MD-102 · Question #298
Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10. You have the groups shown in the following table. Which…
The correct answer is C. Group2 and Group3 only. In an Active Directory domain, a Universal group can have Global groups and other Universal groups as members, but it cannot contain Domain Local groups.
Question
Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10. You have the groups shown in the following table. Which groups can you add to Group4?
Exhibit
Options
- AGroup2 only
- BGroup1 and Group2 only
- CGroup2 and Group3 only
- DGroup1, Group2, and Group3
How the community answered
(55 responses)- A4% (2)
- B4% (2)
- C84% (46)
- D9% (5)
Why each option
In an Active Directory domain, a Universal group can have Global groups and other Universal groups as members, but it cannot contain Domain Local groups.
This option is incomplete as it excludes Group3, which could also be added to Group4 if Group4 is a Universal group and Group3 is a Universal group.
This option is incomplete and potentially incorrect if Group1 is a Domain Local group and cannot be added to a Universal Group4.
If Group4 is a Universal group, it can accept Global groups (like Group2) and other Universal groups (like Group3) as members, regardless of their domain. However, Universal groups cannot contain Domain Local groups (like Group1, if Group1 is a Domain Local group), adhering to Active Directory group nesting rules.
This option is incorrect because if Group4 is a Universal group, it cannot contain Group1 if Group1 is a Domain Local group, violating Active Directory nesting rules.
Concept tested: Active Directory group scopes and nesting rules
Source: https://learn.microsoft.com/windows-server/identity/ad-ds/manage/understand-group-scopes
Topics
Community Discussion
No community discussion yet for this question.