Your network contains an Active Directory forest that contains three domains.

A group named Group1 is configured as a domain local distr

ibution group in the forest root domain.

You plan to grant Group1 read-only access to a shared folder named Share1.Share1 is located in a child domain.

You need to ensure that the members of Group1 can access Share1.

What should you do first?

A.

Convert Group1 to a universal security group.

B. Convert Group1 to a global distribution group.

C. Convert Group1 to a universal distribution group.

D. Convert Group1 to a domain local security group.

Explanation:

Universal can be used for any d

omain or forest. Furthermore, a Universal group can span multiple domains, even the entire forest.

References:

Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Chapter 5: Install and Administer Active Directory, Objective 5.3 Create and

manage Active Directory groups and Organization units, p. 289-291, 293

http://technet.microsoft.com/en-us/library/cc781446(v=ws.10).aspx

http://technet.microsoft.com/en-us/library/cc755692(v=ws.10).aspx