MD-102 Question #298: Real Exam Question with Answer & Explanation

The correct answer is C: Group2 and Group3 only. In an Active Directory domain, a Universal group can have Global groups and other Universal groups as members, but it cannot contain Domain Local groups.

Submitted by stefanr· Apr 18, 2026Manage and maintain devices

Question

Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10. You have the groups shown in the following table. Which groups can you add to Group4?

Options

AGroup2 only
BGroup1 and Group2 only
CGroup2 and Group3 only
DGroup1, Group2, and Group3

Explanation

In an Active Directory domain, a Universal group can have Global groups and other Universal groups as members, but it cannot contain Domain Local groups.

Common mistakes.

A. This option is incomplete as it excludes Group3, which could also be added to Group4 if Group4 is a Universal group and Group3 is a Universal group.
B. This option is incomplete and potentially incorrect if Group1 is a Domain Local group and cannot be added to a Universal Group4.
D. This option is incorrect because if Group4 is a Universal group, it cannot contain Group1 if Group1 is a Domain Local group, violating Active Directory nesting rules.

Concept tested. Active Directory group scopes and nesting rules

Reference. https://learn.microsoft.com/windows-server/identity/ad-ds/manage/understand-group-scopes

Topics

#AD group nesting#Group scope#Domain Local groups

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice Browse All MD-102 Questions