CIA ASSIGNMENT
Bob works for Company A and Company B and splits his time between both with his laptop. Bob physically works from both offices and needs to access resources on the Active Directory domain of each company. Unfortunately, no trust relationship exists between these two domains.
The IT staff has developed three possible solutions and they want your input (as an Information Security Analyst) on which is the most ‘secure’.
Solution 1. Set Bob up with a network account under each active directory domain: have him log in to whichever one he needs access to at the time. Although he may be physically working from Company A, he will likely still need to access resources from Company B and vice versa.
Solution 2. Create a local profile on Bob’s laptop and have him manually map to the resources he needs access to and set his passwords to never expire on both domains.
Solution 3. Because Company A and Company B are both bound by internal and industry regulations regarding maximum password age, a third (hybrid) solution was developed. This involves Bob working from a local profile (as seen in solution 2) but having to log into each domain once per password cycle to change his passwords before expiration.

In this scenario, the best solution that allows a greater amount of availability and a relatively higher level of security would be solution 3. Granted that Bob would follow other protocols and secure his laptop at all times, this solution will allow him to access to his files readily without having to reconnect or remap his resources; and with the password age restriction, it heightens security by forcing him to change his password at the end of every password cycles. Though solution 3 is the best overall in accommodating both the security standpoint and user friendliness, it is not the best secure solution. Solution 1 would be the most secured out of the