 251 discussion

Actual exam question from Microsoft's 70-742

Question #: 251
Topic #: 1

Your network contains an Active Directory forest named adatum.com.
A partner organization has an Active Directory forest named contoso.com.
Adatum.com contains an Active Directory Rights Management Services (AD RMS) cluster installed on a server named adat1.adatum.com.
Contoso.com contains an Active Directory Rights Management Services (AD RMS) cluster installed on a server named cont1.contoso.com.
You need to allow the AD RMS cluster in adatum.com to accept rights account certificates (RACs) from contoso.com.
What should you do?

A. In contoso.com, import the trusted user domain file from adat1.adatum.com
B. In adatum.com, import the trusted publishing domain file from adat1.adatum.com
C. In contoso.com, import the trusted publishing domain file from cont1.contoso.com
D. In adatum.com, import the trusted user domain file from cont1.contoso.com

Show Suggested Answer

Suggested Answer: D 🗳️
References:
https://winintro.ru/rms_help.en/html/59c802d0-3982-432c-b06f-3e148dca0166.htm

by coleman at Dec. 23, 2019, 5:16 a.m.

Comments

Submit Cancel

coleman

Highly Voted 5 years, 6 months ago

answer D. In adatum.com, import the trusted user domain file from cont1.contoso.com is correct. "You need to allow the AD RMS cluster in adatum.com to accept rights account certificates (RACs) from contoso.com." in this question clearly indicates that contoso.com is a trusted user domain(TUD), and adatum.com is a trusted publishing domain (TPD). To create such trust, you have to export TUD as a file, and import that file in to TPD as one of the important steps. https://msdn.microsoft.com/en-us/library/cc755156(v=ws.11).aspx

upvoted 17 times

jelly_baby

5 years ago

This one threw me off. I read it as "Adatum is accepting RACs from Contoso", so assumed Contoso was the publishing domain. Thanks for explaining coleslaw.

upvoted 6 times

STFN2019

4 years, 8 months ago

coleslaw lol

upvoted 5 times

...

promaster

Highly Voted 4 years, 9 months ago

One tip for AD RMS/ADFS questions is to find where the users reside to understand the direction of trust. When you realize that information you'll be less confused about what site is trusting who. ...in this case adatum (accepting RAC ) <<-- <<-- contonso (trusted user domain)....well this is my technique so far .....

upvoted 5 times

yiping

4 years, 5 months ago

it does help a lot, thank u:)))

upvoted 1 times

...

V1980

4 years, 5 months ago

G.O.A.T. second to coleman :o) THANK YOU

upvoted 1 times

...