Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2016.
You implement a single-domain administrative forest named admin.contoso.com that has Enhanced Security
Administrative Environment (ESAE) deployed.
You have an administrative user named Admin1 in admin.contoso.com.
You need to ensure that Admin1 can manage the domain controllers in contoso.com.
To which group should you add Admin1?
A.
Contoso\\Domain Admins
B.
Admin\\Administrators
C.
Admin\\Domain Admins
D.
Contoso\\Administrators
Explanation:
admin.contoso.com (NetBIOS domain name “ADMIN\\”) is the administrative domain.
contoso.com (NetBIOS domain name “CONTOSO\\” ) is the corporate resource domain.
See below.
https://docs.microsoft.com/en-us/windows-server/identity/securing-privileged-access/securing-privilegedaccess-reference-material
