Your network contains an Active Directory forest that contains three domains.
A group named Group1 is configured as a domain local distribution group in the forest root domain.
You plan to grant Group1 read-only access to a shared folder named Share1.Share1 is located in a child
domain.
You need to ensure that the members of Group1 can access Share1.
What should you do first?

A.
Convert Group1 to a universal security group.

B.
Convert Group1 to a global distribution group.

C.
Convert Group1 to a universal distribution group.

D.
Convert Group1 to a domain local security group.

Explanation:
Universal can be used for any domain or forest. Furthermore a Universal group can span multiple domains,
even the entire forest.

Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Chapter 5: Install and Administer Active
Directory, Objective 5.3 Create and manage Active Directory groups and Organization units, p. 289-291, 293
http://technet.microsoft.com/en-us/library/cc781446(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc755692(v=ws.10).aspx