StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · AD DS · AD DS | Create and manage AD DS security principals

Practice question 34 of 506 · medium

Finance users need Modify on a share. Which group design best follows AGDLP?

Choose the single best answer.

  1. A.Finance accounts in a global role group, nested into a domain-local Modify group on the ACL
  2. B.A global group containing users from any trusted forest
  3. C.Individual users directly on every folder ACL
  4. D.Finance accounts in a distribution group on the ACL
Show the answer and explanation

✓ Correct answer

  • Finance accounts in a global role group, nested into a domain-local Modify group on the ACL

AGDLP uses global role membership and a domain-local resource permission group. Individual ACL entries bypass that model, distribution groups are not DACL security principals, and global membership is limited to its own domain.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.