1.In a one-way trust where Domain A trusts Domain B, which direction does access flow?
2.Why is the forest the real security boundary in Active Directory, rather than the domain?
3.What is SID filtering, and why does its presence on inter-forest trusts matter?
4.If you compromise a child domain in a multi-domain forest, what does that typically mean for the parent domain?
5.What is the key difference between intra-forest and inter-forest trusts from a security perspective?
6.A client asks: 'We have separate domains for each division — doesn't that keep them secure from each other?' How should you respond?