Your network contains two Active Directory forests named contoso.com and fabrikam.com. Each forest contains one domain. A two-way forest trust exists between the forests.
You plan to add users from fabrikam.com to groups in contoso.com.
You need to identify which group you must use to assign users in fabrikam.com access to the shared folders in contoso.com.
To which group should you add the users?
A.
Group 1: Security Group – Domain Local.
B.
Group 2: Distribution Group – Domain Local.
C.
Group 3: Security Group – Global.
D.
Group 4: Distribution Group – Global.
E.
Group 5: Security Group – Universal.
F.
Group 6: Distribution Group – Univeral.
Explanation:
I think A is wrong here. You would need to use Universal groups to assign users across forests.Domain local groups Groups that are used to grant permissions within a single domain. Members of domain local groups can include only accounts (both user and computer accounts) and groups from the domain in which they are defined.
Global groups Groups that are used to grant permissions to objects in any domain in the domain tree or forest. Members of global groups can include only accounts and groups from the domain in which they are defined.
Universal groups Groups that are used to grant permissions on a wide scale throughout a domain tree or forest. Members of global groups include accounts and groups from any domain in the domain tree or forest.
Security groups Groups that can have security descriptors associated with them. You define security groups in domains using Active Directory Users And Computers.
Distribution groups Groups that are used as e-mail distribution lists. They can’t have security descriptors associated with them. You define distribution groups in domains using Active Directory Users And Computers.
http://technet.microsoft.com/en-us/library/bb726978.aspx