Which is a type of security group?

• A. Universal, Global, and Domain Local
• B. Local, Regional, and Domain
• C. Workgroup, Domain, and Local
• D. Team, Project, and Domain Local

Answer: (A)

Security groups come in three scope types in Active Directory, and those scopes define how you organize members and apply permissions across domains. The three types are Universal, Global, and Domain Local. Global groups are best for collecting users and groups from a single domain and then granting access to resources in other domains by placing that global group into a domain local or universal group with the necessary permissions. Domain Local groups are ideal for assigning permissions to resources within a single domain and can include members from any domain. Universal groups can include members from any domain in the forest and are useful for granting access to resources across multiple domains, with membership information efficiently replicated as needed. This combination—Universal, Global, and Domain Local—is the standard set of security group scopes. Other options use terms that aren’t recognized security group scopes in Active Directory, so they don’t fit.