PrepAway - Latest Free Exam Questions & Answers

You need to create four new groups in the forest root domain

Your network contains an Active Directory forestnamed adatum.com.
The forest contains four child domainsnamed europe.adatum.com, northamerica.adatum.com, asia.
adatum.com, and africa.adatum.com.
You need to create four new groups in the forest root domain.
The groups must be configured as shown in the followingtable:

What should you do?
To answer, drag the appropriate group type to the correct group name in the answer area.

PrepAway - Latest Free Exam Questions & Answers

Answer:

Explanation:

Reference:
Windows Server 2008 R2 Unleashed (SAMS, 2010)
page 128
Domain local groups
Domain local groups are essentially the same thing as local groups in Windows NT, and are used to administer
resources located only on their own domain. They can contain users and groups from any other trusted domain.
Most typically, these types of groups are used to grant access to resources for groups in different domains.
Global groups
Global groups are on the opposite side from domain local groups. They can contain users only in the domain in
which they exist but are used to grant access to resources in other trusted domains. These types of groups are
best used to supply security membership to user accounts that share a similar function, such as the sales
global group.
Universal groups
Universal groups can contain users and groups from any domain in the forest and can grant access to any
resource in the forest. Along with this added powercome a few caveats. First, universal groups are available
only in domains with a functional level of Windows 2000 Native or later. Second, all members of each universal
group are stored in the global catalog, increasing the replication load. It is important to note, however, that
universal group membership replication has been noticeably streamlined and optimized in Windows Server
2008 R2 because the membership is incrementally replicated.


Leave a Reply