StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · AD DS · AD DS | Create and manage AD DS security principals

Practice question 38 of 506 · medium

The Resources forest trusts Partners. Partner employees belong to a Partners global group. Which resource-side arrangement can grant share access?

Choose the single best answer.

  1. A.Add all Partners users to a Resources universal group as cross-forest members
  2. B.Copy the Partners password database into Resources
  3. C.Add the external global group to a Resources domain-local group and grant its resource permissions
  4. D.Add the external employees directly to a Resources global group
Show the answer and explanation

✓ Correct answer

  • Add the external global group to a Resources domain-local group and grant its resource permissions

A resource-domain domain-local group can contain eligible trusted principals such as the external global group. A Resources global group cannot contain external users, and universal membership does not span forests this way. Trust access does not copy password databases.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.