Which of the following actions should you take?

You work as an administrator at Contoso.com. The Contoso.com network consists of an Active
Directory forest that contains a root domain, named Contoso.com, and two child domains, named
us.Contoso.com and uk.Contoso.com. All servers on the Contoso.com network have Windows Server
2012 R2 installed.
The root domain hosts a domain local distribution group, named ENSUREPASSGroup. You are
preparing to issue ENSUREPASSGroup read-only access to a shared folder hosted by the
us.Contoso.com domain.
You want to make sure that ENSUREPASSGroup is able to access the shared folder in the
us.Contoso.com domain.
Which of the following actions should you take?

A.
You should consider re-configuring ENSUREPASSGroup as a universal Admins group.

B.
You should consider re-configuring ENSUREPASSGroup as a universal security group.

C.
You should consider re-configuring ENSUREPASSGroup as a global administrators group.

D.
You should consider re-configuring ENSUREPASSGroup as a local administrators group.