Administering Windows Server Hybrid Core Infrastructure AZ-800 — Question 62

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the domain controllers shown in the following table. You have a partner organization that has an AD DS forest named fabrikam.com. You create a trust relationship between contoso.com and fabrikam.com. You need to configure selective authentication for the trust relationship. Which domain controller should be granted permissions to fabrikam.com?