In Active Directory, a domain is best described as:

• A. A Basic administrative unit in Active Directory
• B. A collection of network resources that share a common directory database and security policies
• C. An organizational unit
• D. The entire forest

Answer: (B)

A domain in Active Directory is the security and administration boundary that groups together network resources—such as users, computers, printers, and groups—under one shared directory database and a common set of security policies. All objects in the domain reside in the AD DS database on domain controllers and are governed by the domain’s policies, including Group Policy. This setup provides centralized authentication and authorization within the domain. An Organizational Unit is a container inside the domain used for delegation and policy application, not the domain itself. The forest is the top-level collection of one or more domains that share a schema and global catalog, so a domain is not the entire forest. Therefore, the best description is a collection of network resources that share a common directory database and security policies.