How does a trusting Active Directory domain controller validate credentials that exist only in the trusted domain?

Question

Suppose an Active Directory domain controller smallapp.local which trusts another domain bigenterprise.local.

There is a user Alice in the <