In the module "Domain trust primer". I think there is a mistake in the graphical representation of the various trust types. Tree-roots is described as "A two-way transitive" but it is one way on the graphic.