DRAG DROP
Your network contains an Active Directory forest named adatum.com.
The forest contains four child domains named europe.adatum.com,
northamerica.adatum.com, asia.adatum.com, and africa.adatum.com.
You need to create four new groups in the forest root domain. The groups must be
configured as shown in the following table.

What should you do?
To answer, drag the appropriate group type to the correct group name in the answer area.

Answer:

Explanation:

Windows Server 2008 R2 Unleashed (SAMS, 2010) page 128
Domain local groups
Domain local groups are essentially the same thing as local groups in Windows NT, and are
used to administer resources located only on their own domain. They can contain users and
groups from any other trusted domain. Most typically, these types of groups are used to
grant access to resources for groups in different domains.
Global groups Global groups are on the opposite side from domain local groups. They can
contain users only in the domain in which they exist but are used to grant access to
resources in other trusted domains. These types of groups are best used to supply security
membership to user accounts that share a similar function, such as the sales global group.
Universal groups
Universal groups can contain users and groups from any domain in the forest and can grant
access to any resource in the forest. Along with this added power come a few caveats. First,
universal groups are available only in domains with a functional level of Windows 2000
Native or later. Second, all members of each universal group are stored in the global
catalog, increasing the replication load. It is important to note, however, that universal group
membership replication has been noticeably streamlined and optimized in Windows Server
2008 R2 because the membership is incrementally replicated.