Exam 70-742 All Questions

View all questions & answers for the 70-742 exam

Exam 70-742 topic 1 question 262 discussion

Actual exam question from Microsoft's 70-742

Question #: 262
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You network contains an Active Directory forest named contoso.com. The forest contains an Active Directory Rights Management Services (AD RMS) deployment.
Your company establishes a partnership with another company named Fabrikam, Inc. The network of Fabrikam contains an Active Directory forest named fabrikam.com and an AD RMS deployment.
You need to ensure that the users in contoso.com can access rights protected documents sent by the users in fabrikam.com.
Solution: From AD RMS in contoso.com, you configure fabrikam.com as a trusted publisher domain.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️
By default, an AD RMS Licensing Server can issue use licenses for only content where it originally issued the publishing license. In some situations, this may not be acceptable. In order to specify a cluster that is allowed to issue use licenses for content protected by a different cluster, the first cluster must be defined as a trusted publishing domain. If content was published by another certification cluster either in your organization, for example, a subsidiary organization in another forest, or in a separate organization, your AD RMS cluster can grant use licenses to users for this content by configuring a Trusted Publishing Domain on your AD
RMS cluster. By adding a Trusted Publishing Domain, you set up a trust relationship between your AD RMS cluster and the other certification cluster by importing the Trusted Publishing Certificate of the other cluster.
References:
https://books.google.co.za/books?id=gjR-BAAAQBAJ&pg=PA397&lpg=PA397&dq=configure+a+partners+forest+as+a+trusted+publishing+domain+-+AD
+RMS&source=bl&ots=mohQXTyW9s&sig=NJ7oFHuLYOs72o9EM-
yQiIscUW8&hl=en&sa=X&ved=0ahUKEwjuivW24sPbAhWGRMAKHQcEB6EQ6AEIOzAD#v=onepage&q=configure%20a%20partners%20forest%20as%20a%
20trusted%20publishing%20domain%20-%20AD%20RMS&f=false

by coleman at Dec. 2, 2019, 2:13 p.m.

Comments

Submit Cancel

Person

Highly Voted 5 years, 6 months ago

For contoso, fabrikam sending documents, so fabrikam become trusted publishing domain, and contoso become trusted user domain. So from Contoso you configure fabrikam as trusted publising domain, and from fabrikam you configure contoso as trused user domian.

upvoted 16 times

simcauley

5 years, 5 months ago

Agreed, stated answer is correct.

upvoted 6 times

...

culcal

Most Recent 4 years, 5 months ago

A is the correct answer. These sites were helpful for me: https://www.itprotoday.com/active-directory/active-directory-rights-management-services-secure-collaboration https://social.technet.microsoft.com/wiki/contents/articles/8240.ad-rms-how-to-export-tud-and-tpd-keys.aspx

upvoted 1 times

...

lofzee

4 years, 5 months ago

A is correct. From the contoso domain, you configure fabrikam to be the 'trusted publisher', because fabrikam is 'sending or publishing' data to contoso... so you need to add fabrikam as a 'trusted' domain, into the contoso AD RMS. You could also achieve the same thing using a TUD (trusted user domain), as long as its configured from contoso.com.

upvoted 1 times

lofzee

4 years, 5 months ago

ignore that last line 'You could also achieve the same thing using a TUD (trusted user domain), as long as its configured from contoso.com.' Its absolute garbage lol, the rest is correct. I was not concentrating properly.

upvoted 1 times

...

Nazrul

4 years, 7 months ago

Trusted Publishing Domains allow an AD RMS cluster to issue end-use licenses for content that was originally published by a different AD RMS cluster. https://techcommunity.microsoft.com/t5/microsoft-security-and/sharing-protected-documents-when-partners-have-an-ad-rms/ba-p/247331

upvoted 1 times

...

Kamikazekiller

4 years, 11 months ago

answer is: A. YES

upvoted 2 times

V1980

4 years, 6 months ago

Nope, see "From AD RMS in contoso.com, you configure fabrikam.com as a trusted publisher domain." Why would rights on the recipient need to change its rights/perms? The publisher should be amending their own rights/perms.

upvoted 1 times

Robbie

4 years, 5 months ago

look at it this way, the rights protected documents are coming into contoso.com, hence the need to trust the publishing domain.

upvoted 1 times

...

coleman

5 years, 6 months ago

the answer is correct. A. yes

upvoted 2 times

coleman

5 years, 6 months ago

sorry my fault. the answer is B.NO

upvoted 1 times

coleman

5 years, 6 months ago

the solution must be : From AD RMS in fabrikam.com, you configure contoso.com as a trusted user domain.

upvoted 2 times

boishin

5 years, 4 months ago

this is the same written in the question as solution - From AD RMS in fabrikam.com, you configure contoso.com as a trusted publisher domain. In that case the answer should be A

upvoted 1 times

V1980

4 years, 6 months ago

upvoted 1 times

...

GenjamBhai

4 years, 11 months ago

A is ok Create TPD for publishing org from the user org Create TUD for user org from the publishing org

upvoted 2 times

GenjamBhai

4 years, 11 months ago

https://techcommunity.microsoft.com/t5/microsoft-security-and/sharing-protected-documents-when-partners-have-an-ad-rms/ba-p/247331#:~:text=Trusted%20Publishing%20Domains%20allow%20an,to%20protect%20and%20consume%20content.

upvoted 2 times

...