Your network contains an Active Directory forest that contains three domains.
A group named Group1 is configured as a domain local distribution group in the forest root domain.
You plan to grant Group1 read-only access to a shared folder named Share1.Share1 is located in a child
domain.
You need to ensure that the members of Group1 can access Share1.
What should you do first?
A.
Convert Group1 to a universal security group.
B.
Convert Group1 to a global distribution group.
C.
Convert Group1 to a universal distribution group.
D.
Convert Group1 to a domain local security group.
Explanation:
Universal can be used for any domain or forest. Furthermore a Universal group can span multiple domains,
even the entire forest.Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Chapter 5: Install and Administer Active
Directory, Objective 5.3 Create and manage Active Directory groups and Organization units, p. 289-291, 293
http://technet.microsoft.com/en-us/library/cc781446(v=ws.10).aspx http://technet.microsoft.com/en-us/library/
cc755692(v=ws.10).aspx
Universal can be used for any domain or forest. Furthermore a Universal group can span multiple domains,
even the entire forest.
universal group is a security or distribution group that contains users, groups, and computers from any domain in its forest as members. You can give universal security groups rights and permissions on resources in any domain in the forest.
global group is a group that can be used in its own domain, in member servers and in workstations of the domain, and in trusting domains. In all those locations, you can give a global group rights and permissions and the global group can become a member of local groups. However, a global group can contain user accounts that are only from its own domain.
domain local grop is a security or distribution group that can contain universal groups, global groups, other domain local groups from its own domain, and accounts from any domain in the forest. You can give domain local security groups rights and permissions on resources that reside only in the same domain where the domain local group is located.
domain local to the root domain and it needs access in another domain.
universal and global security groups are the only groups that can be used to assign rights in other domains. > so A indeed.