Administering Windows Server Hybrid Core Infrastructure (AZ-800) Practice

What does the transitivity of a two-way forest trust provide?

1. All users in the trusted forest can authenticate for services

2. If a forest trust exists between Forest 1 and Forest 2, it implicitly trusts Forest 3

3. All domains in both trusted forests trust each other

4. Only the root domains of each forest trust each other

The correct answer is: All domains in both trusted forests trust each other

The transitivity of a two-way forest trust establishes a reciprocal relationship between the root domains of both forests, creating a situation where all domains within each trusted forest can authenticate with each other. This means that when a two-way forest trust is configured, users and services in one forest can access resources in the other forest, assuming the proper permissions and policies are in place. The forest trust relationship is designed to enable seamless interaction between all domains within the respective forests, enhancing collaboration and resource sharing without needing to set up multiple trusts for each domain individually. When this transitive nature is applied, if one domain in either forest trusts another domain, it effectively means that every domain can trust the others without needing to create separate trust relationships each time. Thus, this inter-domain trust model significantly simplifies administration and improves operational efficiency in a multi-forest environment. In contrast, other choices do not accurately convey the nature of a two-way forest trust and its transitivity. For instance, a forest trust does not implicitly include additional forests not explicitly defined in the trust relationship. Similarly, the notion that only root domains are involved in the trust does not consider the full implications of transitive trust across all domains within the forests.