StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · AD DS · AD DS | Create and manage AD DS security principals

Practice question 37 of 506 · medium

Finance employees in two domains of the same forest need a common role applied to a share in a third domain. Which design follows AGUDLP?

Choose the single best answer.

  1. A.A resource-domain domain-local group nested inside global groups in the account domains
  2. B.All employee accounts from both domains in one global group
  3. C.A distribution group in each domain assigned NTFS Modify
  4. D.Domain global groups into a forest universal group, then a resource-domain domain-local group with the ACL
Show the answer and explanation

✓ Correct answer

  • Domain global groups into a forest universal group, then a resource-domain domain-local group with the ACL

AGUDLP aggregates domain global groups in a same-forest universal group and assigns rights through a resource domain-local group. One global group cannot contain accounts from both domains; distribution groups are not NTFS authorization principals. Nesting a domain-local group inside global groups violates the global membership model and reverses the intended hierarchy.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.