You want to configure a security relationship by which users in the Melbourne domain of the
Adatum.com forest are able to access resources in the Sydney domain of the Contoso forest.
Users do not require access to resources in any other domains in either forest.
Which of the following should you configure to accomplish this goal?
A.
Configure a forest trust.
B.
Configure an external trust.
C.
Create a shortcut trust.
D.
Configure name suffix routing.
Correct. You need the trust to be nontransitive.
“Nontransitive trust
A nontransitive trust is restricted by the two domains in the trust relationship and does not flow to any other domains in the forest. A nontransitive trust can be a two-way trust or a one-way trust.”
“External trust. A nontransitive trust created between a Windows Server 2003 domain and a Windows NT domain or a Windows 2000 domain or Windows Server 2003 domain in another forest.”
https://technet.microsoft.com/en-us/library/cc739693(v=ws.10).aspx