You work as an administrator at Contoso.com. The Contoso.com network consists of an Active Directory forest
that contains a root domain, named Contoso.com, and two child domains, named us.Contoso.com and
uk.Contoso.com. All servers on the Contoso.com network have Windows Server 2012 R2 installed.
The root domain hosts a domain local distribution group, named ENSUREPASSGroup. You are preparing to
issue ENSUREPASSGroup read-only access to a shared folder hosted by the us.Contoso.com domain.
You want to make sure that ENSUREPASSGroup is able to access the shared folder in the us.Contoso.com
domain.Which of the following actions should you take?

A.
You should consider re-configuring ENSUREPASSGroup as a universal Admins group.

B.
You should consider re-configuring ENSUREPASSGroup as a universal security group.

C.
You should consider re-configuring ENSUREPASSGroup as a global administrators group.

D.
You should consider re-configuring ENSUREPASSGroup as a local administrators group.