You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com
domain, including domain controllers, have windows Server 2016 R2 installed.
You have created and linked a new Group Policy object (GPO) to an organizational unit (OU), named ENSUREPASSServ, which host the computer accounts for
servers in the Contoso.com domain.
You have been tasked with adding a group to a local group on all servers in the Contoso.com domain. This group should not, however, be removed from the local
group.
Which of the following actions should you take?

A.
You should consider adding a restricted group.

B.
You should consider adding a global group.

C.
You should consider adding a user group.

D.
You should consider adding a server group.

Explanation:
Restricted groups in Group policies are a simple way of delegating permissions or group membership centrally to any domain computer or server. Using restricted
groups it is easier to enforce the lowest possible permissions to any given account.
Computer Configuration\\Windows Settings\\Security Settings\\Restricted Groups
Restricted groups allow an administrator to define two properties for security-sensitive groups (that is, “restricted” groups). The two properties are Members and
Member Of .
The Members list defines who should and should not belong to the restricted group.
The Member Of list specifies which other groups the restricted group should belong to. When a restricted Group Policy is enforced, any current member of a
restricted group that is not on the Members list is removed.